This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
File:                     JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft (raw, json)
Hash identifier:          Gt/+v1dyX0fYu78m4hPTFMBHQF/fIiD2WFt9zysKCwM=
Subject key identifier:   73:D0:08:F9:4A:76:F7:D5:1E:EA:84:DE:16:3F:1A:9E:39:AD:DF:46
Authority key identifier: 24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
Certificate issuer:       /CN=24d906b90c1d856673e414f39805be583d230ba7
Certificate serial:       019AF2772772130243ADC09A1BCF07EB6180
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
Manifest number:          091C
Signing time:             Sat 06 Dec 2025 07:01:26 +0000
Manifest this update:     Sat 06 Dec 2025 07:01:26 +0000
Manifest next update:     Sun 07 Dec 2025 07:01:26 +0000
Files and hashes:         1: JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl (hash: EAqsCMNEFa6E1huhOuF5/3iisndF9mkASM2EJ5A6KPs=)
                          2: tH5X1sIrBGaWrxtJcDhQJ2X9uHg.roa (hash: DV2Ywdf2IF4IJkXNNJ6gs2p5s2GMK9q52zFH8lpr0iI=)
                          3: wpydopt6VUah6RQMZrzjsU6WoPc.roa (hash: cp20Yibn6t1V4VomO6+maPrzeM92DrtR/BD0ISnTpAw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:77:27:72:13:02:43:ad:c0:9a:1b:cf:07:eb:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24d906b90c1d856673e414f39805be583d230ba7
        Validity
            Not Before: Dec  6 07:01:26 2025 GMT
            Not After : Dec  7 07:01:26 2025 GMT
        Subject: CN=73d008f94a76f7d51eea84de163f1a9e39addf46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c7:3e:cf:a5:3e:07:b1:1b:20:0e:c4:38:bb:
                    2c:34:eb:c7:e3:eb:6a:e7:ae:dd:a0:76:d2:5f:f0:
                    67:e1:52:77:70:a1:b2:84:70:39:ff:77:07:94:1f:
                    33:d8:2c:6c:b7:f9:cb:3b:65:68:62:8f:9d:21:98:
                    a9:48:7b:0b:a8:1c:4c:96:5a:ac:20:6f:3d:4e:c9:
                    0f:fc:f1:0f:eb:03:11:1c:33:50:43:59:05:21:b7:
                    0b:fe:e2:37:9b:ca:7b:3e:93:03:00:66:d7:51:71:
                    46:b3:35:b2:69:a5:a5:a7:cb:60:56:c9:d1:00:c4:
                    d1:6d:a5:6f:b9:11:fa:3e:53:0c:bb:5e:bf:2f:6d:
                    dc:18:51:bd:95:aa:62:bd:6f:02:a2:45:03:12:48:
                    26:53:9e:e1:1a:ba:65:53:dd:91:4c:19:60:28:02:
                    2c:84:2f:bb:04:23:fd:41:22:9f:8d:61:91:5d:e2:
                    a3:45:93:f3:f6:23:ac:6c:9c:ec:27:08:6b:4d:93:
                    90:9a:59:fe:25:bb:48:9e:2b:f8:73:d2:56:ad:63:
                    30:68:6c:4d:46:74:ca:79:8c:e4:d0:17:6f:ad:94:
                    f0:66:bc:88:1b:be:ef:83:71:59:7a:4f:60:b3:a1:
                    66:72:8e:72:da:bd:e1:f5:a2:de:ce:25:30:09:04:
                    91:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D0:08:F9:4A:76:F7:D5:1E:EA:84:DE:16:3F:1A:9E:39:AD:DF:46
            X509v3 Authority Key Identifier:
                keyid:24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:37:d2:2c:1a:e4:c2:c7:41:ec:b0:a2:3c:ba:b3:b8:c1:b7:
         63:4e:25:a6:c8:e9:13:65:05:99:79:8d:6c:0b:21:2f:3f:3f:
         73:b7:ea:b9:a3:50:42:2b:27:5d:b8:94:c3:68:f9:12:a7:5b:
         b3:4d:ca:c2:a7:82:8a:14:80:af:84:af:a9:c2:54:d8:ad:60:
         97:01:f9:4b:fc:e5:bb:71:90:b8:2c:ed:fb:00:55:03:9b:f8:
         ad:95:82:96:4c:71:14:e6:e9:5a:5d:c8:b0:fe:fd:30:c8:15:
         f1:64:27:60:b7:92:25:e8:63:f6:d4:36:38:d5:8d:13:d3:e1:
         36:fc:8a:62:a3:13:9f:bb:d4:77:d5:77:16:af:ee:e4:07:8c:
         58:08:33:1a:ab:46:68:0a:7e:57:68:19:b5:e9:8c:89:63:06:
         bd:07:61:86:bf:53:d3:6b:a4:c0:08:bf:7d:8e:d5:69:6b:eb:
         36:b1:00:23:21:43:2f:03:3a:0e:81:76:fb:39:37:40:e3:e1:
         99:78:63:a2:6f:54:13:6d:b4:38:cf:a4:7c:80:d2:5f:e0:90:
         f4:fc:a5:08:fa:df:6d:a8:d5:ed:9b:9c:ff:13:89:41:f6:7c:
         e7:88:39:75:f0:e6:d3:4e:9c:ea:60:80:e7:0b:ff:22:13:cd:
         45:69:a0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:32:15 2025 by rpki-client