This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft
File:                     j6L4iSbgvYQBxzztt36ZyU3MUtc.mft (raw, json)
Hash identifier:          2kIXNjpZOLHIVaagk1wEbWwo5cewk0IEru9aWbTlKYI=
Subject key identifier:   3D:9B:E6:14:2B:7C:7A:EB:2D:4F:1D:19:4B:71:55:F8:C5:2B:B5:05
Authority key identifier: 8F:A2:F8:89:26:E0:BD:84:01:C7:3C:ED:B7:7E:99:C9:4D:CC:52:D7
Certificate issuer:       /CN=8fa2f88926e0bd8401c73cedb77e99c94dcc52d7
Certificate serial:       019B37C54168A5DC21801824DED712C1F1DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j6L4iSbgvYQBxzztt36ZyU3MUtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft
Manifest number:          15E1
Signing time:             Fri 19 Dec 2025 18:00:32 +0000
Manifest this update:     Fri 19 Dec 2025 18:00:32 +0000
Manifest next update:     Sat 20 Dec 2025 18:00:32 +0000
Files and hashes:         1: hqd990q1gLSW7SBs-f4MtsS4OUs.roa (hash: Cj5NNPUEfRQP2HpFQ4Vq0r88rz0ljjQnf6HR7Q/0ozE=)
                          2: j6L4iSbgvYQBxzztt36ZyU3MUtc.crl (hash: s8hrLmw6nLPfQ+Lx9sZftyIKdRibDH+7g6re9pFmlag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j6L4iSbgvYQBxzztt36ZyU3MUtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:c5:41:68:a5:dc:21:80:18:24:de:d7:12:c1:f1:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fa2f88926e0bd8401c73cedb77e99c94dcc52d7
        Validity
            Not Before: Dec 19 18:00:32 2025 GMT
            Not After : Dec 20 18:00:32 2025 GMT
        Subject: CN=3d9be6142b7c7aeb2d4f1d194b7155f8c52bb505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e0:ab:b6:13:de:78:93:0f:57:97:af:2d:c5:
                    b4:4d:ed:02:11:cf:32:11:03:75:dc:fa:72:16:26:
                    f8:29:81:ae:0d:2c:18:60:cf:3e:1b:f5:ea:f8:8e:
                    5b:54:ca:d8:0e:8e:d2:7a:59:16:4e:6f:3b:c4:f2:
                    d0:c3:f8:8c:47:84:d9:29:ae:4d:28:97:b9:c0:65:
                    b2:fb:a4:d8:1a:b7:77:57:ab:88:51:c8:30:cf:fa:
                    26:73:2c:1f:1e:f0:bc:c0:6c:20:5a:11:a2:04:1b:
                    54:3a:26:9e:d5:dd:ce:5d:e0:d9:30:0e:2c:0e:f6:
                    64:3d:1c:59:ba:78:87:ea:cd:f4:ba:39:57:6f:bd:
                    7f:db:e5:d0:5a:0f:91:7d:55:da:d0:0f:9e:38:d8:
                    5a:2a:82:32:dc:d1:90:0e:68:4b:14:06:14:fa:b7:
                    87:85:d3:61:6b:13:ec:d5:1b:ee:36:48:f6:5f:54:
                    dc:5f:81:c2:91:4e:9a:fd:6c:c3:64:7e:fb:01:4d:
                    bf:c5:f8:9d:a6:11:27:04:93:a2:80:4b:35:f9:66:
                    28:17:da:fb:ec:e2:c0:7f:2b:92:84:e1:7e:01:0c:
                    7a:f2:b7:ac:70:67:61:79:25:c6:63:c5:44:5e:ed:
                    ae:f9:f0:f7:4c:59:3c:29:3a:e1:98:80:b9:1b:b7:
                    a0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:9B:E6:14:2B:7C:7A:EB:2D:4F:1D:19:4B:71:55:F8:C5:2B:B5:05
            X509v3 Authority Key Identifier:
                keyid:8F:A2:F8:89:26:E0:BD:84:01:C7:3C:ED:B7:7E:99:C9:4D:CC:52:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6L4iSbgvYQBxzztt36ZyU3MUtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:32:04:c3:10:91:a8:49:ca:31:27:9f:bc:9e:98:8f:6a:43:
         2f:72:6d:74:f9:45:ee:e1:ae:06:e6:dc:7d:fc:b8:ea:a0:c4:
         d3:d0:b3:f7:36:54:d9:70:57:68:0a:52:15:d1:77:b8:d9:a5:
         dc:01:6d:ab:0f:28:c6:1e:69:0f:33:ae:51:ee:c7:77:1b:3c:
         b4:48:ae:3b:40:6f:a7:12:01:67:58:68:9b:96:39:cc:c3:86:
         09:00:21:9e:b0:df:1f:3a:06:63:7f:55:9c:c9:9a:d6:ce:31:
         c6:78:fb:e7:a3:bb:ac:67:00:3b:7c:2a:8c:c4:fb:89:b8:ba:
         9a:80:35:45:cc:2c:fa:21:cd:ad:46:a3:23:23:06:21:c0:33:
         86:63:7d:19:c7:6a:47:59:c9:9e:43:43:d9:a5:62:15:7e:84:
         10:dd:da:08:64:6d:d0:cd:80:37:16:fa:81:9b:a7:e3:87:27:
         3c:24:01:87:4e:48:f0:69:be:4b:54:4c:35:1f:61:da:b1:6d:
         89:6d:b2:9c:3b:7a:4b:5c:b2:38:48:b2:a4:d0:0f:b3:6f:17:
         85:e9:2c:10:bd:3e:8d:ae:cb:a0:e8:a3:ba:a1:d5:35:18:29:
         ff:46:a0:6b:1b:9e:ab:ed:66:81:71:b0:6d:0d:e3:32:0c:e7:
         fd:bf:4a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:54:50 2025 by rpki-client