This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft
File:                     JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft (raw, json)
Hash identifier:          HROOHYeTo6+XixjmyAjKmTkymO4rNdmUnGefwB9m528=
Subject key identifier:   4E:F0:D4:03:17:09:D4:4E:90:B5:D0:95:40:C3:4A:BE:B4:6D:24:74
Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
Certificate issuer:       /CN=26a5aa918cbfeb3e12997f33890feb258907b343
Certificate serial:       019B1CBC04D69693A0ABD4B37A696ECE5842
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft
Manifest number:          142E
Signing time:             Sun 14 Dec 2025 12:00:42 +0000
Manifest this update:     Sun 14 Dec 2025 12:00:42 +0000
Manifest next update:     Mon 15 Dec 2025 12:00:42 +0000
Files and hashes:         1: 3AQkVEHFaMYSacwuB_BxozwNGjQ.roa (hash: jeS6MVFt6boj/NgjPcW0szXMbQo13HV5/k7qMzzrnUk=)
                          2: 8yaYj48CMeDTrtxfRpEdN6HgFIQ.roa (hash: 4avp+UIZj25/RQWft/nWjrgeixj3LhpnKvccOgiHbbs=)
                          3: Cuo_4OmB5hqfWI_WnYCCpNWLrgY.roa (hash: 3ZR1eIgUuJPainUs4mhe9MePZiakCaM69xOhHdIrRiI=)
                          4: JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl (hash: asSXZiclXDEqi6oD7rNm8/H5Jq2qT/jvPAq4Ftkhl5E=)
                          5: LM4Pk0L89FT4bKCAnT5Pam60X3A.roa (hash: 15JH8Jc4TtNGcpNeD66bPIeSCBDAVTNv6bCkpCrYf1k=)
                          6: ZPRKsrk_LO1Kz1FxSXf4yoBYhVE.roa (hash: MuaQpB8L7R2Qx8jUBzVEMelRet/5/uaTnFy0z9JGEOY=)
                          7: exSqcqToVirE26kLGdF-HPjamps.roa (hash: HQsC+Mewyu8X71olEoQS/oWx63H6y6cZFOsC8HgKsMc=)
                          8: gcc-FdNN6vti97PWBSoHsMNsu34.roa (hash: CtKuHOA67XtrsqR+tr65cCG6nxTHyUOq4FA3/7KVSO4=)
                          9: juhHhfMZKtMv7VJHZvSyHbChAaI.roa (hash: TVL933SmsCckOHxjM78yEFmonP+viUg+iondjs0ZENY=)
                          10: wwkTxtvy8y_gre1LyntK82_wg2o.roa (hash: 06SNxlJKLopu/TY42bvthXJuhwNZOlr+SWZ0JQeMj5o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 11:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1c:bc:04:d6:96:93:a0:ab:d4:b3:7a:69:6e:ce:58:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343
        Validity
            Not Before: Dec 14 12:00:42 2025 GMT
            Not After : Dec 15 12:00:42 2025 GMT
        Subject: CN=4ef0d4031709d44e90b5d09540c34abeb46d2474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:71:dc:c0:53:18:4b:c8:3b:dd:74:2b:6d:31:
                    7d:b3:db:5b:1e:f4:a9:d0:ad:db:fb:7c:53:e0:9c:
                    93:5a:ea:0c:f7:03:cd:47:b4:92:19:17:d1:34:64:
                    be:8e:d4:33:f5:42:82:3d:7f:95:b9:d9:55:7d:f2:
                    8a:65:88:d3:64:5d:f2:55:d5:28:86:7a:f2:f2:03:
                    b4:49:a7:fb:ee:03:d4:7c:86:e7:0c:68:98:f4:f3:
                    b7:2b:b8:d9:f6:d0:dd:a0:70:d2:20:4b:83:72:f2:
                    ff:37:f1:bf:e5:ce:12:ec:c0:9c:87:07:a8:c1:6d:
                    5d:cf:c4:8f:c4:a3:e1:38:bf:0f:64:6e:4f:8f:a8:
                    54:37:2a:5c:2e:10:f0:95:c8:cd:89:f9:89:e5:7f:
                    21:b0:a6:14:14:d3:e9:8b:6c:b3:b7:bf:33:c1:e4:
                    e0:12:03:67:ce:97:52:8f:be:a4:17:42:9c:99:17:
