This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.mft
File:                     jBhqVuqEwTxidoqdF7rhM87fEEU.mft (raw, json)
Hash identifier:          +nRSgr5/bj2gVupm3gLlGy+pYmgDD45MjwO22CqBCF8=
Subject key identifier:   B2:8A:7E:FD:16:4A:D5:E2:FD:DE:27:17:74:93:39:20:D9:18:84:A4
Authority key identifier: 8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
Certificate issuer:       /CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Certificate serial:       019B2FD50D9B58ECCFF44152C2EF9C26A3DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.mft
Manifest number:          179D
Signing time:             Thu 18 Dec 2025 05:00:50 +0000
Manifest this update:     Thu 18 Dec 2025 05:00:50 +0000
Manifest next update:     Fri 19 Dec 2025 05:00:50 +0000
Files and hashes:         1: REfYg6zs4mzXkznv8BZKawAeEPY.roa (hash: fxWL8SMng2Jg9LEtF9apPtdYuyEYzVdto0OqCyAqJew=)
                          2: S2Oderrp7lYRIScX-QAUHtFKgP0.roa (hash: CJ1oiM/HycEGfncA5aOP1zkSKBg0JuVq13Asp3X8j2w=)
                          3: YEfco2c9_b6VDtGwlUBszWvCvI0.roa (hash: 0dy3l8v/4sRsGHHGtOtE/Z/gbG5L+kAxLfCYcCqk4xc=)
                          4: jBhqVuqEwTxidoqdF7rhM87fEEU.crl (hash: FqrQSC0Gn/oHitZjGFeul35JUVq+s36aurCXQ/cV6J4=)
                          5: mvpAx8iDjGH9lSdh_3xmSQQUBAE.roa (hash: MjF+bU2gEpBTvrFiqD4iioLH75sJQKzBcEFDKQdgh+o=)
                          6: qNE1Oc5YdEXAaCXUki-27-49n4M.roa (hash: kONF3c4X+eIS37hIjtumNoVHLNO/2aceAl9uEWgk568=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 05:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2f:d5:0d:9b:58:ec:cf:f4:41:52:c2:ef:9c:26:a3:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c186a56ea84c13c62768a9d17bae133cedf1045
        Validity
            Not Before: Dec 18 05:00:50 2025 GMT
            Not After : Dec 19 05:00:50 2025 GMT
        Subject: CN=b28a7efd164ad5e2fdde271774933920d91884a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:47:72:73:88:3d:06:b4:a7:ee:0c:d6:6f:31:
                    1d:9c:eb:d7:ed:03:69:36:2d:10:25:cc:48:41:a3:
                    9b:46:d9:98:42:04:84:4f:a6:4f:31:07:94:3e:58:
                    c5:5d:bb:32:f6:a7:64:08:4b:53:af:32:75:81:10:
                    63:c8:e5:92:ac:d0:0f:57:35:d3:9d:de:4a:0f:b2:
                    6b:3d:00:80:48:15:ba:af:a0:04:92:e8:ed:e3:ed:
                    0f:8a:61:c6:29:21:87:46:cd:f8:55:e6:03:de:01:
                    49:39:28:c3:a9:b7:66:c6:b7:c6:ed:e9:7e:12:05:
                    5e:01:8a:38:60:f8:e6:84:7f:2c:3e:c5:6e:b0:59:
                    56:d6:6c:f6:b4:00:0a:b7:5d:1d:6a:c6:2c:82:24:
                    5e:78:f2:bb:fb:a7:4e:90:77:16:09:95:fb:a1:b2:
                    b5:c2:5e:29:84:f1:5a:46:f7:db:27:06:96:da:5f:
                    7e:11:a5:38:ef:6a:db:82:6e:96:c3:2b:4f:37:34:
                    ea:7e:03:a6:de:d0:e8:a0:e9:a6:35:bb:20:45:a4:
                    06:c8:ab:a8:78:ad:24:5d:92:6a:22:3e:c8:f8:88:
                    29:f4:55:7c:38:07:ad:c7:8c:15:97:09:59:c1:25:
                    c6:09:fc:83:f7:8d:31:5a:d1:3a:e2:07:5e:4f:5e:
                    f6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:8A:7E:FD:16:4A:D5:E2:FD:DE:27:17:74:93:39:20:D9:18:84:A4
            X509v3 Authority Key Identifier:
                keyid:8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:b7:68:9d:a4:cb:d0:97:bd:ff:01:9b:00:16:21:70:09:0a:
         06:d3:01:79:8c:bc:36:22:f6:98:2d:e9:11:0b:a8:99:c1:ce:
         13:08:90:2c:44:b5:2f:8c:1b:eb:51:bc:97:5e:1a:38:10:ee:
         7b:ec:0e:de:aa:f1:d4:ae:ae:a3:0d:96:ec:b7:a9:56:bb:48:
         ec:8a:4e:e7:fd:0c:b2:71:2a:fa:d7:f5:a7:2a:23:23:76:8d:
         92:b2:77:bb:e6:08:09:a2:b3:c5:81:34:07:35:f2:a1:1b:22:
         f3:6b:66:89:30:ea:df:ef:10:b5:fb:27:46:53:ab:0a:f7:bc:
         c3:57:82:21:ed:4c:aa:c6:6a:1d:33:29:38:b6:82:7f:5d:b7:
         29:d3:ea:0a:29:82:a9:d8:54:88:43:e1:a8:5f:fe:21:52:e6:
         8d:e8:6b:31:b4:bd:33:b5:1c:92:63:94:44:91:78:b3:64:ca:
         78:86:c4:30:62:c9:6f:7f:6a:6e:76:27:80:76:a9:03:d6:05:
         0e:8d:db:87:dc:54:33:04:36:a0:09:0e:2e:8e:40:10:1f:d8:
         41:fd:24:9e:03:19:69:5e:11:0a:c1:1e:2d:07:7c:6d:a9:44:
         f9:e0:bd:4f:bb:fc:66:24:3e:9c:53:30:d7:ab:99:77:ce:4a:
         fc:48:1b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 14:17:34 2025 by rpki-client