This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.mft
File:                     Jowu3BO7KjxjJiEhueqtGIvtuuk.mft (raw, json)
Hash identifier:          s4ejXqtxAdZmGbROe57i0NGbMtyjaFgEzIoVPY6/8EA=
Subject key identifier:   1B:25:51:FA:17:FD:10:75:35:F7:DF:E7:70:F1:90:16:A8:6A:69:DD
Authority key identifier: 26:8C:2E:DC:13:BB:2A:3C:63:26:21:21:B9:EA:AD:18:8B:ED:BA:E9
Certificate issuer:       /CN=268c2edc13bb2a3c63262121b9eaad188bedbae9
Certificate serial:       019B1A60212BC327252A5EB813BE59763871
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jowu3BO7KjxjJiEhueqtGIvtuuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.mft
Manifest number:          1399
Signing time:             Sun 14 Dec 2025 01:01:06 +0000
Manifest this update:     Sun 14 Dec 2025 01:01:06 +0000
Manifest next update:     Mon 15 Dec 2025 01:01:06 +0000
Files and hashes:         1: DpA6vqU4LJr5KoLtREWlTrMePeU.roa (hash: JzcSaxZjM50huCWTepEHWuRTcnth93I21P4Hl6vppKc=)
                          2: Jowu3BO7KjxjJiEhueqtGIvtuuk.crl (hash: o6urbyAu/hKFwxS40OX/sFy68XkVCRXTBIUkNZPiWrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jowu3BO7KjxjJiEhueqtGIvtuuk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 01:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1a:60:21:2b:c3:27:25:2a:5e:b8:13:be:59:76:38:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=268c2edc13bb2a3c63262121b9eaad188bedbae9
        Validity
            Not Before: Dec 14 01:01:06 2025 GMT
            Not After : Dec 15 01:01:06 2025 GMT
        Subject: CN=1b2551fa17fd107535f7dfe770f19016a86a69dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e9:d5:0c:c0:e1:1b:a2:de:9d:92:e9:2f:18:
                    6f:ac:fe:4b:7b:6c:32:d2:f4:4b:53:9e:cd:45:00:
                    11:7e:bf:13:1c:9e:72:d5:31:36:ee:06:be:24:ef:
                    9f:c3:9c:cc:15:72:cd:47:d3:b5:19:21:4e:27:ce:
                    79:15:a2:43:d6:bc:c9:73:08:42:99:7b:f9:8e:2f:
                    2a:f2:7e:3c:9b:e0:09:f6:f9:97:eb:48:90:99:14:
                    fe:e5:86:46:f2:d6:64:8a:7e:55:0e:d9:1c:ea:ad:
                    5e:e6:08:88:48:3e:83:df:a8:37:e2:24:28:41:cc:
                    0a:98:41:72:4a:3e:8b:8d:3f:30:66:3b:d9:f8:f8:
                    f8:f1:32:60:9d:e0:f6:08:e8:8d:15:83:24:10:1b:
                    34:bd:0b:8b:13:2f:42:93:f8:6d:12:d3:bb:11:1b:
                    bc:b6:6b:cc:64:37:b9:6f:0e:8d:09:fc:87:9f:7d:
                    25:f6:c0:cd:35:84:a5:2f:a2:12:c8:39:13:03:6f:
                    1f:f7:59:b0:11:bb:fe:f0:82:cc:8c:e4:38:41:71:
                    d5:f0:9b:40:1a:51:51:bb:eb:d6:60:79:0f:f8:fa:
                    7e:30:a5:5e:ca:74:47:67:54:a3:fa:f1:27:5c:ea:
                    82:2c:b8:c5:14:87:ed:67:4c:68:c6:b1:45:06:25:
                    97:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:25:51:FA:17:FD:10:75:35:F7:DF:E7:70:F1:90:16:A8:6A:69:DD
            X509v3 Authority Key Identifier:
                keyid:26:8C:2E:DC:13:BB:2A:3C:63:26:21:21:B9:EA:AD:18:8B:ED:BA:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jowu3BO7KjxjJiEhueqtGIvtuuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:dc:8a:fa:9b:f1:40:b9:94:49:d7:b3:7d:4e:d7:a3:63:87:
         06:e2:da:82:e8:11:9c:b6:cb:ca:1e:d7:09:6e:40:ec:a4:bd:
         01:01:dc:18:0c:b6:eb:e6:12:c9:15:75:f3:ff:67:52:3c:5a:
         38:d3:37:67:3d:e3:27:51:51:e6:b1:42:cb:4d:06:f7:0c:10:
         15:69:c2:14:59:9b:4d:02:6a:b1:0f:d2:b9:10:26:24:bd:02:
         22:67:7a:e1:22:f6:74:3c:7a:57:e5:ff:5a:a4:4f:6e:19:eb:
         d1:c7:f8:43:36:12:85:8f:a3:bd:f1:39:37:90:77:5b:6e:58:
         d7:e2:21:a1:73:a5:8a:91:f2:e1:ba:f7:e8:e3:95:cf:08:f8:
         66:69:7d:4a:46:cc:8b:16:97:30:25:4b:d2:6d:76:53:76:76:
         f1:35:b9:aa:4b:f0:5f:22:6c:5c:87:46:83:ec:f7:64:eb:17:
         a1:e0:ca:5b:a9:d4:03:09:85:94:8d:2d:29:43:95:da:55:51:
         37:b0:d9:b4:3b:87:93:fd:e1:a7:58:a5:1b:a5:08:d6:d5:eb:
         cd:d6:b3:f5:33:30:1c:61:76:4d:c8:98:4e:9b:06:8a:48:ea:
         b1:5f:b8:8a:8e:af:29:7d:47:ce:68:ab:a7:33:0f:b4:36:bd:
         7d:c7:da:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 07:45:51 2025 by rpki-client