This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
File:                     jxdSJfOGzpgBGfaYhPm-fGorOzM.mft (raw, json)
Hash identifier:          NDWslLn+pTBMX+YjszSOsvnTlTxCe2Z35IlyXOLgsZU=
Subject key identifier:   8A:EB:A2:E9:F9:CD:FB:DF:F2:7E:4D:BB:86:DE:3F:10:5A:20:ED:83
Authority key identifier: 8F:17:52:25:F3:86:CE:98:01:19:F6:98:84:F9:BE:7C:6A:2B:3B:33
Certificate issuer:       /CN=8f175225f386ce980119f69884f9be7c6a2b3b33
Certificate serial:       019B51F3082B288184779CD63E063D70F3BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
Manifest number:          1796
Signing time:             Wed 24 Dec 2025 20:00:40 +0000
Manifest this update:     Wed 24 Dec 2025 20:00:40 +0000
Manifest next update:     Thu 25 Dec 2025 20:00:40 +0000
Files and hashes:         1: 89EQQCo6Tx4ACaGk_JyA4-a5SnA.roa (hash: DER2tNvuAXp0PR1aSNW92ooYvtdX7oI6GzQVCz2YBFM=)
                          2: jxdSJfOGzpgBGfaYhPm-fGorOzM.crl (hash: zpgVYE5eKM4Oe5MxtJSqcfiEPlKinNSmIGs8Snrurbk=)
                          3: wqj7UB7atlo4UtptagO8D4QVpv4.roa (hash: ylN4r0wdJFKjI8FqYNMjzdJ19nbuA10o9E8/faFnnKU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Dec 2025 18:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:51:f3:08:2b:28:81:84:77:9c:d6:3e:06:3d:70:f3:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f175225f386ce980119f69884f9be7c6a2b3b33
        Validity
            Not Before: Dec 24 20:00:40 2025 GMT
            Not After : Dec 25 20:00:40 2025 GMT
        Subject: CN=8aeba2e9f9cdfbdff27e4dbb86de3f105a20ed83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:47:f4:eb:83:1d:33:d8:69:21:ee:97:5b:59:
                    43:86:1c:38:18:ec:dc:88:92:dd:d3:ff:0b:5d:ce:
                    35:e4:38:cc:ef:b5:9e:44:df:2d:7d:5a:0e:af:bf:
                    ab:ca:73:9d:3a:3d:60:9a:dc:b5:b8:4d:cb:4d:07:
                    26:11:20:07:2f:b5:6d:b4:62:1a:23:36:3d:b0:d2:
                    a6:a6:32:9b:cd:43:75:bb:97:cf:97:b1:47:03:62:
                    5d:77:0f:e8:92:f8:08:e1:6a:4d:36:1f:d9:ad:1e:
                    d4:ba:12:2d:83:c2:2d:0d:46:7d:0a:c9:96:f4:ca:
                    42:cb:26:c9:d7:9f:3b:5b:6a:df:f1:9a:f3:6b:44:
                    d2:09:09:20:1d:d3:eb:95:ec:dd:ab:93:74:ad:4c:
                    00:b1:d5:32:23:12:26:6d:99:1b:83:3b:16:73:77:
                    04:69:63:0b:8f:0a:05:2c:f2:ad:91:43:84:2b:02:
                    ea:45:bf:88:35:43:5c:93:f2:c2:f9:80:27:99:f5:
                    9b:7f:ce:d0:b7:d5:ea:71:09:58:11:8e:6f:00:32:
                    81:f5:02:98:a7:51:05:df:38:b8:1e:b5:4f:7c:12:
                    69:ee:a9:d7:68:c9:19:a3:95:ed:34:76:90:68:7e:
                    eb:4f:aa:d4:e4:76:d8:5e:16:ce:59:82:e6:a8:ed:
                    25:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:EB:A2:E9:F9:CD:FB:DF:F2:7E:4D:BB:86:DE:3F:10:5A:20:ED:83
            X509v3 Authority Key Identifier:
                keyid:8F:17:52:25:F3:86:CE:98:01:19:F6:98:84:F9:BE:7C:6A:2B:3B:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:ed:3e:71:28:51:9c:bc:e4:aa:35:d6:cf:9a:0e:42:6c:e5:
         7e:bf:21:54:0e:ec:2e:e7:4e:4d:14:65:92:65:63:bf:d5:c5:
         ce:7d:17:e8:49:05:1c:a4:9f:60:3f:f8:26:ee:2f:87:cc:6b:
         66:77:ac:5b:76:ea:a4:ba:0e:b6:5b:03:30:35:88:06:d9:cc:
         c1:13:0c:d4:fc:5a:1c:a1:85:40:ed:1f:3b:c4:13:24:e9:2a:
         f2:fc:03:ee:2d:6c:f7:41:1f:56:e9:bd:7b:28:3a:60:ee:1e:
         9c:52:4d:18:1a:d7:33:57:0a:d1:d4:e5:70:f3:23:2c:d8:36:
         ae:a9:cf:f3:de:ef:d2:0c:9e:f8:8d:4c:eb:b7:d6:39:f1:db:
         c3:da:2f:29:fd:b9:2b:ae:81:ad:a8:b6:81:c2:5a:4f:27:0e:
         dc:c9:72:75:e9:05:97:3b:bf:55:fb:4e:5b:df:dd:47:17:cf:
         ee:4b:9d:18:6b:1e:bb:d1:e2:77:50:9a:aa:d4:72:25:ed:42:
         51:1d:53:16:ac:5f:14:02:6b:54:8b:42:a2:fa:8d:63:88:6c:
         87:4e:a1:79:b7:f5:b9:81:a1:c5:8e:4a:6c:d6:de:ab:a8:fc:
         f6:af:8f:cc:f1:01:2e:16:57:12:19:4f:e1:00:b2:18:48:3a:
         4c:01:a8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 03:00:32 2025 by rpki-client