This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
File:                     JiNBtDPh-Py3ljItL9kmQJOW560.mft (raw, json)
Hash identifier:          aWrzFRXxPnhpnwdWpEDtuRsJUjJYw0EQk3/O7Wf04t8=
Subject key identifier:   5E:A4:9B:5E:BD:A9:82:58:CF:FA:3B:75:8A:5F:0E:E6:50:48:88:E8
Authority key identifier: 26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD
Certificate issuer:       /CN=262341b433e1f8fcb796322d2fd926409396e7ad
Certificate serial:       019AF7D4878388F97937400C9A8D0EC64862
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
Manifest number:          10F9
Signing time:             Sun 07 Dec 2025 08:01:31 +0000
Manifest this update:     Sun 07 Dec 2025 08:01:31 +0000
Manifest next update:     Mon 08 Dec 2025 08:01:31 +0000
Files and hashes:         1: JiNBtDPh-Py3ljItL9kmQJOW560.crl (hash: cRYVSAZ7Lok3K9OiEyqoFcHeFTRnGWBRc1dr0dvy9sg=)
                          2: OG_A4kIfGMsNQjuMmYxD7_p2pL4.roa (hash: Xfk2o4ht2zMg9IMU5TSnOEAuY38Y9WCQbPUHWVQ3Uic=)
                          3: kAKuIYXg1bp7KYEaGGpYw_p_ZEA.roa (hash: rN2Ict4bzybwIS6kDp0XozP6rV4PW6e1BfkoB7rQg6U=)
                          4: u1c26qRbtO2NECygZrqXuUXLxWM.roa (hash: jtDoS3NERSt3cIb6DiAqE1bWADSmBl7iTJmu0zjaYyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f7:d4:87:83:88:f9:79:37:40:0c:9a:8d:0e:c6:48:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=262341b433e1f8fcb796322d2fd926409396e7ad
        Validity
            Not Before: Dec  7 08:01:31 2025 GMT
            Not After : Dec  8 08:01:31 2025 GMT
        Subject: CN=5ea49b5ebda98258cffa3b758a5f0ee6504888e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:da:41:76:8c:03:de:7a:af:3b:c3:d9:c8:e3:
                    c0:16:04:84:8b:af:e5:5f:c5:e0:07:79:a7:37:e9:
                    44:0d:e0:59:12:64:32:65:59:72:85:fa:af:1c:41:
                    dd:f1:20:11:55:f4:c3:32:aa:c1:3f:4f:51:8a:0e:
                    db:02:b7:fa:e7:4b:dc:cc:24:fa:84:ac:97:68:b7:
                    c8:dc:3d:ac:6c:2f:12:2e:f5:2c:82:96:70:62:ad:
                    67:1c:f7:c4:86:e5:e6:eb:1d:34:ca:98:5e:db:ec:
                    fc:08:72:7a:0a:5a:af:33:85:af:8e:58:a3:7b:67:
                    3b:ac:27:95:25:6d:a6:0a:ff:b6:7e:3a:28:ab:b5:
                    38:0f:2a:78:1e:7b:b1:98:09:a7:13:9a:e4:16:98:
                    60:0b:77:2f:de:36:1a:94:05:46:58:42:1d:21:68:
                    90:a9:cd:26:5e:7f:96:a3:fb:70:2f:6e:87:95:6b:
                    d2:27:94:ac:94:39:fb:6c:05:f9:b1:cc:27:f7:5b:
                    b9:70:6f:44:7f:f0:c7:9f:fc:bf:1e:d6:61:b8:8d:
                    cc:19:4a:3a:96:c0:96:cb:2b:84:67:3e:8c:36:52:
                    60:e9:4d:73:1a:7f:70:d1:58:ba:00:e0:d3:55:ba:
                    4e:70:2a:a9:65:bb:86:87:d2:98:67:13:54:3e:26:
                    ed:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A4:9B:5E:BD:A9:82:58:CF:FA:3B:75:8A:5F:0E:E6:50:48:88:E8
            X509v3 Authority Key Identifier:
                keyid:26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:c5:f3:da:73:7c:fc:4f:cc:19:85:08:a5:de:2c:c7:d9:af:
         c2:02:de:74:9b:91:9f:3b:8d:7b:84:19:84:5b:f5:03:5f:04:
         6e:25:9e:4f:d2:1e:66:c1:61:16:2f:69:cd:3b:8c:3e:6f:09:
         0f:8b:85:fa:ce:d1:8f:f1:81:30:2e:6c:6c:f9:1b:b4:b2:cf:
         38:bb:50:03:38:2a:02:5b:a9:80:58:e8:e4:fc:76:49:85:d3:
         8b:72:28:4f:8d:04:b6:7c:f9:8b:e2:c2:19:b4:f7:b3:b8:87:
         c4:1d:bb:e9:69:94:42:89:b6:ca:e3:b9:f9:9d:91:ab:38:6a:
         cb:c0:c6:89:1b:3e:92:a5:6b:2d:8c:28:6f:a9:88:9d:b8:92:
         43:0f:2a:e7:f6:9a:ee:ab:37:69:0b:10:f7:dd:05:f0:c3:8a:
         67:25:ad:c3:f5:b0:03:f4:d2:48:f2:f3:47:34:da:b9:a0:9a:
         40:0e:0b:9a:b9:51:99:c5:7f:a4:fa:27:b1:32:d3:0d:a4:58:
         c1:30:79:b1:3c:9d:94:e0:81:fa:f9:73:2d:10:ed:f9:31:22:
         44:2f:8f:2b:04:59:d9:5d:fe:5b:e7:59:85:1b:59:15:4f:de:
         a1:48:83:7a:ac:43:6a:f9:38:67:24:aa:3c:e3:a0:a9:ea:af:
         92:f9:72:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 10:42:37 2025 by rpki-client