This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
File:                     JF3mXzdRXfjMJC82277zIMbZC08.mft (raw, json)
Hash identifier:          qKUwE1NXmqnuZgHw9IRvDkDucoMxzoc9e/PJeqh/hk4=
Subject key identifier:   D8:E2:0F:7E:8B:84:0E:BE:5E:AC:7A:65:C7:7D:14:53:61:D6:F3:D2
Authority key identifier: 24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F
Certificate issuer:       /CN=245de65f37515df8cc242f36dbbef320c6d90b4f
Certificate serial:       019AF1D26BAE5243842E9EBDD3A1F9293F2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
Manifest number:          0195
Signing time:             Sat 06 Dec 2025 04:01:30 +0000
Manifest this update:     Sat 06 Dec 2025 04:01:30 +0000
Manifest next update:     Sun 07 Dec 2025 04:01:30 +0000
Files and hashes:         1: GEvk-OYZIbLA1C0nUWdR9FADeU0.roa (hash: gvjvLQ8vouXFqczTAQsahxoWOc7htNN/RNSCq7vtiz0=)
                          2: JF3mXzdRXfjMJC82277zIMbZC08.crl (hash: RqLoLQ8ahy2L0NH4QBvCDluK5C1TbSYsMaugFoI/B3k=)
                          3: msaFLgq-O5K0HfQvNfj4IRLOZYs.roa (hash: 6dnMxl0kl5I2KX9y31y9JTB+6L9iasfKkgN1lMOhfc4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 04:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d2:6b:ae:52:43:84:2e:9e:bd:d3:a1:f9:29:3f:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=245de65f37515df8cc242f36dbbef320c6d90b4f
        Validity
            Not Before: Dec  6 04:01:30 2025 GMT
            Not After : Dec  7 04:01:30 2025 GMT
        Subject: CN=d8e20f7e8b840ebe5eac7a65c77d145361d6f3d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:18:86:01:8d:92:3d:1a:91:a1:df:e3:cf:8e:
                    01:1c:e7:c6:fb:78:5e:fb:9f:37:62:75:cd:56:11:
                    bf:1c:ef:a8:03:14:3b:2e:f8:0c:8d:11:69:3b:33:
                    bb:9a:fd:dd:00:16:8b:20:a0:29:85:88:bf:43:02:
                    b7:36:9b:9e:64:24:cf:58:d5:77:15:24:71:b4:da:
                    40:ac:4f:aa:02:33:fa:86:59:f0:b1:f3:25:f6:05:
                    0e:ee:fb:eb:9e:e9:42:12:9c:3a:d2:be:e3:5d:2d:
                    04:df:cb:a5:0e:f0:82:3d:66:ae:20:db:93:75:d9:
                    e3:cf:fc:aa:3a:e1:ff:81:fa:43:91:5c:f5:23:b5:
                    ce:9b:8c:1b:bb:70:78:a3:59:1c:ff:07:ed:dd:c8:
                    87:23:23:cb:5a:81:2d:17:2a:3c:ad:97:b1:81:f5:
                    14:99:fa:55:55:51:35:cb:b3:ff:37:e1:dc:9d:92:
                    3e:aa:d3:e8:3f:5f:8c:8a:16:8d:e3:37:df:80:0f:
                    0d:10:42:b5:27:21:8e:30:0c:0b:85:eb:4c:71:86:
                    a3:d5:fe:3c:89:ef:57:2d:79:6d:02:dc:bf:1d:0b:
                    a7:5b:f9:b8:c2:89:0f:8e:5c:b6:f9:be:8a:7f:6d:
                    de:a8:33:6c:c4:12:5e:02:4b:f9:16:69:f5:fe:68:
                    52:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:E2:0F:7E:8B:84:0E:BE:5E:AC:7A:65:C7:7D:14:53:61:D6:F3:D2
            X509v3 Authority Key Identifier:
                keyid:24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:33:3f:14:d3:b3:fd:76:60:44:00:94:9e:25:e7:1a:c5:e9:
         d5:f5:57:74:ca:1c:5c:b1:ae:86:ff:48:f8:1d:73:42:4a:35:
         e9:83:a3:a0:34:9f:11:e2:f5:02:41:2a:b8:10:16:0a:e8:88:
         cf:76:26:5f:03:e4:66:02:72:67:13:1b:8c:93:0c:a5:42:a5:
         0f:af:4a:d1:9d:c0:fd:0f:1b:e6:f2:d3:ac:bf:b2:b6:0f:92:
         b8:1e:72:51:ac:08:5f:38:4e:2c:bb:06:f5:89:d7:6b:44:42:
         bb:d5:1d:21:e8:b5:d1:c3:bc:b6:c0:a0:31:ca:a8:01:58:1f:
         55:f9:2e:92:fd:c7:d7:6b:20:33:fa:c0:fd:87:cf:29:7d:a1:
         ed:b9:c2:63:6f:a0:84:e4:10:c8:e7:fc:62:77:7e:4f:dc:2e:
         e0:c0:3d:fa:b0:9a:53:96:54:08:60:dd:bc:38:a4:b3:5d:e4:
         52:56:1a:20:3a:34:a3:3d:6a:ee:49:c1:a6:a8:14:cc:b7:09:
         6f:c2:4c:f6:a4:cf:ef:be:c7:4d:8c:a1:6d:c8:4f:eb:35:7b:
         33:32:f0:f4:8f:ae:fa:ab:06:45:09:12:2f:d3:e6:b1:61:e2:
         e3:76:37:25:26:4a:e3:cd:bd:f1:6a:5d:c6:0c:78:93:3d:f2:
         a0:43:2e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:50:21 2025 by rpki-client