This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
File:                     J9VOSniNaWei7vOmaSYiYm9U760.mft (raw, json)
Hash identifier:          jnHF3uusi9sgyrg1WfJtV9RWgzoT9sUTNJI1SNYR8mE=
Subject key identifier:   4F:E6:A8:4E:1C:2E:6D:DD:4E:9B:D5:13:69:34:E7:40:11:62:CE:D5
Authority key identifier: 27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
Certificate issuer:       /CN=27d54e4a788d6967a2eef3a6692622626f54efad
Certificate serial:       019B462751F3DA5C1698113420C04897789F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
Manifest number:          0CB5
Signing time:             Mon 22 Dec 2025 13:02:20 +0000
Manifest this update:     Mon 22 Dec 2025 13:02:20 +0000
Manifest next update:     Tue 23 Dec 2025 13:02:20 +0000
Files and hashes:         1: BhvqAjp2FFsTdoGE_6UzPBUzgUU.roa (hash: Kaoj9hdcD1FNas61kk3Ce73rVwZ3HgxiSCiLpA2QHSE=)
                          2: J9VOSniNaWei7vOmaSYiYm9U760.crl (hash: DWOgAQsbQI3YBT/uf/VkVoe5ojUQ3XZnK9wjeD/zItg=)
                          3: e-ijOhbtTVFVKNwA3A0KZtd9G28.roa (hash: 4dN/JLGpYdlMav39iELvw9iA3Kyyi/awTvBLXNA8PfA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 13:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:46:27:51:f3:da:5c:16:98:11:34:20:c0:48:97:78:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27d54e4a788d6967a2eef3a6692622626f54efad
        Validity
            Not Before: Dec 22 13:02:20 2025 GMT
            Not After : Dec 23 13:02:20 2025 GMT
        Subject: CN=4fe6a84e1c2e6ddd4e9bd5136934e7401162ced5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:39:54:26:d5:fb:87:ab:1d:82:98:26:a9:8a:
                    e9:3b:6c:f6:a9:c0:8c:ca:91:10:19:fe:b0:44:db:
                    50:28:1d:a2:f8:28:95:d7:c2:36:3d:ce:c5:65:40:
                    44:12:16:79:ba:f1:f8:5d:77:af:89:a8:67:1d:20:
                    31:df:3d:46:d4:92:64:9d:cb:93:ae:23:a3:14:20:
                    3c:99:61:89:15:a1:8d:c1:22:43:89:fc:c1:f4:88:
                    aa:b9:9f:bd:ed:49:8e:24:88:a9:7c:b8:55:46:8e:
                    0e:f5:7d:98:f0:3e:b6:74:72:cc:39:09:85:cf:f2:
                    7f:f7:1c:c0:86:4c:6d:3e:2b:81:63:b7:e2:15:a7:
                    57:9f:9d:c6:07:c8:f6:4b:53:51:74:e5:cd:ca:d2:
                    a3:a3:c0:6b:d7:28:6a:0d:08:c2:94:4d:9d:dd:a1:
                    ef:36:c6:60:cf:fb:85:c5:60:ee:0e:81:db:02:8c:
                    e1:93:ca:ae:84:d7:30:8e:31:eb:31:10:58:25:65:
                    9a:80:ac:6f:d2:ab:5f:e8:fd:2e:6e:e7:dc:9f:8a:
                    01:02:a1:69:3b:e6:c5:fc:73:c8:b1:cd:e7:3d:f4:
                    d2:50:6e:69:1a:06:f8:64:3c:9b:ef:e3:14:bd:6c:
                    f9:a6:68:f0:ae:be:f6:2f:e3:4d:66:ed:cc:1a:84:
                    52:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E6:A8:4E:1C:2E:6D:DD:4E:9B:D5:13:69:34:E7:40:11:62:CE:D5
            X509v3 Authority Key Identifier:
                keyid:27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:d8:92:91:bb:6c:89:8f:b1:49:07:bf:8d:2b:b2:7b:11:41:
         c2:e5:ee:e2:11:a9:15:17:8c:ab:bc:14:f2:65:ef:b3:89:97:
         45:a2:4c:e0:49:87:0d:96:03:b3:6d:de:67:25:06:21:bc:3c:
         2d:0e:46:48:03:b2:c5:28:17:5d:95:a6:a0:6e:46:25:7d:a0:
         32:a5:cc:16:71:c7:df:2d:5a:30:c1:d8:96:e8:13:88:66:09:
         17:6b:04:a4:f9:aa:18:74:39:9d:ef:80:58:52:ae:2b:b5:19:
         50:05:90:02:30:aa:70:ca:7f:3a:62:91:8d:8c:46:78:f6:45:
         fe:94:b0:d9:00:07:fa:a5:30:cb:df:a9:89:f0:16:bd:b1:ee:
         cd:3e:72:70:e7:28:6e:79:69:f3:48:8e:4c:b3:09:17:75:2a:
         25:d0:47:65:5e:42:06:7c:1a:c4:c2:c7:ec:4d:ce:82:f3:fe:
         61:33:d0:dc:56:25:69:6b:00:80:39:18:8c:11:94:60:bb:79:
         e9:a6:91:20:57:95:7f:df:3f:4d:82:fa:20:aa:cc:6c:fd:b0:
         95:3a:1a:23:2f:c9:dd:99:6f:80:b8:b5:e4:6f:e4:89:fc:85:
         5d:79:b6:3d:c6:ba:7e:33:f7:1d:38:97:8e:cc:56:1a:0c:09:
         ee:28:93:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 18:51:44 2025 by rpki-client