This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft
File:                     J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft (raw, json)
Hash identifier:          4U9+RT5FZI7/mGJsgESaVeZfwQoAFdemqs57tc0en5c=
Subject key identifier:   A8:BC:54:26:36:B5:1E:CC:C7:8D:B7:72:1C:53:04:90:3A:84:BA:E4
Authority key identifier: 27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E
Certificate issuer:       /CN=27c007e5082b8e8d8289018718cfd527a7893e5e
Certificate serial:       019AFAD55927C7E84BEF3F9C55E132A63F89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft
Manifest number:          15A4
Signing time:             Sun 07 Dec 2025 22:01:16 +0000
Manifest this update:     Sun 07 Dec 2025 22:01:16 +0000
Manifest next update:     Mon 08 Dec 2025 22:01:16 +0000
Files and hashes:         1: 32DmFG6eckwT_cmIA6P2GvExV8o.roa (hash: QAbNn1NoMo9kTBTTYBudg/heTTEApB1Axs6m2LEO3wM=)
                          2: 8mfWKUaTIk1RDd44sNUtQ4HsM2s.roa (hash: GuIpyglmMkqHqRdMJ131I6La+nXiqbtWAj+MwrMR+Yc=)
                          3: Ht6FsCIGKxXaA3P0oIyjphKEPpk.roa (hash: jQWJMmY8DgPGrpE2GgmGMr1+l/UtziWDhgw2WyC6x2Q=)
                          4: J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl (hash: u0vA8vJsS+3o4gU7+xh1UEWpL5Dt9rBklNTjWUjZftU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Dec 2025 17:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:fa:d5:59:27:c7:e8:4b:ef:3f:9c:55:e1:32:a6:3f:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c007e5082b8e8d8289018718cfd527a7893e5e
        Validity
            Not Before: Dec  7 22:01:16 2025 GMT
            Not After : Dec  8 22:01:16 2025 GMT
        Subject: CN=a8bc542636b51eccc78db7721c5304903a84bae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b2:c5:4b:50:0f:c9:e3:00:04:e5:9b:ed:47:
                    fc:57:c9:c2:42:8b:3b:1d:ef:bd:4d:17:c6:e7:9c:
                    2e:9e:bd:91:da:5e:da:2e:fa:30:46:72:2d:06:6b:
                    29:b2:37:13:76:74:48:7a:8e:8d:cc:93:62:78:28:
                    23:b6:cb:ab:a2:db:88:62:8c:fe:4c:6b:61:a2:59:
                    59:9b:03:ec:22:5d:a8:95:6d:ae:bb:9d:af:e6:68:
                    6b:9e:16:78:65:73:83:24:8d:e1:bc:44:86:58:4f:
                    8d:ff:d2:b5:9b:10:36:97:6d:93:01:69:1b:4b:57:
                    d8:4d:a1:1d:6c:9d:90:24:9f:17:91:6a:9a:45:05:
                    39:61:cd:f0:73:70:6c:fc:3e:1c:5a:f7:f2:94:1e:
                    a7:73:5e:69:fa:26:01:a8:9d:b0:88:de:d9:dd:dc:
                    49:1b:aa:11:d3:24:60:eb:7b:4e:be:23:88:82:60:
                    37:10:fb:17:0a:19:08:1b:f3:e8:d8:cf:37:fc:4d:
                    95:8d:0c:1a:6e:f2:d3:80:ed:bd:49:2a:5a:b7:f7:
                    44:a6:49:f1:0d:b1:8d:6a:11:ad:08:42:de:45:b7:
                    ae:13:1c:6c:3d:18:f3:d5:7d:ad:ee:96:bd:97:3a:
                    c0:40:88:13:34:dd:85:fc:5e:e1:bb:2a:24:4b:00:
                    3d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:BC:54:26:36:B5:1E:CC:C7:8D:B7:72:1C:53:04:90:3A:84:BA:E4
            X509v3 Authority Key Identifier:
                keyid:27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:df:c8:78:15:ef:5c:0e:29:01:37:14:c7:bd:0c:40:63:52:
         da:4f:2f:97:50:82:8b:c7:f5:cf:be:af:00:66:88:75:0c:cb:
         4d:c0:3a:af:71:01:59:c6:47:2d:c8:1c:de:3f:1a:d2:0a:da:
         b8:72:76:d8:c2:9f:12:11:d3:7c:65:8b:a6:f4:ed:98:56:49:
         b4:43:df:e1:4e:84:ed:17:5e:23:04:ed:08:d6:43:61:45:3a:
         45:d1:08:e1:c3:b2:8a:5b:62:c9:45:55:4d:b6:83:f5:33:15:
         9f:76:7f:46:16:fb:51:d2:fa:c0:b7:ff:98:1c:27:bd:f9:58:
         a9:6e:95:ca:70:2f:0a:ed:38:b0:a4:85:2e:f4:27:2f:5d:7e:
         5b:f1:e4:6d:9f:6e:ac:97:24:5c:63:82:db:43:e8:b1:1c:ef:
         6a:86:38:4f:d8:4f:8e:ac:d0:d8:80:48:65:b1:c9:37:1f:dd:
         f5:93:5d:79:9d:c7:8b:00:3b:8f:4c:b9:bc:c7:d5:03:bd:9b:
         07:83:5a:0e:e8:39:a9:30:3f:4c:6e:69:9b:50:e7:71:d4:98:
         70:cc:38:c0:53:8a:6b:0a:6b:2f:14:88:ec:36:1b:93:f5:39:
         e7:ee:99:ee:f0:17:ba:11:11:83:f2:3c:20:b8:03:5d:03:83:
         b5:bc:85:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 00:28:12 2025 by rpki-client