This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.mft
File:                     Jrq4xpFYUfTv1AJ090JQm3rH4i4.mft (raw, json)
Hash identifier:          gPbZPw3VfPU1wQo6cnaipVtOPrs/sMCb1xrXu2FNsxc=
Subject key identifier:   6B:9F:B6:E8:18:42:F3:32:1F:7E:8F:38:DB:AA:F4:8E:F2:9E:3C:66
Authority key identifier: 26:BA:B8:C6:91:58:51:F4:EF:D4:02:74:F7:42:50:9B:7A:C7:E2:2E
Certificate issuer:       /CN=26bab8c6915851f4efd40274f742509b7ac7e22e
Certificate serial:       019B0DB6E6AD6BDBF8EA613D2998D1A649FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jrq4xpFYUfTv1AJ090JQm3rH4i4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.mft
Manifest number:          1771
Signing time:             Thu 11 Dec 2025 14:00:48 +0000
Manifest this update:     Thu 11 Dec 2025 14:00:48 +0000
Manifest next update:     Fri 12 Dec 2025 14:00:48 +0000
Files and hashes:         1: Jrq4xpFYUfTv1AJ090JQm3rH4i4.crl (hash: NJxnP/IZFj/XPfPT9OFfnnlc0TV4SnInvBOvbuBtEJ0=)
                          2: JsFuF67j5QQhkERyLc9f-ELIcO4.roa (hash: Jr+i8Pi7L5/o/8dCQ8fKEW/EXyo8XR/bahrVO/hjd9g=)
                          3: k4opLHE596mDmmleF3IyTuI3JYo.roa (hash: FNLuUm2MqOPcBwdnPkx8HwmBWDjGjRFM7nXpuuRMMIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jrq4xpFYUfTv1AJ090JQm3rH4i4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 14:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0d:b6:e6:ad:6b:db:f8:ea:61:3d:29:98:d1:a6:49:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26bab8c6915851f4efd40274f742509b7ac7e22e
        Validity
            Not Before: Dec 11 14:00:48 2025 GMT
            Not After : Dec 12 14:00:48 2025 GMT
        Subject: CN=6b9fb6e81842f3321f7e8f38dbaaf48ef29e3c66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:48:7a:e3:4c:5b:7f:65:53:d2:fc:b1:e8:1d:
                    96:3a:d9:28:33:27:80:64:a5:ec:0e:fb:bc:84:db:
                    59:17:e8:49:77:a1:07:c2:7e:ea:9b:c6:9f:05:b0:
                    c2:3e:e9:a2:16:46:59:95:6d:0b:5a:88:94:0b:15:
                    b4:12:e9:09:d9:39:ca:25:e8:ea:f8:ba:1b:59:30:
                    20:10:d2:59:a2:25:81:64:c0:13:6a:8c:bb:4a:dc:
                    35:28:67:22:26:ec:b9:26:6c:7f:76:ee:fc:c8:fe:
                    8f:7a:a1:91:ad:37:86:d0:97:29:0b:93:cd:1b:ca:
                    84:6c:2e:26:68:a6:51:cc:91:b3:2c:79:a5:18:49:
                    7c:07:a4:f2:a8:77:38:8b:71:a5:fa:85:a9:9f:cc:
                    3b:bb:9e:ca:2f:59:6e:70:a6:aa:ca:96:4b:bf:f6:
                    e5:bf:b4:00:41:1a:6e:22:1f:96:57:d2:63:f6:b3:
                    f1:c3:a0:5f:e9:a0:a0:09:1d:bc:1d:cf:cf:ae:3c:
                    09:04:6e:ab:b3:e9:69:d9:7f:5c:f0:ae:c9:a4:53:
                    dd:48:8c:09:f9:f4:35:60:f8:31:37:a0:95:22:52:
                    12:7f:24:19:48:35:a8:36:f5:97:0a:8d:66:d4:d1:
                    66:06:4c:db:ba:13:cd:95:3e:e1:c2:36:fb:e2:dc:
