This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
File:                     jxdSJfOGzpgBGfaYhPm-fGorOzM.mft (raw, json)
Hash identifier:          6ZwJnB+x2Hceu8H6ZmO6R8N8RuUrBALseGKMYXzLQ38=
Subject key identifier:   2B:3C:84:B1:D6:D3:94:62:60:4A:22:AF:A4:34:37:CC:D1:35:0B:E1
Authority key identifier: 8F:17:52:25:F3:86:CE:98:01:19:F6:98:84:F9:BE:7C:6A:2B:3B:33
Certificate issuer:       /CN=8f175225f386ce980119f69884f9be7c6a2b3b33
Certificate serial:       019B2F3020831784D5643613CDD7EDBBD551
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
Manifest number:          1784
Signing time:             Thu 18 Dec 2025 02:00:41 +0000
Manifest this update:     Thu 18 Dec 2025 02:00:41 +0000
Manifest next update:     Fri 19 Dec 2025 02:00:41 +0000
Files and hashes:         1: 89EQQCo6Tx4ACaGk_JyA4-a5SnA.roa (hash: DER2tNvuAXp0PR1aSNW92ooYvtdX7oI6GzQVCz2YBFM=)
                          2: jxdSJfOGzpgBGfaYhPm-fGorOzM.crl (hash: GvXFQFTY0tyVxG+7M0oCKMsQEyN3xaGkJuMXm+02s/g=)
                          3: wqj7UB7atlo4UtptagO8D4QVpv4.roa (hash: ylN4r0wdJFKjI8FqYNMjzdJ19nbuA10o9E8/faFnnKU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 02:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2f:30:20:83:17:84:d5:64:36:13:cd:d7:ed:bb:d5:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f175225f386ce980119f69884f9be7c6a2b3b33
        Validity
            Not Before: Dec 18 02:00:41 2025 GMT
            Not After : Dec 19 02:00:41 2025 GMT
        Subject: CN=2b3c84b1d6d39462604a22afa43437ccd1350be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ab:be:5f:fa:c8:ce:25:6a:3c:f6:5c:0b:de:
                    c6:d2:5b:1c:68:5f:93:2e:c9:73:d8:49:16:72:70:
                    3a:6b:97:ba:fd:34:f1:67:1b:bb:b8:7d:3e:41:47:
                    43:ad:c2:ac:63:da:68:f3:5d:41:b8:ac:52:3e:3b:
                    a2:26:b8:67:b4:0e:df:b6:d0:91:18:2e:a8:a4:08:
                    70:e7:6c:33:03:a2:5b:d8:72:aa:b5:f6:95:36:99:
                    e2:45:e4:30:b8:16:c6:c0:ba:bf:60:d3:c2:1c:be:
                    ea:9c:cc:e9:da:3c:cb:e0:56:a5:c6:8d:6f:a0:2c:
                    43:a7:7f:83:58:d1:56:7b:2e:1a:7a:72:f9:0a:27:
                    56:dc:41:5a:6e:ca:d7:0a:91:e9:6c:8c:39:b5:d9:
                    b4:c9:a6:30:b8:28:d3:7f:a1:05:07:8d:02:95:ab:
                    22:f7:25:cd:76:dd:e7:7f:ec:42:40:8d:29:94:64:
                    df:6a:32:16:09:1b:2d:9e:81:fb:a8:f7:c1:69:83:
                    7a:f2:44:dd:0c:c6:4f:97:a9:77:a0:0d:e1:e5:1b:
                    ce:f3:0c:13:73:6a:38:b2:15:04:1d:ba:cd:57:dc:
                    e8:81:87:a5:89:22:7a:ac:03:34:88:3f:97:cb:3f:
                    0a:cf:b7:ec:04:66:5b:ed:12:8b:77:2c:87:88:1b:
                    ba:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:3C:84:B1:D6:D3:94:62:60:4A:22:AF:A4:34:37:CC:D1:35:0B:E1
            X509v3 Authority Key Identifier:
                keyid:8F:17:52:25:F3:86:CE:98:01:19:F6:98:84:F9:BE:7C:6A:2B:3B:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:91:bf:cc:fb:15:ba:54:01:0e:b6:11:93:ce:2e:2c:3f:24:
         1b:be:8b:ef:a1:45:80:6c:4f:63:0a:fb:97:52:81:cf:00:96:
         44:ae:c0:ae:a8:58:40:04:7f:2c:8b:fa:67:e9:d4:d1:d8:40:
         6f:4f:62:6c:94:a9:cf:a9:4c:a9:71:9f:bc:3a:83:3b:df:e2:
         72:40:32:26:80:64:ab:e7:18:34:12:94:70:9e:ac:3b:4a:60:
         9a:34:7a:8c:34:27:04:02:73:07:cf:34:82:73:6e:30:fa:c7:
         d5:dd:8a:a2:2d:90:2d:71:5e:80:56:e2:57:0a:7f:44:31:7c:
         15:60:e6:4f:f4:0c:00:8a:25:bb:97:e3:c5:46:aa:a4:c3:ff:
         58:1b:dd:8b:a6:72:28:ef:79:77:70:0d:06:a0:66:47:e3:71:
         01:b6:bd:77:3e:15:23:63:24:20:3c:20:6e:52:b8:c3:cf:55:
         53:42:be:cb:1f:e2:5a:de:69:14:02:92:5b:4d:91:05:38:2c:
         e6:84:86:71:ff:e0:95:43:10:fc:f0:32:05:1c:ce:ce:e0:49:
         db:e5:10:af:5a:47:ff:ac:c4:1c:8a:66:a8:aa:19:98:83:4f:
         56:e7:c5:0c:8f:d1:cc:dd:31:65:fc:25:5c:57:24:49:41:ce:
         d5:52:47:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 09:28:20 2025 by rpki-client