This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft
File:                     J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft (raw, json)
Hash identifier:          dx5ZenajN0hUbWyp5VXGO8rjm7VH7mLnJjiuOuq7z68=
Subject key identifier:   00:45:0B:CD:24:73:9E:35:0C:19:FF:71:7F:8B:A1:11:9A:8A:E4:DB
Authority key identifier: 27:F0:B7:37:71:51:14:DE:D2:0F:68:EF:03:47:D9:F7:52:A0:E0:B7
Certificate issuer:       /CN=27f0b737715114ded20f68ef0347d9f752a0e0b7
Certificate serial:       019AF12EBFCA89AEA6013E690BAAAFF164AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft
Manifest number:          1763
Signing time:             Sat 06 Dec 2025 01:02:44 +0000
Manifest this update:     Sat 06 Dec 2025 01:02:44 +0000
Manifest next update:     Sun 07 Dec 2025 01:02:44 +0000
Files and hashes:         1: J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl (hash: hXF7VJFNIk3WVFQEOIrzmODnoHk1EAiXKKRPrLJ/Lvc=)
                          2: rTVHjttPuQQ_1Dt0EA11KAiXgII.roa (hash: 5V1V0+UjdPuxZIazNIUWaVHiDdBin/aDpwXhDP5JcYw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:bf:ca:89:ae:a6:01:3e:69:0b:aa:af:f1:64:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27f0b737715114ded20f68ef0347d9f752a0e0b7
        Validity
            Not Before: Dec  6 01:02:44 2025 GMT
            Not After : Dec  7 01:02:44 2025 GMT
        Subject: CN=00450bcd24739e350c19ff717f8ba1119a8ae4db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a2:f8:2d:d5:0f:ca:95:f7:f1:d5:ec:93:b8:
                    5b:b3:b6:78:31:4c:50:7d:1f:e0:6a:4c:96:5b:0b:
                    3f:13:f5:c1:3e:39:85:b9:dd:f7:ba:f7:17:55:b8:
                    cc:5d:34:9f:a9:95:a8:2f:e4:a5:ee:42:fa:96:e3:
                    ce:97:22:2e:98:15:ed:ac:4b:68:7d:7b:10:00:da:
                    7d:f2:17:8a:19:1b:b7:3a:fe:b0:c5:8b:9e:e2:35:
                    12:e5:a3:b3:23:54:ba:07:42:8f:f8:52:e0:a7:62:
                    89:6a:37:f2:2c:40:28:bc:18:dd:5c:48:39:30:3f:
                    3c:0b:d1:a7:26:f8:ec:c9:5d:68:88:4e:ce:62:d7:
                    51:27:a2:84:7f:6a:79:23:17:75:1f:7c:83:92:3d:
                    94:c2:ca:eb:1d:e3:fb:bd:b3:8f:9f:bf:a0:c8:d7:
                    b4:f2:ab:d9:2a:33:98:56:f1:82:3f:77:04:07:7d:
                    3a:b5:36:1f:9b:77:1d:25:51:7a:fc:60:e1:a7:58:
                    a3:91:51:08:1b:02:3e:1d:69:15:8d:e2:aa:4e:77:
                    ed:61:2f:d5:69:39:3d:54:e2:3c:54:51:92:0f:ed:
                    ed:3f:fc:0e:b0:28:7f:d3:f7:7f:8e:e0:33:35:cb:
                    b4:db:02:94:0d:bd:93:d7:0f:26:4f:f9:5c:cb:2b:
                    26:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:45:0B:CD:24:73:9E:35:0C:19:FF:71:7F:8B:A1:11:9A:8A:E4:DB
            X509v3 Authority Key Identifier:
                keyid:27:F0:B7:37:71:51:14:DE:D2:0F:68:EF:03:47:D9:F7:52:A0:E0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:5c:47:8a:5e:ae:19:6b:9f:6e:89:a7:05:c6:a8:ee:e3:03:
         e6:f7:4b:ce:33:2a:bf:ca:f5:33:a0:37:43:8a:0d:62:0b:c7:
         33:bf:31:a1:db:8c:5f:66:43:f2:96:c8:ad:67:63:17:91:e9:
         a1:8c:54:a4:6d:40:2e:80:12:c7:a1:b6:8b:53:66:8b:81:c3:
         f0:a9:5a:a0:22:4b:e2:f4:13:14:97:77:d6:42:b8:a6:82:ea:
         6f:b0:c6:d2:56:d9:67:cc:4c:79:11:14:35:4a:f9:cb:c5:78:
         06:5f:1d:6e:f7:6a:63:d9:f7:fb:b2:13:ac:fe:72:34:f0:70:
         41:f2:0c:55:37:d7:43:3b:42:4f:54:a3:10:d1:d3:1e:7a:e0:
         bc:81:75:1d:21:fb:91:d2:15:f4:2a:3b:c4:65:2c:3f:35:7a:
         f7:59:3b:90:53:f5:b6:30:d7:67:14:b5:92:97:48:85:f9:e2:
         e5:76:d0:64:3f:6e:72:b7:cc:25:3f:11:06:e6:b4:7a:97:d6:
         a3:a3:c3:4e:af:f5:12:a9:c8:25:89:54:2d:91:32:fd:48:40:
         ec:ef:21:f1:39:02:77:ce:91:e0:e7:b9:3c:bc:92:b0:5a:c5:
         f0:da:79:69:97:d3:4f:4d:6f:f1:4a:b5:96:f9:9f:fb:ac:65:
         31:34:15:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:06:09 2025 by rpki-client