This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft
File:                     JYYj7MjcuRPRAiipRgqG5mDLj7I.mft (raw, json)
Hash identifier:          Diii8SjVeYBurYv+CDW4a4mJFVA91vPYziGaoMT8t8E=
Subject key identifier:   62:CF:0D:CE:45:03:3E:A4:AC:E6:EE:63:D7:3D:B2:35:1B:B6:BB:17
Authority key identifier: 25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2
Certificate issuer:       /CN=258623ecc8dcb913d10228a9460a86e660cb8fb2
Certificate serial:       019B247607DB63156400F06D780902C7EC1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft
Manifest number:          1779
Signing time:             Tue 16 Dec 2025 00:01:13 +0000
Manifest this update:     Tue 16 Dec 2025 00:01:13 +0000
Manifest next update:     Wed 17 Dec 2025 00:01:13 +0000
Files and hashes:         1: 4jOyDkN0sYgHQOu4H2i3BPnuwuc.roa (hash: pBs68ICaSbGSqyGLZ9bB1efuQfGC5WelauRjyqdWgTI=)
                          2: JYYj7MjcuRPRAiipRgqG5mDLj7I.crl (hash: 3Wnz6N1S3ALJ4qcIkpl6tVGPeNG1b5od6bAjSVz1xWc=)
                          3: WS5dJtxLFKB6EZr0k7FG-L1WfpI.roa (hash: EcGFRU20uqBbFC1foj+y9OBYi5L7+bc1+NFOuFXpPjg=)
                          4: k_-rD0qGkNwGwcLu6HW3p8mmNtU.roa (hash: 2oKRAJvxuw9ZlCxWfoLf08ddChOQxfTyMJhpORXiSP8=)
                          5: p_Vil1ZOh0DBWp7CeNdLsp-x-qg.roa (hash: JOx6Yj0rD4+YKhnvf7l3pAqkkOGJYpZq2R4MdJmD8hQ=)
                          6: px36HXCD5Tde7rc7667drQlCUgM.roa (hash: DdLtjUoBr2/szAIeZWx5x3x5Gnlyu/gE0I7UYrAM/6I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 22:36:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:24:76:07:db:63:15:64:00:f0:6d:78:09:02:c7:ec:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=258623ecc8dcb913d10228a9460a86e660cb8fb2
        Validity
            Not Before: Dec 16 00:01:13 2025 GMT
            Not After : Dec 17 00:01:13 2025 GMT
        Subject: CN=62cf0dce45033ea4ace6ee63d73db2351bb6bb17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e8:4a:f6:ce:49:18:f4:c6:a7:3f:7c:af:57:
                    bb:be:03:ea:90:e6:ea:2b:ad:00:01:da:5c:40:44:
                    bb:0a:ab:9e:6b:9c:2c:ac:04:d8:c3:a8:2f:79:74:
                    65:34:68:08:c5:d5:e6:b2:ec:8f:0e:63:5d:66:39:
                    ab:b1:18:e5:df:35:c0:8b:62:56:78:47:67:b0:0d:
                    43:49:85:fb:8a:ea:b0:10:67:b8:42:e2:ae:21:9d:
                    e2:7c:7f:28:15:60:4a:94:95:41:21:fc:7f:01:10:
                    8c:22:d2:e2:ad:7e:e0:bd:72:f9:33:80:9e:ff:1b:
                    78:47:b9:2c:e9:e8:57:e4:df:3c:60:cf:34:5e:d2:
                    71:b4:d1:14:35:6c:a2:fe:d9:3b:8e:50:34:1f:45:
                    5d:c2:8a:2f:24:a3:23:ac:99:f6:ac:39:38:5f:db:
                    37:1f:8d:9d:67:0e:5a:32:5f:dc:e0:ba:dd:48:2e:
                    33:d4:81:14:ef:03:7d:06:a4:d0:fb:55:43:c4:a2:
                    55:5e:9a:4d:28:63:49:9d:47:00:87:54:30:8a:54:
                    7b:8c:38:24:9d:2f:75:e6:9a:fd:e1:3d:ec:30:dc:
                    4a:71:f8:e6:8c:87:7e:b7:00:bc:ff:6b:d6:9b:3c:
                    31:27:99:c2:67:c6:2f:3f:88:96:af:6c:c5:27:c5:
                    56:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:CF:0D:CE:45:03:3E:A4:AC:E6:EE:63:D7:3D:B2:35:1B:B6:BB:17
            X509v3 Authority Key Identifier:
                keyid:25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:ec:76:41:f8:89:0d:19:b9:06:a6:11:88:a0:ee:d9:e8:c2:
         d9:77:31:5c:85:c7:3f:d7:6f:18:6c:d2:8a:0d:6f:b8:5f:16:
         fb:71:06:f6:6e:1f:73:5a:0d:c6:d0:68:7c:87:63:2d:75:f0:
         c8:24:cb:bb:c1:fb:b3:f3:9a:3f:3d:f9:9b:fb:17:81:01:23:
         a2:e0:0b:fd:bc:b7:5a:88:d1:02:0a:44:68:cc:e7:e1:c9:4e:
         cb:b1:c3:0c:30:e1:60:0c:22:87:7e:92:f9:5c:98:72:b4:26:
         65:2a:b2:f3:8c:26:3b:18:7f:de:34:96:c9:2a:b8:7c:2d:bd:
         13:19:e1:07:e1:a7:8f:90:38:0b:74:71:86:93:36:1a:ae:e2:
         25:74:26:20:2b:a3:e8:d8:5f:24:1c:06:a0:f5:4f:9d:45:34:
         33:ef:9b:2e:af:e8:f3:50:ad:d1:a1:44:01:82:1e:4e:d4:29:
         49:07:b9:0d:9d:2f:ec:3c:41:a2:99:ae:d7:c5:d8:49:92:83:
         ba:85:cd:86:55:af:33:a1:2f:8f:9f:10:7b:dd:2f:e2:9f:6e:
         61:cd:80:d0:36:69:42:36:9a:34:b3:bc:d5:61:f1:6f:47:3d:
         df:8d:3f:5e:19:7b:fe:7d:fa:17:ab:1a:b1:9e:bc:68:b9:73:
         f5:99:c8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 05:00:28 2025 by rpki-client