This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
File:                     JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft (raw, json)
Hash identifier:          bwEUk8UoLEBVcrlkMXmXYCAvab/uGt6RYk1dDWkL3cI=
Subject key identifier:   CD:6D:F8:C6:87:10:61:70:75:B0:F5:8D:27:01:6C:26:AB:86:D4:C9
Authority key identifier: 24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60
Certificate issuer:       /CN=24504c74c7127090a4cff85001f443149e128e60
Certificate serial:       019AF12EEEDA986598FDFB5D17888D8265BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
Manifest number:          123B
Signing time:             Sat 06 Dec 2025 01:02:56 +0000
Manifest this update:     Sat 06 Dec 2025 01:02:56 +0000
Manifest next update:     Sun 07 Dec 2025 01:02:56 +0000
Files and hashes:         1: 1-V7nSIEtwZacmx3O8jjsbs2FG9w.roa (hash: t9K5j+LYk94wZJxNHETLVLM4vmuOedOVZgo6948wOQE=)
                          2: 6ejovNND0TNxbK3PtvEHJ_oMrqQ.roa (hash: 0+kxBlBGWXGCy6bDB1j1fXR0+RthnFxgyw3Nt6xjMyc=)
                          3: JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl (hash: Uige0OBJ7RPqtAb/0fcK3eW0hlMSr8TRdJN0CCvEqv4=)
                          4: RVYbt4pshmH8DSV6d_7jrqY3hkM.roa (hash: DtwQM6qpi2v7cPG8SNPN6jhojOkJB16k6kT3gTy5/Gk=)
                          5: ZO3wZfLo3YsxIFjpYF3lEe1GVy4.roa (hash: jTLR78RCT3rEVEu8hiMRg4UU1kUzybwIrt+GTClc9gM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:ee:da:98:65:98:fd:fb:5d:17:88:8d:82:65:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24504c74c7127090a4cff85001f443149e128e60
        Validity
            Not Before: Dec  6 01:02:56 2025 GMT
            Not After : Dec  7 01:02:56 2025 GMT
        Subject: CN=cd6df8c68710617075b0f58d27016c26ab86d4c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b1:c8:14:e2:5b:00:36:e7:3f:15:07:5e:ef:
                    9c:b0:69:b7:c9:a8:4f:fd:9b:8c:72:43:9f:bd:60:
                    33:01:8d:35:8a:30:6d:d8:f8:c6:4b:9f:2e:9b:ef:
                    25:1f:02:0e:eb:e0:b8:a3:ef:cc:0a:ac:31:5a:3e:
                    28:ec:28:c3:7e:3c:45:44:c3:49:87:f8:e6:76:73:
                    91:64:c0:05:15:22:19:a4:49:44:6f:3a:50:96:57:
                    4a:24:70:13:2e:01:a5:ca:c6:c3:65:c1:9a:f4:7c:
                    0d:17:93:2c:c0:6b:08:8e:a4:8a:7e:13:07:e4:b5:
                    c7:ae:b4:6a:84:6f:e0:80:a4:e8:99:a9:0e:61:3a:
                    56:cf:e1:4f:1f:41:c7:1c:c0:66:43:b3:8c:6c:a8:
                    fe:6a:f1:4d:60:60:f2:f1:9c:50:16:d7:65:09:31:
                    60:d6:87:8f:84:19:79:b1:68:fd:ec:b5:c5:7e:41:
                    27:a5:6c:d0:87:a6:7d:be:00:6b:57:17:0f:15:14:
                    20:31:6e:3a:b3:b1:78:af:83:31:b6:a2:07:89:3a:
                    2e:e5:a2:ae:3a:e0:6b:7a:04:11:31:fd:90:69:88:
                    9b:ef:72:a4:ec:48:e4:a4:a7:55:47:5b:fa:48:2d:
                    57:15:21:b9:dd:b1:7d:0b:c9:af:a5:84:79:f3:c8:
                    4d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6D:F8:C6:87:10:61:70:75:B0:F5:8D:27:01:6C:26:AB:86:D4:C9
            X509v3 Authority Key Identifier:
                keyid:24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:7f:6a:29:76:39:32:eb:a2:2c:e1:e4:c1:1a:32:06:b1:45:
         7b:64:23:70:60:46:b6:9b:e0:a7:c5:38:7b:6b:b6:3a:00:01:
         fe:35:d0:d4:d2:6c:2d:98:e0:ff:cc:a1:e9:33:19:81:7f:75:
         95:1d:46:e2:e6:00:fb:29:51:fe:ae:b1:16:56:06:86:32:d7:
         e2:67:5e:a1:11:45:00:fb:99:e5:b0:37:e2:e5:fc:5b:4a:32:
         7b:56:a1:a2:0e:dd:c1:17:67:d4:ec:89:24:4a:8e:13:06:6e:
         45:86:ff:68:31:37:3a:7a:ae:07:85:8f:b7:35:64:d8:fb:89:
         24:31:25:df:d5:59:36:0f:3b:ee:40:88:4a:30:75:2a:a0:12:
         af:59:8b:b3:4d:9f:46:3d:ff:7f:23:e9:c2:23:99:1d:a2:aa:
         83:08:9a:ce:47:2d:af:a3:44:8d:1b:00:30:75:ac:84:99:a0:
         4a:49:04:21:dd:8b:f6:84:45:bd:b6:ec:7b:0d:b9:10:c0:5a:
         4e:1f:a6:bb:79:90:61:85:36:2e:c3:5e:95:c5:41:dd:86:d8:
         f9:e5:88:a2:ed:5c:73:8d:9e:9a:5e:27:6d:ea:37:c5:38:c2:
         1a:59:77:bc:38:ff:5f:29:7c:3a:71:48:f1:42:c6:1e:fe:3e:
         ed:12:92:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:07:40 2025 by rpki-client