This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
File:                     JtmhbC-n1MNwtTJSFL5EILYR8fk.mft (raw, json)
Hash identifier:          NmmZrtx+FzcC70Yd+aTZ/zm8i/sJDDSge09t7HGLJmw=
Subject key identifier:   02:8F:ED:0B:16:E1:21:2B:F7:BD:A0:69:75:98:70:0E:E3:BE:8B:60
Authority key identifier: 26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
Certificate issuer:       /CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Certificate serial:       019B0F00CD3A404B2E4C6DAD6FA633E5DE6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
Manifest number:          1772
Signing time:             Thu 11 Dec 2025 20:01:09 +0000
Manifest this update:     Thu 11 Dec 2025 20:01:09 +0000
Manifest next update:     Fri 12 Dec 2025 20:01:09 +0000
Files and hashes:         1: 8ugHhLiToKwnzK4NKapWEcPlKh0.roa (hash: 4E0a2T2uUeIhUUG04lFzaUEsCu56I9vGRdi00E/gn7k=)
                          2: JtmhbC-n1MNwtTJSFL5EILYR8fk.crl (hash: BfJ744ALEkMTOn0mmUCBFrUDehMhj96V8nUGngUmkjw=)
                          3: zGlqz5otF9hY2Y3sk2pn1erhTAU.roa (hash: ofXFe05Yp+tSBC9fBzRKiln4g1Kad9/L6uAtEFx8Z54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 19:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0f:00:cd:3a:40:4b:2e:4c:6d:ad:6f:a6:33:e5:de:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
        Validity
            Not Before: Dec 11 20:01:09 2025 GMT
            Not After : Dec 12 20:01:09 2025 GMT
        Subject: CN=028fed0b16e1212bf7bda0697598700ee3be8b60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:08:f6:e6:53:91:ac:b6:d4:50:61:1a:69:66:
                    43:d8:49:05:8c:ef:e6:bf:b1:5f:62:6f:91:60:c0:
                    53:ce:80:3d:e3:d1:96:d1:57:7e:9b:a0:cb:da:83:
                    1a:88:90:61:f4:56:20:35:03:71:fa:9d:4d:5e:f0:
                    b5:15:2b:8e:26:dc:7d:c4:1f:c0:a0:f8:6b:9c:ce:
                    1d:f7:1a:c4:ce:3f:14:6a:2f:d0:58:7f:29:bd:04:
                    f6:9b:1e:fb:c0:c8:fb:06:2a:1d:39:19:f8:93:a8:
                    43:63:6a:18:72:a2:c9:84:94:f5:17:f4:2b:28:2f:
                    18:2e:89:d2:22:57:28:7e:b6:1e:83:3c:5d:e6:80:
                    c5:16:13:5e:7d:d6:01:10:51:c7:bb:e5:40:05:81:
                    89:8b:e2:24:87:f4:20:0d:23:7e:18:52:85:26:21:
                    ea:ca:d2:57:dc:c2:7a:be:75:c2:73:df:de:4d:4c:
                    a3:5b:6a:ea:a6:5f:34:d1:4b:9a:17:1a:02:9c:f7:
                    3e:cc:20:bf:a0:36:00:c4:fb:47:a6:31:25:0a:01:
                    27:7c:d9:73:a9:00:2c:d8:34:fa:cc:0d:21:b3:83:
                    29:bc:b1:8b:4b:44:33:49:7b:46:ff:1e:54:e5:29:
                    71:01:67:a7:bf:dd:7b:32:b3:aa:ac:1b:f4:68:d1:
                    ed:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:8F:ED:0B:16:E1:21:2B:F7:BD:A0:69:75:98:70:0E:E3:BE:8B:60
