This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
File:                     jo6Xer76Kh-ZXonJR_79Rja3lhw.mft (raw, json)
Hash identifier:          29XFlSV3mUvdkfs+FDPUhHw1nxfnZhdg7/7mqgWF2AY=
Subject key identifier:   91:04:9F:F6:36:05:DE:12:D9:18:24:F2:B1:BD:0D:10:3F:84:AA:D1
Authority key identifier: 8E:8E:97:7A:BE:FA:2A:1F:99:5E:89:C9:47:FE:FD:46:36:B7:96:1C
Certificate issuer:       /CN=8e8e977abefa2a1f995e89c947fefd4636b7961c
Certificate serial:       019B0F6EB839BFE4FA1BC0282A6160E0E815
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
Manifest number:          95
Signing time:             Thu 11 Dec 2025 22:01:12 +0000
Manifest this update:     Thu 11 Dec 2025 22:01:12 +0000
Manifest next update:     Fri 12 Dec 2025 22:01:12 +0000
Files and hashes:         1: 1-1JiGSnRfJkGIdCY6ITAZRKA8LI.roa (hash: NxHneWDr/Bysr9GfZGnTiOG68S5eU/eXkBxXj/MldpQ=)
                          2: jo6Xer76Kh-ZXonJR_79Rja3lhw.crl (hash: 1vWvNznAvaPZcc/p1+ZDmbuKXKz8XWJ7k/2aSPvFteA=)
                          3: ow60WK19GLScvXjofKcYY7rIu7Q.roa (hash: k9aBIwcpyP8JupLuwo0clAFTDBkWTnr5IYecYXpvwdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 14:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0f:6e:b8:39:bf:e4:fa:1b:c0:28:2a:61:60:e0:e8:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e8e977abefa2a1f995e89c947fefd4636b7961c
        Validity
            Not Before: Dec 11 22:01:12 2025 GMT
            Not After : Dec 12 22:01:12 2025 GMT
        Subject: CN=91049ff63605de12d91824f2b1bd0d103f84aad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:57:fe:96:6d:35:74:d2:93:8a:46:59:7a:60:
                    e1:f2:ae:0c:11:e4:d5:df:03:79:f5:54:98:fa:52:
                    cf:b3:16:ef:72:03:e6:0f:4a:4b:20:97:eb:34:01:
                    d2:bc:02:77:55:d1:99:6e:49:a8:d7:76:0c:bf:a6:
                    0b:7e:45:a3:75:a1:91:63:52:0c:45:1f:95:a9:6f:
                    0b:4b:7b:c3:0e:52:5b:84:56:92:4e:f7:b2:6d:1a:
                    61:a2:e7:34:74:e3:54:df:8b:c0:42:1e:90:ff:bc:
                    5d:da:c9:6b:ad:f1:20:23:ae:82:bc:05:f7:86:3c:
                    93:7e:26:09:67:75:a9:40:05:98:91:56:1a:f1:4e:
                    11:a1:72:af:36:7a:78:27:fd:0e:1a:12:1a:a1:7a:
                    08:8d:97:e2:2a:bc:00:96:c0:da:0a:7d:a8:de:a3:
                    83:18:9f:99:a2:b4:19:48:ae:9a:c0:69:5d:03:4c:
                    dd:1e:07:7f:6c:e3:fb:5e:79:81:b3:49:f5:58:fe:
                    76:f4:3f:f0:54:6a:66:78:1f:e5:26:bb:4b:0a:63:
                    2a:a3:5b:5b:21:03:d6:fe:12:9e:ae:a4:ac:00:d6:
                    73:ff:5d:aa:23:a5:6e:25:33:f1:78:61:9e:17:be:
                    b5:37:97:e2:3c:fc:ed:76:f8:6d:5f:de:ce:b5:d2:
                    ea:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:04:9F:F6:36:05:DE:12:D9:18:24:F2:B1:BD:0D:10:3F:84:AA:D1
