This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
File:                     Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft (raw, json)
Hash identifier:          uQoeKEbi7k3kht3pVEfNewo2wC+fOKrdhuzTOIHNQjE=
Subject key identifier:   82:A4:D0:71:EF:73:21:1E:69:F8:9D:C2:BD:D8:E4:FB:C4:F2:4E:29
Authority key identifier: 25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE
Certificate issuer:       /CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee
Certificate serial:       019B27775441BF42ACFD86E3011496468FDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
Manifest number:          1782
Signing time:             Tue 16 Dec 2025 14:01:30 +0000
Manifest this update:     Tue 16 Dec 2025 14:01:30 +0000
Manifest next update:     Wed 17 Dec 2025 14:01:30 +0000
Files and hashes:         1: B1nucPb7NWUbBUo9E6aO-U-ClRc.roa (hash: JvGsvFvtRyqqdZt/kpyabUpQhS7hpxa8fDi+el1bUhg=)
                          2: Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl (hash: al3sJcs+yRu6nEc2srxY7A9YPbpluaTPFADmv7GajEc=)
                          3: m7nZQDUNXTAKS4UOybVqVQmdP5w.roa (hash: xKnYvzxmkeCg53JAhipiTpZl84ccUL77H2BTcrzkprw=)
                          4: yFJjRro5JzpGdzShKj2Qbj-Hr50.roa (hash: KNe/rWaTqo2IHu+MVm5qVm+k7A9vULCB7kmT0LNcB1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 14:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:27:77:54:41:bf:42:ac:fd:86:e3:01:14:96:46:8f:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee
        Validity
            Not Before: Dec 16 14:01:30 2025 GMT
            Not After : Dec 17 14:01:30 2025 GMT
        Subject: CN=82a4d071ef73211e69f89dc2bdd8e4fbc4f24e29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:19:0f:24:e2:12:35:95:2a:8e:aa:be:76:08:
                    44:b6:eb:66:18:fb:17:9c:f7:4c:d0:68:ad:68:75:
                    73:d0:3f:a6:a3:c4:7e:4e:f6:7d:65:6e:60:80:6a:
                    ba:42:9f:b7:f0:b3:56:b1:bb:72:f8:c8:43:6d:9b:
                    c7:e2:45:2d:6c:d3:b7:c0:fa:39:dc:67:7b:94:0c:
                    58:53:28:b5:d3:7f:38:7d:59:6c:79:7a:6e:48:15:
                    9a:53:06:8d:25:f8:a8:a1:b8:2c:55:8c:10:7e:68:
                    dd:d7:4f:5d:fa:ee:a8:35:24:4f:32:4d:42:46:ad:
                    a2:a8:1f:5d:56:8d:a2:28:02:0e:23:46:61:ac:b2:
                    ed:17:a7:25:27:0c:71:df:53:58:23:a0:12:ae:59:
                    f0:a0:d7:bd:01:76:cb:e9:b7:c9:fc:cd:58:af:83:
                    bd:30:37:bb:2b:c0:98:2b:af:22:86:30:b5:30:d4:
                    32:4b:96:20:b2:59:47:0e:d0:5a:eb:6e:97:82:63:
                    31:b1:56:62:25:98:2e:f8:56:4b:eb:6f:90:49:c6:
                    f4:44:02:e3:ba:b6:9d:f1:5a:9e:6b:dc:9d:f3:95:
                    50:1c:1e:6f:bb:70:cf:85:8c:7a:2a:1b:57:ec:cf:
                    ae:a3:22:0e:9e:25:82:1d:96:9f:3e:00:b6:89:e9:
