This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
File:                     IjayuK-mA20sjoMXc2-qpy2AxPI.mft (raw, json)
Hash identifier:          GkLDDWOjsi0MrwU4DbBbYkLoB0MCu8y+Y9BFoUM27cg=
Subject key identifier:   5B:33:ED:83:06:CA:08:92:C9:B1:4C:6C:1D:F2:96:03:E2:61:5E:82
Authority key identifier: 22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2
Certificate issuer:       /CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2
Certificate serial:       019AF42DD9AE123947DFFECA11F1FA6A91A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
Manifest number:          1765
Signing time:             Sat 06 Dec 2025 15:00:36 +0000
Manifest this update:     Sat 06 Dec 2025 15:00:36 +0000
Manifest next update:     Sun 07 Dec 2025 15:00:36 +0000
Files and hashes:         1: IjayuK-mA20sjoMXc2-qpy2AxPI.crl (hash: rRJAaq44E5iarujRMJ6aW/ylb+JenOchV65/IskIEnI=)
                          2: b2NrS79baNCWt7CG0X8Vv_sUMl8.roa (hash: Q1DMA/fao+0mavfnJZ9O2x4iQmJQmqUT84da1WRhc7E=)
                          3: spimqMKhC9PB1IAAapTxgzK4qRM.roa (hash: Uoz42yC9AHKp3g+1i18MCMkNcCBemOpgqQDvUXFhvIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:2d:d9:ae:12:39:47:df:fe:ca:11:f1:fa:6a:91:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2
        Validity
            Not Before: Dec  6 15:00:36 2025 GMT
            Not After : Dec  7 15:00:36 2025 GMT
        Subject: CN=5b33ed8306ca0892c9b14c6c1df29603e2615e82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:64:3e:8e:23:b7:6d:8b:6d:6e:64:02:ab:22:
                    ca:c3:69:93:54:53:70:34:41:84:6e:f9:f2:ad:33:
                    83:07:f5:0d:cf:a9:30:83:5d:60:30:5e:94:bf:e3:
                    15:52:b0:8c:b8:f9:f0:4f:84:fd:f6:f7:9a:5e:87:
                    9b:1f:68:22:da:5d:9a:92:cb:f2:86:e4:63:13:7c:
                    16:a8:18:9e:dc:2e:cc:54:b1:5f:0e:55:45:74:f3:
                    6f:db:d9:15:98:9a:bd:dd:90:68:2f:d7:c5:e1:19:
                    95:75:da:68:07:06:95:69:9d:ec:b7:f2:9e:83:f4:
                    87:cc:12:e6:35:c6:16:68:e3:b0:fc:9f:24:e9:e3:
                    41:c5:fb:f3:2b:94:72:f3:0e:03:b4:9a:98:2e:4e:
                    11:bd:c6:2c:8a:7e:8a:06:d6:33:ec:fe:fb:3e:7a:
                    d4:52:fd:76:b0:24:9e:f2:27:80:42:06:d8:ae:ec:
                    08:05:11:29:ab:89:87:3c:c9:c3:0d:61:3f:d6:e1:
                    c5:9f:5e:df:ec:6b:82:ec:72:8a:6f:21:66:9f:9d:
                    3a:fd:06:29:95:56:8f:97:47:d6:90:c8:c4:ee:8e:
                    a8:bf:70:9b:6f:0c:50:2c:c8:ce:b1:cf:fe:94:ac:
                    68:61:30:28:50:d0:fc:63:e2:cd:7a:7f:3b:3b:f1:
                    62:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:33:ED:83:06:CA:08:92:C9:B1:4C:6C:1D:F2:96:03:E2:61:5E:82
