This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
File:                     jxdSJfOGzpgBGfaYhPm-fGorOzM.mft (raw, json)
Hash identifier:          miUwV5DivKQKp7rLQKem6jGF/VjC4nRWz6mHDR1v6jk=
Subject key identifier:   D1:00:3A:42:5C:2F:06:56:A3:9E:73:28:DF:F5:D7:8F:29:B7:A6:2E
Authority key identifier: 8F:17:52:25:F3:86:CE:98:01:19:F6:98:84:F9:BE:7C:6A:2B:3B:33
Certificate issuer:       /CN=8f175225f386ce980119f69884f9be7c6a2b3b33
Certificate serial:       019B330CE1CA8F0F1A55E63C58923E079E44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
Manifest number:          1786
Signing time:             Thu 18 Dec 2025 20:00:40 +0000
Manifest this update:     Thu 18 Dec 2025 20:00:40 +0000
Manifest next update:     Fri 19 Dec 2025 20:00:40 +0000
Files and hashes:         1: 89EQQCo6Tx4ACaGk_JyA4-a5SnA.roa (hash: DER2tNvuAXp0PR1aSNW92ooYvtdX7oI6GzQVCz2YBFM=)
                          2: jxdSJfOGzpgBGfaYhPm-fGorOzM.crl (hash: cETchVZ4dgIVtgz/6f0KYXIGJAksBz508Q319Ang5mc=)
                          3: wqj7UB7atlo4UtptagO8D4QVpv4.roa (hash: ylN4r0wdJFKjI8FqYNMjzdJ19nbuA10o9E8/faFnnKU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 20:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:33:0c:e1:ca:8f:0f:1a:55:e6:3c:58:92:3e:07:9e:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f175225f386ce980119f69884f9be7c6a2b3b33
        Validity
            Not Before: Dec 18 20:00:40 2025 GMT
            Not After : Dec 19 20:00:40 2025 GMT
        Subject: CN=d1003a425c2f0656a39e7328dff5d78f29b7a62e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:78:15:85:9d:dd:21:1b:d2:60:b6:77:e3:93:
                    b7:f0:51:25:ed:e8:e2:93:ce:82:ec:bf:bd:6f:04:
                    7d:3c:ed:67:cb:21:6e:54:4c:63:c5:07:8e:67:ae:
                    38:69:45:49:48:7d:d2:b4:5d:79:37:89:ae:6a:fc:
                    60:50:55:79:25:20:f5:19:a3:07:d7:0c:80:70:71:
                    d6:4e:a1:9c:dc:b6:c2:89:8e:12:87:07:f0:12:dd:
                    e8:99:4d:a2:94:e1:9b:c6:fa:2e:0d:32:db:49:0f:
                    a2:bd:fe:dc:63:bf:27:f9:03:0e:24:b7:42:d9:6b:
                    7a:58:09:a7:41:b1:c3:fe:a3:98:9e:97:84:9e:4a:
                    18:c9:56:ff:67:66:1b:49:ba:20:37:e6:c6:32:1d:
                    34:88:81:36:5f:0b:1b:e9:95:fa:d7:eb:c9:2b:1f:
                    88:e9:9e:5f:a4:82:d3:fc:d0:20:d8:ae:21:0b:b6:
                    dc:3c:10:a1:a7:39:da:36:38:e9:3d:b6:96:e3:cd:
                    1a:e2:e8:a4:15:72:ea:42:bb:e6:54:8e:16:78:2e:
                    be:d1:f0:29:2a:d1:e1:e8:a1:0c:23:9d:fa:25:74:
                    d9:a0:ec:d7:c8:30:e4:bd:b3:13:7e:d4:38:59:3b:
                    ef:b7:ca:86:f6:2b:d5:fa:2d:3b:d4:63:ea:3b:22:
                    4a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:00:3A:42:5C:2F:06:56:A3:9E:73:28:DF:F5:D7:8F:29:B7:A6:2E
            X509v3 Authority Key Identifier:
                keyid:8F:17:52:25:F3:86:CE:98:01:19:F6:98:84:F9:BE:7C:6A:2B:3B:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:dc:b4:8f:ce:51:be:2e:9b:78:a9:58:e4:f0:ff:4d:6d:74:
         31:0c:11:64:7e:4f:0d:c2:b8:a6:e4:4a:b4:cc:6a:47:19:99:
         1f:b4:2c:8a:57:0c:b7:4c:ba:73:0f:9a:67:a3:d2:72:fb:c5:
         75:5f:5c:7d:ad:24:23:32:6c:36:e6:e3:b3:97:44:cf:fa:ce:
         98:7b:7a:05:35:7b:e7:3a:98:56:5d:5c:c4:f7:85:9f:5f:f2:
         0b:0c:d4:11:e9:d5:3e:81:a3:de:08:6f:80:67:93:e9:dc:bb:
         aa:82:ea:8c:9e:23:bc:0c:06:14:e3:82:e7:a4:e3:4c:54:4c:
         48:ed:ac:ed:77:c6:11:c8:f2:b4:2f:d1:8c:35:b4:3f:d4:46:
         55:a8:b2:8b:2b:06:b7:68:4b:b4:e2:81:18:39:58:5b:52:98:
         c2:fd:09:64:87:0e:30:e4:58:a0:6d:a8:b1:2f:64:c6:69:55:
         0b:f1:dc:d6:bf:bd:04:12:34:a0:b0:90:cc:5c:3e:66:6e:59:
         e7:9e:c0:79:02:b1:16:bf:7b:4b:d6:8c:9b:6b:b1:05:a4:97:
         f2:cd:4b:2a:4f:1f:27:87:b5:4c:b4:42:71:d1:04:79:33:2a:
         c2:8c:87:52:4a:d7:81:a5:bb:ba:10:46:b2:c2:28:b7:5f:da:
         3b:42:fe:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 23:50:00 2025 by rpki-client