This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft
File:                     J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft (raw, json)
Hash identifier:          ps93Iukk2/T//Ndw/kejgMK8qci5/61nmBL5NqMqqTM=
Subject key identifier:   19:AC:3C:14:96:57:33:33:31:17:22:D1:36:29:31:4C:C2:34:22:82
Authority key identifier: 27:87:3A:FE:63:30:B7:AE:9E:E5:62:E0:C9:88:E9:FD:5E:A8:F5:67
Certificate issuer:       /CN=27873afe6330b7ae9ee562e0c988e9fd5ea8f567
Certificate serial:       019AF240110EF972547A256E3E69F90606EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J4c6_mMwt66e5WLgyYjp_V6o9Wc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft
Manifest number:          0617
Signing time:             Sat 06 Dec 2025 06:01:16 +0000
Manifest this update:     Sat 06 Dec 2025 06:01:16 +0000
Manifest next update:     Sun 07 Dec 2025 06:01:16 +0000
Files and hashes:         1: 0PYcltmJzMja0dvWKhNEIn2h5wU.roa (hash: yxrc3TyRtsqbuJQwsd58p+Gp8bj83VKuug5ZZ8u6nJI=)
                          2: J4c6_mMwt66e5WLgyYjp_V6o9Wc.crl (hash: bBLwhysb7gDZbOkDJB/sK2jJO7QlAG2u1jRBW3tqA3c=)
                          3: Qn3X5MY5K3ykqnmnbumI2xxV95w.roa (hash: +yROVQDwj+ut6F9Jj7DUoe7vy2IatzZdxg+R94Am18E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J4c6_mMwt66e5WLgyYjp_V6o9Wc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:40:11:0e:f9:72:54:7a:25:6e:3e:69:f9:06:06:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27873afe6330b7ae9ee562e0c988e9fd5ea8f567
        Validity
            Not Before: Dec  6 06:01:16 2025 GMT
            Not After : Dec  7 06:01:16 2025 GMT
        Subject: CN=19ac3c1496573333311722d13629314cc2342282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:47:00:75:ef:b2:e6:40:32:e8:4c:e3:ac:2b:
                    45:80:ce:1a:af:d0:60:ea:66:9e:cf:36:10:f3:07:
                    b4:23:37:95:c1:6b:92:89:8d:2a:70:ba:8b:a5:f7:
                    06:16:66:c9:41:cd:af:b6:21:71:1d:41:df:94:49:
                    aa:ca:9b:38:43:f9:0c:ae:e8:0e:b3:8f:64:2d:af:
                    e0:a0:bd:16:38:5c:5c:6d:ce:e8:86:30:52:e0:53:
                    68:e5:19:6c:4a:54:c6:84:44:90:35:3e:cb:c8:80:
                    31:19:b8:db:da:d2:97:db:fe:af:39:28:8e:e5:1b:
                    00:13:b8:ce:b8:07:52:d7:49:24:fc:8a:e4:da:12:
                    db:29:c4:0d:47:49:f1:a3:85:74:fb:4c:3d:24:a1:
                    01:11:5e:f5:b7:19:5e:68:fc:53:25:cc:dc:e0:7e:
                    1d:2b:33:26:56:15:0e:97:95:fc:07:32:0a:1e:ab:
                    9c:31:76:fb:89:8c:e1:88:fc:ea:e7:4d:f1:5d:30:
                    50:31:96:49:59:ee:25:a6:9e:51:5f:be:c5:c6:d5:
                    fa:ed:2a:e5:e3:89:39:43:03:66:21:3f:0b:47:c0:
                    a1:62:30:82:4d:d1:7e:15:d1:5b:79:db:ec:86:e9:
                    45:82:99:06:f6:69:82:9d:05:d4:bd:87:1d:cc:ef:
                    2a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:AC:3C:14:96:57:33:33:31:17:22:D1:36:29:31:4C:C2:34:22:82
