This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
File:                     jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft (raw, json)
Hash identifier:          xWj9KrDlA4PRXKAKQKSF7/OpmrghKcjPd9IpZ5HPIOQ=
Subject key identifier:   E2:98:47:AB:51:03:5D:5D:FA:CE:89:18:5C:75:6D:9C:3A:CD:71:86
Authority key identifier: 8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F
Certificate issuer:       /CN=8db49baf17f06c364a00f8e64c891c53729f7a2f
Certificate serial:       019B3B345F15F29879DE854205C426E6449D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
Manifest number:          178C
Signing time:             Sat 20 Dec 2025 10:00:46 +0000
Manifest this update:     Sat 20 Dec 2025 10:00:46 +0000
Manifest next update:     Sun 21 Dec 2025 10:00:46 +0000
Files and hashes:         1: T1NphBpxfH2bIKCDktHdRZTHIcY.roa (hash: jIDQlaKJTEZfvbg4vcsOnliaPcSJWC3wo/0K3CkIb7o=)
                          2: jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl (hash: c2U3vzj3bW/geBr+4SEYRmbfbhgVpH2PMIZshEcw5ts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 10:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3b:34:5f:15:f2:98:79:de:85:42:05:c4:26:e6:44:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8db49baf17f06c364a00f8e64c891c53729f7a2f
        Validity
            Not Before: Dec 20 10:00:46 2025 GMT
            Not After : Dec 21 10:00:46 2025 GMT
        Subject: CN=e29847ab51035d5dface89185c756d9c3acd7186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ad:a0:fc:9e:62:e6:f0:18:4b:a1:37:a3:7e:
                    80:1b:4e:26:44:fa:07:bb:56:b5:a5:05:61:82:21:
                    3c:9a:f1:83:82:79:12:ed:b5:fd:0a:a0:fb:5a:0e:
                    35:90:bd:76:b7:c8:b6:48:bd:39:4c:7a:4f:1c:4a:
                    9a:9e:64:0c:90:f4:e9:d9:37:f4:f7:f3:75:8b:6a:
                    49:ae:35:8e:71:e6:ae:0a:37:42:62:70:9d:8c:e3:
                    b9:97:65:f6:31:d5:ad:72:ab:1f:02:15:7e:e4:31:
                    c7:1b:11:73:87:cd:0c:ca:42:57:23:41:a9:11:de:
                    04:04:81:d8:c8:39:23:bb:c8:5b:19:82:e5:bf:10:
                    1b:96:58:95:38:48:55:c5:e9:ba:b9:17:9e:bf:f2:
                    9a:d1:af:94:48:9a:dc:30:e7:38:f1:18:e5:02:8d:
                    0d:f0:f7:cc:a7:29:e9:1a:ff:e0:11:e0:58:c4:c0:
                    67:95:2d:26:7e:20:8b:30:48:47:d1:13:10:4c:aa:
                    e6:25:fe:e0:e2:7f:39:21:5d:5e:bd:fd:8e:61:6a:
                    88:f5:97:a9:ed:27:db:da:4c:93:24:ec:b4:30:80:
                    a3:ef:63:4a:9b:ac:9a:59:a3:ed:10:17:cf:2e:30:
                    33:5e:ca:70:31:a3:4a:87:ec:a0:9d:c7:58:65:82:
                    5d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:98:47:AB:51:03:5D:5D:FA:CE:89:18:5C:75:6D:9C:3A:CD:71:86
            X509v3 Authority Key Identifier:
                keyid:8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:96:c1:66:bf:dd:8b:8c:a7:2b:37:71:df:37:93:df:1d:21:
         9a:52:c3:c8:3e:9e:b2:a1:bb:de:df:05:cb:7e:13:f8:1d:b1:
         66:60:47:11:35:35:37:13:c8:e9:9b:46:b8:bb:8a:1f:64:a5:
         f2:47:f3:ee:de:fd:5f:8d:a4:e6:c5:45:d7:cb:3e:34:5c:b9:
         78:a1:e8:f6:2c:68:df:72:7c:28:c9:bf:41:02:df:aa:45:7b:
         a8:4d:2e:65:f6:0d:dd:4d:0b:2c:6a:b9:9e:c0:46:df:4a:18:
         a7:f4:42:bf:25:2d:37:03:f2:6b:16:7f:46:cc:79:29:70:05:
         17:a0:7a:92:ce:a3:9c:d1:90:5d:7b:a0:c0:f6:5f:83:a4:dd:
         ad:18:df:d2:45:b0:f4:c1:46:71:51:61:c0:39:f1:63:49:ec:
         0a:c8:05:c1:12:c4:79:2a:57:6a:4d:ec:73:5b:60:9c:80:34:
         dd:8f:2a:40:e2:1f:1a:fb:63:d0:0c:7e:62:01:67:b9:91:ca:
         0c:f2:82:44:63:5a:40:8e:fe:c7:d2:27:b3:ec:61:6e:a8:44:
         31:23:28:2e:6e:5e:08:48:cf:92:e4:bb:80:78:30:50:52:26:
         57:48:e5:c4:21:7e:66:2b:ff:0e:95:47:61:44:f4:1d:74:d0:
         49:f1:b1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:18:17 2025 by rpki-client