This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
File:                     sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft (raw, json)
Hash identifier:          JgzCF9Uzzp0pKcvYcew/N/hK9hqq0V4OT5cz5J1BwNk=
Subject key identifier:   B5:8F:F7:E3:ED:B5:18:4A:3F:ED:65:76:05:6D:98:C1:E6:9A:51:5A
Authority key identifier: B0:90:D4:0B:FC:D5:A4:A3:08:75:16:0E:CC:6F:9F:E5:3C:05:A6:E6
Certificate issuer:       /CN=b090d40bfcd5a4a30875160ecc6f9fe53c05a6e6
Certificate serial:       019B2A782E7AC34A53FF56D340DD155BD3E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
Manifest number:          1711
Signing time:             Wed 17 Dec 2025 04:01:17 +0000
Manifest this update:     Wed 17 Dec 2025 04:01:17 +0000
Manifest next update:     Thu 18 Dec 2025 04:01:17 +0000
Files and hashes:         1: IZAxEHA5n8YPukULkPEQv7owY4Y.roa (hash: vkfnMd+CZAW7CnrGWVozJx3AoLaV453dmGIo6rw9ME8=)
                          2: mA3rys3eEYCw0R5GwYAKoJlEh2w.roa (hash: Y+HfCJ1pTuTaQ4aj+4iQZxk3GQcy6uxEiMl5g7TwtZg=)
                          3: sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl (hash: xW5zYkuw3OURqVE19Exz+WI3kSAmuBcPQxFZDlhuyeI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2a:78:2e:7a:c3:4a:53:ff:56:d3:40:dd:15:5b:d3:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b090d40bfcd5a4a30875160ecc6f9fe53c05a6e6
        Validity
            Not Before: Dec 17 04:01:17 2025 GMT
            Not After : Dec 18 04:01:17 2025 GMT
        Subject: CN=b58ff7e3edb5184a3fed6576056d98c1e69a515a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:61:cf:f6:98:35:aa:be:24:73:6e:9b:d5:cb:
                    48:7c:0d:38:d1:f8:10:e9:fe:28:fa:aa:8c:da:04:
                    74:1c:5c:57:51:5d:03:db:f4:2d:c5:aa:a1:b3:3f:
                    6a:2f:ab:2c:63:cd:e5:d0:dc:0e:b7:31:3f:33:e5:
                    3d:04:fa:29:c0:44:88:ef:2b:e4:11:5d:1d:01:9e:
                    e2:a6:28:44:e0:a2:81:2e:16:83:ff:36:30:5b:13:
                    83:a9:97:8e:f6:7f:8f:9b:ef:c7:74:b7:4f:67:3e:
                    4b:38:8b:b2:2c:5c:c5:a5:78:07:74:bd:92:0f:47:
                    db:1e:46:4e:6f:f3:aa:e7:03:3b:33:82:f4:31:86:
                    56:17:c5:e5:bd:43:da:2e:48:7a:c4:4e:96:27:9b:
                    35:ce:d6:9b:ac:9d:4a:d4:be:21:53:58:01:02:9b:
                    14:79:a4:eb:f0:f7:7c:58:1b:25:23:27:c5:05:05:
                    bb:24:e7:3b:d2:2b:04:f5:e1:1b:2f:17:fc:91:6b:
                    c4:c4:96:4c:90:6e:f8:49:1c:7d:7c:ea:f6:4c:5e:
                    2d:1c:9b:48:0c:79:4d:88:b1:69:d1:90:92:0b:0f:
                    d5:a8:77:24:4a:ae:00:28:31:c4:e0:f4:55:9a:e4:
                    b1:a4:bf:b3:81:68:97:e9:5c:16:f1:6d:dc:f7:46:
                    31:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:8F:F7:E3:ED:B5:18:4A:3F:ED:65:76:05:6D:98:C1:E6:9A:51:5A
            X509v3 Authority Key Identifier:
                keyid:B0:90:D4:0B:FC:D5:A4:A3:08:75:16:0E:CC:6F:9F:E5:3C:05:A6:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:58:88:8d:ae:d1:db:2d:70:29:55:b5:aa:7d:2f:c0:16:73:
         c7:c3:f0:5f:8a:64:a7:24:67:88:d0:49:b1:fc:9c:39:4e:32:
         dd:27:ff:94:67:fe:44:b9:d9:35:10:86:c3:2c:c3:77:58:66:
         06:00:1d:24:7f:d1:cf:e5:09:02:de:c5:f9:a0:7b:ed:30:71:
         60:01:65:22:63:fa:e4:8a:a9:72:c9:c5:45:ad:70:12:68:17:
         4b:d1:36:77:65:29:d2:82:0b:44:8c:08:f5:b0:0e:76:fe:6c:
         ee:03:91:e7:b8:d9:50:c0:07:b1:7b:aa:22:45:7d:fc:45:fc:
         6b:29:48:8b:d5:1e:79:7c:67:a1:54:8e:e3:f0:90:35:75:52:
         b6:26:47:cc:43:84:9c:f0:84:91:bf:d1:4d:41:52:a2:06:be:
         ee:90:13:1e:dd:9b:d7:23:19:b6:fe:5e:82:2f:1d:66:d2:e1:
         38:31:da:db:bd:02:c2:3f:ab:4b:4e:4d:9b:e4:31:36:af:b6:
         66:08:94:82:a0:2e:94:61:d8:a8:91:e0:e6:a2:bd:e1:37:07:
         55:a1:d7:47:dd:fc:bc:92:4b:34:70:a0:0b:1f:d9:ad:88:8f:
         49:11:62:06:83:27:69:1f:6c:93:cf:7a:d9:58:35:48:6c:22:
         bd:ec:4f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 06:18:52 2025 by rpki-client