This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
File:                     JijMfwbqCaJH9r6enldMTze06bY.mft (raw, json)
Hash identifier:          p0nEhm/0rcmu2l6Ffow+INepGNWxPg8HZvRzMRr/3ZE=
Subject key identifier:   15:EB:47:47:28:68:4E:19:72:85:16:A7:BF:CD:ED:67:F5:BE:27:0C
Authority key identifier: 26:28:CC:7F:06:EA:09:A2:47:F6:BE:9E:9E:57:4C:4F:37:B4:E9:B6
Certificate issuer:       /CN=2628cc7f06ea09a247f6be9e9e574c4f37b4e9b6
Certificate serial:       019B3D90633ECA101A465C0B5829112880D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
Manifest number:          1787
Signing time:             Sat 20 Dec 2025 21:00:31 +0000
Manifest this update:     Sat 20 Dec 2025 21:00:31 +0000
Manifest next update:     Sun 21 Dec 2025 21:00:31 +0000
Files and hashes:         1: JijMfwbqCaJH9r6enldMTze06bY.crl (hash: hGE8qS+uga4F5XepWXQZDP0FOY6DeJDo6Rf9At0NPZk=)
                          2: hwIYyALOwoBN5zxSDcMvXKZuEhU.roa (hash: UgZLdR3szHuIjLGcrVjUdsIwYk5m69uSb6Pgyz7tXrM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 21:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3d:90:63:3e:ca:10:1a:46:5c:0b:58:29:11:28:80:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2628cc7f06ea09a247f6be9e9e574c4f37b4e9b6
        Validity
            Not Before: Dec 20 21:00:31 2025 GMT
            Not After : Dec 21 21:00:31 2025 GMT
        Subject: CN=15eb474728684e19728516a7bfcded67f5be270c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f3:91:7f:68:a4:09:cf:e7:04:ca:0f:f5:86:
                    10:0b:07:2d:c6:a3:4c:89:59:7d:fb:4a:c8:af:bb:
                    93:a8:fb:84:03:fb:46:93:15:d3:8a:ce:f8:01:f8:
                    0f:06:e0:3d:af:e5:d3:08:c2:78:ef:5b:19:64:8d:
                    b1:7e:bf:b2:3e:ab:e8:9e:8e:91:96:ea:f6:8a:b0:
                    c2:b3:e1:e7:ba:70:e6:c2:59:f9:47:f7:98:06:7f:
                    ba:f3:6b:fa:7b:2c:bc:51:43:52:c3:c6:af:77:94:
                    03:73:77:e9:24:98:d6:9e:af:72:1b:cc:03:1e:dc:
                    b3:c5:40:88:a1:35:15:af:75:29:d0:a0:5e:c8:ea:
                    41:1f:69:e2:8a:18:9e:3a:13:1b:9d:90:1a:b2:3c:
                    78:7c:1e:9b:2d:50:a3:20:22:93:d4:97:36:37:e3:
                    c1:86:d2:59:ff:9a:30:47:b2:d9:a5:3c:58:8d:5c:
                    93:dc:55:ab:7a:68:db:a1:8a:e2:66:19:b3:a6:e0:
                    db:43:ad:ab:f5:d0:e9:6c:b1:f2:81:05:d0:d7:72:
                    c8:23:b7:04:c4:3f:25:ac:00:01:c1:3c:2e:27:f7:
                    51:25:fa:17:20:0a:77:95:a1:13:c0:2f:ff:c3:f0:
                    69:59:a7:81:54:4c:cf:7b:31:5b:aa:bf:58:3f:0f:
                    3e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:EB:47:47:28:68:4E:19:72:85:16:A7:BF:CD:ED:67:F5:BE:27:0C
            X509v3 Authority Key Identifier:
                keyid:26:28:CC:7F:06:EA:09:A2:47:F6:BE:9E:9E:57:4C:4F:37:B4:E9:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:0c:29:5e:0b:31:5f:b2:31:77:07:da:bf:ce:25:25:d4:ef:
         4f:db:79:d2:73:a1:15:97:82:bb:5a:60:17:7e:79:7a:08:97:
         eb:ae:16:61:0f:10:a4:c5:dd:48:14:b7:a1:a9:30:23:46:75:
         0e:c1:d1:38:b4:a8:61:af:7b:a0:aa:27:17:1f:e4:7a:7c:a8:
         1e:39:85:a2:51:97:fa:6f:65:19:7a:f4:d5:bd:fb:15:da:ff:
         a5:ba:bb:e1:6b:48:cf:38:52:eb:76:d4:d0:48:db:58:21:1e:
         7f:63:fc:38:43:5b:1d:16:2a:bf:2c:f6:eb:80:4c:28:ed:b0:
         e5:f2:23:10:af:12:7a:c2:54:ff:10:29:44:bf:86:a3:09:25:
         c4:88:f1:30:21:53:87:9e:a5:30:77:65:db:33:9a:15:16:b5:
         6e:20:5e:ed:63:52:a2:09:e2:bd:1d:a5:f4:cf:d5:b8:3c:61:
         7c:e6:8c:ea:e1:5b:d7:7a:e9:31:b3:ea:13:82:a2:40:60:b2:
         ad:b0:af:17:74:88:ba:84:91:f2:60:d8:2b:5a:94:d6:7a:1a:
         9f:d8:fe:cd:3d:92:b9:2a:55:41:2a:b5:c1:7f:e9:6b:ac:02:
         c5:2f:65:eb:39:0c:01:ee:a5:fd:4a:5d:d8:89:b4:fe:21:a0:
         8c:dd:9d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 06:03:59 2025 by rpki-client