This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
File:                     Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft (raw, json)
Hash identifier:          tsDFnYnUnAxGVlUXqYqwgxO44gj+V9OBTmJdM6S/3Tk=
Subject key identifier:   C8:25:21:B8:41:21:A3:40:66:2A:1A:A4:46:5F:D3:D2:CD:96:C8:AD
Authority key identifier: 46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52
Certificate issuer:       /CN=463f917077f8f3d0e338c742ea21d64358d19d52
Certificate serial:       019B38A1F1623357F23C3D49EF81A69979A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
Manifest number:          06EE
Signing time:             Fri 19 Dec 2025 22:01:35 +0000
Manifest this update:     Fri 19 Dec 2025 22:01:35 +0000
Manifest next update:     Sat 20 Dec 2025 22:01:35 +0000
Files and hashes:         1: K-1cBvMFbalkBJFw0sJ7i1WTZEs.roa (hash: 3Ikel/xplePBRCnzN26gvmaI2UYrfX6N2d00Q4SBcaQ=)
                          2: Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl (hash: t3DioRTFjg7fYv7l4fec4TY297XLyjBgMpHs3xGfOoE=)
                          3: cpmcqEkiElTb72sko05fp48X-FM.roa (hash: xqlsImmQ/9E7U68AUDQtcRJOydRd1Euow8hua9KaN+Y=)
                          4: moiKPG2LP_pIBJ3oE3uKFFimTvs.roa (hash: 7/+kCaotJP3wY1l3ZzCfImaKj4/imFC7lov/Lv+DrVg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 22:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:38:a1:f1:62:33:57:f2:3c:3d:49:ef:81:a6:99:79:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=463f917077f8f3d0e338c742ea21d64358d19d52
        Validity
            Not Before: Dec 19 22:01:35 2025 GMT
            Not After : Dec 20 22:01:35 2025 GMT
        Subject: CN=c82521b84121a340662a1aa4465fd3d2cd96c8ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:eb:57:82:9d:88:0d:62:11:90:4c:df:a8:8a:
                    47:a8:90:66:54:9b:32:fa:65:0c:73:6a:fc:1b:45:
                    45:81:4e:09:a0:99:69:62:84:f5:9f:30:d0:db:7d:
                    28:49:c7:04:8a:9b:82:b3:87:a2:5e:bb:96:12:ca:
                    aa:31:1f:00:1e:f8:4b:38:22:46:9c:21:03:ea:0b:
                    e4:50:b1:2a:85:23:e9:34:db:c5:bb:41:6d:18:25:
                    bd:21:bf:b0:3b:a6:51:cb:f5:72:45:59:e3:b1:64:
                    90:7e:74:7a:45:88:21:fc:05:fb:97:6a:6a:24:3f:
                    8a:d3:51:8e:52:21:c6:a3:bd:a8:6c:58:d9:c8:28:
                    6c:89:90:f6:b7:1a:70:93:3d:22:43:cc:11:d1:c8:
                    24:88:c0:e3:a7:66:96:51:fc:d3:a2:76:4b:82:9c:
                    e4:67:a2:42:8a:07:47:0e:dd:5d:b1:a8:54:c8:68:
                    2c:89:81:53:5e:b4:f3:67:fb:ae:6d:a0:f2:01:53:
                    64:68:04:0c:1a:d8:1b:66:48:6c:5f:42:d2:ec:28:
                    3e:b9:d9:d8:9d:02:09:84:35:9f:97:03:85:94:97:
                    98:f6:dc:d7:ca:f0:3c:10:bf:ef:f1:b1:8f:af:62:
                    15:c4:a8:fd:16:96:b7:6d:1d:4e:e5:11:b1:bd:27:
                    ea:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:25:21:B8:41:21:A3:40:66:2A:1A:A4:46:5F:D3:D2:CD:96:C8:AD
            X509v3 Authority Key Identifier:
                keyid:46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:ce:ea:95:da:3a:33:f6:ee:d9:90:d4:24:a1:82:c4:64:96:
         eb:e3:0b:42:aa:71:e1:82:6a:94:7e:b4:45:c2:0c:95:32:48:
         3e:6d:af:67:5b:c9:aa:10:b1:a4:73:5f:82:e4:97:5b:21:9f:
         aa:26:7b:22:e0:13:59:6f:78:10:ad:1c:d2:fa:b2:c3:79:a0:
         76:28:be:73:a4:73:d0:b2:45:73:78:99:e7:64:1f:f6:9b:bd:
         87:fb:3b:19:a6:1f:02:0b:18:95:5b:0c:31:f2:31:1a:a3:c5:
         f2:9a:cd:9a:12:cb:b0:6e:2a:9c:45:d9:a1:29:81:66:b1:1e:
         ff:80:07:78:aa:ff:ab:3e:f6:d7:e6:3c:66:4a:b5:00:14:0c:
         28:ed:03:5c:88:fb:84:c4:dc:8f:fd:0a:f2:4e:ec:b2:66:f9:
         38:e0:51:b1:12:61:fe:09:86:30:00:8c:ff:d1:a4:a7:d4:50:
         ce:5f:d6:90:cb:2f:77:53:d0:a5:d8:f1:8f:04:11:10:20:41:
         7c:d7:ee:c4:34:f2:6a:36:c1:55:35:d6:6a:a1:c3:ef:67:78:
         ea:92:f7:09:72:1c:9e:46:18:f3:a7:47:9f:ad:48:90:2a:1b:
         11:0a:9d:59:2d:0e:05:7f:a1:e7:81:3e:2b:8e:e5:bd:4f:ec:
         a1:6e:44:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 06:03:38 2025 by rpki-client