This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
File:                     jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft (raw, json)
Hash identifier:          fmGkvgoQwMxAME+UpYt4TfNY3dOeFLbNN7ejAlrRpDs=
Subject key identifier:   BE:AD:C2:A7:67:91:6C:DD:DD:5C:6C:B5:B9:3C:E8:F9:AD:1B:64:ED
Authority key identifier: 8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A
Certificate issuer:       /CN=8cfff21538e225618314615e4f0d0688b7b0dd5a
Certificate serial:       019B1B3C0C20B49EF65B87132E999EF24D1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
Manifest number:          0852
Signing time:             Sun 14 Dec 2025 05:01:18 +0000
Manifest this update:     Sun 14 Dec 2025 05:01:18 +0000
Manifest next update:     Mon 15 Dec 2025 05:01:18 +0000
Files and hashes:         1: 8cHr2mkJzn1QpKoQW6YmFw7DlzE.roa (hash: t5szeV65SN4GVGDNCF4ePCjQmk1+gvyVxgvAgyz5YRg=)
                          2: gN1BkwtfLG0CVafSuu-7jUV0eE0.roa (hash: kgY2FVBsviF4YuznOeSj1jvbVSAFPg3ICiRBU7zTAS8=)
                          3: jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl (hash: XTK1W4a3Bd4x7wd4kvb00s7ZMILjJTHWy7lw/5d/324=)
                          4: tLaWKw3WmHb20kxwM4G1kQ4uW9w.roa (hash: obhetsuugpMrSbVSqt3NiPZQ+jRMpp3fx8OhfxyMvVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1b:3c:0c:20:b4:9e:f6:5b:87:13:2e:99:9e:f2:4d:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cfff21538e225618314615e4f0d0688b7b0dd5a
        Validity
            Not Before: Dec 14 05:01:18 2025 GMT
            Not After : Dec 15 05:01:18 2025 GMT
        Subject: CN=beadc2a767916cdddd5c6cb5b93ce8f9ad1b64ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6d:36:32:e7:40:61:c2:22:38:01:b5:69:c6:
                    45:b5:7b:46:50:03:42:2f:d2:fd:70:23:b9:e2:5d:
                    e7:b1:c4:05:7c:92:42:0f:2a:64:b9:09:54:d4:6b:
                    0b:ae:ae:87:fa:54:97:e8:30:52:f8:a4:ff:20:fe:
                    99:a8:b7:a8:a6:9a:97:29:8f:8c:97:2d:b7:4d:b0:
                    28:0f:4f:99:3d:e4:f2:c2:0c:cd:27:05:f6:c3:3c:
                    4f:40:aa:4b:1e:61:71:c8:e6:d8:54:98:db:c9:ef:
                    d9:8c:60:d3:e9:a6:f7:de:5f:af:f9:f7:44:89:53:
                    9d:b0:ac:52:f7:54:3c:e1:94:41:30:88:32:2d:62:
                    55:41:89:9a:8a:41:bc:0e:18:09:96:ae:fc:d0:9f:
                    50:1a:8c:27:27:7c:45:c2:5d:11:75:ca:62:2e:71:
                    18:4d:8b:93:c1:cb:71:3c:db:c8:cc:04:e1:f9:09:
                    ee:f2:45:6d:3f:b1:d7:5d:3c:ac:3b:fe:7a:90:94:
                    fd:75:7d:d1:8c:bb:08:4f:ab:30:12:90:c1:af:04:
                    40:78:90:bb:34:1c:ea:14:c6:97:cf:70:45:09:fc:
                    9b:69:ae:6f:19:f7:4a:1e:3c:02:e4:c2:8c:c3:dd:
                    98:9f:17:2f:2e:94:ed:43:1a:9c:8c:2e:fa:6c:f2:
                    48:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:AD:C2:A7:67:91:6C:DD:DD:5C:6C:B5:B9:3C:E8:F9:AD:1B:64:ED
            X509v3 Authority Key Identifier:
                keyid:8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:e0:4f:2c:2e:72:1b:a4:20:24:a0:87:7d:c3:04:93:a2:e0:
         5c:c6:5e:ab:58:ff:83:e2:30:d3:01:0a:d3:d7:cd:83:af:45:
         e7:69:83:e4:e9:4f:c7:5b:d5:b6:41:01:fa:e6:b2:57:16:82:
         d7:63:3f:c9:6d:9c:f5:44:13:6c:76:63:c8:c0:da:07:80:92:
         60:85:db:3e:71:8d:32:5e:a4:de:b1:83:f6:a2:70:a9:01:e8:
         63:45:c0:59:6d:47:7f:ce:00:66:da:4a:a9:74:65:46:34:04:
         bc:cf:82:80:ae:83:ff:e6:54:da:93:2d:fb:d0:08:d2:f0:d8:
         04:de:d9:fc:44:76:8c:d4:25:05:99:25:c1:bc:fe:41:eb:a5:
         b6:2d:1f:69:df:f2:61:f6:95:78:bd:df:63:17:7a:93:03:16:
         f2:25:95:ef:c4:e7:5b:ea:9d:84:01:c0:05:bd:01:6f:ad:ac:
         df:f9:29:5a:da:7d:b0:73:a7:f9:b3:05:60:de:55:3c:ac:09:
         bb:ae:45:68:96:98:6e:76:90:be:60:2d:c3:21:cb:99:92:36:
         71:6e:19:fc:9d:be:6e:4f:8d:0f:4f:18:08:13:4b:4f:02:cb:
         0b:57:50:3b:45:21:ba:6a:12:72:c6:31:fe:b0:f0:63:96:b8:
         16:9d:f8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 12:11:59 2025 by rpki-client