This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
File:                     jphwObPzstubKYrg2NDrNIlprWI.mft (raw, json)
Hash identifier:          7F90iR/IoKk9gbrhKY/RVsfsbDs1+BAfbu7ra7UAKxA=
Subject key identifier:   56:2A:40:D2:BD:38:15:C0:3B:0E:AC:9D:B3:5E:0A:89:F4:55:FA:EC
Authority key identifier: 8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62
Certificate issuer:       /CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
Certificate serial:       019B4325668EA8FABCA65AB5EF8656C044E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
Manifest number:          0E5A
Signing time:             Sun 21 Dec 2025 23:01:23 +0000
Manifest this update:     Sun 21 Dec 2025 23:01:23 +0000
Manifest next update:     Mon 22 Dec 2025 23:01:23 +0000
Files and hashes:         1: X5JIC9unyCIdpKZJwQlA4lYc9cY.roa (hash: TbF6eUUD3ihge0Jd20Jank3p47LpDv7SMCYmoD1OeKU=)
                          2: gs0XpzxFNQmbs4Px1NH3MVPnW5M.roa (hash: DwuTLpmUI5LgM0GpYDySurfXPWoPr7lrzuLuY77FykY=)
                          3: jphwObPzstubKYrg2NDrNIlprWI.crl (hash: 5X8Od29sU5L0LWvs5OrpB6D7TjJIITTQbPSm1WQnpdw=)
                          4: m5kAS92vx1bNl-YtFK-tgJ3aBFc.roa (hash: LVhjeEqDTNmsxowkINJYXb6iHnRvgZx0ebSzKo74mzQ=)
                          5: odHmDhpPBcZ3XwBesQQXylBZA0o.roa (hash: H/gbEaRHX0JWWLdUIVP1AcKvMMZMHQaipUWz40c1nI0=)
                          6: zFdTJX52gPCw2iLD3NYUVO-Vyxo.roa (hash: jAK0gwv0VcbXBTEIIqlyy6XCdTitcUhhvcmF8ss17m0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:43:25:66:8e:a8:fa:bc:a6:5a:b5:ef:86:56:c0:44:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
        Validity
            Not Before: Dec 21 23:01:23 2025 GMT
            Not After : Dec 22 23:01:23 2025 GMT
        Subject: CN=562a40d2bd3815c03b0eac9db35e0a89f455faec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:48:47:dc:02:7a:3b:a0:a4:55:c4:d4:9b:3b:
                    b7:6c:f5:91:5b:db:d9:ca:36:c2:e4:65:ab:39:7a:
                    a9:aa:42:46:da:b3:eb:3f:e8:b4:40:ef:b2:92:c1:
                    3c:ea:b3:15:20:1b:43:0e:ef:0b:06:b2:da:4a:10:
                    4d:29:d7:00:40:d3:4e:89:26:ca:fe:e1:37:08:c7:
                    2d:e9:b2:ad:d9:59:4b:96:d6:22:e9:e6:f5:78:39:
                    ad:07:52:4d:49:1d:79:5e:e1:29:1b:62:88:da:9a:
                    52:6e:6d:57:95:fc:39:af:2e:27:30:f1:51:c6:db:
                    9f:3f:34:8c:04:b9:f8:1b:64:2a:34:db:c6:14:28:
                    7e:27:f0:57:76:a7:0f:bb:fe:ce:70:58:2a:bd:42:
                    e6:b1:16:74:02:34:e3:2d:25:ac:51:10:f6:14:d1:
                    42:01:3e:de:f7:7e:70:29:13:cc:6c:4b:47:fc:c2:
                    29:9d:e1:f4:23:1b:7a:cc:e2:ce:4e:40:f3:b6:12:
                    72:7f:d5:69:3b:3f:6a:f4:2a:3c:19:7e:70:9a:06:
                    cf:72:ff:98:e7:82:ae:51:1a:c2:86:7c:28:6b:06:
                    7f:8b:4b:b6:ee:3a:4c:a5:c7:9f:51:f5:a6:d9:60:
                    60:fd:76:b2:64:61:7b:24:f4:1f:f6:75:63:ba:51:
                    6c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:2A:40:D2:BD:38:15:C0:3B:0E:AC:9D:B3:5E:0A:89:F4:55:FA:EC
            X509v3 Authority Key Identifier:
                keyid:8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:f5:0d:f9:56:a4:ed:21:bc:73:8c:c4:b2:76:4f:31:dc:2c:
         0c:57:6f:a6:57:59:03:98:f5:a4:63:f2:4b:7e:23:16:5e:79:
         b3:8a:97:39:a8:b1:dd:b2:e3:3f:91:45:c6:d3:ea:6c:81:49:
         7b:07:61:95:a0:85:2a:32:dc:72:04:ef:54:4b:f6:d1:63:f5:
         a8:3c:64:8e:d4:f9:21:8e:26:f8:1a:45:eb:b9:35:9b:cb:c2:
         33:28:9d:5f:ae:6e:5d:ec:95:79:32:2c:e4:0b:70:3d:82:b5:
         f1:45:e1:6b:12:cf:44:14:23:44:58:7b:16:49:41:f6:2c:22:
         38:f3:11:2d:99:be:d6:4b:0b:c5:ae:03:d0:78:30:95:bf:67:
         5e:bd:4b:4f:d1:f0:a2:b0:c2:6c:87:b1:d6:54:83:30:c1:e3:
         a0:a9:12:93:3e:db:33:09:90:58:1e:9d:e2:df:1b:8c:c2:79:
         80:95:c1:26:a5:8f:6a:68:4b:33:35:85:68:84:48:58:44:fe:
         1a:90:8e:36:c0:7a:08:0b:eb:ee:6f:2b:18:1f:3c:cd:b5:ba:
         f6:bc:ff:90:78:03:15:e7:74:2c:3d:30:81:7d:e7:79:23:f6:
         cd:16:63:1a:a8:fb:42:97:54:97:69:fc:d1:53:b5:48:04:b2:
         f0:44:30:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 06:47:20 2025 by rpki-client