This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft
File:                     jvSnYgy-f8xHKj2gKckLX72UUZw.mft (raw, json)
Hash identifier:          3GfvPql6zG+4D0NcdXpCjdVatRNwigihrXHCIGoWAU4=
Subject key identifier:   4B:F7:4D:95:C5:E7:AD:41:FE:4E:0B:8E:4C:FA:3B:6A:74:69:5D:74
Authority key identifier: 8E:F4:A7:62:0C:BE:7F:CC:47:2A:3D:A0:29:C9:0B:5F:BD:94:51:9C
Certificate issuer:       /CN=8ef4a7620cbe7fcc472a3da029c90b5fbd94519c
Certificate serial:       019AF31CBC18FE1900ABCDB3C2A87DAD92D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvSnYgy-f8xHKj2gKckLX72UUZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft
Manifest number:          0851
Signing time:             Sat 06 Dec 2025 10:02:17 +0000
Manifest this update:     Sat 06 Dec 2025 10:02:17 +0000
Manifest next update:     Sun 07 Dec 2025 10:02:17 +0000
Files and hashes:         1: jvSnYgy-f8xHKj2gKckLX72UUZw.crl (hash: 2r8xOXPDVgJTqlm0HqXXe4WtCWjTgjBIDso60dEZfZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvSnYgy-f8xHKj2gKckLX72UUZw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1c:bc:18:fe:19:00:ab:cd:b3:c2:a8:7d:ad:92:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef4a7620cbe7fcc472a3da029c90b5fbd94519c
        Validity
            Not Before: Dec  6 10:02:17 2025 GMT
            Not After : Dec  7 10:02:17 2025 GMT
        Subject: CN=4bf74d95c5e7ad41fe4e0b8e4cfa3b6a74695d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4e:4f:4b:2f:54:2b:e8:33:8f:75:e3:18:b4:
                    cf:f4:6a:a4:e3:d1:bf:82:33:74:8b:af:c4:66:98:
                    67:e0:3f:4b:32:33:80:be:2a:f7:aa:fb:8b:15:ad:
                    05:53:61:1f:4c:f9:0d:a9:64:ed:cf:99:76:05:0e:
                    6a:86:a7:12:fe:4b:79:de:6f:89:f8:db:fd:dd:d5:
                    74:f2:c8:40:61:4f:58:0d:a9:61:e4:8e:14:c9:1f:
                    22:62:e7:07:1b:b8:a7:a1:da:bd:19:01:fe:21:c7:
                    18:7d:92:aa:79:c6:24:d1:6f:5d:92:8e:8c:d1:b2:
                    de:90:39:a5:b1:5e:84:e6:e3:a3:55:f8:1f:25:58:
                    ba:6b:11:8e:11:c5:5c:9a:66:db:99:70:c5:b8:8d:
                    9d:95:1b:cc:85:70:a8:32:1b:2a:1f:bd:03:5f:49:
                    0e:50:98:af:5e:a5:5b:6f:0d:ec:a7:83:ff:21:fd:
                    45:0d:a2:bf:81:b9:db:9a:96:04:f7:5a:06:2f:73:
                    c0:f1:d8:86:2b:3a:33:18:5b:8f:fc:cf:44:91:ed:
                    73:37:15:6c:b3:36:26:9d:07:47:c2:2d:c2:8b:07:
                    e9:f3:c5:0f:77:1b:fa:f6:52:f4:6c:71:01:37:7f:
                    d1:9b:a3:b6:56:95:07:34:d1:f6:f5:3d:25:c3:64:
                    a2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F7:4D:95:C5:E7:AD:41:FE:4E:0B:8E:4C:FA:3B:6A:74:69:5D:74
            X509v3 Authority Key Identifier:
                keyid:8E:F4:A7:62:0C:BE:7F:CC:47:2A:3D:A0:29:C9:0B:5F:BD:94:51:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvSnYgy-f8xHKj2gKckLX72UUZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:e4:5e:db:0e:43:87:3a:83:bf:b7:58:5c:0e:68:f6:84:fe:
         85:78:51:0b:35:68:7f:d7:24:c2:c9:b8:2f:44:83:6d:14:21:
         20:44:64:62:9f:45:e3:40:30:0b:fd:4e:52:9d:a2:29:54:3b:
         9f:aa:6b:73:d0:68:d2:10:96:7c:5e:b0:13:f6:70:91:c6:43:
         8c:02:b8:fb:4d:6b:3a:3d:01:a8:7e:0a:b5:09:06:33:22:5b:
         de:01:61:83:52:16:30:be:8a:ad:3d:c7:33:a3:06:bb:b1:ea:
         9b:8e:31:de:26:4a:87:c9:5f:96:40:6b:42:7e:03:0f:79:82:
         e2:6e:22:bc:8f:d1:07:9c:97:a7:7d:06:90:5b:93:3e:25:17:
         06:43:ce:c3:98:83:31:4e:97:62:a7:f2:ec:17:ad:d7:54:0e:
         de:4a:be:ab:0c:80:f7:50:ee:45:c2:2c:dc:5a:b9:bd:1a:71:
         de:8e:8f:a7:ce:81:f2:0a:37:ca:47:24:11:fe:dc:bb:66:8e:
         4b:d8:73:b0:02:51:2d:4d:8c:80:61:33:29:20:d8:86:63:f2:
         b3:2e:e2:a4:8b:87:7a:69:de:7d:d2:a8:73:10:dd:95:ef:bd:
         98:01:ca:58:d9:40:82:d1:d2:77:86:66:36:0c:81:d4:7e:98:
         d9:ee:7c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:09:00 2025 by rpki-client