This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
File:                     Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft (raw, json)
Hash identifier:          UJ+nXSVAu6N6LPvucMtAgHR1JQiBzyTH3O7yMGeRv2s=
Subject key identifier:   42:08:CD:E9:8F:67:FF:BD:8B:AE:E0:CD:ED:79:28:55:9C:FD:A0:F1
Authority key identifier: 26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1
Certificate issuer:       /CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
Certificate serial:       019B0F373F219DF6EEC498062F69446E4736
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
Manifest number:          0ED5
Signing time:             Thu 11 Dec 2025 21:00:37 +0000
Manifest this update:     Thu 11 Dec 2025 21:00:37 +0000
Manifest next update:     Fri 12 Dec 2025 21:00:37 +0000
Files and hashes:         1: 5dtg3LCI8AxcnAadUkHS3_C52GM.roa (hash: Vn0K1zYewV4QvEpEk/45tt1gNO9Z9NhkFkfGztTyMls=)
                          2: Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl (hash: Cj17nlNYAdwsn8KOplTMcU8OKFzoY8zJdEmwWQUIF94=)
                          3: iHyMz7WaIpGFj9IV33M_hAhVH-k.roa (hash: LGMsJh4DFo99zD3c9hWW4b1EKTfexLADtFi5DHUXz6A=)
                          4: qcTZ9F_MrFUBfQXGS6Pdrvtd3hM.roa (hash: 6Y3o3xfek4OtHUqQEh7Mq+AHRFEDKhceMAsEbUlDjDA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 19:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0f:37:3f:21:9d:f6:ee:c4:98:06:2f:69:44:6e:47:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
        Validity
            Not Before: Dec 11 21:00:37 2025 GMT
            Not After : Dec 12 21:00:37 2025 GMT
        Subject: CN=4208cde98f67ffbd8baee0cded7928559cfda0f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:77:02:cc:b9:ca:09:98:cb:98:03:36:66:94:
                    8f:06:5e:de:7e:c3:ba:b4:eb:3a:11:c2:d3:87:0a:
                    6d:41:3b:46:37:fe:f5:4f:b8:b5:de:a0:37:8f:73:
                    9f:6a:a8:4d:72:06:7e:d3:0f:85:a0:14:7b:e2:16:
                    80:f1:f4:cc:b8:91:d8:be:1a:32:e9:ed:db:27:fe:
                    35:0c:54:8d:19:b5:9a:46:7d:f3:2b:93:dd:d7:a9:
                    cc:b1:53:ce:16:df:2f:35:c0:cc:89:be:88:6a:9b:
                    db:ad:08:1f:15:d2:0d:43:4c:06:5c:c7:57:4e:92:
                    98:d0:28:76:90:86:87:42:93:b0:e1:e6:ac:b5:2d:
                    3d:60:d1:2a:e6:17:3b:99:b2:00:6a:cb:c8:77:7b:
                    38:9e:c2:43:55:fa:ce:af:08:46:96:8a:53:40:c5:
                    90:2d:11:e3:68:a8:82:67:b8:33:a9:ee:c0:ab:98:
                    8e:69:cc:a5:d7:74:97:78:0e:8b:44:a8:57:80:1c:
                    c5:69:14:4f:3b:df:2f:cf:e5:bb:0b:b2:e8:9c:e1:
                    11:57:eb:04:46:a9:b1:7f:50:d0:5f:c0:78:c1:e7:
                    7e:4f:59:68:ad:3b:22:49:c6:82:ea:43:d0:de:ee:
                    a9:30:be:49:86:80:77:5a:6a:96:c6:af:9d:41:c4:
                    17:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:08:CD:E9:8F:67:FF:BD:8B:AE:E0:CD:ED:79:28:55:9C:FD:A0:F1
            X509v3 Authority Key Identifier:
                keyid:26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:ec:56:07:1a:72:44:8b:ba:30:9a:00:a8:94:f5:ba:5a:59:
         5f:b5:d9:80:15:6b:e7:95:7a:db:b6:c7:3a:60:47:5c:5a:17:
         6c:0e:25:36:c3:36:d6:81:87:34:4f:81:14:33:24:74:e9:ff:
         74:e6:4f:46:21:56:1a:7b:3f:1b:4b:ea:93:92:3b:fe:b6:fe:
         98:7a:73:31:44:6a:59:e8:98:45:1f:e2:e7:a3:28:13:51:16:
         9b:ed:f3:1d:dd:67:3f:82:96:34:df:e2:cf:72:80:82:5c:cd:
         0a:86:ec:32:57:6c:b7:4f:d6:c0:45:02:a5:c0:a2:4e:be:4a:
         75:40:76:57:16:cf:bb:72:49:c7:f6:de:c1:fe:a9:42:91:a0:
         ea:f7:71:47:09:95:8f:3b:41:af:67:e5:cb:a3:32:2d:0b:89:
         c3:28:8d:f3:d8:66:72:38:58:44:fa:ac:95:63:51:ff:15:04:
         68:57:58:ff:e9:3a:2f:86:15:b4:76:fa:72:70:84:08:3b:52:
         00:76:5a:c6:63:54:14:51:c5:a8:40:f6:bd:be:0a:8b:d0:86:
         eb:98:74:f1:15:b4:e7:a5:7d:a0:1e:5f:e4:eb:bf:55:88:30:
         51:44:0c:e4:d1:45:e0:76:e4:fa:67:81:1d:6b:6f:8c:cf:7b:
         45:3d:1d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 03:34:33 2025 by rpki-client