This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
File:                     jo6Xer76Kh-ZXonJR_79Rja3lhw.mft (raw, json)
Hash identifier:          NDIeEoOfAcC+BPTfkM8O/ECF4LL7H5t1TZbz2Jn5FrM=
Subject key identifier:   F6:08:A7:8B:DE:5C:A6:C3:62:3E:33:44:19:99:D3:60:70:3C:BD:5B
Authority key identifier: 8E:8E:97:7A:BE:FA:2A:1F:99:5E:89:C9:47:FE:FD:46:36:B7:96:1C
Certificate issuer:       /CN=8e8e977abefa2a1f995e89c947fefd4636b7961c
Certificate serial:       019B3DC74DCCFA04FD3CEB44A589F6A6B694
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
Manifest number:          AD
Signing time:             Sat 20 Dec 2025 22:00:30 +0000
Manifest this update:     Sat 20 Dec 2025 22:00:30 +0000
Manifest next update:     Sun 21 Dec 2025 22:00:30 +0000
Files and hashes:         1: 1-1JiGSnRfJkGIdCY6ITAZRKA8LI.roa (hash: NxHneWDr/Bysr9GfZGnTiOG68S5eU/eXkBxXj/MldpQ=)
                          2: jo6Xer76Kh-ZXonJR_79Rja3lhw.crl (hash: ttuIzjU64Z/jmA4x9m+HuTsTwJ5RllKmm2tOizUWURQ=)
                          3: ow60WK19GLScvXjofKcYY7rIu7Q.roa (hash: k9aBIwcpyP8JupLuwo0clAFTDBkWTnr5IYecYXpvwdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3d:c7:4d:cc:fa:04:fd:3c:eb:44:a5:89:f6:a6:b6:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e8e977abefa2a1f995e89c947fefd4636b7961c
        Validity
            Not Before: Dec 20 22:00:30 2025 GMT
            Not After : Dec 21 22:00:30 2025 GMT
        Subject: CN=f608a78bde5ca6c3623e33441999d360703cbd5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:40:36:d0:90:cc:f6:ce:74:46:c9:72:3a:53:
                    2e:70:82:d7:8a:0b:00:20:f4:f1:47:6d:e1:ce:bf:
                    58:08:9d:71:1e:39:88:b8:a9:6a:73:8e:ce:e0:0b:
                    79:25:5d:87:00:9c:8a:16:c0:cb:3a:b4:b9:cf:81:
                    39:03:af:2b:2e:3e:34:14:d0:6f:06:b8:5a:13:8c:
                    3c:51:22:1a:65:40:0f:66:7c:0d:b5:8b:55:27:e9:
                    0a:3d:a4:ce:45:5f:04:2b:ca:54:cb:ce:e5:04:3e:
                    a2:c5:e7:9d:35:f3:d9:c9:8f:91:dd:ef:31:45:90:
                    7b:6b:e8:91:c8:29:7e:a8:77:71:5d:31:a6:ed:c1:
                    d1:1a:8e:7d:ad:f3:70:d7:55:8a:30:26:22:68:54:
                    d5:e6:84:a9:a3:0d:be:84:33:25:ea:da:ce:53:55:
                    33:06:af:af:fe:d3:7d:cb:07:6a:82:7d:09:be:80:
                    17:06:ca:11:6f:ee:74:7c:95:a8:a1:53:fb:b5:e8:
                    e3:64:97:50:85:9e:1e:b9:b9:fc:16:ef:b0:49:c9:
                    79:38:28:90:34:51:52:df:c3:0b:9c:bf:7c:0b:86:
                    de:4b:cf:f5:e0:7a:38:cf:3a:b0:c8:d7:d3:57:33:
                    d2:19:06:b2:47:2d:13:88:e3:50:3b:a4:18:07:a0:
                    a8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:08:A7:8B:DE:5C:A6:C3:62:3E:33:44:19:99:D3:60:70:3C:BD:5B
            X509v3 Authority Key Identifier:
                keyid:8E:8E:97:7A:BE:FA:2A:1F:99:5E:89:C9:47:FE:FD:46:36:B7:96:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:36:52:6e:27:b5:eb:d3:7d:af:7b:31:c4:98:3b:ec:dc:8a:
         a9:e3:03:cb:23:64:22:4c:ab:2f:8f:f6:51:0c:8e:16:e2:7c:
         14:e2:d5:a5:84:38:f1:6d:95:7d:b0:c2:19:4a:be:46:41:46:
         69:fa:09:f8:32:77:4b:c7:dd:7e:94:69:89:86:81:5a:d2:22:
         34:54:dd:ba:f3:aa:6c:fe:4f:80:ca:a4:cf:a0:87:4f:db:b8:
         be:9e:18:13:6e:1c:67:4c:ec:60:29:50:f8:f4:48:24:c4:a6:
         01:23:40:fc:bb:55:6f:b9:1c:48:78:85:05:06:ac:42:ba:cb:
         d8:20:56:31:54:53:15:ea:b8:9c:7d:ed:05:af:05:d9:b8:ea:
         02:ae:78:76:55:44:cb:86:4d:af:0b:eb:f9:9c:29:c0:f6:0f:
         6e:08:53:17:c0:bf:90:95:09:73:20:b1:95:b8:f1:b9:86:b3:
         ac:ad:f0:0a:b5:56:05:34:0b:de:b6:f2:6f:20:8b:91:8b:93:
         37:eb:52:fc:a2:dc:c3:42:13:0a:3b:47:4d:5a:b6:42:2a:24:
         f5:ca:7b:b2:32:e8:73:6a:8c:9f:4c:85:86:cb:d0:ec:6a:70:
         71:93:ec:7b:45:eb:4f:1c:98:da:8e:97:08:c5:32:67:e0:97:
         b3:7b:ad:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 03:26:05 2025 by rpki-client