This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
File:                     JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft (raw, json)
Hash identifier:          xL6Ed8aWtLT5Ca7Bl+k1yLtAdOZF7dSYqo33uKghT+Q=
Subject key identifier:   60:EB:3D:E1:A2:A8:FB:C0:F0:78:E9:36:B4:00:42:1B:12:A9:E1:9E
Authority key identifier: 26:F3:6B:5C:6C:A7:A1:69:8E:74:21:A2:7E:3D:4A:6B:76:48:14:8D
Certificate issuer:       /CN=26f36b5c6ca7a1698e7421a27e3d4a6b7648148d
Certificate serial:       019B2C2EFF1614EA25F2EE1F10C53BA60F2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
Manifest number:          1786
Signing time:             Wed 17 Dec 2025 12:00:36 +0000
Manifest this update:     Wed 17 Dec 2025 12:00:36 +0000
Manifest next update:     Thu 18 Dec 2025 12:00:36 +0000
Files and hashes:         1: JvNrXGynoWmOdCGifj1Ka3ZIFI0.crl (hash: qWee8AAA7TAEwCtzzJJFiWDv2J68fZQRclifC5UQrd8=)
                          2: pUkIJqBsM01F-i6Em2tr3Saf2sk.roa (hash: iY+eh+5NMCHozu8pjL4QFCTT1O1hYE+uhiNgfrNLxws=)
                          3: tnDBwukw0h8yvmfKynq161ze7HM.roa (hash: hhJlzz8ox0/NR3tX5f2QrfPo2aePRzJGPcnJfHw1RMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2c:2e:ff:16:14:ea:25:f2:ee:1f:10:c5:3b:a6:0f:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26f36b5c6ca7a1698e7421a27e3d4a6b7648148d
        Validity
            Not Before: Dec 17 12:00:36 2025 GMT
            Not After : Dec 18 12:00:36 2025 GMT
        Subject: CN=60eb3de1a2a8fbc0f078e936b400421b12a9e19e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:98:5e:8a:c1:e3:a8:3a:a7:32:ca:d3:45:e0:
                    3a:4f:70:a8:e5:f8:f2:8f:7e:d5:9c:23:f8:06:9d:
                    9d:88:75:4d:de:ff:2e:21:94:43:a4:65:30:e8:19:
                    9b:2d:31:e6:26:6a:20:d7:2c:10:a2:c4:61:39:2d:
                    d5:2f:e1:df:87:47:d6:30:bf:7b:89:36:4b:db:cc:
                    7d:c9:82:1e:23:a8:2e:1f:78:9b:5a:6a:2c:7a:23:
                    46:4a:86:a9:0c:95:9d:54:90:67:98:75:a8:3e:d4:
                    1a:c7:b5:f7:44:4f:7c:15:fb:b0:d4:4c:0c:49:e8:
                    de:2c:fb:86:e1:f5:3a:29:ef:0d:82:12:6a:36:22:
                    d6:af:a9:c6:e4:8f:13:db:43:f9:90:39:14:e8:5a:
                    b4:cb:38:cc:89:df:72:d6:35:ac:a9:29:5a:bc:61:
                    4b:21:c4:30:f3:65:50:f0:7f:8f:9c:ba:64:2f:bb:
                    a8:98:b5:32:90:3c:10:d4:c1:e7:92:7b:0b:5f:44:
                    d7:db:b7:8e:6b:f5:fb:0b:43:41:bc:35:78:73:ca:
                    b8:6e:dc:30:c1:7c:d5:54:98:a2:0e:ed:af:cd:c1:
                    a2:27:bc:c7:27:06:4d:23:91:0f:1d:71:99:c6:ae:
                    ca:ea:a3:c0:4c:38:79:7a:c2:15:a1:3e:e1:d4:ca:
                    29:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:EB:3D:E1:A2:A8:FB:C0:F0:78:E9:36:B4:00:42:1B:12:A9:E1:9E
            X509v3 Authority Key Identifier:
                keyid:26:F3:6B:5C:6C:A7:A1:69:8E:74:21:A2:7E:3D:4A:6B:76:48:14:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:94:fc:31:54:02:9d:0e:6b:36:55:6d:9a:c7:55:6f:c9:74:
         91:23:1b:41:04:28:f0:ee:5c:6a:17:c2:75:1f:12:99:44:a5:
         cf:e3:93:4f:50:c7:c1:3b:c2:47:46:a2:3c:5c:85:e8:e2:e4:
         ee:da:59:ef:4e:1a:13:97:d7:4c:bc:d6:1e:d4:18:bd:b0:c6:
         33:2c:78:49:90:d6:2f:21:68:03:b8:6a:f6:07:dc:3b:0e:67:
         ee:cf:b7:8c:1d:c7:d7:5a:1c:f6:60:05:0c:5c:0b:8c:f5:df:
         ec:16:5b:d0:86:e0:57:46:38:7c:f1:e1:18:3c:bc:66:e4:1e:
         70:be:dc:f9:93:a4:e0:7e:51:40:8d:c3:e6:8e:62:f1:89:f0:
         6d:bb:ef:40:f9:a8:15:da:83:6c:d0:97:8c:e1:5f:5b:eb:79:
         ad:10:7e:52:c7:c8:86:c0:e0:51:50:97:6b:92:59:34:27:83:
         90:5f:2b:a5:e7:79:0b:cc:70:9a:a6:7b:e2:c7:b3:88:b6:97:
         db:89:21:5f:47:9b:76:33:10:0b:45:f9:34:99:9e:fe:95:c8:
         00:7e:c3:24:23:0d:9a:73:ce:3d:df:89:5e:ec:6f:34:02:81:
         ba:44:10:bd:df:7e:30:e0:c0:3c:1a:17:20:46:94:de:ae:f2:
         a5:2f:0e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 17:56:17 2025 by rpki-client