This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
File:                     _jsDhSYKxm8hxD9at4usaC6M5U8.mft (raw, json)
Hash identifier:          G+5zLw0kKC4vs2MaaCH+SaACwC1Sozvhx7s0B++y3Hc=
Subject key identifier:   1F:30:1E:B8:07:0E:9B:86:E2:E0:EF:DF:86:31:E7:FA:C3:11:7E:11
Authority key identifier: FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
Certificate issuer:       /CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Certificate serial:       019B3946C3E0422F278CD21E2A32AC9EA672
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
Manifest number:          1786
Signing time:             Sat 20 Dec 2025 01:01:37 +0000
Manifest this update:     Sat 20 Dec 2025 01:01:37 +0000
Manifest next update:     Sun 21 Dec 2025 01:01:37 +0000
Files and hashes:         1: Kvwz7Otgc_2cfxtWv-qyiSeDnkI.roa (hash: /Av0G+E+eRmfEHS46xLPNhTCJCoxta+3DzTycHIkaZ4=)
                          2: _jsDhSYKxm8hxD9at4usaC6M5U8.crl (hash: xa2EQtC3HIEZUusQBBLqkVe7PRFvozoZX6nKxXH+Mvw=)
                          3: jgkRdzS5JB9PWD_oFwdbOGdk6x4.roa (hash: pk7j7TBSzPnMDTNnJGvz2FoxttkV1MmZfvsZ3NtTMUg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:46:c3:e0:42:2f:27:8c:d2:1e:2a:32:ac:9e:a6:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
        Validity
            Not Before: Dec 20 01:01:37 2025 GMT
            Not After : Dec 21 01:01:37 2025 GMT
        Subject: CN=1f301eb8070e9b86e2e0efdf8631e7fac3117e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:dc:e2:2a:2c:b0:cc:93:3c:49:93:77:bf:fe:
                    05:ca:f0:d0:62:bd:66:b6:e9:19:7f:90:62:2a:c0:
                    82:44:22:dc:24:c2:02:37:84:c6:fe:26:10:be:c0:
                    1a:c1:b9:08:4c:ce:ae:a8:af:9b:a0:32:6f:ba:db:
                    7d:4f:85:cf:e7:b7:d4:1f:3a:e7:17:17:e7:fc:c7:
                    3a:0a:42:73:d4:d8:9f:a1:a1:dd:ea:1f:d0:c2:55:
                    b7:bf:71:9f:88:33:22:75:b2:49:5d:9e:6f:7a:74:
                    1f:45:02:19:2c:aa:22:09:04:5d:66:2a:9b:4d:a4:
                    45:5d:13:ca:b9:4a:23:9b:bf:44:e3:4d:6d:32:3c:
                    cf:88:d0:95:29:c2:e5:9f:00:3c:30:07:e5:66:8f:
                    43:89:21:7f:34:f6:44:b3:00:ed:1c:70:d7:e0:bb:
                    fb:08:b5:96:d7:71:ff:4e:04:1a:93:3d:83:c0:7b:
                    7c:81:bc:32:32:e0:19:44:e8:94:33:6e:b3:c0:b8:
                    d6:62:ff:46:18:75:51:26:13:2b:b0:fb:07:2e:24:
                    9e:4d:16:a8:a0:55:9f:7a:96:38:85:aa:32:36:4a:
                    80:d1:b7:15:d1:e0:0b:ae:a8:5b:fc:82:be:31:4d:
                    98:1d:a9:ba:88:f2:fa:06:d1:9a:60:d5:1f:67:8c:
                    57:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:30:1E:B8:07:0E:9B:86:E2:E0:EF:DF:86:31:E7:FA:C3:11:7E:11
            X509v3 Authority Key Identifier:
                keyid:FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:1e:2f:8d:21:d1:04:22:4a:f2:e3:8c:bd:e0:23:bf:a4:41:
         1f:ee:6e:b7:c2:71:4f:a0:15:54:4b:c3:b0:29:54:cb:68:8d:
         00:2c:08:e7:4f:6c:b7:86:03:22:12:c5:3e:ea:e5:64:8d:22:
         92:dc:aa:a5:51:43:2f:72:b7:b3:c4:ab:ab:8a:6a:be:6e:b8:
         23:0e:2f:09:49:8c:25:ea:db:bc:60:53:63:d3:2e:86:03:b0:
         0b:66:b3:be:7b:d3:b7:88:44:6a:12:3e:62:b0:bc:af:a7:d4:
         6a:e8:6a:47:53:88:5b:da:47:da:37:a4:3e:31:a4:47:9b:ed:
         94:25:a6:8d:d3:6c:b9:13:1c:6c:01:96:9d:02:da:e1:0f:88:
         21:a4:d6:39:fd:6a:8c:8e:de:a1:f1:77:c7:26:c0:ef:60:9a:
         7f:b2:77:9b:ff:9e:0d:9d:32:66:e1:05:d8:aa:86:1c:e5:27:
         e3:47:f5:98:1e:72:b5:8b:6b:6c:84:b0:29:7f:8d:97:af:0a:
         c2:0c:b6:66:0a:78:8f:db:af:b8:8e:f1:f3:03:40:c9:13:bf:
         e5:53:bd:da:e4:85:b9:d9:76:60:7b:4b:3b:c4:4d:45:2b:66:
         95:4d:33:6a:e4:2d:45:01:27:36:ca:5f:e8:da:88:77:1a:4f:
         11:f9:7d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:07:26 2025 by rpki-client