This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
File:                     J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft (raw, json)
Hash identifier:          x+nDNFWLquDSY4AXRqIeLsXd//gfnQwaVE7zhecRNao=
Subject key identifier:   F0:8D:36:CA:29:10:69:A5:6A:65:3E:63:0D:22:FB:61:BB:24:C9:24
Authority key identifier: 27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
Certificate issuer:       /CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Certificate serial:       019B3C46D15107D9E2898C878C623BD20272
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
Manifest number:          15E8
Signing time:             Sat 20 Dec 2025 15:00:32 +0000
Manifest this update:     Sat 20 Dec 2025 15:00:32 +0000
Manifest next update:     Sun 21 Dec 2025 15:00:32 +0000
Files and hashes:         1: 3WjmScxyPShGMsEmfTcZS4RZUd0.roa (hash: 5cWtsZDvpUp+XvqnrWOkzcAs96EsLhbvVP+8UGNRG5Q=)
                          2: Fi_TM4K4PYpSezLxC5qNEiPOZ3Q.roa (hash: DTiudzjdSu7JP8slciOiBe/Ykx5OQa6RusVSJBvKWj0=)
                          3: J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl (hash: H5S20gYNBB2e5sCn01gGk3mD8wnozj2TeSvEMHIpHEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 10:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:46:d1:51:07:d9:e2:89:8c:87:8c:62:3b:d2:02:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
        Validity
            Not Before: Dec 20 15:00:32 2025 GMT
            Not After : Dec 21 15:00:32 2025 GMT
        Subject: CN=f08d36ca291069a56a653e630d22fb61bb24c924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9f:3a:6a:c7:4b:22:71:28:4f:fd:fb:21:6c:
                    9a:ab:82:df:57:6b:ee:8b:db:7d:84:ae:f8:54:d2:
                    13:fd:cd:4e:64:6f:d6:79:f7:86:02:a5:f0:3e:23:
                    78:e5:bd:92:c8:73:39:cd:0d:c3:ef:81:ba:5a:a1:
                    af:a2:dc:1d:c7:60:09:95:84:10:f9:81:74:c9:1d:
                    45:a9:d8:82:a9:6f:c6:eb:db:fb:65:b5:05:ac:4e:
                    bb:8a:e1:f6:20:60:32:59:5a:f0:19:c8:cb:24:06:
                    ad:b7:00:92:d1:0d:b7:b9:70:9d:12:75:e0:63:bd:
                    80:aa:5d:c8:62:b5:0a:1d:e7:96:e9:d9:14:ce:37:
                    cf:fd:5e:84:a5:55:7f:0c:93:8f:37:b6:61:7e:d3:
                    f1:ba:18:b4:49:00:0b:4c:26:a8:70:d3:ba:2f:ec:
                    a1:80:af:87:8b:8a:13:c7:88:46:aa:60:07:a4:76:
                    7e:6c:53:9d:15:0d:6f:fe:e8:8a:a5:3c:65:24:a8:
                    c0:82:dc:67:66:58:7a:79:9d:9a:d1:33:2f:0b:8e:
                    ff:a1:8e:e4:21:75:a8:e3:61:57:30:da:a2:54:c5:
                    fc:5e:22:48:dc:c7:84:dc:81:34:f7:e1:40:5c:6f:
                    3b:01:e1:13:14:2d:50:c8:60:10:be:cc:15:f8:d7:
                    0a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:8D:36:CA:29:10:69:A5:6A:65:3E:63:0D:22:FB:61:BB:24:C9:24