                    24:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A4:D0:71:EF:73:21:1E:69:F8:9D:C2:BD:D8:E4:FB:C4:F2:4E:29
            X509v3 Authority Key Identifier:
                keyid:25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:df:9f:53:77:6c:fa:9a:a4:8e:a7:fc:05:d6:84:99:9c:cb:
         96:28:41:a5:e8:31:32:10:47:1e:5a:0c:4f:00:1d:17:ba:24:
         76:5f:83:c8:15:52:8c:15:48:d0:e5:f4:10:be:23:d5:ff:93:
         ad:20:28:01:95:63:4c:fe:3b:ac:cc:56:03:ef:5e:ac:10:4f:
         47:3e:d2:f1:cb:12:62:e6:e2:db:df:78:7e:50:75:79:9d:df:
         65:93:2f:9c:b9:f3:1e:5f:ea:30:1d:6d:ab:af:e9:a9:7a:e0:
         bc:2c:73:3f:dc:8a:92:9f:21:c8:57:1a:49:a5:2b:44:26:83:
         8d:d3:25:24:0e:e7:b6:83:0f:f1:13:5f:4a:df:a2:3e:29:95:
         8a:ae:b7:63:d3:df:35:c2:aa:25:32:79:8e:d4:1c:53:a5:ce:
         09:5e:24:b6:5a:3c:07:fb:71:0b:be:fa:04:ec:2c:74:e3:ee:
         8c:92:d2:73:7b:29:52:65:f7:24:ea:59:4c:9c:e4:67:09:88:
         c3:69:54:6c:44:17:d9:1d:0b:fb:64:af:83:ef:5b:d9:32:67:
         a1:cc:b7:41:a1:a2:7e:f3:5a:d5:f1:07:cb:1a:df:bc:8a:8b:
         d2:43:83:f0:dc:a3:cf:cb:30:a4:74:8b:75:19:f7:f1:0f:5e:
         4e:37:fe:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsnd1RBv0Ks/YbjARSWRo/bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1Y2Y5ZDhkNTUyY2RjN2Q4YzBkYzZmNjQ5YjMwMWYyMzUx
NDA5ZWUwHhcNMjUxMjE2MTQwMTMwWhcNMjUxMjE3MTQwMTMwWjAzMTEwLwYDVQQD
Eyg4MmE0ZDA3MWVmNzMyMTFlNjlmODlkYzJiZGQ4ZTRmYmM0ZjI0ZTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBkPJOISNZUqjqq+dghEtutmGPsX
nPdM0GitaHVz0D+mo8R+TvZ9ZW5ggGq6Qp+38LNWsbty+MhDbZvH4kUtbNO3wPo5
3Gd7lAxYUyi10384fVlseXpuSBWaUwaNJfioobgsVYwQfmjd109d+u6oNSRPMk1C
Rq2iqB9dVo2iKAIOI0ZhrLLtF6clJwxx31NYI6ASrlnwoNe9AXbL6bfJ/M1Yr4O9
MDe7K8CYK68ihjC1MNQyS5YgsllHDtBa626XgmMxsVZiJZgu+FZL62+QScb0RALj
urad8Vqea9yd85VQHB5vu3DPhYx6KhtX7M+uoyIOniWCHZafPgC2iekkwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIKk0HHvcyEeafidwr3Y5PvE8k4pMB8GA1UdIwQY
MBaAFCXPnY1VLNx9jA3G9kmzAfI1FAnuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmMtZGpWVXMzSDJNRGNiMlNiTUI4alVVQ2U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9hMGUwOGEtOWZmMC00NGI0LWJjYzQt
YTEwNjkwYTc0NGU0LzEvSmMtZGpWVXMzSDJNRGNiMlNiTUI4alVVQ2U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9hMGUwOGEtOWZmMC00NGI0LWJjYzQtYTEwNjkwYTc0NGU0
LzEvSmMtZGpWVXMzSDJNRGNiMlNiTUI4alVVQ2U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxN+fU3ds
+pqkjqf8BdaEmZzLlihBpegxMhBHHloMTwAdF7okdl+DyBVSjBVI0OX0EL4j1f+T
rSAoAZVjTP47rMxWA+9erBBPRz7S8csSYubi2994flB1eZ3fZZMvnLnzHl/qMB1t
q6/pqXrgvCxzP9yKkp8hyFcaSaUrRCaDjdMlJA7ntoMP8RNfSt+iPimViq63Y9Pf
NcKqJTJ5jtQcU6XOCV4ktlo8B/txC776BOwsdOPujJLSc3spUmX3JOpZTJzkZwmI
w2lUbEQX2R0L+2Svg+9b2TJnocy3QaGifvNa1fEHyxrfvIqL0kOD8Nyjz8swpHSL
dRn38Q9eTjf+Vw==
-----END CERTIFICATE-----
Generated at Tue Dec 16 22:32:53 2025 by rpki-client