This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft
File:                     JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft (raw, json)
Hash identifier:          JNKnuTfiMzorDs/PG3oYWuH5uvCXH99YbNWxF4liZI4=
Subject key identifier:   76:94:EF:B0:0D:EE:E5:61:FA:76:E1:7D:B8:CB:7D:2C:F4:3B:68:4E
Authority key identifier: 27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C
Certificate issuer:       /CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
Certificate serial:       019B3E6D0CB412E168EABB6B5D4316E8DFDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft
Manifest number:          178C
Signing time:             Sun 21 Dec 2025 01:01:32 +0000
Manifest this update:     Sun 21 Dec 2025 01:01:32 +0000
Manifest next update:     Mon 22 Dec 2025 01:01:32 +0000
Files and hashes:         1: A60RBGadDjKdPHVlJg0uqTD974Q.roa (hash: 4fXWgPDCvs0uk8MBVH/S+SmZyRTmunHNR49bT2RcI7c=)
                          2: JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl (hash: 49ZFZ/F3O/KMQHTfnuSDSug/PX8deb0x/acyfbCrAVg=)
                          3: ai_RgbT0zKstqqt2SbvFvSaAldI.roa (hash: +RxVDzpwxX0PVjGcCVeFRTO/OITdBFvoCwZmWeh/ZW4=)
                          4: tVPF_FMNIzvy1aLQDH9JsXjnUzc.roa (hash: NZpf0UeNwGFLjgoytkNM8IGey5uL4sin2yYuLpIaeRY=)
                          5: wDIhn2R8gp8Ak2ZXBIhikAaJW-g.roa (hash: OepYAELbBzS8mDh4vcbHfRlHazKGsQKZdJc2NWmplLQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3e:6d:0c:b4:12:e1:68:ea:bb:6b:5d:43:16:e8:df:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
        Validity
            Not Before: Dec 21 01:01:32 2025 GMT
            Not After : Dec 22 01:01:32 2025 GMT
        Subject: CN=7694efb00deee561fa76e17db8cb7d2cf43b684e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:23:72:0f:64:9b:04:80:27:0c:04:0c:ae:fa:
                    1d:cd:4e:a3:bb:bd:94:b1:82:5d:d3:10:e5:1a:1b:
                    70:11:29:71:c2:13:a1:f9:58:81:da:fe:09:0a:6b:
                    33:02:01:bd:71:5a:c7:af:0a:41:e9:5c:a7:be:d4:
                    5e:e7:c0:68:6b:02:f7:ae:34:a3:2e:67:34:3f:d9:
                    e4:f6:50:3f:91:4e:20:2b:d0:ee:fb:bf:b5:a7:b4:
                    4d:61:fd:f4:21:de:32:10:6a:70:e1:26:c2:5e:ce:
                    71:22:e8:98:45:f3:18:69:d0:69:d6:24:07:9b:db:
                    61:17:c5:bb:fb:9d:3e:e9:d4:f2:c9:65:11:ab:11:
                    8a:1e:25:fd:42:12:ff:af:19:ca:e9:36:75:ad:9b:
                    d2:26:92:d6:1f:56:26:76:d2:99:6a:9a:6b:b8:fe:
                    23:1d:40:fa:e9:d8:ff:aa:45:ea:15:87:cf:a5:7d:
                    5e:df:aa:8c:63:cc:9b:d2:95:a7:04:9b:64:59:72:
                    fe:17:ff:83:68:78:4d:c7:2e:81:ed:27:d8:89:18:
                    b5:00:63:32:f5:64:07:13:83:ae:18:da:4f:6b:31:
                    f2:8c:8d:2a:6e:c9:1c:4c:ba:d5:7a:04:72:92:bc:
                    a4:7e:ff:92:54:0a:f3:89:05:24:88:b7:28:45:57:
                    79:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:94:EF:B0:0D:EE:E5:61:FA:76:E1:7D:B8:CB:7D:2C:F4:3B:68:4E
            X509v3 Authority Key Identifier:
                keyid:27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:0a:75:de:61:63:d2:f4:cf:b4:98:d0:5b:c2:f3:37:10:ab:
         e0:56:f6:1e:ff:2f:db:32:52:97:5a:a0:25:ae:a0:39:b5:4c:
         dd:f6:d3:72:1b:80:a2:f7:1c:1e:fa:87:d3:a3:91:94:33:de:
         1f:90:5c:a8:ec:1b:94:55:99:d8:b6:3a:9a:01:29:18:c1:c5:
         b0:61:66:ce:d3:e2:da:be:f8:ca:07:5f:13:b4:32:be:1f:f3:
         46:e0:71:cd:9b:27:e9:ba:6b:91:fe:47:9a:e0:70:a6:59:2b:
         7b:f8:f3:d2:cd:e6:6f:30:af:db:3e:44:08:88:17:63:be:c7:
         28:72:16:3e:b9:6f:f0:32:fc:bf:1b:12:c6:6f:8b:0f:0f:18:
         d4:e1:cb:92:5e:f2:37:87:6a:20:00:7a:a4:6c:7c:53:26:95:
         f2:41:09:c7:2d:06:c0:de:93:55:73:15:e2:f1:f7:26:52:11:
         65:72:76:a8:50:fe:a1:9b:8a:9d:2e:03:e7:bb:da:01:9a:cf:
         52:74:bc:91:42:95:b1:5b:3d:aa:9a:5c:94:19:10:62:02:a5:
         e0:94:0b:cd:89:3f:b7:9c:78:05:82:fc:de:03:fb:da:29:5f:
         d0:a6:35:b6:16:e6:22:8a:69:6f:82:de:a1:23:cc:5d:92:14:
         7a:44:2a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 10:34:23 2025 by rpki-client