This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft
File:                     J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft (raw, json)
Hash identifier:          I5W0g/HlKJxpCTzO/0lEpibe9tb27oO8qPjXnpkUfSA=
Subject key identifier:   3D:44:10:DF:5C:16:2A:8F:F7:DC:84:2D:7B:4B:AF:3D:66:76:3A:AB
Authority key identifier: 27:87:3A:FE:63:30:B7:AE:9E:E5:62:E0:C9:88:E9:FD:5E:A8:F5:67
Certificate issuer:       /CN=27873afe6330b7ae9ee562e0c988e9fd5ea8f567
Certificate serial:       019B2A40F2032EA5BB862C19EF843DE76486
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J4c6_mMwt66e5WLgyYjp_V6o9Wc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft
Manifest number:          0634
Signing time:             Wed 17 Dec 2025 03:00:57 +0000
Manifest this update:     Wed 17 Dec 2025 03:00:57 +0000
Manifest next update:     Thu 18 Dec 2025 03:00:57 +0000
Files and hashes:         1: 0PYcltmJzMja0dvWKhNEIn2h5wU.roa (hash: yxrc3TyRtsqbuJQwsd58p+Gp8bj83VKuug5ZZ8u6nJI=)
                          2: J4c6_mMwt66e5WLgyYjp_V6o9Wc.crl (hash: CBVOJqSXF+CQvB95Hnf14L6qaT0xRqwu21UGxBcMpms=)
                          3: Qn3X5MY5K3ykqnmnbumI2xxV95w.roa (hash: +yROVQDwj+ut6F9Jj7DUoe7vy2IatzZdxg+R94Am18E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J4c6_mMwt66e5WLgyYjp_V6o9Wc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2a:40:f2:03:2e:a5:bb:86:2c:19:ef:84:3d:e7:64:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27873afe6330b7ae9ee562e0c988e9fd5ea8f567
        Validity
            Not Before: Dec 17 03:00:57 2025 GMT
            Not After : Dec 18 03:00:57 2025 GMT
        Subject: CN=3d4410df5c162a8ff7dc842d7b4baf3d66763aab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:66:a5:d4:41:0b:eb:ba:7d:e5:4c:05:f8:ec:
                    00:67:53:e6:de:1c:38:fd:aa:24:66:c4:bd:36:fb:
                    1e:2f:c2:ca:e8:04:49:4a:04:71:57:f3:3a:03:ac:
                    09:c9:08:11:00:2d:05:02:0b:81:06:1a:52:5b:88:
                    90:a0:f8:f8:47:ab:52:b0:d1:56:2c:08:cb:6e:c0:
                    5f:ea:f6:0a:59:69:29:b6:43:1b:d8:26:03:65:3e:
                    9a:61:1a:af:c6:1b:38:73:f8:bf:4b:b8:77:1e:5e:
                    55:32:45:1d:34:16:d8:55:47:18:10:44:72:64:43:
                    9c:1c:ed:74:1f:c2:53:6b:34:49:92:3f:ad:bd:29:
                    cf:59:7c:0b:58:f4:a6:af:dc:02:54:60:7f:5a:2f:
                    b4:25:a0:b3:57:27:d6:db:aa:a9:fa:25:2d:b1:37:
                    9a:78:25:43:f1:fa:0b:02:b1:f6:94:f3:aa:da:52:
                    54:2c:67:f0:3f:73:ce:7a:df:43:62:d8:d7:ef:9d:
                    12:72:20:01:12:46:7d:f4:00:86:9d:ac:64:3e:7d:
                    02:34:30:b6:9a:a8:ce:3c:7f:c7:b5:04:04:17:73:
                    8e:32:c7:b1:f8:66:d1:d6:de:d2:bc:73:b2:3b:70:
                    7a:06:54:8a:f1:98:6f:9b:4b:9b:74:cf:08:44:01:
                    90:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:44:10:DF:5C:16:2A:8F:F7:DC:84:2D:7B:4B:AF:3D:66:76:3A:AB
