This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
File:                     jQtYT2A1_loofFZ_HjhUuPvCoMI.mft (raw, json)
Hash identifier:          42ATh3BaBufs5Sn0RLsOhzrpsHQOFAzQdxKkwFWJTyo=
Subject key identifier:   BB:0D:36:89:A3:29:82:97:5C:76:38:B3:FB:FE:89:01:66:56:20:21
Authority key identifier: 8D:0B:58:4F:60:35:FE:5A:28:7C:56:7F:1E:38:54:B8:FB:C2:A0:C2
Certificate issuer:       /CN=8d0b584f6035fe5a287c567f1e3854b8fbc2a0c2
Certificate serial:       019AF19AEBED30D55807992EFF14B2607462
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jQtYT2A1_loofFZ_HjhUuPvCoMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
Manifest number:          175E
Signing time:             Sat 06 Dec 2025 03:00:53 +0000
Manifest this update:     Sat 06 Dec 2025 03:00:53 +0000
Manifest next update:     Sun 07 Dec 2025 03:00:53 +0000
Files and hashes:         1: 4QNIL4c6Gz_sxHoIV5bmO3J-yRY.roa (hash: hUEgN9PKhux4KaNWV6X/MwNUuCaPOczFnXagh0lAR1c=)
                          2: jQtYT2A1_loofFZ_HjhUuPvCoMI.crl (hash: UqMdZynAPEicT4iMjLAXUmJLLoxLwHTfoJETeuL4vDg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jQtYT2A1_loofFZ_HjhUuPvCoMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 03:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9a:eb:ed:30:d5:58:07:99:2e:ff:14:b2:60:74:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d0b584f6035fe5a287c567f1e3854b8fbc2a0c2
        Validity
            Not Before: Dec  6 03:00:53 2025 GMT
            Not After : Dec  7 03:00:53 2025 GMT
        Subject: CN=bb0d3689a32982975c7638b3fbfe890166562021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:05:41:fa:99:f6:5b:ba:3e:43:74:98:d1:8c:
                    00:67:c4:95:54:4d:b5:8f:70:37:80:12:c6:77:f1:
                    d2:67:6c:a2:9a:f9:32:9c:28:28:be:f7:94:5b:96:
                    64:91:e0:a2:55:e3:61:ee:de:47:27:a5:2f:52:63:
                    f5:a0:8b:e8:63:bf:5b:e9:d8:4c:f5:92:45:bb:48:
                    f4:04:ae:6e:52:22:6c:9d:d7:a3:53:3a:1b:1d:9f:
                    ee:dd:fa:d5:ac:7c:67:b0:28:b8:98:ae:fb:03:b0:
                    e6:dc:cb:48:5b:9b:ef:ab:e3:26:e0:94:42:51:c2:
                    f1:67:53:34:87:d3:49:5f:df:c2:55:e0:72:2c:88:
                    27:6d:13:ee:a8:f8:83:ee:ba:9c:bd:1f:ee:15:0a:
                    5b:0c:f6:2a:cc:26:29:74:41:95:d0:37:ea:5e:fe:
                    75:ce:9e:e6:ce:9f:31:65:da:18:54:52:2f:83:51:
                    da:9d:c5:f3:6b:ed:f3:a4:aa:0f:9b:69:d2:e1:da:
                    5f:13:ef:60:0a:cd:37:0e:c4:e3:5f:ff:13:d6:cf:
                    e0:88:4d:ef:9e:3d:9a:71:59:46:31:65:cc:59:e3:
                    dc:19:b6:04:94:cb:01:22:32:f1:20:9b:5d:2c:12:
                    7a:77:dc:ec:18:b0:10:b1:01:b5:32:e7:dd:6f:5b:
                    24:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:0D:36:89:A3:29:82:97:5C:76:38:B3:FB:FE:89:01:66:56:20:21
            X509v3 Authority Key Identifier:
                keyid:8D:0B:58:4F:60:35:FE:5A:28:7C:56:7F:1E:38:54:B8:FB:C2:A0:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jQtYT2A1_loofFZ_HjhUuPvCoMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:89:52:09:09:aa:db:c2:45:d3:50:00:67:ec:82:66:29:56:
         10:5d:f1:b3:3e:2d:35:52:2a:cd:f0:05:b8:c3:9a:bd:13:86:
         53:e6:42:5b:22:d0:ec:dd:1f:c1:b2:27:a1:c5:4e:7a:37:f8:
         28:23:5c:84:2f:11:d6:60:3e:14:33:86:10:51:2e:b6:9c:44:
         0f:4e:00:2f:2b:87:c9:44:ce:f6:a5:4f:03:85:de:17:e4:54:
         24:dd:ce:fa:46:20:c2:ed:89:c3:23:59:d9:83:b6:07:f7:bc:
         54:95:03:02:64:7e:dc:38:04:09:fa:9c:e6:ec:f3:6a:32:93:
         3e:1c:bd:38:29:94:d7:4a:ba:ed:47:32:8e:e6:b2:c1:59:b6:
         c1:22:0f:74:b6:a9:98:5a:1a:26:8a:16:c8:a7:71:79:81:76:
         4e:b4:8c:c4:f7:ed:20:d1:2a:44:cf:bc:2c:88:1d:51:22:69:
         2f:ea:56:f8:dc:b4:9a:b8:99:2b:d7:fd:22:1b:1d:71:b0:a1:
         ab:2f:e4:1a:26:be:22:28:6c:36:76:ef:41:3a:f4:1f:ca:68:
         2d:6e:f7:54:b4:89:e5:5a:39:5d:24:65:e2:65:a1:19:ec:4f:
         f3:2d:52:e2:4a:b8:fa:af:dc:9d:fe:0c:dd:49:76:ac:03:09:
         aa:ca:09:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:38:36 2025 by rpki-client