            X509v3 Authority Key Identifier:
                keyid:27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:f1:c8:f0:a8:31:82:7e:43:ef:b2:33:1f:8a:36:ac:1d:d5:
         e9:6a:19:e8:5e:f3:78:7f:66:dd:32:d3:c8:51:a8:55:37:f8:
         36:e7:01:d8:3d:ed:74:db:62:63:1a:6c:1f:04:a4:ed:bd:e8:
         13:b3:78:a7:4a:ab:2b:d6:d9:d2:cc:61:74:24:d0:d9:58:13:
         14:41:b8:1c:ab:02:1f:17:70:71:4a:6e:75:ea:d5:9f:46:39:
         75:d1:33:c6:d6:a9:71:80:fe:33:1e:d8:87:8b:ec:f4:56:2d:
         ef:4c:6e:38:c3:b9:a4:26:ca:bc:66:56:21:38:c6:ee:cc:6c:
         d7:2d:1d:5b:ba:cf:8e:13:f7:b3:01:65:fa:ac:5e:de:48:7d:
         3d:ac:fc:5e:84:ff:4e:21:d3:b6:55:3c:9f:1e:ad:66:da:38:
         d4:67:8c:ff:64:4a:84:30:43:22:ac:a8:ce:42:2a:14:11:8b:
         64:a8:bc:79:c7:9b:20:65:21:ff:b7:fd:02:4d:b9:98:46:9d:
         94:0d:2e:aa:d8:14:4e:3b:24:bc:92:26:e6:ec:e7:74:8b:ad:
         8f:17:9f:82:3e:a1:b8:b1:61:08:4c:24:d6:b0:1b:6e:8d:e8:
         03:1b:3e:54:37:e2:f0:28:72:7d:a8:f5:38:fe:f8:4e:48:86:
         24:4b:29:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs8RtFRB9niiYyHjGI70gJyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NGQ5MWNmYTBhNmRiOWJmZDkxNTRhNDQxODU4ZTAwZTM4
YmRiZDYwHhcNMjUxMjIwMTUwMDMyWhcNMjUxMjIxMTUwMDMyWjAzMTEwLwYDVQQD
EyhmMDhkMzZjYTI5MTA2OWE1NmE2NTNlNjMwZDIyZmI2MWJiMjRjOTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs586asdLInEoT/37IWyaq4LfV2vu
i9t9hK74VNIT/c1OZG/WefeGAqXwPiN45b2SyHM5zQ3D74G6WqGvotwdx2AJlYQQ
+YF0yR1FqdiCqW/G69v7ZbUFrE67iuH2IGAyWVrwGcjLJAattwCS0Q23uXCdEnXg
Y72Aql3IYrUKHeeW6dkUzjfP/V6EpVV/DJOPN7ZhftPxuhi0SQALTCaocNO6L+yh
gK+Hi4oTx4hGqmAHpHZ+bFOdFQ1v/uiKpTxlJKjAgtxnZlh6eZ2a0TMvC47/oY7k
IXWo42FXMNqiVMX8XiJI3MeE3IE09+FAXG87AeETFC1QyGAQvswV+NcKcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPCNNsopEGmlamU+Yw0i+2G7JMkkMB8GA1UdIwQY
MBaAFCdNkc+gptub/ZFUpEGFjgDji9vWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjAyUno2Q20yNXY5a1ZTa1FZV09BT09MMjlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jNTFkNTgtZTM0OS00MjMxLTg2NGYt
OTc4MjM0YzNiYjcwLzEvSjAyUno2Q20yNXY5a1ZTa1FZV09BT09MMjlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9jNTFkNTgtZTM0OS00MjMxLTg2NGYtOTc4MjM0YzNiYjcw
LzEvSjAyUno2Q20yNXY5a1ZTa1FZV09BT09MMjlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJPHI8Kgx
gn5D77IzH4o2rB3V6WoZ6F7zeH9m3TLTyFGoVTf4NucB2D3tdNtiYxpsHwSk7b3o
E7N4p0qrK9bZ0sxhdCTQ2VgTFEG4HKsCHxdwcUpuderVn0Y5ddEzxtapcYD+Mx7Y
h4vs9FYt70xuOMO5pCbKvGZWITjG7sxs1y0dW7rPjhP3swFl+qxe3kh9Paz8XoT/
TiHTtlU8nx6tZto41GeM/2RKhDBDIqyozkIqFBGLZKi8ecebIGUh/7f9Ak25mEad
lA0uqtgUTjskvJIm5uzndIutjxefgj6huLFhCEwk1rAbbo3oAxs+VDfi8Chyfaj1
OP74TkiGJEspqQ==
-----END CERTIFICATE-----
Generated at Sat Dec 20 18:12:33 2025 by rpki-client