This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
File:                     jYdAeZyRwmMKgJIXjbgk86iJp18.mft (raw, json)
Hash identifier:          ArQ70wEzbPgqmwWukjfkzyG+UHmUgp/2/gN7tYrZ260=
Subject key identifier:   C1:B8:0D:EA:28:D7:B4:BF:08:FF:41:5A:4A:F7:A9:E1:46:B0:12:65
Authority key identifier: 8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F
Certificate issuer:       /CN=8d8740799c91c2630a8092178db824f3a889a75f
Certificate serial:       019B3D2319D24583C7769B749DA9504AE05B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
Manifest number:          1787
Signing time:             Sat 20 Dec 2025 19:01:08 +0000
Manifest this update:     Sat 20 Dec 2025 19:01:08 +0000
Manifest next update:     Sun 21 Dec 2025 19:01:08 +0000
Files and hashes:         1: K-6vxGr3EkVKtgWk3f7FXppAHWU.roa (hash: OqJwTUOjnt783umU3SvwJ0pGKHDe69wtlF63xIDInso=)
                          2: K7Su5tLQd2NMZMj9NBaGujGCyFc.roa (hash: mUfUc0m1Q5fvSqMO5jRLGU7xEPj6/17vBXx5MZ0j9fY=)
                          3: eE7CtoiQAT2pLGSZ83z4bGyxlms.roa (hash: 0jzCXVU/84NgsdnKR1p45oVJW0ZBdnomnSJlnmwgNt0=)
                          4: jYdAeZyRwmMKgJIXjbgk86iJp18.crl (hash: Ev5EYw3LFUBXJ5shb470en8aTl7G9Mj14pxytUnaONk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3d:23:19:d2:45:83:c7:76:9b:74:9d:a9:50:4a:e0:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8740799c91c2630a8092178db824f3a889a75f
        Validity
            Not Before: Dec 20 19:01:08 2025 GMT
            Not After : Dec 21 19:01:08 2025 GMT
        Subject: CN=c1b80dea28d7b4bf08ff415a4af7a9e146b01265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6e:52:95:71:68:d1:cf:3a:c4:fe:67:e3:82:
                    17:7f:3c:8d:83:05:42:cc:92:79:17:87:5e:de:bc:
                    f2:5a:c3:4d:58:bc:6a:ca:ba:e2:34:b7:27:7c:c1:
                    2f:aa:c5:a8:91:12:11:2e:34:f0:37:53:3b:70:e2:
                    79:a5:32:1d:80:6c:a1:25:79:b1:aa:85:da:4c:a5:
                    d8:14:64:39:52:37:3c:4d:33:3f:57:d8:6b:df:e1:
                    9c:dd:1e:02:7c:2a:60:8a:14:20:dd:21:b2:7e:18:
                    e5:f3:19:71:4a:3a:de:85:94:65:5a:a5:31:64:12:
                    68:33:e8:c4:09:4d:4d:0f:dd:e5:55:6e:8c:b4:7a:
                    91:5d:b8:3c:43:7b:e8:05:44:89:23:7b:f3:76:ca:
                    96:b0:86:6d:c5:65:69:01:77:b8:19:13:90:7d:64:
                    77:31:e0:eb:1f:ae:8d:a6:0a:f5:64:c5:a5:4d:d1:
                    94:84:0c:00:85:c4:82:fa:70:2d:82:31:b9:e7:6f:
                    41:aa:94:62:d7:ac:23:26:c1:84:6a:04:00:11:b3:
                    fe:81:de:0e:cb:0c:35:95:41:0c:a1:04:68:1f:09:
                    77:19:7b:a5:60:ab:d1:cf:84:62:a4:36:f4:e7:c7:
                    fe:47:1b:36:f1:7b:2e:c1:51:40:66:48:66:56:c4:
                    ea:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B8:0D:EA:28:D7:B4:BF:08:FF:41:5A:4A:F7:A9:E1:46:B0:12:65
            X509v3 Authority Key Identifier:
                keyid:8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:c3:e1:c9:55:3d:d0:bf:4d:59:46:56:2e:2b:8d:14:26:f8:
         59:ce:1a:8c:e6:58:a7:61:4d:c9:cd:6a:c7:79:89:05:a5:bc:
         ff:ca:f6:89:69:42:92:8d:45:3a:d4:3e:d3:d8:5d:13:07:77:
         ba:fc:69:20:2a:b9:16:14:d9:70:aa:0c:97:1a:ca:6c:37:20:
         67:bc:da:92:3c:d6:61:a5:39:61:dd:06:b8:ab:bf:ca:32:19:
         dd:89:b0:a6:e6:d4:4d:78:58:c6:fd:8e:fb:35:73:2d:b8:24:
         68:92:3f:8f:50:15:32:e1:9c:e7:0f:5e:b2:ad:94:7b:f4:57:
         ae:49:50:11:6e:e6:7a:e6:f6:5e:7d:5c:0c:68:e5:ec:e2:3a:
         fa:9f:18:b2:ad:86:80:09:6f:99:61:71:4e:94:0f:06:68:a1:
         d8:33:ea:65:47:3f:87:ff:d6:0b:50:e3:ff:9c:67:9f:51:98:
         f8:15:56:85:57:66:5b:1d:21:13:67:01:27:18:93:58:24:bd:
         4a:9e:13:c2:c0:07:65:4d:5e:27:4f:56:eb:25:1f:9a:da:fc:
         6f:eb:a9:ea:4b:08:81:bc:39:14:9c:81:f6:37:05:90:6f:46:
         9c:8a:73:18:c4:43:1e:84:a0:85:8a:f4:25:58:1a:5c:ef:94:
         e2:cb:ab:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:11:12 2025 by rpki-client