This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
File:                     JiNBtDPh-Py3ljItL9kmQJOW560.mft (raw, json)
Hash identifier:          KEgSA+Lz3qoGmJSGNLiCTxwk3UDpMGlL+Ud2EO3VPNA=
Subject key identifier:   AB:26:18:94:1E:D0:28:A4:0C:E9:FA:65:5F:DE:30:4C:53:BE:5F:C3
Authority key identifier: 26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD
Certificate issuer:       /CN=262341b433e1f8fcb796322d2fd926409396e7ad
Certificate serial:       019B5674C07B5EC34FB7C724FA7C1AA06D61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
Manifest number:          112A
Signing time:             Thu 25 Dec 2025 17:00:50 +0000
Manifest this update:     Thu 25 Dec 2025 17:00:50 +0000
Manifest next update:     Fri 26 Dec 2025 17:00:50 +0000
Files and hashes:         1: JiNBtDPh-Py3ljItL9kmQJOW560.crl (hash: +agbhgEDem/dBx8Dv0+V6phjZTIuj29+is6rOKvh2n0=)
                          2: OG_A4kIfGMsNQjuMmYxD7_p2pL4.roa (hash: Xfk2o4ht2zMg9IMU5TSnOEAuY38Y9WCQbPUHWVQ3Uic=)
                          3: kAKuIYXg1bp7KYEaGGpYw_p_ZEA.roa (hash: rN2Ict4bzybwIS6kDp0XozP6rV4PW6e1BfkoB7rQg6U=)
                          4: u1c26qRbtO2NECygZrqXuUXLxWM.roa (hash: jtDoS3NERSt3cIb6DiAqE1bWADSmBl7iTJmu0zjaYyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Dec 2025 17:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:56:74:c0:7b:5e:c3:4f:b7:c7:24:fa:7c:1a:a0:6d:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=262341b433e1f8fcb796322d2fd926409396e7ad
        Validity
            Not Before: Dec 25 17:00:50 2025 GMT
            Not After : Dec 26 17:00:50 2025 GMT
        Subject: CN=ab2618941ed028a40ce9fa655fde304c53be5fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:19:2a:e4:46:59:15:47:2f:d8:a2:ef:97:bb:
                    c9:66:a7:20:fd:50:27:c5:ef:62:6c:9f:7c:f4:cd:
                    e0:2e:4c:5a:92:6d:b1:e9:df:eb:fe:b0:b4:96:5f:
                    fa:50:33:f7:b6:d2:c1:3f:f2:fb:4c:f8:9f:cc:36:
                    f1:ac:c4:14:68:5f:a9:03:39:7f:df:03:71:68:6f:
                    f3:20:9a:b6:c4:c4:e9:f1:86:a9:d8:10:38:2c:2d:
                    f5:c5:df:34:2c:21:59:ba:72:64:c8:79:6a:13:5d:
                    a8:6a:27:09:be:5d:d7:0e:73:b2:d2:a4:d4:73:13:
                    7c:76:1a:8d:74:1d:26:7a:0d:69:c7:7b:66:13:e3:
                    73:7b:45:ce:7c:b9:e2:12:56:a5:1e:1f:25:89:97:
                    61:37:25:1a:62:3a:79:f4:ab:30:5d:88:c5:a7:88:
                    22:82:0d:a3:e5:9f:a1:5c:57:75:a8:5e:10:88:cc:
                    03:50:cb:0f:d4:56:94:de:0c:8d:32:33:53:fd:10:
                    a1:72:b7:13:32:6e:b4:98:a4:03:d9:5c:06:6f:a2:
                    f0:6c:b6:1c:67:b3:cb:48:b7:34:ce:a7:b6:2a:1c:
                    6a:bd:ff:18:a3:ad:91:83:19:49:c8:7c:f6:6d:14:
                    9d:76:64:80:87:1a:8c:70:95:59:74:85:2c:b4:f4:
                    7b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:26:18:94:1E:D0:28:A4:0C:E9:FA:65:5F:DE:30:4C:53:BE:5F:C3
            X509v3 Authority Key Identifier:
                keyid:26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:5b:75:a8:fd:88:84:e2:36:92:98:0e:dc:f1:36:d0:9b:bb:
         d7:fd:83:f2:c4:07:9e:b2:f2:e0:0c:09:ea:bc:a6:b8:30:78:
         cf:40:aa:bb:30:f4:b8:4a:cb:bd:9b:0f:33:a2:6d:ec:79:8d:
         35:36:6b:da:fe:6d:16:fd:23:13:7c:b4:8e:fa:a3:a9:63:52:
         31:8b:a0:69:a8:61:c1:95:c0:03:07:05:70:15:8e:1b:de:58:
         3f:8c:ba:2d:b0:d8:30:ee:41:39:c7:2d:f1:c5:16:33:77:0e:
         a7:0b:64:0d:3b:ac:07:c4:7d:7d:85:4d:de:3f:f0:7c:65:15:
         f1:8c:7c:fb:92:af:39:69:b8:83:8d:cf:f0:1c:42:f4:3b:24:
         d5:cd:04:dc:38:4a:32:a7:4b:63:c2:1d:33:f3:48:34:69:6c:
         1f:4d:f8:87:3d:c9:2e:1f:11:e3:49:1d:ca:cc:af:34:55:09:
         31:77:f6:6f:f4:3d:b7:3c:f9:1a:97:90:81:80:d7:0a:b9:1a:
         61:a7:3f:1d:dd:ee:7e:5c:56:80:7c:97:4c:52:cc:f6:80:11:
         f1:98:4a:ff:f9:1e:03:6c:2b:1f:89:4d:aa:7c:34:2d:31:7e:
         a1:a3:66:30:41:79:3a:dc:04:3e:8a:9e:d1:13:27:d6:f5:06:
         20:24:0f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 00:30:53 2025 by rpki-client