This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
File:                     u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft (raw, json)
Hash identifier:          lUv2j57/q8YLZhBjqGqEA+3tbzVXtOPR9S2V+exVyrM=
Subject key identifier:   09:9F:EC:99:C1:C0:0B:0E:33:55:6A:EE:03:98:34:78:B3:B8:CB:23
Authority key identifier: BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18
Certificate issuer:       /CN=bbffc9a9832667ac0d6d1e2406550533c3b55618
Certificate serial:       019AF23F5DC9EED47274A341AAF425FF242B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
Manifest number:          13E8
Signing time:             Sat 06 Dec 2025 06:00:30 +0000
Manifest this update:     Sat 06 Dec 2025 06:00:30 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:30 +0000
Files and hashes:         1: 2D_1ncLmLPuJXtpl_Q5ttTWBK4k.roa (hash: 0bQuiH2aHkDAf1rtJEQ6AsC0osUnBUOUl2vPm0WmrnY=)
                          2: IfAzv2xamXQmXpt0GBd13kn7nCM.roa (hash: jbzJm1UfZ+dpmS3iaSw271pkPBOa1r0axTofijj8Fjs=)
                          3: jPqjPZ927oU6pe2k5ljy1515_Bc.roa (hash: 1wwmQ4EiI2fcY7sas0ylQShSCsBsDc+FRheBv820+D4=)
                          4: u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl (hash: a1tuOFapLqSoVZ4+4+UJAhzzvwMnGy0bfBP1QTpcVZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:5d:c9:ee:d4:72:74:a3:41:aa:f4:25:ff:24:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbffc9a9832667ac0d6d1e2406550533c3b55618
        Validity
            Not Before: Dec  6 06:00:30 2025 GMT
            Not After : Dec  7 06:00:30 2025 GMT
        Subject: CN=099fec99c1c00b0e33556aee03983478b3b8cb23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:43:ff:d3:aa:15:31:71:29:d5:dc:c5:db:16:
                    bc:4c:f8:3f:ec:8f:9f:c6:d5:2b:57:0c:53:97:74:
                    df:3f:39:17:d6:3c:c4:47:31:b7:e2:ec:15:0e:27:
                    31:eb:2f:88:1d:11:8d:80:03:57:f4:4f:00:a0:5b:
                    ca:74:87:62:36:a6:ab:87:bd:56:1e:10:be:06:20:
                    f5:d1:26:75:75:ba:52:8f:51:00:ea:83:85:b2:8f:
                    33:35:95:2a:fb:a3:66:11:37:cc:ea:57:33:36:47:
                    0f:a5:88:4a:09:2a:70:7c:2f:1d:47:18:85:6d:9d:
                    35:fa:be:01:5a:23:f9:29:58:fa:f5:59:1f:ac:3a:
                    50:bb:8f:82:0a:83:2b:2e:b8:b6:f3:a5:18:81:43:
                    0e:ff:dc:a9:98:90:7e:64:46:f6:4b:b9:ad:cf:ae:
                    e4:f0:7c:b9:54:49:fc:60:70:20:d4:3b:07:bf:e7:
                    80:02:f2:71:d1:8f:15:f8:f7:74:f5:00:04:35:e8:
                    81:6a:70:6b:93:c5:71:3c:fd:ef:bc:20:00:df:13:
                    0d:bc:73:09:8d:74:f0:dc:d8:75:53:ef:04:17:92:
                    ad:f7:ac:6c:4c:71:c0:81:9c:3d:97:de:e8:82:45:
                    8a:88:9d:bf:10:13:d6:c9:64:19:74:31:e4:16:22:
                    30:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:9F:EC:99:C1:C0:0B:0E:33:55:6A:EE:03:98:34:78:B3:B8:CB:23
            X509v3 Authority Key Identifier:
                keyid:BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:61:1f:b6:54:da:b4:c8:79:86:b2:ea:50:bc:53:98:28:1a:
         28:17:33:a1:65:e7:de:49:83:35:18:2d:62:ea:86:6e:13:03:
         1c:d5:b3:5d:40:64:35:67:47:c1:0c:65:91:c8:78:ce:15:da:
         55:00:4d:f3:38:8d:88:28:0a:9f:da:65:7f:cc:54:40:21:48:
         6f:f3:c0:ee:aa:77:e4:00:b1:f3:64:6f:59:c8:31:3a:58:73:
         4f:42:79:b5:e0:a9:7f:b7:3b:82:24:64:ac:a2:75:15:d4:09:
         8a:b3:d7:b6:23:24:ca:9a:0b:df:60:d2:ae:e8:79:a4:35:d4:
         f0:f1:69:89:54:86:45:3b:4e:d9:29:05:40:df:ff:d4:48:f9:
         11:bc:33:0f:51:d1:91:32:74:8f:b2:10:e0:b9:16:db:44:ac:
         2e:be:00:d0:42:a1:58:e2:b7:8e:d1:bf:22:4e:8a:dc:47:75:
         3b:fd:07:6d:aa:f6:85:af:30:01:f3:8b:3a:4c:25:3a:fb:ac:
         16:d2:1a:b7:14:9f:88:1a:24:4e:ab:d1:67:ba:3b:40:f5:cb:
         67:15:d9:55:f3:92:bb:01:fe:ae:26:b7:2f:99:90:d4:b7:e7:
         92:06:2b:9d:a1:82:05:58:d8:c3:ca:50:53:c5:f7:ba:b9:2b:
         0a:7c:d6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:09:01 2025 by rpki-client