            X509v3 Authority Key Identifier:
                keyid:27:87:3A:FE:63:30:B7:AE:9E:E5:62:E0:C9:88:E9:FD:5E:A8:F5:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4c6_mMwt66e5WLgyYjp_V6o9Wc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:a9:84:a8:bf:26:91:1d:a8:54:89:3c:bd:ba:e4:73:3a:5f:
         d3:41:61:71:d5:64:1e:5c:d8:1c:d9:9e:31:ee:e7:24:cc:d0:
         d4:90:b5:27:7c:7e:22:6a:34:d6:28:2c:1e:be:93:78:5b:26:
         4b:82:96:c3:03:32:a8:6f:68:f6:f2:1c:27:7f:d8:49:48:37:
         cd:db:3b:57:9a:37:ca:d9:db:ec:7d:d7:2d:66:2e:a4:eb:c9:
         11:42:79:91:c0:2e:2f:5d:07:19:3a:94:f6:8a:37:31:fe:5a:
         65:41:7d:5f:13:5c:25:0f:ab:8e:0d:d9:8d:3a:ee:27:ad:27:
         99:ee:39:ca:8a:af:3f:78:16:b5:18:e3:2b:f3:a0:a8:7c:e8:
         a0:51:7f:f6:62:9b:3c:b2:5d:69:9f:d2:28:09:e8:6c:69:c4:
         9f:bb:4d:b5:6d:b0:e0:e9:5a:30:12:43:ef:f1:a9:56:a3:53:
         5c:f7:4b:d7:5f:3a:e9:8f:b5:5a:bb:e5:0e:2d:4c:6a:1f:fc:
         83:46:0f:00:bf:dd:e7:76:34:16:d8:4e:2c:10:0e:ef:a7:36:
         f8:52:ca:6d:99:e0:1f:ca:87:1d:94:26:a7:77:63:32:49:8a:
         10:16:e5:fb:67:65:11:35:c4:13:21:08:19:14:27:a7:01:f0:
         76:ef:90:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryQBEO+XJUeiVuPmn5BgbuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ODczYWZlNjMzMGI3YWU5ZWU1NjJlMGM5ODhlOWZkNWVh
OGY1NjcwHhcNMjUxMjA2MDYwMTE2WhcNMjUxMjA3MDYwMTE2WjAzMTEwLwYDVQQD
EygxOWFjM2MxNDk2NTczMzMzMzExNzIyZDEzNjI5MzE0Y2MyMzQyMjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEcAde+y5kAy6EzjrCtFgM4ar9Bg
6maezzYQ8we0IzeVwWuSiY0qcLqLpfcGFmbJQc2vtiFxHUHflEmqyps4Q/kMrugO
s49kLa/goL0WOFxcbc7ohjBS4FNo5RlsSlTGhESQNT7LyIAxGbjb2tKX2/6vOSiO
5RsAE7jOuAdS10kk/Irk2hLbKcQNR0nxo4V0+0w9JKEBEV71txleaPxTJczc4H4d
KzMmVhUOl5X8BzIKHqucMXb7iYzhiPzq503xXTBQMZZJWe4lpp5RX77FxtX67Srl
44k5QwNmIT8LR8ChYjCCTdF+FdFbedvshulFgpkG9mmCnQXUvYcdzO8qDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmsPBSWVzMzMRci0TYpMUzCNCKCMB8GA1UdIwQY
MBaAFCeHOv5jMLeunuVi4MmI6f1eqPVnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjRjNl9tTXd0NjZlNVdMZ3lZanBfVjZvOVdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kMzk0MTYtZjQ2YS00ZjgyLWIxZTEt
ZTBkMWY3Y2FjZmYxLzEvSjRjNl9tTXd0NjZlNVdMZ3lZanBfVjZvOVdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9kMzk0MTYtZjQ2YS00ZjgyLWIxZTEtZTBkMWY3Y2FjZmYx
LzEvSjRjNl9tTXd0NjZlNVdMZ3lZanBfVjZvOVdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiamEqL8m
kR2oVIk8vbrkczpf00FhcdVkHlzYHNmeMe7nJMzQ1JC1J3x+Imo01igsHr6TeFsm
S4KWwwMyqG9o9vIcJ3/YSUg3zds7V5o3ytnb7H3XLWYupOvJEUJ5kcAuL10HGTqU
9oo3Mf5aZUF9XxNcJQ+rjg3ZjTruJ60nme45yoqvP3gWtRjjK/OgqHzooFF/9mKb
PLJdaZ/SKAnobGnEn7tNtW2w4OlaMBJD7/GpVqNTXPdL11866Y+1WrvlDi1Mah/8
g0YPAL/d53Y0FthOLBAO76c2+FLKbZngH8qHHZQmp3djMkmKEBbl+2dlETXEEyEI
GRQnpwHwdu+Qag==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:59:06 2025 by rpki-client