This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
File:                     TJETJOhpvEyl7IutDT3f9oVEGXk.mft (raw, json)
Hash identifier:          VLbHLwRtgqA7O2jdODgD36wf7M03kX8SR87RcCZAtC4=
Subject key identifier:   7B:57:F3:94:A9:B9:E6:31:1E:EC:95:C2:33:D0:3B:23:5A:D7:8B:4A
Authority key identifier: 4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
Certificate issuer:       /CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Certificate serial:       019AE6E0074C9593C3AD4FFB5808CFE0F81E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
Manifest number:          1762
Signing time:             Thu 04 Dec 2025 01:00:32 +0000
Manifest this update:     Thu 04 Dec 2025 01:00:32 +0000
Manifest next update:     Fri 05 Dec 2025 01:00:32 +0000
Files and hashes:         1: 06AfR8ZbdQ5_MZMYhDQjdfTo_kA.roa (hash: EEGnzX0afqpfc3Kn5NnezY7IPw+uVu1JdUrzEk+iDpk=)
                          2: 1-g-A4hn_DsUBjrSOtmwbaV2sjfc.roa (hash: H/p8gImyoUDaEoDvhM9gHqspIznQXZjV/layX0BmypQ=)
                          3: 43zHI9RV_-UV0H8FudTqslXERT8.roa (hash: jjlOWoTue0eCIb3Fk8Ot7n6TxzmNBAQWzlFe/V95Bl4=)
                          4: NBksY7qoZYso21Vw3xYrZFLq5eE.roa (hash: uWalzSU+haa+ieD4qUwSSt1pReJEBtMSVsUZjZILj3c=)
                          5: TJETJOhpvEyl7IutDT3f9oVEGXk.crl (hash: zseClAfzfgWZrGhdKt9l3Q61PstRfo7chEazf/ltBV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 00:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:e6:e0:07:4c:95:93:c3:ad:4f:fb:58:08:cf:e0:f8:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
        Validity
            Not Before: Dec  4 01:00:32 2025 GMT
            Not After : Dec  5 01:00:32 2025 GMT
        Subject: CN=7b57f394a9b9e6311eec95c233d03b235ad78b4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b5:ea:b7:48:e2:bb:70:b4:9b:88:3a:c2:fa:
                    97:ae:57:1f:01:b2:ea:0f:a2:da:4e:ad:90:8e:a1:
                    2f:1a:e6:e6:55:39:aa:4a:d2:fd:bb:e4:7c:fd:52:
                    a0:9f:ab:35:07:87:2d:67:09:da:90:7d:e6:21:b0:
                    53:41:38:6b:cf:80:8b:9f:93:fe:47:f4:2e:e8:12:
                    a8:75:3a:12:87:4c:95:6b:a2:59:c1:0d:89:a0:38:
                    b4:67:66:bd:3c:14:f1:1e:f6:4a:06:52:e3:b0:df:
                    9f:51:dd:45:f9:e3:2c:69:25:e4:71:8d:cd:c2:6b:
                    d8:bf:a6:21:5b:4f:d5:13:34:7f:ae:13:7a:d3:bb:
                    2d:26:a7:fd:59:74:80:9f:e5:21:f4:f0:7e:a4:34:
                    98:5b:7c:37:80:38:49:ff:a4:c3:80:a2:08:6c:5f:
                    5d:12:35:11:16:7a:2f:30:d9:e3:52:a6:af:69:1f:
                    b1:0d:37:63:35:86:b1:ba:59:22:e1:76:a8:bf:02:
                    b6:3c:c3:87:ae:95:1e:bd:d9:8b:78:ba:a0:e8:37:
                    85:e7:88:32:29:5e:e6:9c:3c:a4:11:cc:5e:5a:a6:
                    ad:f1:12:06:35:dc:98:44:68:19:c0:40:eb:d1:f8:
                    0c:4e:3d:4c:8a:cc:2e:2b:9f:e7:7e:07:82:35:e3:
                    ca:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:57:F3:94:A9:B9:E6:31:1E:EC:95:C2:33:D0:3B:23:5A:D7:8B:4A
            X509v3 Authority Key Identifier:
                keyid:4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:6f:36:b7:4d:09:bd:9a:2e:68:38:b4:b7:32:3c:d7:50:ea:
         fa:d0:ce:cc:24:d2:0b:66:34:ae:f9:69:d2:f4:77:97:4b:a4:
         a9:2f:30:fa:9f:92:55:d1:a0:76:8f:58:71:4a:2d:72:0c:26:
         7c:71:bb:5d:f5:24:9e:cb:fd:a9:b6:3d:93:66:7c:24:71:64:
         be:01:8b:e2:28:6f:bf:d3:c2:78:4b:8d:0e:2d:01:1c:d4:54:
         1c:43:62:57:ed:23:ca:da:c3:7b:5e:6a:f8:fa:df:57:af:41:
         1a:10:ab:19:bb:f0:e4:a9:59:9e:4e:e1:39:e9:f0:4f:03:2a:
         b9:c6:e5:8f:a9:e3:92:e3:de:94:1c:b1:eb:8c:ea:24:7f:0a:
         50:d9:ab:5f:c0:8e:56:a6:66:20:c7:8f:09:dd:ba:5b:8f:22:
         66:78:cb:19:e1:30:3b:b1:cd:94:f7:f7:fb:fb:3f:e7:35:c4:
         60:95:32:6b:5c:bc:59:aa:cf:8d:be:4d:22:3a:a0:f0:dd:01:
         5a:e6:48:25:06:2d:d4:80:22:6b:19:1d:e7:9b:0c:4a:20:09:
         cc:34:ce:ea:04:49:d2:7c:3a:d7:d9:29:9e:4d:b5:03:7f:a3:
         3a:8f:87:24:76:35:61:ec:bb:75:31:f7:03:5f:02:34:bb:f8:
         d4:89:ea:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 06:43:37 2025 by rpki-client