This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
File:                     JygMxTRRbRwdnqAk6q-9Af3GjJc.mft (raw, json)
Hash identifier:          Z2j5yIZnRxQgkdFyZm5xe3xqDLRy9LKepgl1jsX7mvI=
Subject key identifier:   77:7D:84:C6:89:08:EB:E4:84:90:68:38:86:CE:AC:82:9F:2F:2D:39
Authority key identifier: 27:28:0C:C5:34:51:6D:1C:1D:9E:A0:24:EA:AF:BD:01:FD:C6:8C:97
Certificate issuer:       /CN=27280cc534516d1c1d9ea024eaafbd01fdc68c97
Certificate serial:       019B120379C87AE9CE4F26FC1B08133DDFA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
Manifest number:          1775
Signing time:             Fri 12 Dec 2025 10:02:56 +0000
Manifest this update:     Fri 12 Dec 2025 10:02:56 +0000
Manifest next update:     Sat 13 Dec 2025 10:02:56 +0000
Files and hashes:         1: JygMxTRRbRwdnqAk6q-9Af3GjJc.crl (hash: +SUXngsDSFzhg19YPYDcwWvrEySH7duHoA4xqcGOWjs=)
                          2: VGpF_n1XPkcrX19VIZfEe9zTBfU.roa (hash: ZCWW25MvdyoXZn5hf+wK4mNxI/epLix5Iz9z1Fs5NMw=)
                          3: o8N6mibH7HzRPfXSA-XguojRJmE.roa (hash: S9PmnI9ypR0hM3nIMCtKN9FHZAy4nsAZ63XidEySrCc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Dec 2025 10:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:12:03:79:c8:7a:e9:ce:4f:26:fc:1b:08:13:3d:df:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27280cc534516d1c1d9ea024eaafbd01fdc68c97
        Validity
            Not Before: Dec 12 10:02:56 2025 GMT
            Not After : Dec 13 10:02:56 2025 GMT
        Subject: CN=777d84c68908ebe48490683886ceac829f2f2d39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:45:8f:19:0b:74:71:76:3d:73:14:2f:71:83:
                    ab:a0:5a:45:ed:16:45:14:ec:25:98:cf:fe:e3:a2:
                    6f:ac:9a:d8:1c:fc:22:e1:24:40:6f:3a:83:e8:fd:
                    f8:27:8d:ee:6b:8d:c9:a3:ec:b6:10:9d:47:6e:76:
                    97:3e:01:6e:65:12:db:c5:b3:5c:c0:11:f7:f6:c2:
                    bb:1e:03:b7:14:19:d7:f9:b6:9e:8d:8a:5a:75:ff:
                    7e:74:7e:b5:d3:33:64:7c:c5:bb:40:b8:c1:ee:ef:
                    2c:69:07:32:6c:d9:da:15:b9:22:2d:22:6f:ed:04:
                    30:08:96:fc:96:37:d0:11:9a:9b:d2:29:40:4b:02:
                    d4:b7:e0:15:37:cf:16:5c:ef:e1:ea:0d:b7:c6:2c:
                    83:82:2e:97:3a:2e:16:bd:9f:47:b0:1c:b0:81:b8:
                    a7:69:59:fd:fa:87:df:46:23:57:84:2b:d2:ac:af:
                    31:e1:d1:56:94:bf:bd:52:aa:fa:a2:72:bf:23:1b:
                    42:e4:3d:71:93:0c:6c:05:f4:1b:20:db:94:29:a3:
                    63:42:65:18:19:1b:14:38:24:76:c9:6b:e8:23:69:
                    29:8f:57:6b:0a:83:89:c2:15:96:a7:bb:ab:76:b0:
                    9c:d2:23:7e:3a:b9:bc:4d:b1:8b:1f:c0:c2:ac:9a:
                    f5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:7D:84:C6:89:08:EB:E4:84:90:68:38:86:CE:AC:82:9F:2F:2D:39
            X509v3 Authority Key Identifier:
                keyid:27:28:0C:C5:34:51:6D:1C:1D:9E:A0:24:EA:AF:BD:01:FD:C6:8C:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:78:00:de:db:03:5c:5f:94:8d:c7:57:dd:1e:d9:35:1a:2b:
         91:d6:88:25:f5:df:7f:84:1f:b6:d6:44:c1:42:c4:0d:0b:ab:
         5f:c5:24:8a:0b:01:0e:74:5f:09:7b:de:3a:52:82:0e:89:51:
         4d:79:29:1f:5b:0d:73:ff:ad:cd:f2:e7:f9:31:2c:78:de:9e:
         6c:f8:48:d1:6b:67:d4:5e:e2:ad:a7:63:74:7f:da:ad:86:9c:
         3e:42:6e:a6:9b:83:16:35:20:6b:38:b3:e6:e8:c3:25:2c:a0:
         67:40:56:28:05:d1:1f:94:72:ad:b3:0c:22:6b:48:bf:40:89:
         30:dc:07:22:a8:c6:29:3b:e9:82:f4:60:7c:19:38:7d:db:9f:
         e6:76:e8:72:5e:09:7a:e5:40:27:e0:8c:1b:d1:d5:51:2b:6b:
         4d:b3:27:20:03:41:24:09:9f:ce:c9:cb:1f:c5:d2:69:bd:42:
         9d:5e:d5:81:3d:41:cf:86:ae:77:20:4e:80:e1:52:b5:40:f2:
         a3:65:a4:9c:72:a2:70:34:1a:2f:34:d2:8c:59:f5:15:e3:46:
         0c:4c:0b:52:ba:29:20:2a:06:05:ce:47:81:fa:ec:d2:b1:27:
         dc:54:71:4d:f9:e7:53:e4:c4:63:b3:ef:ad:40:a2:6b:52:37:
         41:16:b6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 19:30:32 2025 by rpki-client