This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft
File:                     J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft (raw, json)
Hash identifier:          b1pk5o3FMtFIcWqE05y4R3CfiBjARiw2U0jHek+R6mc=
Subject key identifier:   0B:A3:9C:28:7B:71:45:FA:5C:71:20:02:19:79:EC:BC:BE:8E:11:1B
Authority key identifier: 27:61:85:05:D3:B4:C0:00:21:75:90:F7:B7:B5:9B:F6:1F:F2:F3:75
Certificate issuer:       /CN=27618505d3b4c000217590f7b7b59bf61ff2f375
Certificate serial:       019AF19BBE3CD4AE3991872740ED06E3C7DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J2GFBdO0wAAhdZD3t7Wb9h_y83U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft
Manifest number:          1762
Signing time:             Sat 06 Dec 2025 03:01:46 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:46 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:46 +0000
Files and hashes:         1: 5K6nIVbP5K11dvspcfl4G-MfJZw.roa (hash: 1GirTU1av48FvuHpXhFOsW26MgpLG9B9BqlLOufNX8M=)
                          2: J2GFBdO0wAAhdZD3t7Wb9h_y83U.crl (hash: LwfDMtMtvlo8QdSiE2TRYmMv4IjGcJUvmCilOSgiEaw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J2GFBdO0wAAhdZD3t7Wb9h_y83U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 03:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:be:3c:d4:ae:39:91:87:27:40:ed:06:e3:c7:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27618505d3b4c000217590f7b7b59bf61ff2f375
        Validity
            Not Before: Dec  6 03:01:46 2025 GMT
            Not After : Dec  7 03:01:46 2025 GMT
        Subject: CN=0ba39c287b7145fa5c7120021979ecbcbe8e111b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:11:d3:ac:2c:3e:3b:2b:e5:a9:df:df:5a:55:
                    74:2a:db:6f:99:e6:c0:78:f6:e1:61:be:38:ec:c2:
                    d3:a7:4b:f4:25:62:6e:8b:5c:8e:12:5b:e1:86:7b:
                    41:88:fb:aa:96:aa:1a:f9:9e:4e:30:fc:52:00:0b:
                    b2:db:26:b7:8e:3b:6a:79:ce:0e:4d:25:a8:27:1e:
                    ac:fd:b0:34:53:51:67:30:42:7c:1d:34:ac:13:09:
                    a9:e0:62:95:50:d8:5d:13:5b:5f:d0:07:a3:7c:5e:
                    b0:34:2f:4b:df:dc:ed:ec:6e:3c:f9:5e:f1:50:87:
                    cc:29:d9:5d:aa:9e:59:ba:43:7e:a5:7b:9a:da:cd:
                    95:98:46:09:81:ea:1d:f6:ba:3b:d0:e0:56:19:a1:
                    e5:b9:eb:4a:5a:b2:54:c1:23:b6:a1:a9:11:c3:13:
                    d6:bb:8d:c3:1b:d9:91:7a:c7:46:e3:a5:b9:65:87:
                    10:72:d8:36:dd:24:81:27:c3:eb:62:b8:6c:54:1b:
                    db:82:0a:67:29:af:5a:89:88:35:44:86:71:e6:1e:
                    82:07:e3:98:c1:3a:11:25:96:dd:c8:c0:dc:31:ac:
                    da:a6:48:a9:fe:69:39:6a:15:6b:d4:93:16:0d:5e:
                    a5:a3:17:ae:13:a2:43:7c:76:d5:9d:7e:95:a4:fb:
                    a3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A3:9C:28:7B:71:45:FA:5C:71:20:02:19:79:EC:BC:BE:8E:11:1B
            X509v3 Authority Key Identifier:
                keyid:27:61:85:05:D3:B4:C0:00:21:75:90:F7:B7:B5:9B:F6:1F:F2:F3:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2GFBdO0wAAhdZD3t7Wb9h_y83U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:e8:79:70:b2:cb:41:df:f7:e8:85:a6:f8:ce:af:53:aa:25:
         e2:fd:45:3d:32:91:43:11:1d:60:90:90:a9:a5:73:4a:49:fe:
         4c:5c:4c:a0:6e:f6:d2:5e:d2:14:0d:92:d3:d3:f4:ad:85:4f:
         18:70:26:4e:0a:e4:42:9f:e2:15:39:4e:e6:d9:26:02:7f:31:
         6f:1f:6e:8d:88:5d:1a:90:09:27:80:ae:e4:b4:7e:bd:f2:af:
         41:be:9c:8d:2d:4e:73:ae:a3:7d:eb:93:c8:69:14:3e:04:07:
         62:25:77:ba:42:f7:ae:0c:7e:49:97:09:4d:9b:fe:3f:bb:51:
         20:fa:3f:c3:ce:20:3b:26:4f:f6:0b:79:63:7b:7a:e6:cd:f2:
         b5:97:8d:8c:4c:f5:ab:34:6e:9e:90:a1:2c:77:09:41:23:57:
         67:4c:5d:e0:09:3d:2d:13:dd:ef:f2:5c:56:43:39:57:a6:5d:
         58:55:23:91:32:c6:ad:b2:cb:e5:8e:38:ac:73:49:38:30:fe:
         a3:be:0d:ff:c1:d1:20:27:a2:85:96:b0:e7:61:3d:c2:a9:55:
         1d:58:01:57:14:93:81:a4:89:fb:8a:70:44:f6:4b:4a:45:d2:
         32:57:f1:7a:f2:a0:92:73:3d:77:cc:4e:aa:d2:b6:56:8d:2e:
         56:fa:df:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:12:39 2025 by rpki-client