This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft
File:                     jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft (raw, json)
Hash identifier:          IllAC2YbUHtg1qIm1wS60mPDwMle3VH+VWdgyJc+K/Q=
Subject key identifier:   FE:59:40:EE:66:03:F2:FC:BE:FE:95:64:EF:7D:A6:70:89:8B:EF:43
Authority key identifier: 8C:69:2D:29:AC:31:2D:2A:B6:06:1E:44:A9:DE:0E:D3:75:1A:EA:7E
Certificate issuer:       /CN=8c692d29ac312d2ab6061e44a9de0ed3751aea7e
Certificate serial:       019B1916DBB11E65AD324E36C28FE3830183
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft
Manifest number:          1170
Signing time:             Sat 13 Dec 2025 19:01:26 +0000
Manifest this update:     Sat 13 Dec 2025 19:01:26 +0000
Manifest next update:     Sun 14 Dec 2025 19:01:26 +0000
Files and hashes:         1: 7IomEO57DDrl4ZBLVKDC6qP3KEE.roa (hash: AwCfU2h4jJPaAJIb84vSAgUR4ElWsWxd3ZUQNOuBkOc=)
                          2: jGktKawxLSq2Bh5Eqd4O03Ua6n4.crl (hash: ak82veBSkDMSwG8/vORCCS5RB4VVw5Gf2mst6SmQsEQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Dec 2025 19:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:19:16:db:b1:1e:65:ad:32:4e:36:c2:8f:e3:83:01:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c692d29ac312d2ab6061e44a9de0ed3751aea7e
        Validity
            Not Before: Dec 13 19:01:26 2025 GMT
            Not After : Dec 14 19:01:26 2025 GMT
        Subject: CN=fe5940ee6603f2fcbefe9564ef7da670898bef43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:81:6e:1d:47:95:f6:56:e5:17:2b:9a:8d:bb:
                    a3:e3:c8:58:f5:fd:23:7c:a6:cd:63:21:19:57:84:
                    83:d8:c5:c1:dd:01:49:8c:a0:9d:65:6c:24:02:86:
                    5d:b3:e1:41:86:03:c4:34:9a:cd:fa:6e:f3:df:49:
                    a3:10:f5:50:54:b6:af:18:24:90:9a:60:5a:6c:42:
                    42:80:8b:6d:05:4e:28:a7:44:1e:03:ac:68:a8:e7:
                    9a:3f:57:b7:86:30:3a:97:56:64:68:25:52:73:1f:
                    e5:e0:64:f3:e5:fb:f2:07:68:a8:c0:74:5b:a8:2a:
                    18:64:18:76:8c:c9:99:0c:73:45:d8:48:6b:b1:46:
                    59:61:c6:63:bd:69:15:9f:5a:f0:e5:bc:30:40:b8:
                    3d:59:91:0a:b9:38:73:a9:f4:0a:12:f6:27:c2:f0:
                    1e:0c:b9:8b:59:05:34:2a:9d:b7:8b:a4:36:00:ec:
                    8f:ab:e9:93:74:e6:54:86:6f:a6:55:ec:79:af:f6:
                    24:c1:38:0f:91:3e:c0:ae:d8:53:78:3b:d4:e7:f8:
                    c2:3f:60:bf:69:77:65:d9:bb:b3:8f:e7:be:16:18:
                    a8:b7:f0:b7:e4:63:c8:39:82:6d:e9:84:cd:a0:3b:
                    bd:fd:b2:94:50:65:61:3b:f4:62:6a:f8:ba:09:9f:
                    60:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:59:40:EE:66:03:F2:FC:BE:FE:95:64:EF:7D:A6:70:89:8B:EF:43
            X509v3 Authority Key Identifier:
                keyid:8C:69:2D:29:AC:31:2D:2A:B6:06:1E:44:A9:DE:0E:D3:75:1A:EA:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:31:de:9f:db:3e:8a:0f:6d:ce:45:ad:38:77:98:f5:0a:e0:
         d2:62:29:79:c2:cd:18:9a:6e:fb:9f:dc:7a:8e:89:5f:71:59:
         ab:e1:ee:21:cf:de:c9:65:80:7c:34:9a:6e:44:57:21:02:6a:
         b1:94:63:e9:a6:cb:59:75:72:72:bd:67:06:00:e2:26:71:84:
         98:c7:ea:db:e3:5b:cf:16:90:9f:75:6e:65:ce:79:6e:4a:49:
         5d:ce:35:78:54:a6:93:cd:2f:58:34:7a:81:06:81:d4:e2:b2:
         4e:8f:e8:52:46:a8:c9:35:7d:21:5e:78:87:a1:6a:31:78:0f:
         89:7e:52:ba:a6:78:dd:f7:a1:0b:e9:74:e6:4a:f5:a4:3e:8e:
         71:92:4f:b6:3d:13:ec:8d:1d:79:36:73:ca:b5:83:d3:0b:78:
         02:38:49:1c:4e:17:a4:f3:2d:ee:c7:7f:16:6a:e3:09:56:a8:
         ca:92:55:02:e0:95:90:74:72:61:69:c8:f5:51:c9:c0:8f:a0:
         7a:bb:c0:3f:c3:5e:e9:dc:5b:77:bf:72:51:ae:cf:1d:00:8f:
         b9:ae:d6:d3:09:17:f9:49:fe:4f:c5:67:6b:f3:fa:7b:79:3c:
         d6:00:a7:3b:81:b1:92:76:83:01:84:b2:93:ca:95:a1:82:01:
         67:72:3b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 03:28:55 2025 by rpki-client