This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.mft
File:                     jBhqVuqEwTxidoqdF7rhM87fEEU.mft (raw, json)
Hash identifier:          RfE4ngqpmt2KNgiDsVRMacl90f1UHVrGCjp0cqEg9sE=
Subject key identifier:   29:3B:80:E7:BF:96:B6:4A:B0:7B:51:A3:F6:F3:E2:F7:73:A8:32:42
Authority key identifier: 8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
Certificate issuer:       /CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Certificate serial:       019B262DE58C9C616D19AB0C4AA5D85372BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.mft
Manifest number:          1798
Signing time:             Tue 16 Dec 2025 08:01:40 +0000
Manifest this update:     Tue 16 Dec 2025 08:01:40 +0000
Manifest next update:     Wed 17 Dec 2025 08:01:40 +0000
Files and hashes:         1: REfYg6zs4mzXkznv8BZKawAeEPY.roa (hash: fxWL8SMng2Jg9LEtF9apPtdYuyEYzVdto0OqCyAqJew=)
                          2: S2Oderrp7lYRIScX-QAUHtFKgP0.roa (hash: CJ1oiM/HycEGfncA5aOP1zkSKBg0JuVq13Asp3X8j2w=)
                          3: YEfco2c9_b6VDtGwlUBszWvCvI0.roa (hash: 0dy3l8v/4sRsGHHGtOtE/Z/gbG5L+kAxLfCYcCqk4xc=)
                          4: jBhqVuqEwTxidoqdF7rhM87fEEU.crl (hash: PAZpHPZHMsCBofLB1bbG60qYYzQt7yu3UBwyrA+/PCw=)
                          5: mvpAx8iDjGH9lSdh_3xmSQQUBAE.roa (hash: MjF+bU2gEpBTvrFiqD4iioLH75sJQKzBcEFDKQdgh+o=)
                          6: qNE1Oc5YdEXAaCXUki-27-49n4M.roa (hash: kONF3c4X+eIS37hIjtumNoVHLNO/2aceAl9uEWgk568=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 08:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:26:2d:e5:8c:9c:61:6d:19:ab:0c:4a:a5:d8:53:72:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c186a56ea84c13c62768a9d17bae133cedf1045
        Validity
            Not Before: Dec 16 08:01:40 2025 GMT
            Not After : Dec 17 08:01:40 2025 GMT
        Subject: CN=293b80e7bf96b64ab07b51a3f6f3e2f773a83242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ff:58:7f:16:63:5d:36:03:ef:1b:08:ec:09:
                    0c:be:8e:87:70:de:87:80:af:f3:e2:b7:fb:21:b3:
                    a0:9c:86:cb:14:05:d2:2f:e3:cf:12:20:4e:ef:2e:
                    75:59:0b:29:64:4d:f7:4e:0c:38:4f:98:96:cb:42:
                    7e:bd:fa:42:03:4f:4b:ae:0e:b5:bb:bc:64:50:9e:
                    2e:39:cc:15:35:fb:5d:5b:15:37:ff:5d:d0:d2:e7:
                    eb:02:93:85:48:a2:af:93:fc:d7:3c:99:37:ed:db:
                    53:0d:c6:e8:9c:f2:16:29:61:9a:71:df:61:e8:f9:
                    81:18:95:5d:c0:95:5e:91:ea:44:1c:d0:9a:b7:00:
                    02:56:77:07:a0:6b:de:54:fd:a6:f9:9e:ea:93:6d:
                    2c:50:24:82:fa:55:95:d6:16:56:c3:c3:dc:61:b1:
                    8c:9e:d0:f1:39:fe:53:66:46:85:38:5d:f7:1a:de:
                    d3:6c:fa:2a:bf:06:94:d8:ba:8c:ba:b6:d4:03:94:
                    a7:ca:7e:d2:03:a9:e4:58:c4:8b:5d:03:53:34:d4:
                    11:cf:7d:87:ad:f9:ed:6d:c3:02:e0:3a:e1:73:6d:
                    35:2a:e9:e7:7c:23:41:af:6d:71:67:49:c0:c7:ba:
                    32:97:a3:1b:40:d0:15:0d:a8:99:9f:e6:d9:9e:26:
                    21:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3B:80:E7:BF:96:B6:4A:B0:7B:51:A3:F6:F3:E2:F7:73:A8:32:42
            X509v3 Authority Key Identifier:
                keyid:8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:c2:f2:c1:ec:41:74:df:ff:33:79:cd:39:ea:f7:44:e2:d4:
         a5:1e:2b:2b:8f:4a:81:f4:ae:9b:4c:ac:e8:e5:80:af:e3:ba:
         ac:92:5d:43:ef:29:d4:54:a8:ea:65:2f:58:c2:41:0b:c9:e0:
         3d:0b:5d:78:2e:c2:5b:fa:b9:23:9d:e3:05:79:0e:8a:52:2c:
         66:f7:7b:fd:d4:6d:8c:ee:73:d3:40:9f:32:e0:70:ab:f3:9a:
         b4:be:4d:8e:20:c2:f2:b8:12:23:5d:a7:d5:ec:be:45:03:b0:
         cb:b2:02:33:84:11:91:c8:e2:35:b9:9d:64:9e:41:1f:7f:69:
         f8:5e:dd:c1:25:bb:24:c1:2d:54:64:c5:cf:5b:b4:02:1e:dd:
         21:9b:bc:51:28:22:2e:1b:9b:3d:ec:a0:ca:d8:b8:71:59:33:
         d5:88:f0:2c:9b:4d:b8:0f:a6:96:68:b8:2e:86:5f:10:9c:1b:
         49:58:dc:56:a3:a6:93:47:f2:0f:e5:d9:c9:3f:30:7f:fb:2d:
         da:b4:fc:85:a6:3f:94:1c:4e:51:10:72:ef:cb:e9:30:02:1d:
         10:d9:5f:8a:c3:b4:55:b1:2d:63:45:1e:63:20:c0:82:a9:96:
         e9:a1:75:1b:54:99:af:49:c2:f9:3d:27:7f:23:d5:ec:7c:4f:
         50:6f:73:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 15:10:08 2025 by rpki-client