This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
File:                     JnK5-1RrNl4yMjDc6puoyfvt_rg.mft (raw, json)
Hash identifier:          Dqr8eXXZBR6b95pN0GQHTS7jUAa8yDOEI7pKcdONiD4=
Subject key identifier:   69:E8:6A:77:91:CC:28:36:31:42:2F:10:41:03:F1:6C:DF:6B:14:91
Authority key identifier: 26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
Certificate issuer:       /CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Certificate serial:       019AFDED785CF31B2566AEB339E227606C15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
Manifest number:          0BE2
Signing time:             Mon 08 Dec 2025 12:26:29 +0000
Manifest this update:     Mon 08 Dec 2025 12:26:29 +0000
Manifest next update:     Tue 09 Dec 2025 12:26:29 +0000
Files and hashes:         1: ITb_XVl2tA11J6nAknkJ07xuM_A.roa (hash: Te0z4RiC3nV17xojwnpgYVjVq9us6VbZr6q0RMM9u2o=)
                          2: IiRUAz4hSIV7OUEiVfrgvucqsUU.roa (hash: T/7LHAq2EL6EwhYPqc8JG0TPs56tuDIUkENf+F5W/z8=)
                          3: JnK5-1RrNl4yMjDc6puoyfvt_rg.crl (hash: 9DwFPI3NdA9kWfO3ERnZXp3yyrz3fM4IeKUnEFIb+fI=)
                          4: WyMoFYnAIn1sAAAmnPjWInPKCN0.roa (hash: 1MKnjj6EqbU+hUr91/B+f0YJrJKMU7mmnJwoLcY6nt0=)
                          5: x2L9sUbxW33fcs0aePdpG3ktSqs.roa (hash: t5ZLRaewJtsVQa5rjFmmNY5tynxtVjHiqD40jfPku7U=)
                          6: y9KTYkCcz9X-wHblp6V4OiKB-A8.roa (hash: MiEzpatVp+ndU9E4bxMOGWBIiRH8JujeOmOr6aRsU1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Dec 2025 11:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:fd:ed:78:5c:f3:1b:25:66:ae:b3:39:e2:27:60:6c:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
        Validity
            Not Before: Dec  8 12:26:29 2025 GMT
            Not After : Dec  9 12:26:29 2025 GMT
        Subject: CN=69e86a7791cc283631422f104103f16cdf6b1491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:96:2a:fb:2f:b3:71:23:25:7e:7a:f4:be:b2:
                    b1:af:04:d3:d2:ff:b0:9e:4b:3f:33:a4:c5:b4:69:
                    24:bf:c7:d6:7f:84:88:db:34:ef:84:f7:23:cc:99:
                    c3:41:0b:1a:05:9a:2f:9e:e0:13:d6:7e:b7:6c:98:
                    c8:28:10:51:2e:69:8e:58:90:7a:73:68:44:bb:a8:
                    05:6c:71:36:a3:ee:a0:bd:72:6e:8e:50:aa:60:d6:
                    0a:3d:29:d4:ef:47:64:7b:e4:02:09:58:da:a5:a3:
                    42:97:96:59:12:0c:41:42:4d:94:55:ad:4a:12:af:
                    f6:29:93:c1:75:89:c2:04:08:6f:55:fb:00:41:a4:
                    8a:53:70:49:b6:72:99:f4:6d:ac:83:07:e2:d9:80:
                    0b:5c:cd:43:a1:15:98:c1:58:d5:5a:11:6e:68:a2:
                    ca:26:46:f8:49:9b:6e:53:57:fd:c2:fe:55:fb:2b:
                    bb:df:43:68:e5:11:96:72:d0:8a:19:f8:d5:0b:be:
                    f6:f2:99:d5:a8:13:a0:cb:b9:a7:5b:42:52:05:41:
                    46:5a:bd:1a:58:4b:2d:c4:a3:97:cb:c3:22:89:a5:
                    b9:7d:64:e4:48:c2:3f:77:58:64:fa:4e:d9:b9:52:
                    b2:ae:eb:5f:ed:f2:d0:c4:b9:30:c3:b7:ab:e7:be:
                    15:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E8:6A:77:91:CC:28:36:31:42:2F:10:41:03:F1:6C:DF:6B:14:91
            X509v3 Authority Key Identifier:
                keyid:26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:09:cd:c3:d9:8a:ec:d0:47:fc:af:fb:08:54:5f:74:05:0a:
         a9:82:79:c0:2e:ce:4e:47:72:15:2b:b7:e4:d9:8f:38:79:51:
         54:1d:1a:43:aa:65:c0:09:f1:0e:dc:53:68:97:a3:9e:6d:37:
         f0:ab:aa:f8:1e:3c:4f:55:cb:1e:01:fc:88:e6:b9:38:e3:97:
         fb:41:18:ef:e5:58:11:bd:d0:37:7f:66:a5:c1:67:28:da:61:
         79:df:0f:c1:1a:34:9d:2d:0a:1e:67:e1:21:27:67:e9:b7:47:
         4a:c3:03:d1:9b:bd:fc:4f:d5:6f:ae:e2:b3:5c:a5:9c:66:67:
         f5:55:44:12:ed:b2:56:7d:b0:13:c8:33:20:79:40:b7:63:4c:
         ab:c4:77:22:12:07:aa:4e:ad:bf:03:7e:aa:71:d0:d5:75:5c:
         ef:f7:fe:cd:e6:1a:f8:1e:8b:19:bb:f3:d6:88:16:ec:95:7d:
         33:aa:8f:7f:63:a2:f9:4c:ff:1d:69:c9:36:c0:c8:c8:ef:4e:
         db:7a:10:6d:ae:21:d5:8a:8c:9f:e3:cf:ee:85:85:99:8d:4e:
         d5:a6:bf:a4:6f:fd:87:62:5f:e0:95:58:a7:6f:df:82:ee:69:
         17:e5:20:05:0b:c8:7c:40:e4:2a:38:31:84:5d:fd:aa:5a:71:
         ec:03:0e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 15:40:18 2025 by rpki-client