This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft
File:                     jvzJdu-QODrOfwtOCeTYGe0Nm14.mft (raw, json)
Hash identifier:          dz38rwnXcjQzo2VKdnKvNguWE6rZR00xkmBKRCsWthE=
Subject key identifier:   A6:36:71:06:5A:F1:A2:3A:FD:EF:1B:4F:94:49:8E:D5:E6:B6:01:E8
Authority key identifier: 8E:FC:C9:76:EF:90:38:3A:CE:7F:0B:4E:09:E4:D8:19:ED:0D:9B:5E
Certificate issuer:       /CN=8efcc976ef90383ace7f0b4e09e4d819ed0d9b5e
Certificate serial:       019B31FAA9935701966A0E81FC90F5C896BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvzJdu-QODrOfwtOCeTYGe0Nm14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft
Manifest number:          146D
Signing time:             Thu 18 Dec 2025 15:01:09 +0000
Manifest this update:     Thu 18 Dec 2025 15:01:09 +0000
Manifest next update:     Fri 19 Dec 2025 15:01:09 +0000
Files and hashes:         1: jvzJdu-QODrOfwtOCeTYGe0Nm14.crl (hash: m9kC8LkEV0I9sTx/Hn8DPdDoewG1cVkps87FvuUlHRE=)
                          2: rkSwSLStmRRZ1zqveECGSYJACNM.roa (hash: xsEA56Aid9LXN8BT7K8KzYn7nMFJPCMc7ICYt44LhKw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvzJdu-QODrOfwtOCeTYGe0Nm14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 15:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:31:fa:a9:93:57:01:96:6a:0e:81:fc:90:f5:c8:96:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8efcc976ef90383ace7f0b4e09e4d819ed0d9b5e
        Validity
            Not Before: Dec 18 15:01:09 2025 GMT
            Not After : Dec 19 15:01:09 2025 GMT
        Subject: CN=a63671065af1a23afdef1b4f94498ed5e6b601e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e3:9a:11:90:51:7a:3d:78:04:50:b5:1d:59:
                    c9:47:02:b8:20:08:ec:a7:40:af:83:77:fd:7a:33:
                    71:ca:05:fc:1d:3c:22:16:e7:f3:75:13:22:a3:18:
                    ec:9b:72:82:52:76:46:f5:23:25:ea:03:f7:d1:03:
                    fc:97:ec:ce:f5:4c:2e:f2:b5:05:08:f5:2a:78:d9:
                    fe:22:69:f1:4d:70:a8:32:14:10:21:32:b8:81:24:
                    64:e7:c4:40:90:b2:12:cd:50:a1:ea:42:de:15:60:
                    27:b8:09:4e:19:a1:89:27:d3:3d:93:ea:31:e8:7b:
                    97:9d:ed:f8:83:92:38:25:b5:4b:b4:39:00:66:2a:
                    ae:34:06:0d:3f:c2:33:06:c1:67:8f:b7:f2:5f:7f:
                    97:a1:57:be:35:eb:a0:5a:92:f7:6b:d5:6b:18:f2:
                    d4:e7:a4:99:3e:39:42:7c:74:9c:30:79:b2:0e:da:
                    a7:3b:18:30:02:23:98:3d:d2:07:45:06:e7:69:18:
                    c5:5f:6a:20:89:f9:97:f8:d1:df:cd:d6:d2:fe:c3:
                    b7:95:69:98:5a:60:8c:63:17:45:55:29:2a:28:9e:
                    b1:dc:26:d0:42:84:b8:af:3a:30:92:f3:bb:b2:5a:
                    ae:fc:ad:20:2e:6f:0c:4e:68:5f:98:ca:13:10:50:
                    95:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:36:71:06:5A:F1:A2:3A:FD:EF:1B:4F:94:49:8E:D5:E6:B6:01:E8
            X509v3 Authority Key Identifier:
                keyid:8E:FC:C9:76:EF:90:38:3A:CE:7F:0B:4E:09:E4:D8:19:ED:0D:9B:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvzJdu-QODrOfwtOCeTYGe0Nm14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:4e:e1:4f:57:5d:07:79:bb:69:46:8c:53:4c:df:98:11:9d:
         64:6c:cb:50:9e:32:92:3e:62:9c:5d:e6:ed:32:16:b6:8b:80:
         fa:18:14:e3:49:34:9e:ae:e0:d5:dc:2f:2c:d6:fa:94:fe:30:
         73:a8:92:85:53:ab:b4:42:c9:c1:ec:f5:bf:72:e9:08:af:08:
         c7:06:b1:55:27:65:7a:ab:98:15:8d:4e:b8:b9:f3:18:c2:04:
         31:fa:8a:be:82:bd:3f:19:a1:58:95:da:34:59:2d:f7:13:14:
         e3:9e:6e:e3:c1:f0:6b:04:db:f6:ea:b7:0d:30:c0:e5:0a:2c:
         71:c4:cf:66:b5:8a:da:9f:37:a7:b8:26:aa:35:3f:8d:87:cd:
         95:85:ab:71:39:69:90:18:02:a2:4c:6d:eb:35:f0:c7:b4:10:
         69:89:76:09:ce:af:8e:54:cb:64:c9:ef:9c:10:fc:0f:27:5a:
         3a:e6:dc:9e:4c:7e:68:e6:66:bd:8c:c0:ec:c6:55:7c:59:90:
         98:e5:b0:45:1f:f2:f5:a2:01:f4:10:cf:ae:50:fd:2a:c1:85:
         e8:f8:8a:ae:81:5f:26:87:87:68:9b:44:84:15:7e:ba:c7:0b:
         5f:25:47:58:69:36:56:1b:93:40:4e:73:eb:1f:9f:05:65:72:
         3b:8e:ba:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 01:24:35 2025 by rpki-client