This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
File:                     d_jn-9SraVB_sf41ea80OlZjkIY.mft (raw, json)
Hash identifier:          HFTitDTXnYhb2VuMLZjEh0Soq2A5HofaQgUYKcw/Fzk=
Subject key identifier:   80:13:E8:86:CC:A6:F3:2E:3B:F1:8F:DC:08:00:5F:FE:29:23:8A:7D
Authority key identifier: 77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86
Certificate issuer:       /CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
Certificate serial:       019B3DFE9F418F78757B135A7F141DC7FD6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
Manifest number:          1048
Signing time:             Sat 20 Dec 2025 23:00:55 +0000
Manifest this update:     Sat 20 Dec 2025 23:00:55 +0000
Manifest next update:     Sun 21 Dec 2025 23:00:55 +0000
Files and hashes:         1: 0OhTHF6DxE3cyZK5YOwOI2V2BAI.roa (hash: xOeumj9MpchTNffEKnQPdj1nuV0b4wbm3GvMqDVnZVU=)
                          2: D6YciS_w4aBGgTwchVv0zjl3KM8.roa (hash: 0I0L8dvu+mXVyzn+otu0YMQ4J1Sqc+LW0CCIWiAWR+s=)
                          3: XyMxVfTmZ9FOajmxjytII90XihY.roa (hash: Y1EWEtYGvmWwkkpTBkRX8z/3qaLQ9HzYwz0slqYxxoo=)
                          4: d_jn-9SraVB_sf41ea80OlZjkIY.crl (hash: CSOblVnJJXczG2Kz2ZgOv4dVCh4037cceW+8kbI5MwY=)
                          5: hu_H7qNyqX0M9nrnuuS3ppV4Mqg.roa (hash: iUNoFw6w4VaZe+xv8tLLmkJfKNEUjAxo8NvVhIUNSuo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3d:fe:9f:41:8f:78:75:7b:13:5a:7f:14:1d:c7:fd:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
        Validity
            Not Before: Dec 20 23:00:55 2025 GMT
            Not After : Dec 21 23:00:55 2025 GMT
        Subject: CN=8013e886cca6f32e3bf18fdc08005ffe29238a7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e9:77:eb:bb:31:99:b8:d4:a0:89:5c:8d:b9:
                    f0:b5:82:01:0f:7a:29:af:29:a7:c0:6e:82:9a:3c:
                    e7:51:77:ae:c8:30:0c:0a:92:b5:cf:c6:4c:70:26:
                    96:33:d0:d7:92:a7:45:0c:1f:c7:88:d8:12:f1:96:
                    1b:2c:83:38:e2:a6:5a:ed:cd:63:38:83:38:8b:79:
                    3f:c1:83:ac:ff:7f:f8:0f:b4:b9:c0:fb:17:03:c0:
                    02:d1:a0:cc:e9:a5:c6:5e:7e:a2:df:20:69:b9:2d:
                    16:fb:bb:99:fe:8f:8d:eb:4a:08:c8:99:6e:82:c2:
                    54:04:ad:5c:0f:ce:ec:c4:ab:1e:b5:d5:2a:fc:d7:
                    5b:c5:7e:4d:88:c4:18:49:d1:31:7c:fa:50:48:03:
                    6f:c1:7d:4c:3d:77:64:30:af:66:99:70:de:62:92:
                    ba:f0:05:cd:b2:17:34:90:3b:b5:39:fe:e4:be:41:
                    d4:1f:c7:e3:ee:fc:f9:90:d8:83:3a:b4:57:e4:2a:
                    43:c3:67:21:58:ad:4e:87:de:29:d3:6f:39:e4:6f:
                    d8:ef:9f:f1:53:ac:fa:98:c9:a1:e8:48:63:25:e7:
                    17:17:22:bc:0a:ea:c0:1b:91:8e:98:96:f2:d6:c5:
                    32:5e:db:6f:0e:6e:28:2b:d5:c5:72:60:be:72:96:
                    f2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:13:E8:86:CC:A6:F3:2E:3B:F1:8F:DC:08:00:5F:FE:29:23:8A:7D
            X509v3 Authority Key Identifier:
                keyid:77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:9c:ad:03:c9:65:2e:56:cd:53:be:0b:af:c9:ca:25:15:97:
         1d:10:82:66:a8:8a:56:cb:ee:d0:71:bd:b4:6c:8b:27:71:b7:
         e0:02:36:b0:57:5e:92:9b:ab:13:5e:7c:c9:3e:54:6d:dd:a9:
         cb:80:c1:03:58:53:41:b2:5a:7f:fd:cf:12:87:a1:ba:d2:95:
         33:0a:1b:57:e9:33:e7:a9:af:53:4e:ee:e9:0c:0f:1c:00:b0:
         dc:c2:fb:3a:e7:ed:f1:b6:74:b3:6d:f7:be:03:c3:eb:0a:0e:
         1b:36:a5:7c:82:cf:ba:20:1c:75:13:cd:8a:53:f1:44:76:13:
         85:48:ae:b2:8b:22:56:55:ec:48:2b:7e:eb:b6:8a:e0:54:6b:
         56:42:e1:00:09:71:7c:4c:f8:60:38:8e:ed:bf:94:13:76:73:
         ac:57:43:ae:78:64:e5:ef:4b:e7:b3:8a:e5:05:54:20:98:64:
         4f:e5:89:bc:0b:38:24:78:61:52:05:5c:3a:a2:a8:04:97:cf:
         00:2f:c1:9a:62:f9:79:27:57:33:3e:a1:a0:7d:b3:57:b6:12:
         33:ee:91:6d:dd:f9:41:69:1c:fe:66:b1:97:c8:8e:c8:ce:ee:
         0a:19:0c:30:7f:5f:2a:57:c5:b2:5a:5a:43:f0:f0:48:f9:54:
         dd:c5:2e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:44:00 2025 by rpki-client