This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
File:                     Jr3a4E28sfgvVbB4MHuksIS5lLs.mft (raw, json)
Hash identifier:          U7xKiUfpGMPsrQ8jdSQoRdTQE/14RVSRM+rtNv0A1I8=
Subject key identifier:   0E:A2:4C:7D:A7:02:78:B6:AD:61:7E:2A:BB:60:60:7B:B1:95:72:1F
Authority key identifier: 26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB
Certificate issuer:       /CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
Certificate serial:       019B27AD56FF0402F15D898F2719A6BE74ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
Manifest number:          1785
Signing time:             Tue 16 Dec 2025 15:00:29 +0000
Manifest this update:     Tue 16 Dec 2025 15:00:29 +0000
Manifest next update:     Wed 17 Dec 2025 15:00:29 +0000
Files and hashes:         1: 6s_6R9Qg6B0BWMzsSYadcyCPTNI.roa (hash: 0TX6RB/i/PYM+jHhKWcDxzPxSqvqvW8BUSQ5qekuotk=)
                          2: Jr3a4E28sfgvVbB4MHuksIS5lLs.crl (hash: zPEzb1G4Uo0jJjzpL37Nq345/GDeD9DjIctkJMTHSy8=)
                          3: On6P0oyCVsJaxIEE3GftNC4qztw.roa (hash: MHdX24gf5gM9PdREHRYQX0s+qP7Sh6jKR9PNtNbtiPk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 14:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:27:ad:56:ff:04:02:f1:5d:89:8f:27:19:a6:be:74:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
        Validity
            Not Before: Dec 16 15:00:29 2025 GMT
            Not After : Dec 17 15:00:29 2025 GMT
        Subject: CN=0ea24c7da70278b6ad617e2abb60607bb195721f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:03:af:9e:1b:8d:b2:fb:b1:ac:b0:f7:8c:c6:
                    2b:db:8d:5b:c9:be:eb:44:b1:a9:04:b1:f6:88:09:
                    7e:cd:bb:af:e8:aa:ad:c5:41:57:2a:c3:cc:6c:41:
                    0a:60:42:fb:06:9a:95:b2:ec:b0:cf:58:73:80:81:
                    6c:29:a7:37:23:2c:70:e5:17:a1:09:8c:e1:7d:41:
                    f2:19:b3:70:0a:79:de:14:d5:83:79:c0:81:de:b1:
                    67:00:e4:3f:7d:b4:64:44:64:c9:5a:9e:a6:a9:75:
                    a1:d6:78:17:49:93:58:ad:02:0b:cd:0c:8e:d1:a3:
                    97:18:f4:fc:56:a6:08:64:29:3a:68:45:e7:ed:ef:
                    94:02:35:21:70:ce:e0:85:b5:b3:7a:f7:79:3f:4f:
                    29:d9:1b:84:07:8b:01:f9:f9:3a:29:cb:42:a8:80:
                    bf:70:8c:8b:45:c0:f1:92:3d:6c:ab:7c:68:f5:28:
                    20:a0:50:e0:49:00:a3:2b:73:04:83:bf:07:0b:c5:
                    3c:52:d7:b3:1b:9f:16:7d:31:44:7d:f7:b5:d4:aa:
                    2d:b1:01:1e:b3:54:22:d8:46:c7:a5:3d:d6:0a:92:
                    1b:3f:72:ff:f1:90:56:ad:6e:52:1c:e4:f9:af:c8:
                    d6:40:16:98:e9:22:e0:04:14:95:6e:f3:cf:79:ba:
                    1c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A2:4C:7D:A7:02:78:B6:AD:61:7E:2A:BB:60:60:7B:B1:95:72:1F
            X509v3 Authority Key Identifier:
                keyid:26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:56:2d:4d:79:5f:19:10:52:a2:bf:43:17:df:ed:64:73:69:
         b1:a0:cc:cd:f4:88:75:17:33:76:87:50:bc:7d:ae:41:2a:b2:
         69:08:30:b2:c1:43:55:af:96:1a:50:ae:13:d4:6e:16:de:3d:
         ac:10:6d:ee:d4:ef:ed:1c:5d:10:26:21:80:4d:cf:fc:f6:61:
         50:1f:27:48:6f:ca:78:17:01:7f:79:9a:c1:c7:37:5f:a0:b0:
         7f:fd:e6:9e:9a:0f:59:fd:f4:62:a4:06:65:b3:42:1c:33:4a:
         d7:d7:31:5e:5d:e9:ed:3e:72:8a:fd:58:8a:fe:21:3f:1f:31:
         c6:21:33:37:95:b1:37:9a:13:95:b5:5c:3e:87:73:06:71:d1:
         be:66:68:aa:48:1a:7e:be:2b:59:92:e1:f5:eb:01:9a:fe:cc:
         c6:09:af:32:7b:0b:a2:db:77:d1:ad:5a:20:7f:26:d4:d2:26:
         42:e2:12:a3:da:15:a8:0d:e4:b2:37:8b:b1:e0:50:3e:23:0e:
         d1:c0:36:83:47:35:e5:71:d2:43:db:0f:18:ee:0b:61:f4:9c:
         6a:18:2d:f6:b2:9e:c3:6f:33:e9:62:03:94:a2:02:6e:1c:18:
         c9:77:ea:68:83:d4:3d:8e:f5:66:37:e8:ea:38:90:5e:61:35:
         40:68:dc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 20:08:24 2025 by rpki-client