This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
File:                     jt9sKtes7K0Gbh93_gWSLwFpFTY.mft (raw, json)
Hash identifier:          oK8kIcoXu69h1xvn4w/vKAdib11ozWYeVlDr6tiMPfs=
Subject key identifier:   B6:6C:45:E5:86:E9:D2:BC:3A:93:8A:80:E6:00:2D:63:DB:F7:D4:84
Authority key identifier: 8E:DF:6C:2A:D7:AC:EC:AD:06:6E:1F:77:FE:05:92:2F:01:69:15:36
Certificate issuer:       /CN=8edf6c2ad7acecad066e1f77fe05922f01691536
Certificate serial:       019B3EA3BB55F9B8CC6AF8C795E303EC59C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
Manifest number:          07CA
Signing time:             Sun 21 Dec 2025 02:01:16 +0000
Manifest this update:     Sun 21 Dec 2025 02:01:16 +0000
Manifest next update:     Mon 22 Dec 2025 02:01:16 +0000
Files and hashes:         1: LZnMbOvKNCeS9warD4gVCngTQgc.roa (hash: 6Cg/OSuVm718gl/BiJrXMhTNmjh+ffJ7x+FKxzJQO0A=)
                          2: jt9sKtes7K0Gbh93_gWSLwFpFTY.crl (hash: tw6UQpaSr6B5xI7sMSJ4Te52N6Dl+4X7b6iLwhtBNEA=)
                          3: yl9TGfZBXnKybJW81dLesyL85jw.roa (hash: 5T9nUKakC/d5Fj82Q3FOurA0Y8gDP1/Vr4z0jWpM3OA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3e:a3:bb:55:f9:b8:cc:6a:f8:c7:95:e3:03:ec:59:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8edf6c2ad7acecad066e1f77fe05922f01691536
        Validity
            Not Before: Dec 21 02:01:16 2025 GMT
            Not After : Dec 22 02:01:16 2025 GMT
        Subject: CN=b66c45e586e9d2bc3a938a80e6002d63dbf7d484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7a:4c:6b:23:94:51:6f:9d:96:77:23:19:2c:
                    da:be:eb:d0:78:31:26:cd:63:b3:88:31:ee:bb:19:
                    e7:ce:27:64:b7:be:c4:f0:ff:d7:c5:a8:28:ea:e0:
                    09:b9:85:be:63:45:04:4e:de:d9:03:09:68:87:5b:
                    e3:35:66:45:5d:ba:9e:e6:51:d2:ae:c3:6c:4e:75:
                    ba:8b:95:b7:20:4b:c8:f8:af:ef:a0:49:24:62:b6:
                    b4:73:84:e5:a9:a7:f2:a2:0d:fa:1a:20:b1:c3:91:
                    df:f0:d3:ff:38:08:81:4b:89:d7:d5:e7:02:e4:07:
                    a8:44:3a:59:30:b5:1e:ba:ec:c0:95:4c:10:b8:d0:
                    96:37:30:fb:2b:cc:d9:67:d2:2f:04:cf:e6:7e:72:
                    4c:4c:fd:d8:bb:64:9c:72:f6:cc:d0:47:ea:af:09:
                    b9:db:1d:3c:da:c5:6a:72:18:76:84:dd:4f:e5:e2:
                    6f:24:14:db:11:96:af:8c:8e:af:a3:94:c4:7e:0c:
                    fa:40:44:bb:2e:56:59:44:eb:f5:58:cb:03:7f:8d:
                    0d:91:41:eb:d5:86:23:c2:10:f2:9d:c6:61:2b:1a:
                    6c:d7:25:f3:8e:c2:13:28:08:2a:43:0c:86:15:c3:
                    ad:05:12:12:08:5e:b9:ee:6c:43:b1:e6:6c:24:c0:
                    dc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:6C:45:E5:86:E9:D2:BC:3A:93:8A:80:E6:00:2D:63:DB:F7:D4:84
            X509v3 Authority Key Identifier:
                keyid:8E:DF:6C:2A:D7:AC:EC:AD:06:6E:1F:77:FE:05:92:2F:01:69:15:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:64:8a:8a:95:b2:d7:21:b2:83:27:b1:fd:b5:5d:45:9e:45:
         61:12:ac:66:2e:16:02:73:62:bd:79:82:85:88:6c:e8:a4:36:
         69:a0:9c:cb:17:69:67:4d:e9:c0:fc:9a:ac:98:56:ef:b2:ac:
         f4:78:b2:cd:20:29:5c:ca:f9:a1:ba:63:c6:96:35:a0:fb:b9:
         7a:fa:a7:4e:33:0d:78:81:06:8c:80:d7:30:1b:40:d6:2c:3f:
         78:d7:08:3c:93:3a:7e:a2:7a:57:9e:2b:e5:d4:0f:9f:ca:51:
         9a:ac:47:3d:42:2c:87:c4:ec:5d:af:8c:ae:0a:65:15:80:1d:
         5c:60:87:98:d5:a1:5b:e5:c4:76:b9:3a:04:e5:48:b8:2a:44:
         d0:12:2d:3b:e4:ff:0c:b7:08:c6:2f:04:7d:23:e0:33:fb:58:
         fc:ab:f4:47:0c:21:76:17:b5:f8:93:16:ef:48:b0:be:c5:55:
         d8:38:2f:00:60:da:fb:5a:05:fd:db:c5:2a:77:c4:e9:46:a2:
         bc:e0:13:52:fb:aa:3f:e8:61:cd:c8:5a:d9:fd:9c:f2:dc:32:
         f9:81:d1:2b:09:53:a9:fe:15:de:ec:7c:83:b9:28:c3:11:84:
         0c:3b:79:83:d8:e3:99:28:fb:25:03:c3:f9:e5:2c:bc:0d:97:
         30:94:5e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 09:15:24 2025 by rpki-client