This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
File:                     pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft (raw, json)
Hash identifier:          5n5ZmdwS+gP8kDj1lyJewU+2B83o1AtFpAMmWD3zz78=
Subject key identifier:   CC:8E:CA:76:FF:EF:51:F3:7A:B5:FA:80:71:48:B3:B9:8C:83:18:0C
Authority key identifier: A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
Certificate issuer:       /CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Certificate serial:       019B4DDF90527D31BFB791A2B0647F903419
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
Manifest number:          1796
Signing time:             Wed 24 Dec 2025 01:00:55 +0000
Manifest this update:     Wed 24 Dec 2025 01:00:55 +0000
Manifest next update:     Thu 25 Dec 2025 01:00:55 +0000
Files and hashes:         1: 1-Rh4xR4UjkOh8VqSY4pK4d1pRds.roa (hash: x3ETC4RsRxr7b/UEU+/7lhOsihrtUte3yh6z17TAj9w=)
                          2: GISiwDWwkN55w-OPn4qwRSweA84.roa (hash: HIcUUP5vEFNT3gS3RcoPzA6F9bPL2QzZ521VNaxnhks=)
                          3: kT-9aZ8PqlfT-VcjyzgIGjoK45k.roa (hash: GXEy5f6ZMAPtdjysI4zwNtCcC/imdXdb1ZPEUBC58HA=)
                          4: lXukILbe6VXJ7h_Wf9WW21z12mw.roa (hash: +Zzql9kBnSussoen1LHmVUwZhXfkIG96Hh/jt0AAOuY=)
                          5: llr3G6G5AM7M10tmA9xFiPTyO0Y.roa (hash: iQGQsp8WoDcGM5vwoYe4dx6kdl9hCiwMrIHoYkwEWK0=)
                          6: pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl (hash: cqTT6xScs7S02x+2RTKKeC2pZumvPJsqTxNaCGtAI3Q=)
                          7: rKCFva5BURgPwYBY7AhhhAP1WfI.roa (hash: yPJLL1iPDAh4jC5sDkvBCraLd8BwdjLiqxgvyLndKHU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Dec 2025 01:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4d:df:90:52:7d:31:bf:b7:91:a2:b0:64:7f:90:34:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
        Validity
            Not Before: Dec 24 01:00:55 2025 GMT
            Not After : Dec 25 01:00:55 2025 GMT
        Subject: CN=cc8eca76ffef51f37ab5fa807148b3b98c83180c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6e:3d:eb:61:3b:35:07:80:b8:33:53:d1:40:
                    e2:13:08:c9:1f:8c:0a:73:9d:22:12:55:51:70:be:
                    ed:19:9b:15:24:9e:b5:73:3b:b8:c8:d3:7a:63:c2:
                    75:6f:8f:cf:72:c1:d8:c3:f0:21:80:56:0f:cd:d2:
                    d2:03:50:08:82:3a:e9:85:1d:ee:ab:ac:5a:15:b4:
                    88:42:96:55:dc:75:01:14:29:0c:51:71:5b:7d:67:
                    5d:c8:9e:36:25:a4:3d:fa:7b:86:d8:67:fa:c8:80:
                    76:8a:97:40:f4:c6:f6:39:03:85:ed:35:09:08:79:
                    83:ee:62:d6:3b:70:a1:b5:ca:ab:d3:92:bf:23:2e:
                    b5:8f:c7:bb:c7:ee:86:9f:80:b8:d0:cb:58:bd:35:
                    a1:78:26:ae:b9:0b:c5:26:a7:e5:f0:d5:f0:65:e8:
                    fd:3b:1a:54:f1:d0:65:4f:56:23:d3:a2:eb:7d:a8:
                    81:9e:54:99:5e:3d:0c:f0:30:5a:de:bd:da:68:ad:
                    90:8c:30:4d:5b:47:77:15:0d:47:eb:1e:58:1f:2c:
                    8f:a9:cb:ad:36:0e:f7:4e:2a:25:2f:d6:ef:b9:04:
                    3a:57:bc:26:3c:d2:0a:d5:46:50:e6:6c:69:65:db:
                    5a:94:31:37:ef:04:ff:47:c4:12:75:98:b3:9f:13:
                    99:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:8E:CA:76:FF:EF:51:F3:7A:B5:FA:80:71:48:B3:B9:8C:83:18:0C
            X509v3 Authority Key Identifier:
                keyid:A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:bf:51:56:51:b3:fe:81:2b:06:b4:e5:82:f7:bf:e9:4d:a7:
         e5:89:9b:06:c6:c8:a9:a4:56:52:12:7c:e5:60:e1:ee:d7:1a:
         86:f4:97:30:38:45:67:c4:9a:b2:b6:07:1a:22:86:6a:fc:32:
         df:cd:b8:5f:50:92:25:f3:a6:06:f8:c8:8c:21:17:f5:d2:6d:
         6f:bf:e3:41:f2:34:2a:70:d6:7d:d3:18:83:8c:09:c6:45:64:
         ab:97:e2:19:61:3c:8c:8d:ef:ae:99:ca:07:36:c8:32:72:56:
         9b:3a:a4:c8:7a:51:0f:3b:6e:3b:ea:4e:e6:f2:40:59:32:e2:
         1d:1c:a1:8a:bc:f7:5a:9d:78:0d:54:99:e6:5e:bd:66:03:c8:
         c5:84:ab:d1:d7:2e:ad:2a:38:fa:ef:9b:98:94:47:d0:5f:17:
         06:ea:4b:83:70:ea:58:53:f2:a1:64:0d:e4:40:5b:21:c6:44:
         45:65:07:cf:de:9d:6e:83:60:cb:66:fc:47:5a:c7:da:ba:68:
         8d:d4:e7:d0:b8:4a:90:7b:4a:7c:e0:d8:e8:70:8c:69:9b:2b:
         2f:74:49:d2:ac:ea:60:33:11:cb:b1:1f:82:ba:54:96:1f:11:
         28:86:5c:30:4a:7c:15:cc:73:7f:7b:d3:26:76:b2:99:bb:98:
         ce:ad:e3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 11:31:09 2025 by rpki-client