This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
File:                     JWBlthZq75b8_zoupW_f_TkPMWY.mft (raw, json)
Hash identifier:          Btln3ko8mv9PiIw8W0mEcZom7rls06KVMnxWVOGfxcQ=
Subject key identifier:   96:09:8F:00:80:72:05:22:1B:FB:2B:1A:E5:49:26:F8:6C:5E:76:68
Authority key identifier: 25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66
Certificate issuer:       /CN=256065b6166aef96fcff3a2ea56fdffd390f3166
Certificate serial:       019AF164030694F50FAE66E065D04BB98E8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
Manifest number:          032D
Signing time:             Sat 06 Dec 2025 02:00:54 +0000
Manifest this update:     Sat 06 Dec 2025 02:00:54 +0000
Manifest next update:     Sun 07 Dec 2025 02:00:54 +0000
Files and hashes:         1: JFbIS27IKVFB-sXMdYdpnlEymqA.roa (hash: y1iRyb0r9qXHHkGFrahYiSMyCM8wsIM4hJtuQx44zzA=)
                          2: JWBlthZq75b8_zoupW_f_TkPMWY.crl (hash: SAITNaACHHIghG5m6K/E5KjMgi6JHhz9h0ALqGahYjs=)
                          3: jfhk4LSasdsv5oNazrLR2L8vp1w.asa (hash: iwJqwoB3o+vDtOoN6oPxah7dLq5OzsMri1+uy7aa78A=)
                          4: xSCJkLSz8okRRVgcJHTLgyQ0OB0.asa (hash: OFVnegCLm+osa3jIlWqFgfxVOraFOCOUxxKoN7wisMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:03:06:94:f5:0f:ae:66:e0:65:d0:4b:b9:8e:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256065b6166aef96fcff3a2ea56fdffd390f3166
        Validity
            Not Before: Dec  6 02:00:54 2025 GMT
            Not After : Dec  7 02:00:54 2025 GMT
        Subject: CN=96098f00807205221bfb2b1ae54926f86c5e7668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3e:05:0b:7a:fa:9f:0d:a3:ca:2e:f6:58:52:
                    bb:13:e2:60:9d:51:87:96:06:89:f8:1d:5e:e7:a2:
                    d0:4f:ac:64:4c:52:78:46:3e:93:8a:cf:0e:70:64:
                    0e:25:07:4b:b7:37:4b:75:65:0c:f3:83:bb:16:8c:
                    b9:00:0e:40:d9:67:66:c9:fc:24:f7:4c:65:b1:26:
                    03:d7:0e:70:05:98:19:51:8e:2b:72:44:b8:c2:7b:
                    43:98:a7:76:19:23:81:0c:01:1d:f4:16:0c:19:50:
                    7e:5c:f2:b3:ca:14:b7:fc:f1:40:c9:1a:3d:ac:5a:
                    12:5d:8f:35:29:8b:bd:6e:f0:c0:e4:f0:c9:3c:19:
                    4f:dd:ee:b8:4e:ea:b5:f5:dd:16:9e:0b:f4:d6:53:
                    25:0a:3d:26:5a:c2:fe:30:76:2f:07:3f:b1:07:01:
                    54:f8:9b:6f:0e:0d:56:55:68:ff:68:d0:dd:ad:34:
                    d3:ac:9e:c8:4c:65:6c:7d:31:46:85:09:3d:a8:78:
                    29:a0:d3:9e:51:f8:b7:8f:74:5f:95:96:bd:09:5f:
                    67:a4:55:60:5e:ed:57:b7:fe:e2:28:74:b7:d7:eb:
                    c5:87:a3:a9:68:93:4d:13:d6:d2:ae:9b:3a:15:55:
                    01:8d:f0:66:fb:98:a5:30:34:11:78:39:b7:f8:4f:
                    52:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:09:8F:00:80:72:05:22:1B:FB:2B:1A:E5:49:26:F8:6C:5E:76:68
            X509v3 Authority Key Identifier:
                keyid:25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:df:71:1d:63:64:a9:4c:f6:ef:82:17:9e:6e:46:bc:f1:06:
         ef:44:2a:d0:c1:1c:79:a6:ab:22:b7:44:a8:e3:2c:28:4b:68:
         df:83:84:35:3f:2f:11:69:11:50:e5:15:79:22:ff:ce:54:cd:
         ba:36:4d:2a:e7:3f:06:3d:4a:8e:d5:53:af:d7:fe:c7:46:44:
         c0:34:51:80:5f:2c:96:a0:06:dd:76:ca:14:aa:a5:71:b6:32:
         bc:89:e2:b4:bf:0c:96:d0:55:b0:14:e9:18:2f:13:c8:42:b5:
         56:cd:85:ff:a7:4c:f5:00:48:4c:f2:c2:68:6c:17:3a:2c:f4:
         8d:33:ab:46:80:e0:e5:b6:c9:87:29:ad:8c:51:84:1f:ab:d1:
         49:04:cf:9a:f7:84:49:28:3c:4d:92:7e:22:a4:e0:37:db:85:
         42:62:20:99:54:e2:e0:a2:ac:64:ec:9b:fc:36:ab:61:ab:c9:
         9b:08:15:59:aa:12:13:b3:db:f4:1e:d3:5b:35:d7:f6:66:09:
         39:75:c3:1e:17:ed:1f:97:53:ee:29:21:30:4a:62:3c:54:3e:
         ac:83:0b:4f:37:d1:e8:60:f8:a7:bc:1e:9e:49:17:96:73:71:
         11:24:a3:b2:dc:97:e5:f0:0a:1d:2b:0c:10:7f:05:1c:c0:49:
         3a:30:a2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:58:44 2025 by rpki-client