            X509v3 Authority Key Identifier:
                keyid:22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:ad:88:a8:bf:4f:fc:d1:c6:aa:b7:08:e4:3f:e1:b1:5b:43:
         b6:72:cc:52:3d:7a:8e:73:ea:0b:b5:f5:ab:31:e0:15:bc:40:
         90:0c:c3:3c:5f:c7:16:f3:01:74:4a:ab:80:16:87:f6:7d:2e:
         2d:fc:02:05:53:00:b0:90:af:13:8b:cd:be:5b:72:df:91:ed:
         d7:1c:4c:9f:77:21:ea:53:5e:e5:00:2c:df:23:69:64:9e:36:
         4a:f7:c3:03:3b:f5:13:4d:43:58:f3:e0:96:e9:c7:64:68:4d:
         9e:e5:61:be:da:9d:e3:ac:6e:ed:e1:ea:89:14:42:50:72:8d:
         7e:b2:8b:96:95:2e:a4:a0:6b:8b:9e:cc:8f:2f:10:0f:26:6a:
         d4:17:cf:3e:7e:8d:cf:ed:b5:41:27:58:f2:49:21:41:02:06:
         56:0c:19:96:d8:c8:dd:60:fe:a7:d6:c1:cf:fa:16:b6:57:d0:
         fd:5f:ec:8f:6a:27:e3:5f:bc:7c:09:19:7e:6e:61:f0:09:54:
         92:93:d6:9c:2a:87:d7:e8:4e:71:46:53:93:46:34:39:22:7c:
         6c:63:50:e7:6f:74:62:97:de:8f:3f:d4:d9:5d:e5:00:a7:b4:
         4e:0c:4a:88:09:ea:a4:1d:79:0e:4d:29:26:bb:37:fe:10:81:
         fd:d0:8c:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr0LdmuEjlH3/7KEfH6apGjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMzZiMmI4YWZhNjAzNmQyYzhlODMxNzczNmZhYWE3MmQ4
MGM0ZjIwHhcNMjUxMjA2MTUwMDM2WhcNMjUxMjA3MTUwMDM2WjAzMTEwLwYDVQQD
Eyg1YjMzZWQ4MzA2Y2EwODkyYzliMTRjNmMxZGYyOTYwM2UyNjE1ZTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6WQ+jiO3bYttbmQCqyLKw2mTVFNw
NEGEbvnyrTODB/UNz6kwg11gMF6Uv+MVUrCMuPnwT4T99veaXoebH2gi2l2aksvy
huRjE3wWqBie3C7MVLFfDlVFdPNv29kVmJq93ZBoL9fF4RmVddpoBwaVaZ3st/Ke
g/SHzBLmNcYWaOOw/J8k6eNBxfvzK5Ry8w4DtJqYLk4RvcYsin6KBtYz7P77PnrU
Uv12sCSe8ieAQgbYruwIBREpq4mHPMnDDWE/1uHFn17f7GuC7HKKbyFmn506/QYp
lVaPl0fWkMjE7o6ov3CbbwxQLMjOsc/+lKxoYTAoUND8Y+LNen87O/FiZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFsz7YMGygiSybFMbB3ylgPiYV6CMB8GA1UdIwQY
MBaAFCI2srivpgNtLI6DF3NvqqctgMTyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWpheXVLLW1BMjBzam9NWGMyLXFweTJBeFBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82Zjg5NWItNzk3Ny00NDVkLWI3MmMt
OGI1ZWY0MWQ4YzI1LzEvSWpheXVLLW1BMjBzam9NWGMyLXFweTJBeFBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82Zjg5NWItNzk3Ny00NDVkLWI3MmMtOGI1ZWY0MWQ4YzI1
LzEvSWpheXVLLW1BMjBzam9NWGMyLXFweTJBeFBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlq2IqL9P
/NHGqrcI5D/hsVtDtnLMUj16jnPqC7X1qzHgFbxAkAzDPF/HFvMBdEqrgBaH9n0u
LfwCBVMAsJCvE4vNvlty35Ht1xxMn3ch6lNe5QAs3yNpZJ42SvfDAzv1E01DWPPg
lunHZGhNnuVhvtqd46xu7eHqiRRCUHKNfrKLlpUupKBri57Mjy8QDyZq1BfPPn6N
z+21QSdY8kkhQQIGVgwZltjI3WD+p9bBz/oWtlfQ/V/sj2on41+8fAkZfm5h8AlU
kpPWnCqH1+hOcUZTk0Y0OSJ8bGNQ5290Ypfejz/U2V3lAKe0TgxKiAnqpB15Dk0p
Jrs3/hCB/dCMhw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:19:40 2025 by rpki-client