This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
File:                     JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft (raw, json)
Hash identifier:          ifpunw3ruMEp7r2DCl9y2lN7DYIelFQW0rYmi+5Lafs=
Subject key identifier:   4E:BC:FF:68:89:BC:C7:5C:00:AB:AC:20:8C:89:7B:B6:D3:FE:9C:F7
Authority key identifier: 24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
Certificate issuer:       /CN=24d470214c69e430f8b385e0936ad960166acdf0
Certificate serial:       019B23649C331D67594BBDF34C2C30D706D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
Manifest number:          0A06
Signing time:             Mon 15 Dec 2025 19:02:34 +0000
Manifest this update:     Mon 15 Dec 2025 19:02:34 +0000
Manifest next update:     Tue 16 Dec 2025 19:02:34 +0000
Files and hashes:         1: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl (hash: B/uibPd305OGXtvbWS8GcUwoPo9009rRBMaOPNgGKwM=)
                          2: P7b5zmQiLmwTefl5liI-KoZJpcY.roa (hash: VJKcy+JlG04cLK8U6Txf4TogJYWS6O9qHAuZFHI6UVY=)
                          3: fkZMJf--qW7MT6bXdyPn8Rz0kGM.roa (hash: FGOPoxO9vvC4y9ljtcZplGO40KLgXf+OUCl+F6C8Bmk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 19:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:23:64:9c:33:1d:67:59:4b:bd:f3:4c:2c:30:d7:06:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24d470214c69e430f8b385e0936ad960166acdf0
        Validity
            Not Before: Dec 15 19:02:34 2025 GMT
            Not After : Dec 16 19:02:34 2025 GMT
        Subject: CN=4ebcff6889bcc75c00abac208c897bb6d3fe9cf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c4:23:21:c1:2f:05:c3:52:26:51:64:0e:71:
                    e7:1f:47:c9:cc:13:39:6e:6f:1f:13:27:07:cb:88:
                    34:e0:19:a8:6a:42:61:e8:4e:38:34:9e:97:92:62:
                    c3:ad:37:6d:50:1a:cc:78:a1:48:68:7c:56:f0:63:
                    28:be:a3:e1:2c:d2:e9:e7:f9:d9:61:55:07:79:8c:
                    52:cc:4e:25:d0:c5:75:83:f3:45:66:8a:22:2c:35:
                    59:80:c0:37:b3:d8:a5:da:00:00:8d:ad:68:d2:0f:
                    39:4e:79:07:80:02:ca:b4:f2:10:b3:89:f1:a8:f7:
                    f2:98:9a:76:2b:94:d4:00:1c:07:b0:71:f3:74:03:
                    08:7e:4d:8b:66:cf:40:b7:b3:71:94:c9:30:6c:76:
                    f6:b9:b7:12:4e:e2:dc:b7:a8:93:b6:f9:b7:aa:26:
                    79:ab:b2:eb:bb:d5:dd:54:5d:64:68:04:bd:e9:eb:
                    00:3d:05:2e:c1:be:06:38:fd:37:91:ec:08:15:3c:
                    9d:8f:d3:ad:88:96:41:32:b4:45:39:3a:c8:2d:f1:
                    c8:fb:2d:87:02:82:92:09:c1:6f:5d:bd:ab:04:bc:
                    7d:83:5e:83:d1:e3:e5:0c:47:89:f1:e8:ea:f2:c1:
                    bf:30:75:2b:0e:56:d2:20:53:0a:0e:6e:0c:6d:d9:
                    22:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:BC:FF:68:89:BC:C7:5C:00:AB:AC:20:8C:89:7B:B6:D3:FE:9C:F7
            X509v3 Authority Key Identifier:
                keyid:24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:f5:b2:5a:72:9d:30:14:22:95:05:1f:d1:4f:58:74:3a:a6:
         b6:04:d0:9a:79:17:61:90:44:25:ee:8c:5a:3c:eb:34:3f:02:
         b5:24:aa:90:fa:22:a8:99:34:54:05:40:b1:74:f3:91:3d:de:
         58:32:77:ce:4c:7b:e9:15:0d:bb:e0:91:16:ce:48:8d:18:30:
         d4:f4:11:c3:dc:80:69:c2:60:3e:58:b4:ab:c5:83:90:ce:aa:
         52:c9:5f:39:9c:b4:02:d9:7f:14:60:45:a3:6a:a2:70:39:f8:
         aa:27:df:58:69:a2:d3:3b:8a:2f:0f:7d:6d:50:02:10:08:68:
         91:73:01:29:0e:9b:8b:44:d0:ac:1f:fd:e7:af:7d:81:f3:1f:
         78:73:cb:3d:c9:f1:18:33:1c:00:a4:f0:ec:17:4f:2c:33:9d:
         21:fd:2e:2f:77:2c:ea:68:6f:39:8f:9a:7c:82:21:04:b4:90:
         66:ac:e2:b7:aa:fe:d6:87:0c:bc:82:1d:bf:db:cd:cd:7d:79:
         d5:e4:ac:c5:4c:83:13:41:d6:40:28:56:4e:d4:74:81:e3:4b:
         b9:7b:18:16:da:c3:6a:74:00:a4:93:4c:7a:61:b0:61:58:22:
         e9:06:34:a3:04:ca:26:a7:83:33:b9:23:1a:05:a7:50:7a:ac:
         6e:f8:b8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 04:04:51 2025 by rpki-client