This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
File:                     J9VOSniNaWei7vOmaSYiYm9U760.mft (raw, json)
Hash identifier:          VXD53Y8H7PVc0169456WQa4VKK6EbzbaU3oL3njjPVE=
Subject key identifier:   AD:1D:39:19:CF:12:4F:6E:41:C2:DD:67:F1:8E:03:3C:AB:95:D4:B0
Authority key identifier: 27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
Certificate issuer:       /CN=27d54e4a788d6967a2eef3a6692622626f54efad
Certificate serial:       019B70A3814BC57B1664052C3193AF4FA584
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
Manifest number:          0CCB
Signing time:             Tue 30 Dec 2025 19:02:02 +0000
Manifest this update:     Tue 30 Dec 2025 19:02:02 +0000
Manifest next update:     Wed 31 Dec 2025 19:02:02 +0000
Files and hashes:         1: BhvqAjp2FFsTdoGE_6UzPBUzgUU.roa (hash: Kaoj9hdcD1FNas61kk3Ce73rVwZ3HgxiSCiLpA2QHSE=)
                          2: J9VOSniNaWei7vOmaSYiYm9U760.crl (hash: sW75URgKE/Q/TJNcrN+7alfwLRCVKnfW6w1VLQVRwIc=)
                          3: e-ijOhbtTVFVKNwA3A0KZtd9G28.roa (hash: 4dN/JLGpYdlMav39iELvw9iA3Kyyi/awTvBLXNA8PfA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 31 Dec 2025 15:21:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:70:a3:81:4b:c5:7b:16:64:05:2c:31:93:af:4f:a5:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27d54e4a788d6967a2eef3a6692622626f54efad
        Validity
            Not Before: Dec 30 19:02:02 2025 GMT
            Not After : Dec 31 19:02:02 2025 GMT
        Subject: CN=ad1d3919cf124f6e41c2dd67f18e033cab95d4b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0f:1b:02:c7:ee:32:1a:60:69:f3:d1:25:cc:
                    02:d1:aa:1b:18:84:9b:2c:61:56:cd:3c:35:6f:01:
                    6d:eb:b7:31:32:74:ac:d7:28:e8:8d:d7:f3:e5:29:
                    a5:34:88:cc:01:50:7d:b4:b2:57:db:79:c3:3b:ee:
                    8d:6f:fc:f2:90:0e:bf:17:eb:2c:5c:d1:0d:be:19:
                    0e:52:b0:b2:8b:aa:38:76:39:1b:54:10:60:ec:6f:
                    66:77:a7:ef:f1:70:49:8b:20:09:3e:d0:d4:9d:03:
                    72:3b:87:61:2e:12:80:a5:04:9b:1f:51:2d:68:da:
                    ca:66:dc:b0:93:40:1f:57:e6:cd:f8:6b:f4:e2:2f:
                    dc:ac:db:49:60:1a:f7:21:53:48:95:fd:7f:d4:e9:
                    57:43:1c:bf:28:ce:fc:b2:e9:13:e2:66:2c:77:ef:
                    54:be:4a:a4:d2:94:72:9f:08:24:84:42:c4:7b:9b:
                    7c:f6:25:12:13:db:ac:3c:f5:27:d6:4a:09:77:b6:
                    f6:75:47:31:ea:72:a4:3f:4f:b0:60:36:8c:1f:af:
                    5b:cc:42:75:5f:20:50:a6:9f:93:41:eb:d2:24:94:
                    e7:58:7f:97:47:9b:b1:4a:b2:2e:df:fb:a8:09:c0:
                    cb:be:fb:db:e8:e8:bb:dd:78:f2:c8:db:15:5b:c8:
                    98:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:1D:39:19:CF:12:4F:6E:41:C2:DD:67:F1:8E:03:3C:AB:95:D4:B0
            X509v3 Authority Key Identifier:
                keyid:27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:08:a9:b1:4f:db:cd:43:45:35:1b:18:8e:60:d1:f7:3d:08:
         fb:ee:87:b9:36:00:14:6e:b4:2e:3b:e9:d0:53:29:15:89:7f:
         ed:17:c4:d7:88:9c:04:1d:8c:e3:70:3e:d0:c5:54:9a:e5:7d:
         72:91:bd:06:71:7b:92:fd:b9:e1:ef:08:a0:91:28:0f:67:e7:
         c3:0e:7a:2b:ad:f9:6c:bc:20:1c:e6:c3:4b:5f:b9:8b:eb:52:
         f8:24:b3:de:fc:d8:54:44:27:8f:14:2d:b9:f8:ed:45:76:8c:
         b3:e1:4a:4b:05:d9:b0:e1:4d:76:4c:47:41:73:bb:b4:1d:62:
         03:56:9f:ab:82:a5:ea:40:32:fe:3f:6a:d4:51:a2:9a:e3:49:
         bf:d9:77:63:91:5d:dc:59:8e:f0:72:61:58:e3:dd:c1:69:6e:
         66:b6:10:64:ee:3a:af:34:fd:93:66:ea:8c:a6:6f:d5:dc:46:
         1a:44:3f:70:43:72:a9:68:c4:34:b4:32:2c:a4:ca:b8:3c:71:
         d3:d5:b7:ec:16:ba:e4:9e:7e:f1:a8:03:9c:b7:21:c2:a0:5f:
         08:b9:3c:65:06:86:03:dd:59:aa:f2:32:0d:f8:12:4a:07:fd:
         23:86:68:fe:97:20:0a:bf:76:70:27:8e:ab:67:86:7d:12:a2:
         a0:df:b2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 00:08:23 2025 by rpki-client