This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
File:                     RjadxdpeTnDHNbI1cE2evFglk0k.mft (raw, json)
Hash identifier:          KqKnbNJYSptrLE5mVrIaPCZFnngDnNUfW/NL0yyWZM4=
Subject key identifier:   EC:D9:A2:2A:BE:20:C9:65:E5:D2:AA:7E:60:21:60:46:28:DE:25:2D
Authority key identifier: 46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49
Certificate issuer:       /CN=46369dc5da5e4e70c735b235704d9ebc58259349
Certificate serial:       019B36B3DB873ED83999B1089B7A57A38EFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
Manifest number:          16DD
Signing time:             Fri 19 Dec 2025 13:01:55 +0000
Manifest this update:     Fri 19 Dec 2025 13:01:55 +0000
Manifest next update:     Sat 20 Dec 2025 13:01:55 +0000
Files and hashes:         1: EqV0Wc8GATYZ1zuX3G8CfwD13SU.roa (hash: 8/NtNMF93LPIKPpmj74f/IfcSTLcRxN/o6jBqZZYgUY=)
                          2: RjadxdpeTnDHNbI1cE2evFglk0k.crl (hash: o8iVGfU1q5aqbKny+bI+wc1mZ6W79TeHf+Ea623DYII=)
                          3: ixKyOCrozUgfgF7gZjbgd74b7D8.roa (hash: 3ZudSa89cqvRuz+AlsHNzxSkAK3mpz40E5GR+nCuQeQ=)
                          4: mll1SRovdo31OBRdryURRKoqhS0.roa (hash: E2fN70ZXCBG4Pxkt/Db61lJqFT+J1KtD22Y5zBdjBcw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 13:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:36:b3:db:87:3e:d8:39:99:b1:08:9b:7a:57:a3:8e:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46369dc5da5e4e70c735b235704d9ebc58259349
        Validity
            Not Before: Dec 19 13:01:55 2025 GMT
            Not After : Dec 20 13:01:55 2025 GMT
        Subject: CN=ecd9a22abe20c965e5d2aa7e6021604628de252d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b1:98:2a:04:e5:ed:0d:a6:4a:18:f4:7c:2e:
                    2b:66:83:f5:12:f2:86:8b:39:7e:14:e9:fe:7d:54:
                    ba:38:35:40:c9:df:af:e7:eb:db:82:9c:af:bf:65:
                    af:0e:cd:6d:04:e4:95:33:5b:24:7a:1c:cf:c9:2c:
                    e9:67:ff:b2:fb:b7:c2:29:86:c6:de:37:23:7d:05:
                    af:5f:63:c6:d1:2d:1a:9f:55:37:c5:24:01:3a:ff:
                    7f:a6:fe:ec:1a:1e:95:4a:15:de:7e:e3:f2:5c:8f:
                    bd:83:ce:8d:93:7e:97:79:8a:39:b2:d3:ed:2b:2c:
                    53:54:07:9f:fd:25:df:8d:8a:77:8e:d7:62:24:8a:
                    df:97:bc:93:99:61:9e:a7:5f:e6:9e:8a:84:e7:87:
                    62:ff:b3:41:bb:8b:67:48:49:fd:2c:4b:91:03:8b:
                    ae:3e:5e:a4:c6:7d:d0:d4:40:89:bd:ed:85:a5:32:
                    5c:6b:71:ee:04:80:25:72:16:6f:d5:7f:28:71:24:
                    c6:60:ae:6e:ce:c3:eb:f3:54:9a:ea:a3:19:42:fc:
                    af:fc:67:93:0e:90:74:bc:04:ba:61:4f:11:11:eb:
                    56:1b:dc:3e:86:a3:f2:df:6e:89:65:f6:c1:42:c8:
                    ef:6b:b9:8b:27:3e:69:20:48:66:0f:3a:73:3a:01:
                    e2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D9:A2:2A:BE:20:C9:65:E5:D2:AA:7E:60:21:60:46:28:DE:25:2D
            X509v3 Authority Key Identifier:
                keyid:46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:8f:31:ea:ae:87:fe:59:a0:21:47:41:bf:fe:a6:37:b6:90:
         3c:0f:27:38:be:5c:ff:d0:50:90:1f:bf:a2:bb:c4:64:a4:68:
         2e:39:93:bc:5c:d6:d2:bb:5b:15:9f:37:a1:73:4a:05:54:38:
         1a:9b:02:0a:ff:61:7f:48:6b:40:b8:df:6e:41:1b:8a:68:f5:
         37:06:06:91:3e:ca:2e:85:50:02:7c:26:f7:75:12:54:3d:26:
         83:69:0d:ae:e5:f8:b4:1c:4c:5e:1f:71:7e:eb:ca:54:2c:3b:
         38:f5:20:fe:ec:03:61:34:1e:61:b3:8b:3b:21:6d:f9:92:1a:
         ab:2d:f3:da:f8:d8:af:31:bb:03:77:17:20:16:63:24:73:5c:
         f5:68:b4:f3:22:fd:95:45:72:af:12:ba:7c:ca:5e:16:59:96:
         bd:0c:42:a4:2f:57:a4:a3:b9:cf:40:65:33:99:59:7d:39:42:
         a2:65:aa:26:15:ce:56:dd:c5:c5:0d:7d:0a:73:8d:38:f5:3a:
         5f:8d:d3:3d:b8:9e:aa:3d:28:08:b8:d5:be:fe:8c:b9:25:6d:
         57:65:45:08:3b:ed:39:af:7c:76:89:29:78:90:44:09:fa:eb:
         d9:fa:66:ff:9d:a4:f4:69:34:79:36:6a:7e:3b:01:9d:15:0a:
         34:db:97:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 21:48:16 2025 by rpki-client