This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
File:                     JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft (raw, json)
Hash identifier:          WIEIr3rxfG4IbLy3c3iBEwVRgFbZ4pRnYW8jmFKMUDQ=
Subject key identifier:   69:0D:87:01:87:86:8F:65:18:A7:A6:00:74:63:1E:4C:5C:E7:CC:B6
Authority key identifier: 24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E
Certificate issuer:       /CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
Certificate serial:       019AF12E5F8EC6449CAA83CFC7F48E9A14CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
Manifest number:          17BA
Signing time:             Sat 06 Dec 2025 01:02:19 +0000
Manifest this update:     Sat 06 Dec 2025 01:02:19 +0000
Manifest next update:     Sun 07 Dec 2025 01:02:19 +0000
Files and hashes:         1: 3I4C6Ngc7fDqENlrP9MQ3movJoI.roa (hash: CozQlTp6j6rye5pcJ/4KWGyOSARgztmDQg7ndMeU3mw=)
                          2: 9fhOOLWzaKKnUgNesblBRXup_NE.roa (hash: TIicytJIGRARKhFkXUtm3rRLHNbDX7lgNERyWMF3Dfw=)
                          3: JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl (hash: XxheVHkE3e8st08+bEVn5qVo2AIeXCHj6tW8KfSvKvI=)
                          4: aLheTfUgtUNdeT-nsAOrx74v2WY.roa (hash: yUihWXxYUVQMAsj8/uxzJUGwVEI6SwR8Wy4B7TIZZnQ=)
                          5: gzLs6Xol47tKfjPqLr4RNwy_8T0.roa (hash: l9a7Iax1Z9uUS5+rKaniwvZo+UX2Ws1F66M5mMABVgA=)
                          6: mLsh4sGtoHIqeKrfN3jXMMLu4k0.roa (hash: m/Mvmk/5mQxCIOXX60XJtwJ8Xe1PRKwFBcukoCDP1Ow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:5f:8e:c6:44:9c:aa:83:cf:c7:f4:8e:9a:14:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
        Validity
            Not Before: Dec  6 01:02:19 2025 GMT
            Not After : Dec  7 01:02:19 2025 GMT
        Subject: CN=690d870187868f6518a7a60074631e4c5ce7ccb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5e:13:0a:61:b5:ec:13:af:ac:50:77:3f:e0:
                    e7:d2:84:3a:f7:00:e1:c5:7b:98:71:47:13:12:da:
                    d0:16:01:ac:8b:ec:b0:a5:5c:20:38:55:b6:b0:52:
                    83:8c:5c:3b:1d:a7:08:ff:2d:95:98:be:26:e5:79:
                    f1:d1:00:fe:30:58:a8:cd:08:ef:0a:69:45:d3:0e:
                    9e:5b:9c:a3:53:bc:49:55:13:16:f5:a7:d5:9e:3d:
                    d0:b7:e0:d8:66:da:57:f0:16:ab:19:d9:fd:44:1a:
                    2f:fe:1d:1e:a4:f4:fa:94:d1:ff:6f:91:2a:dd:0d:
                    2a:20:95:97:fd:f7:6e:28:0b:c9:c1:d6:9d:c8:31:
                    54:e5:72:b6:ad:f8:d0:56:5a:a2:2d:bb:8c:04:04:
                    bd:ae:db:79:35:f1:1d:30:4d:0d:47:3e:6d:77:27:
                    70:38:87:c7:2c:c5:f8:e7:2e:2f:d2:f4:76:f5:bc:
                    8a:76:ba:94:45:ce:ef:d7:f8:f7:a7:8e:f9:87:20:
                    3d:27:88:ce:49:3d:d3:76:c6:8d:3d:10:58:8f:ee:
                    30:b4:0f:09:1b:55:6d:08:d2:22:0f:ba:22:74:89:
                    f3:36:d0:bf:e1:6a:4f:ef:54:9e:c1:2d:61:50:c2:
                    82:66:0f:f5:93:ae:33:e9:fe:86:fe:31:ca:7b:7d:
                    04:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0D:87:01:87:86:8F:65:18:A7:A6:00:74:63:1E:4C:5C:E7:CC:B6
            X509v3 Authority Key Identifier:
                keyid:24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:db:1d:92:d2:21:22:ea:46:aa:83:ea:a7:5d:69:54:f1:b9:
         b5:c5:bb:9f:74:fe:46:c4:79:87:24:fc:42:22:09:af:10:f4:
         7a:0c:e0:41:f5:c0:f2:7e:bc:77:69:e3:ba:12:6e:4d:08:e2:
         39:86:95:33:d9:30:73:43:c2:c1:5f:b0:96:de:c7:a4:93:53:
         b0:76:7f:6e:68:44:e7:25:3f:78:0a:1a:ea:67:2f:c5:dc:1a:
         24:7c:c3:67:07:5f:5c:13:c6:93:ce:54:aa:59:0f:86:1c:77:
         63:b3:c1:b3:b6:fb:d1:db:58:48:75:f9:0e:75:36:4e:94:7c:
         1b:83:05:05:53:93:c6:59:df:75:4f:92:e6:57:18:0a:b9:fe:
         bb:03:61:41:23:00:61:e9:a3:9b:ce:2d:b2:9e:fc:d0:67:c8:
         dc:54:81:a9:cd:43:9d:d7:4a:b2:40:c1:f9:75:9c:e0:40:0c:
         67:f0:f7:45:64:2e:ee:9d:c4:68:11:74:e2:3f:40:eb:cb:cb:
         3c:b3:0f:27:39:54:2f:c5:1e:e4:61:f5:08:9f:c6:e6:f3:c4:
         ee:8a:e1:10:f6:05:6c:7d:a7:38:6d:cb:4c:c1:da:ad:3c:d4:
         3b:e7:45:61:45:c5:b5:0e:69:7c:f3:7d:27:93:0b:3c:9b:49:
         95:a0:de:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:08:54 2025 by rpki-client