This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft
File:                     js94ugJ10dO2SSqOnWEGE8Awahc.mft (raw, json)
Hash identifier:          CLc/1jN6A9HWOs8hKmRCSpcD7BLYTpYjFRqdOSpBgrA=
Subject key identifier:   E8:D0:DB:BF:FC:D0:D6:61:12:26:FC:A0:73:7F:0F:27:71:10:6F:E2
Authority key identifier: 8E:CF:78:BA:02:75:D1:D3:B6:49:2A:8E:9D:61:06:13:C0:30:6A:17
Certificate issuer:       /CN=8ecf78ba0275d1d3b6492a8e9d610613c0306a17
Certificate serial:       019B085BD513A541F4C0F55FA288AEFF87FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft
Manifest number:          09AB
Signing time:             Wed 10 Dec 2025 13:03:14 +0000
Manifest this update:     Wed 10 Dec 2025 13:03:14 +0000
Manifest next update:     Thu 11 Dec 2025 13:03:14 +0000
Files and hashes:         1: GVAyVfy1LnNTQAefw_rQL5ko_Yg.roa (hash: 8dOBfbOxlnAECbl9CEWi1s85m74su/8sfXrqQYKg6QA=)
                          2: OsEP5zrk8wCDIDV1sx3jCXecCF4.roa (hash: +psaVX9NHe1+AmJSehIWVSsskGqMgo97ZOmLdrKAGgs=)
                          3: js94ugJ10dO2SSqOnWEGE8Awahc.crl (hash: EKsOZzL1p8kACYIcXJojo3kKXEWSi25531vvLibTT1U=)
                          4: kWqQsigWLE-Ov88YUeZJL-x7iCw.roa (hash: Ge/EMSQE9osHtx1/BzfNSCkBRWxNw3C0d8zRkadzqgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:08:5b:d5:13:a5:41:f4:c0:f5:5f:a2:88:ae:ff:87:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ecf78ba0275d1d3b6492a8e9d610613c0306a17
        Validity
            Not Before: Dec 10 13:03:14 2025 GMT
            Not After : Dec 11 13:03:14 2025 GMT
        Subject: CN=e8d0dbbffcd0d6611226fca0737f0f2771106fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:50:6e:2b:74:0b:5b:70:ad:ee:ca:5c:17:aa:
                    24:93:10:3a:bf:1c:77:fa:e4:0b:d1:8a:3f:ca:5a:
                    8b:37:8b:d2:ce:e0:56:0a:64:33:8c:ac:72:64:d3:
                    cc:0a:e5:a1:09:a0:f3:79:3c:7b:5f:29:be:07:ce:
                    ea:45:0a:ed:57:fd:f4:4a:d6:f9:c4:03:c3:ae:5e:
                    9e:fa:66:9a:3d:4a:76:d3:a7:a1:d7:89:fe:b4:55:
                    1b:83:7c:83:69:78:cd:e0:f3:b0:02:b0:71:9e:4f:
                    80:b1:64:16:68:9b:49:c7:f3:99:63:6e:9d:69:6f:
                    29:3b:71:c4:10:96:31:68:9f:1f:99:40:2d:07:50:
                    05:dc:a3:25:f9:7e:f3:b9:49:cc:53:11:12:03:25:
                    b5:c7:ad:cb:99:2a:e0:7c:2f:b9:52:1f:43:76:80:
                    d2:07:7a:b3:6f:9e:83:60:ad:ef:08:4c:70:84:aa:
                    c1:a0:8b:32:bb:fe:6b:4d:1a:14:3c:7d:66:d2:da:
                    87:86:51:3c:46:ee:cd:cd:13:ed:00:12:b0:b9:eb:
                    d5:30:df:20:a1:18:99:c7:78:03:4f:74:8c:0d:00:
                    bc:45:ca:dd:bc:a0:ae:b2:36:b6:90:64:0b:8b:3d:
                    b9:e1:78:31:e9:bc:9c:b1:89:d9:08:24:a0:b2:8c:
                    5a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D0:DB:BF:FC:D0:D6:61:12:26:FC:A0:73:7F:0F:27:71:10:6F:E2
            X509v3 Authority Key Identifier:
                keyid:8E:CF:78:BA:02:75:D1:D3:B6:49:2A:8E:9D:61:06:13:C0:30:6A:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:27:45:e4:72:be:35:f5:c1:ac:ee:40:94:d5:95:89:7d:c0:
         54:36:b0:22:b6:13:70:50:46:25:ed:0e:d8:8a:23:50:cd:c6:
         aa:53:46:1c:60:51:61:f2:9a:05:11:e9:28:93:d1:0f:b8:56:
         1e:71:e5:d7:18:c2:74:44:b8:64:24:57:05:d5:b7:df:f8:ff:
         cb:bc:be:5b:7e:4d:2a:0a:0d:08:40:77:c1:03:e5:b8:40:94:
         84:e2:0a:f5:f3:be:7e:52:fc:4b:79:5b:53:66:d2:aa:35:ab:
         cc:9e:98:aa:45:9d:93:83:3b:23:e9:d6:31:1c:0a:5a:3b:3e:
         76:f0:49:c6:fb:6b:c6:ac:a6:24:8f:76:8d:65:6f:23:f3:ab:
         6f:c7:fc:3a:22:62:f9:ac:dc:41:2d:db:a0:71:ff:48:f9:71:
         f1:0e:fe:5a:80:66:b6:12:4d:94:7d:9e:d5:9a:9e:7a:d8:f0:
         ce:40:b9:1e:ee:9b:1e:47:59:72:57:b5:20:3b:7b:55:c5:31:
         88:0e:87:33:f1:e9:06:ab:30:01:4f:ec:e1:ce:a8:41:fd:2f:
         ee:c0:be:91:e7:c0:81:42:b8:d9:ed:16:75:07:2e:4b:83:95:
         2b:60:42:50:a9:2b:62:e1:5a:1c:3b:a3:6c:a9:86:01:2f:17:
         90:32:27:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 14:33:28 2025 by rpki-client