                    08:b1:96:c3:fc:a0:35:a3:ad:8b:85:e4:43:af:a3:
                    f1:c4:85:9b:6f:4d:9d:1c:0a:49:72:5c:41:4f:d2:
                    87:fb:12:8c:c9:e6:28:a2:68:33:77:fa:15:23:6b:
                    ea:e3:be:78:5c:7e:f1:66:70:62:c7:e8:b9:40:ea:
                    18:77:e2:9b:ea:5f:9f:ff:f8:d7:5b:b7:1e:60:b2:
                    53:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:F0:D4:03:17:09:D4:4E:90:B5:D0:95:40:C3:4A:BE:B4:6D:24:74
            X509v3 Authority Key Identifier:
                keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:4a:55:09:90:0b:28:f5:d3:36:14:f4:67:05:ff:fe:fc:cb:
         00:c0:f4:db:b9:a3:bd:58:e6:f8:be:1e:d0:52:7f:a7:91:5a:
         3f:61:28:3e:2f:cc:4f:94:b4:a6:0a:8f:88:a8:eb:0b:1c:1b:
         a9:5c:03:44:d2:f0:d8:53:69:8f:be:70:f0:23:ce:e2:f2:ae:
         f4:62:b2:f6:5b:72:bf:bb:55:86:3f:f2:78:76:03:cb:58:49:
         09:91:45:08:09:25:85:3d:7c:d4:73:4b:48:14:d2:8b:35:2c:
         8e:d8:59:68:e8:dc:c5:46:c6:09:47:6b:92:b0:22:a4:34:e8:
         3f:ee:9a:49:fe:83:9f:ee:e2:bb:f7:5b:b0:a2:79:a9:da:f7:
         c4:cc:4f:4f:a5:34:1a:cc:1f:fd:70:90:80:2b:7d:5d:f8:66:
         5f:e2:24:a5:b9:e4:ce:3a:1a:ad:6c:8c:01:39:68:2b:ab:e4:
         85:64:7c:13:1d:60:24:fa:32:6a:68:06:73:1b:f8:b8:4c:ba:
         0d:bf:70:b0:6b:e6:b8:9f:a3:be:67:42:50:e1:58:56:69:70:
         0c:a0:67:ae:02:87:3c:61:be:99:f7:d3:75:26:6c:ee:d1:b9:
         f0:57:9f:fc:b6:f5:87:eb:3f:66:cb:69:08:ae:b5:88:0b:b1:
         13:40:aa:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZscvATWlpOgq9SzemluzlhCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YTVhYTkxOGNiZmViM2UxMjk5N2YzMzg5MGZlYjI1ODkw
N2IzNDMwHhcNMjUxMjE0MTIwMDQyWhcNMjUxMjE1MTIwMDQyWjAzMTEwLwYDVQQD
Eyg0ZWYwZDQwMzE3MDlkNDRlOTBiNWQwOTU0MGMzNGFiZWI0NmQyNDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3HcwFMYS8g73XQrbTF9s9tbHvSp
0K3b+3xT4JyTWuoM9wPNR7SSGRfRNGS+jtQz9UKCPX+VudlVffKKZYjTZF3yVdUo
hnry8gO0Saf77gPUfIbnDGiY9PO3K7jZ9tDdoHDSIEuDcvL/N/G/5c4S7MCchweo
wW1dz8SPxKPhOL8PZG5Pj6hUNypcLhDwlcjNifmJ5X8hsKYUFNPpi2yzt78zweTg
EgNnzpdSj76kF0KcmRcIsZbD/KA1o62LheRDr6PxxIWbb02dHApJclxBT9KH+xKM
yeYoomgzd/oVI2vq4754XH7xZnBix+i5QOoYd+Kb6l+f//jXW7ceYLJTxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7w1AMXCdROkLXQlUDDSr60bSR0MB8GA1UdIwQY
MBaAFCalqpGMv+s+Epl/M4kP6yWJB7NDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnFXcWtZeV82ejRTbVg4emlRX3JKWWtIczBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8xNDMzZWEtMTA4MC00NmU1LWI2MTIt
Mjk3ZTI4MmQ2NmE4LzEvSnFXcWtZeV82ejRTbVg4emlRX3JKWWtIczBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8xNDMzZWEtMTA4MC00NmU1LWI2MTItMjk3ZTI4MmQ2NmE4
LzEvSnFXcWtZeV82ejRTbVg4emlRX3JKWWtIczBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO0pVCZAL
KPXTNhT0ZwX//vzLAMD027mjvVjm+L4e0FJ/p5FaP2EoPi/MT5S0pgqPiKjrCxwb
qVwDRNLw2FNpj75w8CPO4vKu9GKy9ltyv7tVhj/yeHYDy1hJCZFFCAklhT181HNL
SBTSizUsjthZaOjcxUbGCUdrkrAipDToP+6aSf6Dn+7iu/dbsKJ5qdr3xMxPT6U0
Gswf/XCQgCt9XfhmX+IkpbnkzjoarWyMATloK6vkhWR8Ex1gJPoyamgGcxv4uEy6
Db9wsGvmuJ+jvmdCUOFYVmlwDKBnrgKHPGG+mffTdSZs7tG58Fef/Lb1h+s/Zstp
CK61iAuxE0CqpQ==
-----END CERTIFICATE-----
Generated at Sun Dec 14 19:15:39 2025 by rpki-client