This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft
File:                     J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft (raw, json)
Hash identifier:          cok0unAEw3iLLr5AI8c+d7uotFcB0Gnq4pYI25JKj/8=
Subject key identifier:   A2:F8:A4:B5:40:59:02:84:C0:C3:F3:08:6E:82:22:BC:A3:F9:6A:CA
Authority key identifier: 27:F0:B7:37:71:51:14:DE:D2:0F:68:EF:03:47:D9:F7:52:A0:E0:B7
Certificate issuer:       /CN=27f0b737715114ded20f68ef0347d9f752a0e0b7
Certificate serial:       019B3E6E041CD36562ACCDC4D8B0FF5D783B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft
Manifest number:          178B
Signing time:             Sun 21 Dec 2025 01:02:35 +0000
Manifest this update:     Sun 21 Dec 2025 01:02:35 +0000
Manifest next update:     Mon 22 Dec 2025 01:02:35 +0000
Files and hashes:         1: J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl (hash: gwde8Ks9x+N1JMy0sqpGY6ETgYp29Diga3c4GmatV8k=)
                          2: rTVHjttPuQQ_1Dt0EA11KAiXgII.roa (hash: 5V1V0+UjdPuxZIazNIUWaVHiDdBin/aDpwXhDP5JcYw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3e:6e:04:1c:d3:65:62:ac:cd:c4:d8:b0:ff:5d:78:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27f0b737715114ded20f68ef0347d9f752a0e0b7
        Validity
            Not Before: Dec 21 01:02:35 2025 GMT
            Not After : Dec 22 01:02:35 2025 GMT
        Subject: CN=a2f8a4b540590284c0c3f3086e8222bca3f96aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:69:e7:bb:0d:bb:2d:11:89:65:1b:66:4c:1b:
                    e4:94:da:9f:bd:f5:b2:ca:2d:47:30:b0:09:22:76:
                    98:29:31:1d:45:de:c4:28:ad:e1:97:9c:ad:cf:56:
                    b6:91:49:d4:60:1a:d6:65:9a:62:ed:d5:0e:bd:ab:
                    de:08:6f:f3:cc:3e:20:67:e5:fb:35:dc:8e:66:77:
                    7c:10:ad:b1:75:3a:93:b7:8d:7d:33:7c:a0:74:d3:
                    e1:67:f0:80:48:eb:bd:c9:1e:7d:4d:cf:c5:65:24:
                    8e:73:f0:a7:54:8b:c1:1a:c8:96:40:74:bf:46:7e:
                    18:59:6a:b7:75:3d:3c:3e:5f:fa:74:5c:12:14:d3:
                    66:6a:4c:c3:a7:7c:f3:9b:0e:e5:98:c0:74:5e:bf:
                    b1:59:1c:d6:0b:52:e8:d1:35:f2:b2:a9:ef:3e:cb:
                    98:1a:43:b9:b5:d8:fe:9a:9f:43:be:98:d4:e4:dc:
                    2d:9b:bc:61:01:10:02:12:5f:2e:15:67:85:76:1a:
                    29:9b:27:dd:85:d4:01:a0:83:21:41:45:98:eb:2c:
                    3b:1f:d6:96:61:17:60:6c:3f:54:d8:dc:d0:b3:56:
                    a2:fc:73:75:59:8d:c2:13:63:18:42:67:da:85:5f:
                    a1:ef:70:dc:00:94:e2:6d:5b:20:1f:97:d5:43:1a:
                    cf:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F8:A4:B5:40:59:02:84:C0:C3:F3:08:6E:82:22:BC:A3:F9:6A:CA
            X509v3 Authority Key Identifier:
                keyid:27:F0:B7:37:71:51:14:DE:D2:0F:68:EF:03:47:D9:F7:52:A0:E0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:01:a0:01:90:d5:65:41:97:0e:39:10:85:50:51:85:8d:18:
         8c:8c:30:e3:01:eb:6b:80:26:9d:d0:87:45:b6:d0:28:ba:18:
         79:5c:15:23:71:5a:24:6b:c3:89:24:10:ef:df:fb:7c:43:50:
         7d:af:da:0e:99:52:e8:cd:0f:17:94:38:da:33:d5:53:d1:83:
         02:6d:7c:61:54:75:d4:c2:1d:8d:d0:a0:5e:5a:9e:b7:4a:33:
         ec:45:83:89:5f:91:d2:c5:76:ae:77:f8:61:24:7e:91:57:1c:
         62:58:94:4e:41:88:12:93:aa:74:09:57:6c:27:cf:82:2d:74:
         4f:d0:ac:26:a4:17:54:47:8d:ac:80:ea:f3:46:9b:86:0c:e6:
         9c:e4:a7:9e:0b:5a:63:b7:d4:dd:d3:42:95:cd:30:29:0c:b4:
         12:f6:0a:cf:1c:da:ba:e0:a3:5d:99:f9:1b:63:62:c1:83:67:
         53:b7:eb:6a:0d:0f:06:76:5f:10:ea:d9:db:6b:29:c3:13:37:
         80:97:55:0a:6e:05:d8:8c:f9:73:2d:d0:ff:6f:a7:35:f3:a8:
         cf:08:b6:79:3b:a3:07:61:31:58:21:85:05:68:2a:d6:14:9b:
         3e:14:05:64:cc:be:1d:bb:51:f9:9a:e8:ba:08:53:25:3e:30:
         54:d8:1f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 08:59:35 2025 by rpki-client