            X509v3 Authority Key Identifier:
                keyid:27:87:3A:FE:63:30:B7:AE:9E:E5:62:E0:C9:88:E9:FD:5E:A8:F5:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4c6_mMwt66e5WLgyYjp_V6o9Wc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:4a:06:40:04:17:7c:81:20:e4:36:27:48:a1:6a:f5:dd:64:
         98:19:79:b8:16:ef:ed:0a:44:b7:24:87:cb:f0:32:b3:0d:88:
         09:bc:02:6a:e4:e9:2a:99:29:82:75:85:73:3a:1c:f6:e4:31:
         69:73:ce:d2:76:6a:90:53:92:60:72:be:08:18:78:3d:34:d0:
         b8:04:c2:bf:b2:17:38:45:73:e3:6c:1c:f2:b5:c2:90:a2:de:
         57:04:ca:50:0c:11:00:42:85:24:c5:5d:f8:90:7c:89:2d:f4:
         a9:64:e9:17:cd:10:a2:4b:2c:35:b3:6d:06:3b:c0:69:c9:09:
         46:46:7e:2d:9a:ec:6f:30:69:fb:7f:24:b2:a1:2a:a7:54:93:
         6a:0c:5c:95:70:98:1d:c5:b9:fe:39:de:0a:99:2a:43:ca:36:
         55:7c:40:31:d0:fa:83:a3:13:3c:b8:48:c6:d1:af:2f:4a:66:
         f8:8f:49:49:8f:8f:f6:96:d1:a2:a8:2a:50:50:85:69:23:df:
         f7:30:46:48:1e:89:6c:ba:74:ba:92:37:81:39:d2:d3:13:7c:
         bd:f5:c2:d4:49:15:e1:30:9e:eb:86:f8:fe:3a:8c:71:e5:8a:
         56:85:98:7c:9d:76:d1:0c:ef:5b:bb:a0:bb:52:75:b6:11:bf:
         03:99:19:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsqQPIDLqW7hiwZ74Q952SGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ODczYWZlNjMzMGI3YWU5ZWU1NjJlMGM5ODhlOWZkNWVh
OGY1NjcwHhcNMjUxMjE3MDMwMDU3WhcNMjUxMjE4MDMwMDU3WjAzMTEwLwYDVQQD
EygzZDQ0MTBkZjVjMTYyYThmZjdkYzg0MmQ3YjRiYWYzZDY2NzYzYWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGal1EEL67p95UwF+OwAZ1Pm3hw4
/aokZsS9NvseL8LK6ARJSgRxV/M6A6wJyQgRAC0FAguBBhpSW4iQoPj4R6tSsNFW
LAjLbsBf6vYKWWkptkMb2CYDZT6aYRqvxhs4c/i/S7h3Hl5VMkUdNBbYVUcYEERy
ZEOcHO10H8JTazRJkj+tvSnPWXwLWPSmr9wCVGB/Wi+0JaCzVyfW26qp+iUtsTea
eCVD8foLArH2lPOq2lJULGfwP3POet9DYtjX750SciABEkZ99ACGnaxkPn0CNDC2
mqjOPH/HtQQEF3OOMsex+GbR1t7SvHOyO3B6BlSK8Zhvm0ubdM8IRAGQLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1EEN9cFiqP99yELXtLrz1mdjqrMB8GA1UdIwQY
MBaAFCeHOv5jMLeunuVi4MmI6f1eqPVnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjRjNl9tTXd0NjZlNVdMZ3lZanBfVjZvOVdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kMzk0MTYtZjQ2YS00ZjgyLWIxZTEt
ZTBkMWY3Y2FjZmYxLzEvSjRjNl9tTXd0NjZlNVdMZ3lZanBfVjZvOVdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9kMzk0MTYtZjQ2YS00ZjgyLWIxZTEtZTBkMWY3Y2FjZmYx
LzEvSjRjNl9tTXd0NjZlNVdMZ3lZanBfVjZvOVdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhkoGQAQX
fIEg5DYnSKFq9d1kmBl5uBbv7QpEtySHy/Aysw2ICbwCauTpKpkpgnWFczoc9uQx
aXPO0nZqkFOSYHK+CBh4PTTQuATCv7IXOEVz42wc8rXCkKLeVwTKUAwRAEKFJMVd
+JB8iS30qWTpF80QokssNbNtBjvAackJRkZ+LZrsbzBp+38ksqEqp1STagxclXCY
HcW5/jneCpkqQ8o2VXxAMdD6g6MTPLhIxtGvL0pm+I9JSY+P9pbRoqgqUFCFaSPf
9zBGSB6JbLp0upI3gTnS0xN8vfXC1EkV4TCe64b4/jqMceWKVoWYfJ120QzvW7ug
u1J1thG/A5kZYQ==
-----END CERTIFICATE-----
Generated at Wed Dec 17 07:39:46 2025 by rpki-client