This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft
File:                     JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft (raw, json)
Hash identifier:          ZxppBnrmSKNXOv+2Dbl24On/vcBXqTk70RYkqLA/ycs=
Subject key identifier:   A0:1B:35:82:FF:66:38:FA:31:CA:4A:B5:17:4E:26:3C:19:6B:AE:61
Authority key identifier: 25:64:52:A3:42:0F:4F:18:DF:A3:A1:4D:26:B3:34:8F:DF:CF:3D:3B
Certificate issuer:       /CN=256452a3420f4f18dfa3a14d26b3348fdfcf3d3b
Certificate serial:       019B115D186FA48E54232CA97869481A3FA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft
Manifest number:          15C9
Signing time:             Fri 12 Dec 2025 07:01:12 +0000
Manifest this update:     Fri 12 Dec 2025 07:01:12 +0000
Manifest next update:     Sat 13 Dec 2025 07:01:12 +0000
Files and hashes:         1: HNZKASXvOu7ez_JH9PuMKg51dfc.roa (hash: E5GVRIyB2FPDqpFEdeZFkQOEeY/IVLgHRxxoYqNwjnk=)
                          2: JWRSo0IPTxjfo6FNJrM0j9_PPTs.crl (hash: A9uaP0tdbc2jX6EIXFBbmgqJzCT85Aidzm0aU61utl8=)
                          3: NqMfKTDrbsPrNxCXiRIwQ8DU7Mc.roa (hash: GGBjuq8lEOTVnRsXwnhvhM0oZ3JZj3EYuSAWIn9Qv1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Dec 2025 07:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:11:5d:18:6f:a4:8e:54:23:2c:a9:78:69:48:1a:3f:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256452a3420f4f18dfa3a14d26b3348fdfcf3d3b
        Validity
            Not Before: Dec 12 07:01:12 2025 GMT
            Not After : Dec 13 07:01:12 2025 GMT
        Subject: CN=a01b3582ff6638fa31ca4ab5174e263c196bae61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8c:98:3c:77:38:02:82:f1:60:df:a1:85:3c:
                    99:ca:28:65:54:c7:51:1a:4f:63:19:e5:86:c6:7b:
                    6e:f5:49:e8:8b:28:fd:70:5c:af:32:c5:1d:3f:6a:
                    18:77:26:b3:a8:17:a0:98:39:00:bc:69:cc:04:cf:
                    e5:ee:72:fe:33:95:d3:00:21:78:a9:bc:bf:0b:68:
                    62:03:a9:05:b7:8e:3a:d2:f1:36:d8:11:9c:44:2b:
                    a1:04:f8:8d:fa:87:d1:ee:b7:37:e8:59:ca:a3:59:
                    cb:71:db:39:3f:88:53:61:f0:d4:2f:fe:e6:fc:f1:
                    53:c0:b7:c3:4d:35:72:c4:7e:bb:eb:b2:2f:c8:7e:
                    5a:c5:30:62:43:43:1a:f5:db:2b:6d:d2:0c:97:9e:
                    1e:f5:54:6a:85:4d:79:25:6d:89:ae:21:f1:e5:c5:
                    1c:50:c5:8f:f1:9b:7c:f8:15:57:4a:ca:ba:d1:31:
                    e2:3b:81:0d:56:60:e0:17:e8:b9:8c:8a:fb:b4:1c:
                    46:bb:c5:c0:c0:f4:05:5f:c5:a9:86:93:b7:18:37:
                    e6:d2:66:8c:28:3c:81:6d:46:35:32:e9:79:41:61:
                    f5:29:82:46:7a:de:cf:b1:c6:e2:6b:27:7a:de:e8:
                    34:6c:c7:34:fe:bf:f8:ce:dd:04:dc:64:dc:64:6a:
                    9b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:1B:35:82:FF:66:38:FA:31:CA:4A:B5:17:4E:26:3C:19:6B:AE:61
