This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
File:                     jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft (raw, json)
Hash identifier:          F1v1TTgdQ662u1IE84//j5c3uRj/uQO7u4kOHvHsL28=
Subject key identifier:   DE:4B:92:C1:65:F8:0F:93:00:95:88:2B:36:0E:DC:88:D7:78:1A:D9
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Certificate issuer:       /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial:       019B251A4B575B6F572C707A32E6F061CFE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
Manifest number:          1064
Signing time:             Tue 16 Dec 2025 03:00:38 +0000
Manifest this update:     Tue 16 Dec 2025 03:00:38 +0000
Manifest next update:     Wed 17 Dec 2025 03:00:38 +0000
Files and hashes:         1: 0JcOAjVYzD7ATTRTY6zM_FW7ibk.roa (hash: ae6zh695aCdxOBAb92vW9Mqs/ewqcDH7wayEClXo5lU=)
                          2: DMHspTa-m7YS1bn5e9JmcIJBzcE.roa (hash: Tguv/ZlkRRgsKXeIni29cWwqnVhv5X7wO7u2hzkn37U=)
                          3: ZlUjZQcl9nR0SUVxsgzMhtk30HU.roa (hash: RueFoN4i6RiouAbfwEgZPqUPq4WVTXhPv6TjG8c7n5M=)
                          4: jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl (hash: xsnupurUp85SQn131if0oeHoDEwxHHEkMPnxc2Nm2rc=)
                          5: ySGM40xeAZyu32ERIMnkJoio4hw.roa (hash: w5mMTd2fQSF1PurNOaDTdU1aGhD+Vitko+NZO/EWYYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 03:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:25:1a:4b:57:5b:6f:57:2c:70:7a:32:e6:f0:61:cf:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
        Validity
            Not Before: Dec 16 03:00:38 2025 GMT
            Not After : Dec 17 03:00:38 2025 GMT
        Subject: CN=de4b92c165f80f930095882b360edc88d7781ad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:be:4b:e2:8c:cc:c7:97:40:55:0c:f9:05:6e:
                    ea:c6:bf:80:09:6f:41:25:3e:4b:11:aa:b6:eb:1f:
                    f4:b9:c8:d0:ba:45:1a:a4:0c:29:59:d1:71:df:da:
                    be:4c:b8:29:c8:f1:83:62:33:f5:2d:9e:17:64:4e:
                    62:06:f8:51:25:2c:c1:89:2b:cd:4c:e7:6d:5e:e0:
                    18:d6:f3:32:14:99:0a:67:cb:da:03:d9:7f:ad:95:
                    30:fb:0f:30:fe:4f:19:24:d7:8c:a0:e0:fa:7e:89:
                    a6:4d:52:22:28:5a:da:b2:e5:9b:6b:3f:93:9a:1b:
                    d8:3c:ae:4f:b0:13:5c:78:c8:c5:64:ba:e1:16:d3:
                    13:a9:18:ae:21:cb:a8:05:a9:bd:c2:94:34:07:2c:
                    3a:f2:ba:49:85:48:ef:2a:55:65:a7:0f:9d:54:dc:
                    64:9e:31:61:2e:63:99:90:f6:07:05:30:46:09:d7:
                    05:9d:53:62:b5:77:37:01:bb:65:e5:b4:59:6c:b6:
                    51:70:1c:a3:2e:07:71:cd:b5:4e:52:01:1f:33:8a:
                    8d:ca:97:16:44:57:e4:6f:3b:59:26:53:37:a4:89:
                    d8:d9:89:b2:cd:12:62:e5:89:2d:46:d2:b8:cc:3e:
                    a6:75:a7:b5:cc:b5:b4:3b:a1:a7:c8:89:e0:2f:3a:
                    07:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:4B:92:C1:65:F8:0F:93:00:95:88:2B:36:0E:DC:88:D7:78:1A:D9
            X509v3 Authority Key Identifier:
                keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:47:1f:82:21:cd:42:1c:88:e1:78:85:5f:a2:de:fd:de:22:
         03:3d:3c:2d:9c:d7:ef:36:e7:31:54:16:29:58:f3:e1:33:9d:
         8e:3c:a4:3d:8e:b9:e2:12:ab:50:a2:d9:6c:d2:37:24:6b:d0:
         65:71:20:75:12:b0:65:09:63:eb:be:66:6b:3f:50:e6:55:a6:
         46:a2:98:ac:ca:7c:75:ae:d7:07:16:23:be:e7:94:83:d9:7b:
         01:9b:47:ad:4e:7c:7c:d6:7d:7e:44:b1:c2:93:3b:43:e2:a4:
         4b:05:81:f3:e6:f8:b3:10:b9:b1:bd:aa:89:e9:60:ec:6b:9b:
         d2:18:51:ad:24:ec:03:97:5e:1e:ee:d9:e6:74:42:63:71:91:
         7b:62:21:09:75:4e:e6:dd:fa:a8:aa:b4:30:f1:1d:5f:76:2a:
         30:69:6f:43:77:75:25:26:ef:14:7f:1a:15:85:8d:6b:b6:1b:
         56:83:fd:cf:27:8b:88:d9:2b:6a:49:de:9e:19:aa:49:84:48:
         f4:f4:15:e8:fb:f6:65:4a:9c:19:17:3f:2d:ad:c1:94:ae:cc:
         4a:1c:00:85:9f:14:be:98:21:26:9b:0a:8c:fd:48:79:db:4e:
         60:cc:89:83:6d:07:7b:72:5f:4e:1b:13:61:cd:db:6d:98:4d:
         a4:2a:77:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 11:32:33 2025 by rpki-client