This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
File:                     J_whhWzY4Denu4xjkqYZghOotPY.mft (raw, json)
Hash identifier:          +Vfjl5+gSlqcowYR6VSvaQsFcactXKVCoEwAIZ/+msE=
Subject key identifier:   A7:32:F3:B1:FD:37:59:DB:19:01:88:CC:62:6E:88:FE:DE:D9:9C:26
Authority key identifier: 27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6
Certificate issuer:       /CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
Certificate serial:       019B0E2624E6B8080514EE5A7E8EEEF8A9E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
Manifest number:          0E51
Signing time:             Thu 11 Dec 2025 16:02:19 +0000
Manifest this update:     Thu 11 Dec 2025 16:02:19 +0000
Manifest next update:     Fri 12 Dec 2025 16:02:19 +0000
Files and hashes:         1: J_whhWzY4Denu4xjkqYZghOotPY.crl (hash: OgzNp3NQUfrlyKyfwPdPxx0kxXq0voJz2ZlDLcNfitM=)
                          2: UEg2a8frOwQJ_ocv6mZt898VwKc.roa (hash: HhDZ6hinLTKa6qeDqW6QogtlJ6a4udPeZaa3rESZ/rM=)
                          3: zUk84pMkBH7qM-5eyE2RTVXesY8.roa (hash: 1Rye/GoMkKTXa8JBFflyaNlKfqeLYK+b0R1zK9MVT4Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 16:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0e:26:24:e6:b8:08:05:14:ee:5a:7e:8e:ee:f8:a9:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
        Validity
            Not Before: Dec 11 16:02:19 2025 GMT
            Not After : Dec 12 16:02:19 2025 GMT
        Subject: CN=a732f3b1fd3759db190188cc626e88feded99c26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7e:83:bf:7f:f3:34:8e:f2:dd:0b:5f:60:c4:
                    45:e7:3b:d1:26:44:71:31:6f:7e:ab:fc:03:c7:8f:
                    95:88:10:1d:83:a8:e6:10:e5:49:6b:de:66:53:30:
                    f9:e3:e5:55:e8:a3:87:15:35:0a:c7:de:73:27:24:
                    d0:21:2b:75:e8:cc:d0:76:04:21:10:81:10:09:34:
                    aa:7d:59:ca:a7:99:ce:fa:2a:3d:82:65:6e:19:aa:
                    01:80:0e:c3:09:75:99:ee:91:3d:37:d1:27:93:a7:
                    8c:c3:f0:17:9b:11:7c:d6:7f:30:76:85:07:38:1f:
                    e4:a1:8d:bd:2f:6d:ac:12:79:49:fd:63:bb:f8:9a:
                    d1:28:79:7f:56:5d:e3:64:fc:86:ca:c4:30:32:e8:
                    72:41:a0:09:91:07:cc:05:c8:4e:79:69:11:a9:6b:
                    fd:ff:b9:2e:69:b6:f5:ad:26:96:1a:dd:7b:ef:13:
                    bf:9c:cc:33:10:16:a1:a3:c1:89:7f:2b:26:71:a2:
                    fc:3a:b5:56:2f:23:d4:4b:c9:c8:06:f8:3e:10:49:
                    fc:6f:f9:cd:96:78:d2:d6:53:d9:0d:4a:89:3f:90:
                    8f:fa:b8:34:1c:ae:9b:a3:c8:71:16:28:f9:8a:da:
                    05:f6:d3:64:bf:29:a3:57:67:a8:bd:8e:ec:d0:0d:
                    15:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:32:F3:B1:FD:37:59:DB:19:01:88:CC:62:6E:88:FE:DE:D9:9C:26
