This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
File:                     JgGttY6Dyu5nXc94lUugiqkwGg4.mft (raw, json)
Hash identifier:          ALPC30cP0k+k7+QZOi/zYTJT4QTnOTmb69cTBArnZzk=
Subject key identifier:   A5:64:A7:24:8B:61:3B:6F:F3:D2:EC:B3:BA:4C:3F:B2:FE:D8:D1:C9
Authority key identifier: 26:01:AD:B5:8E:83:CA:EE:67:5D:CF:78:95:4B:A0:8A:A9:30:1A:0E
Certificate issuer:       /CN=2601adb58e83caee675dcf78954ba08aa9301a0e
Certificate serial:       019B698DB7C7884C9E1813B1BD9E0D1696E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
Manifest number:          080F
Signing time:             Mon 29 Dec 2025 10:00:53 +0000
Manifest this update:     Mon 29 Dec 2025 10:00:53 +0000
Manifest next update:     Tue 30 Dec 2025 10:00:53 +0000
Files and hashes:         1: JgGttY6Dyu5nXc94lUugiqkwGg4.crl (hash: mX1f9bUwg4ZDsnmkLDna0D5wX2qb+cE18lFaYAd4O+g=)
                          2: Z6vatnL6NtCRiDp6Ve37t82vRgw.asa (hash: 3sZUNRMLW8dUaIbhqd6KZTzlBAD1dC7cg3A2YJwGJ1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Dec 2025 10:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:69:8d:b7:c7:88:4c:9e:18:13:b1:bd:9e:0d:16:96:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2601adb58e83caee675dcf78954ba08aa9301a0e
        Validity
            Not Before: Dec 29 10:00:53 2025 GMT
            Not After : Dec 30 10:00:53 2025 GMT
        Subject: CN=a564a7248b613b6ff3d2ecb3ba4c3fb2fed8d1c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:49:91:85:f4:d5:e8:c6:61:9c:7a:ea:f1:13:
                    89:26:2a:d2:f4:3a:5e:6d:23:10:00:47:03:ad:12:
                    8d:81:19:fc:9d:dd:63:5f:7c:b7:f2:de:f5:5a:1d:
                    af:15:fe:b6:9e:87:22:da:a8:96:f5:a9:c6:90:90:
                    84:9f:dc:da:1b:a6:b6:5a:96:bc:8d:cd:9d:4d:13:
                    e8:18:44:e8:d5:04:89:6f:0c:e7:02:eb:01:9a:53:
                    f2:5e:2a:1b:7c:45:0f:66:4f:01:d3:6d:da:21:7f:
                    3d:90:6d:8d:a3:97:97:ca:6c:aa:8d:2f:17:5c:97:
                    d1:78:6a:54:34:2b:98:32:f7:52:1f:f2:27:7a:79:
                    41:f1:7f:61:44:76:65:9a:ad:e6:36:24:0f:a1:a6:
                    dc:e1:c9:a4:02:a8:aa:37:0b:6a:2d:1e:3b:86:62:
                    60:68:40:88:e5:79:86:43:c7:ff:11:5e:73:dd:8b:
                    f7:88:a4:cc:71:7e:2e:48:86:57:81:77:6e:49:66:
                    9f:ac:86:bd:01:df:ca:4c:2f:72:4c:6a:78:d4:cc:
                    e0:64:5e:eb:59:d4:8b:4f:ed:c2:69:9f:97:f6:4d:
                    b1:5a:2d:16:e9:db:90:6d:56:44:dd:46:04:b6:b0:
                    9b:fb:8a:45:16:99:87:f5:cc:4f:4a:1d:c0:a1:39:
                    ad:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:64:A7:24:8B:61:3B:6F:F3:D2:EC:B3:BA:4C:3F:B2:FE:D8:D1:C9
            X509v3 Authority Key Identifier:
                keyid:26:01:AD:B5:8E:83:CA:EE:67:5D:CF:78:95:4B:A0:8A:A9:30:1A:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ba:83:ea:5c:2a:1d:bd:c3:8e:03:fa:d9:d3:ee:50:3e:5b:
         d7:60:fd:43:ad:2d:d3:32:05:b2:1a:b4:3d:e5:43:0c:8d:2a:
         8e:35:9a:4b:74:49:25:b8:96:86:19:fc:1c:5d:be:cc:c4:0e:
         40:07:61:fe:cc:99:93:d8:d9:c2:7c:5e:31:73:24:0e:ad:29:
         48:2b:f1:0d:e0:60:c4:91:80:f3:b5:bc:01:19:d2:c3:14:ed:
         09:5f:82:74:d2:f2:af:2b:80:ac:36:2f:af:8d:29:ff:2e:a5:
         9c:38:41:4f:3a:b8:21:92:ad:51:43:ca:3c:5b:00:fc:f9:88:
         38:4e:c0:77:0e:ed:7b:86:58:f5:d4:71:2e:38:70:4b:5b:1b:
         59:5a:2c:c6:e2:53:cf:9e:3d:da:c2:3d:48:ef:9a:51:fd:e3:
         4c:ab:e6:da:08:94:b7:cc:dd:68:30:a8:fe:7d:f2:3f:2c:0b:
         6f:f7:02:4a:08:b2:3b:82:8c:7b:b8:ed:55:2e:ad:7f:48:d4:
         39:39:27:1f:a2:42:af:de:13:58:f0:bb:ff:16:af:d4:24:25:
         1e:f8:a2:2f:31:10:73:6a:df:16:59:f2:fc:25:e2:2c:83:9e:
         81:94:85:c8:a7:20:14:c7:28:08:97:5e:8d:c7:73:d4:c6:12:
         a3:bc:39:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 12:29:51 2025 by rpki-client