                    04:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:9F:B6:E8:18:42:F3:32:1F:7E:8F:38:DB:AA:F4:8E:F2:9E:3C:66
            X509v3 Authority Key Identifier:
                keyid:26:BA:B8:C6:91:58:51:F4:EF:D4:02:74:F7:42:50:9B:7A:C7:E2:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jrq4xpFYUfTv1AJ090JQm3rH4i4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:4e:b6:53:38:4f:f9:24:76:88:0d:37:fd:a9:f1:e5:80:67:
         9e:17:cf:c2:6c:bb:82:7c:c3:31:e4:c9:22:3e:b7:a8:ee:46:
         91:81:4e:fb:16:53:e0:66:7d:fd:38:19:0e:d3:3c:54:88:ed:
         74:2a:77:09:e9:8e:32:ec:9d:e1:43:f3:a6:3c:07:d3:3c:f6:
         d8:db:3e:0d:d6:14:3c:1f:da:91:2b:21:5e:1a:7d:a1:0a:9e:
         1b:27:6f:f8:b1:62:d4:c8:c0:d0:91:8f:1f:6d:29:93:bc:1b:
         90:d5:16:d2:61:d8:9f:89:24:51:ec:60:13:9b:56:12:d1:0c:
         97:a8:c0:18:1f:1f:4d:9e:1d:b3:37:5a:ba:e1:66:09:80:dd:
         ed:bc:bc:1c:30:f9:b8:67:3d:4c:72:0e:70:bd:08:2a:62:45:
         5f:cf:7f:aa:38:65:63:3c:96:31:01:bb:4e:af:5f:48:78:65:
         0c:5c:f5:85:7d:b3:f7:67:f7:ec:24:a1:ab:c2:e6:cb:d4:34:
         a7:2e:93:8f:f1:97:02:f7:ed:41:4e:a1:b7:b8:50:7e:30:1f:
         f2:9a:c0:e5:ec:c0:7c:88:56:65:af:e1:c5:ab:e6:98:4b:5a:
         20:7e:be:73:7d:1f:7d:8f:ed:c1:e4:1f:0b:cf:fd:44:03:cc:
         13:0f:e1:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsNtuata9v46mE9KZjRpkn+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YmFiOGM2OTE1ODUxZjRlZmQ0MDI3NGY3NDI1MDliN2Fj
N2UyMmUwHhcNMjUxMjExMTQwMDQ4WhcNMjUxMjEyMTQwMDQ4WjAzMTEwLwYDVQQD
Eyg2YjlmYjZlODE4NDJmMzMyMWY3ZThmMzhkYmFhZjQ4ZWYyOWUzYzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Uh640xbf2VT0vyx6B2WOtkoMyeA
ZKXsDvu8hNtZF+hJd6EHwn7qm8afBbDCPumiFkZZlW0LWoiUCxW0EukJ2TnKJejq
+LobWTAgENJZoiWBZMATaoy7Stw1KGciJuy5Jmx/du78yP6PeqGRrTeG0JcpC5PN
G8qEbC4maKZRzJGzLHmlGEl8B6TyqHc4i3Gl+oWpn8w7u57KL1lucKaqypZLv/bl
v7QAQRpuIh+WV9Jj9rPxw6Bf6aCgCR28Hc/PrjwJBG6rs+lp2X9c8K7JpFPdSIwJ
+fQ1YPgxN6CVIlISfyQZSDWoNvWXCo1m1NFmBkzbuhPNlT7hwjb74twEowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGuftugYQvMyH36PONuq9I7ynjxmMB8GA1UdIwQY
MBaAFCa6uMaRWFH079QCdPdCUJt6x+IuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnJxNHhwRllVZlR2MUFKMDkwSlFtM3JINGk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hMTY2YTctN2QwNy00MDlhLWFlZDAt
NjM5MzE1ZGNhNTgwLzEvSnJxNHhwRllVZlR2MUFKMDkwSlFtM3JINGk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9hMTY2YTctN2QwNy00MDlhLWFlZDAtNjM5MzE1ZGNhNTgw
LzEvSnJxNHhwRllVZlR2MUFKMDkwSlFtM3JINGk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADk62UzhP
+SR2iA03/anx5YBnnhfPwmy7gnzDMeTJIj63qO5GkYFO+xZT4GZ9/TgZDtM8VIjt
dCp3CemOMuyd4UPzpjwH0zz22Ns+DdYUPB/akSshXhp9oQqeGydv+LFi1MjA0JGP
H20pk7wbkNUW0mHYn4kkUexgE5tWEtEMl6jAGB8fTZ4dszdauuFmCYDd7by8HDD5
uGc9THIOcL0IKmJFX89/qjhlYzyWMQG7Tq9fSHhlDFz1hX2z92f37CShq8Lmy9Q0
py6Tj/GXAvftQU6ht7hQfjAf8prA5ezAfIhWZa/hxavmmEtaIH6+c30ffY/tweQf
C8/9RAPMEw/hgw==
-----END CERTIFICATE-----
Generated at Fri Dec 12 00:00:09 2025 by rpki-client