            X509v3 Authority Key Identifier:
                keyid:26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:e3:3f:c5:63:4a:30:eb:41:d5:31:d5:07:35:cf:82:10:a2:
         ae:04:a8:d9:0b:a6:78:4b:6a:5f:58:b0:4d:63:f6:b5:6d:ce:
         b5:92:74:d8:22:07:74:9f:fd:e1:aa:2d:dc:26:41:d1:9f:b3:
         2c:1e:00:bc:9a:2d:88:a8:f3:1e:dc:9a:d7:21:ab:e3:98:7b:
         42:00:57:81:62:fd:c9:19:ec:bf:ad:bd:3b:f3:bf:d0:dc:7f:
         51:3d:f1:22:b6:e6:81:d6:6b:5d:fd:9b:7e:18:c6:4e:15:51:
         42:a0:90:97:4d:31:27:84:96:7b:61:9d:79:d8:f5:3f:00:a9:
         58:38:6a:ff:e5:74:a0:30:c5:3c:54:b9:ae:0e:de:ba:3d:28:
         8c:4b:19:d6:a1:0e:bb:57:73:e6:d2:0b:b6:09:37:24:0f:17:
         69:40:d8:4a:fd:5c:e8:76:a2:24:f5:0d:ec:fa:a4:4f:73:7c:
         69:18:0c:3e:b5:f6:85:ea:b8:58:f1:46:2b:f5:9a:58:92:e5:
         4b:5b:c1:d9:82:77:1b:db:77:45:08:40:b2:99:e9:86:08:15:
         0c:b5:9c:c0:9f:5e:38:a2:10:09:e7:9b:11:0e:ca:40:35:3a:
         03:d6:2e:4a:47:cb:33:47:c1:1e:39:f1:38:ba:6c:8b:2e:aa:
         6a:a3:dc:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsPAM06QEsuTG2tb6Yz5d5sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2ZDlhMTZjMmZhN2Q0YzM3MGI1MzI1MjE0YmU0NDIwYjYx
MWYxZjkwHhcNMjUxMjExMjAwMTA5WhcNMjUxMjEyMjAwMTA5WjAzMTEwLwYDVQQD
EygwMjhmZWQwYjE2ZTEyMTJiZjdiZGEwNjk3NTk4NzAwZWUzYmU4YjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Qj25lORrLbUUGEaaWZD2EkFjO/m
v7FfYm+RYMBTzoA949GW0Vd+m6DL2oMaiJBh9FYgNQNx+p1NXvC1FSuOJtx9xB/A
oPhrnM4d9xrEzj8Uai/QWH8pvQT2mx77wMj7BiodORn4k6hDY2oYcqLJhJT1F/Qr
KC8YLonSIlcofrYegzxd5oDFFhNefdYBEFHHu+VABYGJi+Ikh/QgDSN+GFKFJiHq
ytJX3MJ6vnXCc9/eTUyjW2rqpl800UuaFxoCnPc+zCC/oDYAxPtHpjElCgEnfNlz
qQAs2DT6zA0hs4MpvLGLS0QzSXtG/x5U5SlxAWenv917MrOqrBv0aNHt6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKP7QsW4SEr972gaXWYcA7jvotgMB8GA1UdIwQY
MBaAFCbZoWwvp9TDcLUyUhS+RCC2EfH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnRtaGJDLW4xTU53dFRKU0ZMNUVJTFlSOGZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9jNWZjNTQtNzRjMi00ZjNkLTk1YzEt
NDQwMjNjM2I3ODRlLzEvSnRtaGJDLW4xTU53dFRKU0ZMNUVJTFlSOGZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9jNWZjNTQtNzRjMi00ZjNkLTk1YzEtNDQwMjNjM2I3ODRl
LzEvSnRtaGJDLW4xTU53dFRKU0ZMNUVJTFlSOGZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlOM/xWNK
MOtB1THVBzXPghCirgSo2QumeEtqX1iwTWP2tW3OtZJ02CIHdJ/94aot3CZB0Z+z
LB4AvJotiKjzHtya1yGr45h7QgBXgWL9yRnsv629O/O/0Nx/UT3xIrbmgdZrXf2b
fhjGThVRQqCQl00xJ4SWe2Gdedj1PwCpWDhq/+V0oDDFPFS5rg7euj0ojEsZ1qEO
u1dz5tILtgk3JA8XaUDYSv1c6HaiJPUN7PqkT3N8aRgMPrX2heq4WPFGK/WaWJLl
S1vB2YJ3G9t3RQhAspnphggVDLWcwJ9eOKIQCeebEQ7KQDU6A9YuSkfLM0fBHjnx
OLpsiy6qaqPcZQ==
-----END CERTIFICATE-----
Generated at Fri Dec 12 00:14:19 2025 by rpki-client