            X509v3 Authority Key Identifier:
                keyid:8E:8E:97:7A:BE:FA:2A:1F:99:5E:89:C9:47:FE:FD:46:36:B7:96:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:86:9d:64:22:cf:47:a0:f6:45:d3:3a:c3:05:e2:2a:64:bc:
         94:7c:b9:33:f0:ac:3a:87:89:a9:b0:85:c1:53:82:da:13:e4:
         7e:68:4b:c2:78:a8:a8:5d:51:48:bf:c8:23:6a:38:a1:a2:e4:
         d0:17:e8:6d:ba:75:e3:45:37:34:aa:54:28:3c:1d:57:26:a7:
         72:4c:5c:ce:0f:68:df:cd:d5:d6:d1:ca:98:e1:09:95:35:f3:
         d8:61:bf:53:c8:bb:72:0d:1d:df:6f:54:91:bc:63:1e:02:7e:
         33:e4:0d:f9:3a:55:ba:b2:87:37:de:0c:5b:e0:95:73:a9:c0:
         85:de:6c:27:7b:65:3b:3c:08:3e:46:aa:b3:4e:05:df:dd:16:
         07:9b:4b:e4:a3:70:00:e7:ea:7b:9d:9d:15:d0:ef:8c:66:57:
         72:a2:ea:de:63:a4:47:30:7c:9c:25:29:3e:89:44:b8:3f:be:
         2f:e9:1c:3a:7d:1f:c2:31:78:56:75:60:2c:0f:d9:63:79:89:
         7f:1a:29:b0:8a:41:6e:5c:24:33:e6:5a:13:d5:5a:07:33:71:
         63:e4:82:d9:a4:16:04:fe:9f:2a:7b:12:50:02:78:0f:73:6b:
         04:c7:02:e6:47:8b:2c:3d:f9:8c:a3:55:03:46:c7:42:82:10:
         a3:8a:be:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsPbrg5v+T6G8AoKmFg4OgVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlOGU5NzdhYmVmYTJhMWY5OTVlODljOTQ3ZmVmZDQ2MzZi
Nzk2MWMwHhcNMjUxMjExMjIwMTEyWhcNMjUxMjEyMjIwMTEyWjAzMTEwLwYDVQQD
Eyg5MTA0OWZmNjM2MDVkZTEyZDkxODI0ZjJiMWJkMGQxMDNmODRhYWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1f+lm01dNKTikZZemDh8q4MEeTV
3wN59VSY+lLPsxbvcgPmD0pLIJfrNAHSvAJ3VdGZbkmo13YMv6YLfkWjdaGRY1IM
RR+VqW8LS3vDDlJbhFaSTveybRphouc0dONU34vAQh6Q/7xd2slrrfEgI66CvAX3
hjyTfiYJZ3WpQAWYkVYa8U4RoXKvNnp4J/0OGhIaoXoIjZfiKrwAlsDaCn2o3qOD
GJ+ZorQZSK6awGldA0zdHgd/bOP7XnmBs0n1WP529D/wVGpmeB/lJrtLCmMqo1tb
IQPW/hKerqSsANZz/12qI6VuJTPxeGGeF761N5fiPPztdvhtX97OtdLqnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJEEn/Y2Bd4S2Rgk8rG9DRA/hKrRMB8GA1UdIwQY
MBaAFI6Ol3q++iofmV6JyUf+/UY2t5YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam82WGVyNzZLaC1aWG9uSlJfNzlSamEzbGh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9mM2Q1NzItM2RjNy00YjQ2LTkyNjkt
M2MzMGEwYWQxM2Y2LzEvam82WGVyNzZLaC1aWG9uSlJfNzlSamEzbGh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9mM2Q1NzItM2RjNy00YjQ2LTkyNjktM2MzMGEwYWQxM2Y2
LzEvam82WGVyNzZLaC1aWG9uSlJfNzlSamEzbGh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv4adZCLP
R6D2RdM6wwXiKmS8lHy5M/CsOoeJqbCFwVOC2hPkfmhLwnioqF1RSL/II2o4oaLk
0Bfobbp140U3NKpUKDwdVyanckxczg9o383V1tHKmOEJlTXz2GG/U8i7cg0d329U
kbxjHgJ+M+QN+TpVurKHN94MW+CVc6nAhd5sJ3tlOzwIPkaqs04F390WB5tL5KNw
AOfqe52dFdDvjGZXcqLq3mOkRzB8nCUpPolEuD++L+kcOn0fwjF4VnVgLA/ZY3mJ
fxopsIpBblwkM+ZaE9VaBzNxY+SC2aQWBP6fKnsSUAJ4D3NrBMcC5keLLD35jKNV
A0bHQoIQo4q+jQ==
-----END CERTIFICATE-----
Generated at Fri Dec 12 00:15:55 2025 by rpki-client