            X509v3 Authority Key Identifier:
                keyid:25:64:52:A3:42:0F:4F:18:DF:A3:A1:4D:26:B3:34:8F:DF:CF:3D:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:ab:08:53:2e:1a:c2:66:17:0f:da:fd:5e:6e:a9:3e:8c:f9:
         bd:bc:0e:5b:e0:15:29:10:4f:0b:e9:33:4b:5b:4d:cd:a5:19:
         e2:93:96:e6:ba:41:12:4b:2d:91:66:0f:8a:2e:1e:51:08:c9:
         21:e5:f0:2d:47:7d:6a:50:cb:22:bd:c2:a3:ba:7e:cd:75:3f:
         e8:f9:69:09:88:03:7e:ca:18:28:49:25:de:0c:5d:7e:78:d1:
         f2:3d:25:b4:2d:dd:b4:dc:b7:e4:5d:62:cc:99:9f:1a:e5:fd:
         f9:5e:72:42:b7:00:da:20:bf:d9:18:85:92:e7:c3:59:9a:f5:
         86:3d:94:66:cd:6a:31:23:1f:98:fe:8a:43:0b:d1:0f:82:ae:
         c3:30:0c:75:82:d6:16:8f:9c:7e:46:b4:17:b8:98:8b:25:be:
         cc:dc:d2:53:68:5a:fe:fd:99:d7:a1:48:2e:6f:10:08:52:f0:
         6e:7a:73:4f:61:67:14:49:9e:b0:99:42:b8:00:a1:15:cc:ba:
         19:c8:3c:aa:4d:d7:83:28:93:ec:96:40:6f:7a:60:15:b9:87:
         b1:a2:e1:35:55:f4:f3:d7:06:56:01:e0:99:b5:de:44:a9:c2:
         1f:ac:63:29:da:f3:06:e3:c4:18:c6:20:cd:45:e9:42:51:54:
         b4:68:3a:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsRXRhvpI5UIyypeGlIGj+mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NjQ1MmEzNDIwZjRmMThkZmEzYTE0ZDI2YjMzNDhmZGZj
ZjNkM2IwHhcNMjUxMjEyMDcwMTEyWhcNMjUxMjEzMDcwMTEyWjAzMTEwLwYDVQQD
EyhhMDFiMzU4MmZmNjYzOGZhMzFjYTRhYjUxNzRlMjYzYzE5NmJhZTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIyYPHc4AoLxYN+hhTyZyihlVMdR
Gk9jGeWGxntu9Unoiyj9cFyvMsUdP2oYdyazqBegmDkAvGnMBM/l7nL+M5XTACF4
qby/C2hiA6kFt4460vE22BGcRCuhBPiN+ofR7rc36FnKo1nLcds5P4hTYfDUL/7m
/PFTwLfDTTVyxH6767IvyH5axTBiQ0Ma9dsrbdIMl54e9VRqhU15JW2JriHx5cUc
UMWP8Zt8+BVXSsq60THiO4ENVmDgF+i5jIr7tBxGu8XAwPQFX8WphpO3GDfm0maM
KDyBbUY1Mul5QWH1KYJGet7Pscbiayd63ug0bMc0/r/4zt0E3GTcZGqbXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKAbNYL/Zjj6McpKtRdOJjwZa65hMB8GA1UdIwQY
MBaAFCVkUqNCD08Y36OhTSazNI/fzz07MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSldSU28wSVBUeGpmbzZGTkpyTTBqOV9QUFRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9hNDgzODgtMmVkNy00NGNmLTk1NTct
ZjM4YjI4OWZmOTY5LzEvSldSU28wSVBUeGpmbzZGTkpyTTBqOV9QUFRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9hNDgzODgtMmVkNy00NGNmLTk1NTctZjM4YjI4OWZmOTY5
LzEvSldSU28wSVBUeGpmbzZGTkpyTTBqOV9QUFRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtasIUy4a
wmYXD9r9Xm6pPoz5vbwOW+AVKRBPC+kzS1tNzaUZ4pOW5rpBEkstkWYPii4eUQjJ
IeXwLUd9alDLIr3Co7p+zXU/6PlpCYgDfsoYKEkl3gxdfnjR8j0ltC3dtNy35F1i
zJmfGuX9+V5yQrcA2iC/2RiFkufDWZr1hj2UZs1qMSMfmP6KQwvRD4KuwzAMdYLW
Fo+cfka0F7iYiyW+zNzSU2ha/v2Z16FILm8QCFLwbnpzT2FnFEmesJlCuAChFcy6
Gcg8qk3XgyiT7JZAb3pgFbmHsaLhNVX089cGVgHgmbXeRKnCH6xjKdrzBuPEGMYg
zUXpQlFUtGg66w==
-----END CERTIFICATE-----
Generated at Fri Dec 12 13:27:28 2025 by rpki-client