            X509v3 Authority Key Identifier:
                keyid:27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:85:09:03:8a:88:5f:59:0b:34:cc:7d:b1:b9:a5:43:7b:b5:
         1e:db:62:31:36:12:7f:4b:55:85:66:56:ef:41:20:9b:2c:a0:
         20:58:cc:6d:3d:0a:08:60:19:34:20:fe:a4:22:db:64:4f:cb:
         ec:35:9f:e1:f8:77:81:b4:a3:ab:99:72:20:0d:f4:83:bb:00:
         22:f0:1e:c5:8f:0e:93:5b:aa:a1:ce:ca:c8:a6:89:80:5e:16:
         c9:23:fe:72:92:e3:7c:68:1d:c2:d3:9c:4a:21:49:d8:15:80:
         da:e7:fe:02:6a:2f:ee:46:69:ef:6c:66:ff:a4:a2:18:83:ef:
         11:3a:02:6a:dd:c5:01:5b:12:37:cd:46:17:c2:64:bb:78:e4:
         54:52:29:60:aa:e4:75:5e:c8:09:d4:e4:9c:dd:ac:27:58:71:
         76:3d:81:28:35:5a:7f:e4:ca:00:c4:2c:8d:0b:a3:52:a1:97:
         be:09:1d:7a:61:a3:cf:08:47:1c:df:d6:96:f5:a5:8c:3d:1d:
         5f:82:e3:f9:dd:52:12:7c:07:32:69:0e:b0:90:7e:85:af:34:
         00:cc:f1:ec:4c:71:33:1e:a3:c0:ce:06:2a:5a:c2:ed:9e:fd:
         f1:45:6b:be:9e:d5:da:66:ec:fe:12:50:7a:ca:e9:a8:da:4b:
         00:b7:41:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsOJiTmuAgFFO5afo7u+KnhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZmMyMTg1NmNkOGUwMzdhN2JiOGM2MzkyYTYxOTgyMTNh
OGI0ZjYwHhcNMjUxMjExMTYwMjE5WhcNMjUxMjEyMTYwMjE5WjAzMTEwLwYDVQQD
EyhhNzMyZjNiMWZkMzc1OWRiMTkwMTg4Y2M2MjZlODhmZWRlZDk5YzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl36Dv3/zNI7y3QtfYMRF5zvRJkRx
MW9+q/wDx4+ViBAdg6jmEOVJa95mUzD54+VV6KOHFTUKx95zJyTQISt16MzQdgQh
EIEQCTSqfVnKp5nO+io9gmVuGaoBgA7DCXWZ7pE9N9Enk6eMw/AXmxF81n8wdoUH
OB/koY29L22sEnlJ/WO7+JrRKHl/Vl3jZPyGysQwMuhyQaAJkQfMBchOeWkRqWv9
/7kuabb1rSaWGt177xO/nMwzEBaho8GJfysmcaL8OrVWLyPUS8nIBvg+EEn8b/nN
lnjS1lPZDUqJP5CP+rg0HK6bo8hxFij5itoF9tNkvymjV2eovY7s0A0V1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKcy87H9N1nbGQGIzGJuiP7e2ZwmMB8GA1UdIwQY
MBaAFCf8IYVs2OA3p7uMY5KmGYITqLT2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSl93aGhXelk0RGVudTR4amtxWVpnaE9vdFBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9jN2ZhNDgtMjg3Ni00MjJiLTg4MjUt
ZTFmMzY3ZTc5NjIwLzEvSl93aGhXelk0RGVudTR4amtxWVpnaE9vdFBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9jN2ZhNDgtMjg3Ni00MjJiLTg4MjUtZTFmMzY3ZTc5NjIw
LzEvSl93aGhXelk0RGVudTR4amtxWVpnaE9vdFBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQYUJA4qI
X1kLNMx9sbmlQ3u1HttiMTYSf0tVhWZW70EgmyygIFjMbT0KCGAZNCD+pCLbZE/L
7DWf4fh3gbSjq5lyIA30g7sAIvAexY8Ok1uqoc7KyKaJgF4WySP+cpLjfGgdwtOc
SiFJ2BWA2uf+Amov7kZp72xm/6SiGIPvEToCat3FAVsSN81GF8Jku3jkVFIpYKrk
dV7ICdTknN2sJ1hxdj2BKDVaf+TKAMQsjQujUqGXvgkdemGjzwhHHN/WlvWljD0d
X4Lj+d1SEnwHMmkOsJB+ha80AMzx7ExxMx6jwM4GKlrC7Z798UVrvp7V2mbs/hJQ
esrpqNpLALdBoA==
-----END CERTIFICATE-----
Generated at Fri Dec 12 00:36:47 2025 by rpki-client