This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft
File:                     JmceUvfpei6lP17KvWuUvIwHWmo.mft (raw, json)
Hash identifier:          863IvPVP0B1En0r8og8aG8A31BdB/q3X6msSR7LejiI=
Subject key identifier:   1C:8D:11:5B:F1:C2:70:99:97:EB:DD:12:7A:B2:46:A0:A8:BD:39:FF
Authority key identifier: 26:67:1E:52:F7:E9:7A:2E:A5:3F:5E:CA:BD:6B:94:BC:8C:07:5A:6A
Certificate issuer:       /CN=26671e52f7e97a2ea53f5ecabd6b94bc8c075a6a
Certificate serial:       019B35A0BE4CC69045C7C08BD05410590DA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft
Manifest number:          129F
Signing time:             Fri 19 Dec 2025 08:01:25 +0000
Manifest this update:     Fri 19 Dec 2025 08:01:25 +0000
Manifest next update:     Sat 20 Dec 2025 08:01:25 +0000
Files and hashes:         1: JgbQOde8dBoJm081qWbMUAe-4ck.roa (hash: cPb9R2Jy8VhYx4mnUxTDnSqP1F9DRsJ4eRz8x4iEUpo=)
                          2: JmceUvfpei6lP17KvWuUvIwHWmo.crl (hash: WsKrHyT2AAa5nEsG4ItfPAJrtZ5CJvYgdTDpxIj9sPA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 07:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:35:a0:be:4c:c6:90:45:c7:c0:8b:d0:54:10:59:0d:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26671e52f7e97a2ea53f5ecabd6b94bc8c075a6a
        Validity
            Not Before: Dec 19 08:01:25 2025 GMT
            Not After : Dec 20 08:01:25 2025 GMT
        Subject: CN=1c8d115bf1c2709997ebdd127ab246a0a8bd39ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cc:2a:7e:e9:88:b7:0b:af:28:7a:2a:1a:ab:
                    ab:0a:bc:fb:c9:b4:27:86:bf:e6:62:4e:7d:22:2a:
                    ab:09:f2:26:69:02:cb:84:0c:e8:f8:72:df:d4:45:
                    83:aa:c7:21:88:31:32:26:ef:fe:7f:ce:3b:96:05:
                    20:65:44:b0:59:db:08:f7:ab:7c:4b:a3:9f:3b:fa:
                    50:f7:25:48:ce:3f:a9:9f:50:1d:19:3e:23:44:8a:
                    2f:3a:6d:e4:7d:68:a0:72:6d:f8:26:f3:3a:10:e1:
                    40:5e:62:ec:7c:f8:af:0d:01:e2:c7:03:ad:4b:b4:
                    18:29:c9:5c:ce:ff:3c:36:5b:63:ea:78:24:34:a1:
                    b7:8e:1b:90:3e:42:a8:ef:44:cf:b3:d8:a3:dd:8e:
                    46:86:dd:4e:2d:90:b1:8f:6f:34:5f:88:69:13:43:
                    14:d2:00:17:90:05:0a:e7:4f:4c:d9:a1:2a:cc:82:
                    88:77:9c:af:ee:5a:be:23:39:61:53:a1:8e:56:90:
                    a2:87:10:f6:e0:33:23:41:ca:17:1b:81:f1:fe:d9:
                    95:60:74:71:6a:c9:a5:38:cc:d6:21:d3:3c:0e:36:
                    2f:d9:f2:d7:ae:78:f9:bc:36:c7:43:dd:88:35:bd:
                    6a:5e:e9:c6:4f:c3:84:5b:7c:d7:15:70:9d:85:78:
                    38:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:8D:11:5B:F1:C2:70:99:97:EB:DD:12:7A:B2:46:A0:A8:BD:39:FF
            X509v3 Authority Key Identifier:
                keyid:26:67:1E:52:F7:E9:7A:2E:A5:3F:5E:CA:BD:6B:94:BC:8C:07:5A:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:75:18:73:13:ab:08:b8:03:7c:26:1f:b2:6d:5b:24:b9:0b:
         c2:48:e1:ce:c8:53:7a:1e:92:cb:2a:b5:6a:13:95:b2:79:43:
         b8:84:06:7b:5f:48:d2:d5:c4:7d:ee:dc:11:9d:99:91:c8:09:
         9f:6f:1e:b3:03:d3:89:9a:f5:94:02:b1:2e:17:5d:56:93:8c:
         32:04:ac:18:d3:af:e7:17:72:7e:d0:d0:75:79:b0:77:71:c9:
         7a:31:3f:92:7d:8d:4a:9a:2a:a9:ec:43:d0:5b:f1:8b:0f:63:
         e7:3b:82:c8:17:5d:96:40:05:87:2c:74:5f:20:5f:89:4f:ed:
         6b:69:5c:28:16:e8:06:3b:ae:f7:82:09:f7:08:2a:c2:1b:83:
         4c:df:6d:e3:21:18:62:a1:c5:09:a8:7f:25:01:8c:9d:51:3c:
         ed:75:e3:ca:cb:03:d6:18:9b:cf:80:be:cf:e9:d4:21:20:96:
         89:7b:42:81:24:15:7c:fa:b0:3c:f8:9a:ff:f9:24:03:71:ed:
         b3:f9:f1:ea:11:56:1e:83:c5:8a:ca:90:b2:18:23:ee:c8:e9:
         63:01:18:d6:80:0c:9c:b7:fb:22:d2:ef:68:6a:12:11:42:08:
         7e:a8:1f:25:bc:52:34:86:04:82:28:87:64:7e:4d:75:42:8a:
         bf:8d:3c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 13:32:46 2025 by rpki-client