This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
File:                     bjw2OogPxx8yLRcPdH7FKiqcwNU.mft (raw, json)
Hash identifier:          QfEVwrWBQhz1E55CRCVo3A3eFaG+cd+5byZPhmJt5V8=
Subject key identifier:   92:FC:6E:E4:C1:5B:6E:68:B0:C9:08:1A:0F:D4:16:2A:11:14:36:42
Authority key identifier: 6E:3C:36:3A:88:0F:C7:1F:32:2D:17:0F:74:7E:C5:2A:2A:9C:C0:D5
Certificate issuer:       /CN=6e3c363a880fc71f322d170f747ec52a2a9cc0d5
Certificate serial:       019B3BD8F1FD643ECE7A44FDAD1ACB771488
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
Manifest number:          0F9C
Signing time:             Sat 20 Dec 2025 13:00:31 +0000
Manifest this update:     Sat 20 Dec 2025 13:00:31 +0000
Manifest next update:     Sun 21 Dec 2025 13:00:31 +0000
Files and hashes:         1: bPY9ahZxxt2lvVyVwzqBcjtryAE.roa (hash: gG0UZlZzIEWrBdANAlshbEpSDSiGqX3YZm/S5ZOuqaw=)
                          2: bjw2OogPxx8yLRcPdH7FKiqcwNU.crl (hash: 18NCcrMqCo+/LFgtmxtODoZnCb8Y3P637hL5/2CcOAg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 09:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3b:d8:f1:fd:64:3e:ce:7a:44:fd:ad:1a:cb:77:14:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e3c363a880fc71f322d170f747ec52a2a9cc0d5
        Validity
            Not Before: Dec 20 13:00:31 2025 GMT
            Not After : Dec 21 13:00:31 2025 GMT
        Subject: CN=92fc6ee4c15b6e68b0c9081a0fd4162a11143642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:16:f3:60:49:fe:1d:1d:09:38:04:f3:d9:3c:
                    40:37:9d:5b:fb:3b:c3:5b:6f:13:43:f4:7b:e8:f5:
                    04:a7:f9:05:3d:a8:3f:c3:d7:04:d2:77:dc:39:50:
                    75:4e:97:10:65:35:c1:db:78:1d:e6:00:d4:37:f7:
                    54:9d:b6:a8:5b:b1:96:f5:ac:16:58:a8:02:8d:a9:
                    e1:bd:59:fd:c0:24:e8:87:b6:79:b9:a8:32:1e:1e:
                    ca:4f:25:63:6e:0a:47:a1:df:a7:6a:f8:b5:ef:9d:
                    50:47:3a:3b:00:ff:94:93:1b:2f:6b:4d:20:6d:24:
                    d7:dc:23:41:3a:7b:14:1d:76:af:ed:eb:d8:ae:8b:
                    71:8d:1d:99:b5:ab:28:c4:07:0b:51:c0:f0:bd:bd:
                    40:fc:f6:b0:57:22:92:e4:8c:ac:76:c1:97:c2:80:
                    b6:65:f9:cf:1c:6b:61:f4:21:a3:11:44:d1:c4:e3:
                    f6:dc:d5:fb:56:d2:10:fe:97:83:7e:fa:a1:c7:02:
                    72:26:c9:1c:1f:4c:4a:30:dc:9d:1f:f9:26:4d:9e:
                    87:72:f5:5a:fe:43:a1:ac:77:34:c6:2a:b4:da:31:
                    b4:bb:ba:91:16:4a:b6:ba:1b:1e:c2:19:27:20:c7:
                    0d:81:13:ab:2f:bd:1f:23:1f:88:0b:10:75:9f:60:
                    c6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:FC:6E:E4:C1:5B:6E:68:B0:C9:08:1A:0F:D4:16:2A:11:14:36:42
            X509v3 Authority Key Identifier:
                keyid:6E:3C:36:3A:88:0F:C7:1F:32:2D:17:0F:74:7E:C5:2A:2A:9C:C0:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:4d:07:81:8c:73:ae:4a:da:e0:d6:87:25:ff:53:a3:91:74:
         49:eb:4a:52:9b:b1:01:f1:ac:0e:a9:77:39:52:15:c0:eb:6e:
         57:aa:16:ca:2c:bf:43:1d:cb:15:3a:c8:e4:ae:89:85:b5:d3:
         6d:15:86:7a:1c:8c:7e:98:de:85:f0:84:eb:cf:af:29:a9:ff:
         f7:4d:29:d2:f0:7c:af:22:2f:12:13:80:15:ba:f6:4a:26:a3:
         1b:49:c1:00:18:75:25:be:5c:21:2b:30:1c:83:5d:59:73:1b:
         98:41:f2:7a:54:bc:e9:e3:f5:11:1f:e2:dc:03:82:30:cd:e4:
         3b:8b:cd:9e:7e:28:f9:2d:a2:7b:71:b2:c4:74:e6:b6:fd:ae:
         e1:de:d1:bf:26:dd:34:da:ef:33:f8:90:a4:ff:14:c2:c2:4e:
         23:92:65:6c:fb:ab:01:5c:3e:5c:05:75:65:6a:3f:1e:1e:e8:
         c8:43:cd:ac:e0:41:90:3f:82:72:81:e8:5e:36:bd:0d:15:69:
         3d:a1:70:fa:a0:88:9c:59:7f:79:32:bd:3d:a2:ba:28:e2:fb:
         17:66:91:d1:ad:b1:69:62:c6:95:1d:fb:cc:06:15:f3:a6:c3:
         f9:d5:a6:61:d5:ca:17:c6:18:0b:87:99:14:69:f0:85:30:84:
         33:44:87:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 15:14:11 2025 by rpki-client