This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
File:                     J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft (raw, json)
Hash identifier:          jUwpIOfVWNqzE863uC5JrOhiY2C84IgTf4cMGkms+xg=
Subject key identifier:   A2:16:70:DD:11:BE:F7:64:F9:65:39:3B:29:D8:42:72:AF:0E:90:D1
Authority key identifier: 27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
Certificate issuer:       /CN=279159ef22f82b936731664ee67c3b6ea96ef443
Certificate serial:       019AF23F6D94647D4CDA73673D14D51640D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
Manifest number:          1283
Signing time:             Sat 06 Dec 2025 06:00:34 +0000
Manifest this update:     Sat 06 Dec 2025 06:00:34 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:34 +0000
Files and hashes:         1: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl (hash: gePuhYTEcBASSptA49Pbnv2NuGyKo3obTTUhgvLFpDs=)
                          2: _pQtR1EJpgHMSOkTmSK_Er0tXsE.roa (hash: m5yMM2ApK+4Me2gJxPiOKP0gpYE7to93xl8Fx6CP7v4=)
                          3: qjMWC-5cgR3_FzvTJ8fV4seYOFk.roa (hash: fwjzyDVkTfLPWzdH9pq6+z0fYQ+pKyYb7cgFc8eFsFw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:6d:94:64:7d:4c:da:73:67:3d:14:d5:16:40:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=279159ef22f82b936731664ee67c3b6ea96ef443
        Validity
            Not Before: Dec  6 06:00:34 2025 GMT
            Not After : Dec  7 06:00:34 2025 GMT
        Subject: CN=a21670dd11bef764f965393b29d84272af0e90d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8d:4d:23:5a:c3:7d:b6:76:d5:cf:0f:b4:d4:
                    eb:8f:71:4e:b0:ed:ee:93:6f:07:33:13:e5:fc:4a:
                    91:89:b0:a2:0a:34:c3:db:a9:f5:0d:9d:1e:9b:bd:
                    52:c1:16:77:33:7a:3c:0c:0f:56:34:49:20:8a:74:
                    fa:35:91:a1:57:30:b3:03:0e:fa:34:75:ee:48:be:
                    21:ba:27:02:74:e4:c8:9a:b3:eb:cc:16:47:c6:b4:
                    ee:e0:33:8d:c1:51:d3:a4:b8:88:26:6c:c3:d2:17:
                    88:f4:39:de:70:67:90:76:db:06:17:58:a9:39:e3:
                    72:f8:a3:9c:0f:b4:cc:54:42:ef:eb:05:93:66:f6:
                    7e:04:1b:da:be:1f:19:ee:af:b6:03:c8:2b:bc:70:
                    7e:fe:ad:dd:8a:d2:88:5d:b1:7c:0e:6b:b9:3a:46:
                    0e:a6:ac:82:6f:fa:df:84:dc:6d:c3:29:b9:26:ba:
                    58:26:89:79:6d:7a:d7:35:0b:2a:43:82:3f:f5:77:
                    12:01:79:f0:6b:a4:2e:b9:bd:07:66:33:ae:e7:19:
                    26:28:db:65:c6:eb:ff:8f:1e:bb:95:aa:bf:90:eb:
                    4f:59:ca:48:20:51:02:98:49:6e:af:99:88:38:97:
                    86:65:aa:9a:7e:3a:ed:ce:47:1a:ec:85:a8:1a:5f:
                    83:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:16:70:DD:11:BE:F7:64:F9:65:39:3B:29:D8:42:72:AF:0E:90:D1
            X509v3 Authority Key Identifier:
                keyid:27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:e1:d4:e4:58:dd:02:bc:76:b2:e7:70:36:ef:16:2e:e3:df:
         bf:b8:89:ef:a7:c0:86:87:b6:f1:6b:48:3c:27:5d:b9:68:69:
         a1:93:7a:0e:4c:76:23:09:47:a0:a9:2d:d9:ac:84:34:47:48:
         21:45:2c:b6:0f:2c:87:bd:8c:a7:77:7e:14:60:58:c8:09:3c:
         c3:e4:6c:4c:b6:42:24:c0:a0:82:e1:4f:d3:83:c7:c9:ae:a6:
         34:10:c9:a0:ab:7a:98:20:8d:bf:39:af:a3:2d:6f:ff:bb:c3:
         81:6c:b0:ae:c8:3f:37:7b:d0:72:2e:1a:5f:fc:f6:fd:9c:c4:
         fc:05:a9:92:4f:5c:96:19:fb:6c:8a:55:21:e7:fa:ac:70:fc:
         e9:f0:23:a3:fb:45:ae:2c:b7:13:f6:19:5b:db:07:a7:3f:43:
         c2:26:4b:dc:65:87:f3:fa:2c:74:90:5c:01:c2:23:21:81:79:
         78:7e:a2:3d:d7:47:2c:98:38:90:6b:7d:5f:57:44:8c:dc:3f:
         87:6e:06:03:0a:12:e6:08:15:e5:2d:00:f1:71:cb:56:b5:b9:
         17:0f:ae:38:42:3d:63:e4:90:29:46:64:00:15:72:4c:3d:48:
         ec:ec:25:5f:7d:ce:a0:e8:e1:13:92:e0:0d:b6:54:98:3b:45:
         00:4a:b8:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryP22UZH1M2nNnPRTVFkDQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OTE1OWVmMjJmODJiOTM2NzMxNjY0ZWU2N2MzYjZlYTk2
ZWY0NDMwHhcNMjUxMjA2MDYwMDM0WhcNMjUxMjA3MDYwMDM0WjAzMTEwLwYDVQQD
EyhhMjE2NzBkZDExYmVmNzY0Zjk2NTM5M2IyOWQ4NDI3MmFmMGU5MGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI1NI1rDfbZ21c8PtNTrj3FOsO3u
k28HMxPl/EqRibCiCjTD26n1DZ0em71SwRZ3M3o8DA9WNEkginT6NZGhVzCzAw76
NHXuSL4huicCdOTImrPrzBZHxrTu4DONwVHTpLiIJmzD0heI9DnecGeQdtsGF1ip
OeNy+KOcD7TMVELv6wWTZvZ+BBvavh8Z7q+2A8grvHB+/q3ditKIXbF8Dmu5OkYO
pqyCb/rfhNxtwym5JrpYJol5bXrXNQsqQ4I/9XcSAXnwa6Quub0HZjOu5xkmKNtl
xuv/jx67laq/kOtPWcpIIFECmElur5mIOJeGZaqafjrtzkca7IWoGl+DfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIWcN0Rvvdk+WU5OynYQnKvDpDRMB8GA1UdIwQY
MBaAFCeRWe8i+CuTZzFmTuZ8O26pbvRDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjVGWjd5TDRLNU5uTVdaTzVudzdicWx1OUVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS81YzE1YmUtYWVmMi00YzMxLWJmYjQt
MzFiYWY2ZWVkZThhLzEvSjVGWjd5TDRLNU5uTVdaTzVudzdicWx1OUVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS81YzE1YmUtYWVmMi00YzMxLWJmYjQtMzFiYWY2ZWVkZThh
LzEvSjVGWjd5TDRLNU5uTVdaTzVudzdicWx1OUVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs+HU5Fjd
Arx2sudwNu8WLuPfv7iJ76fAhoe28WtIPCdduWhpoZN6Dkx2IwlHoKkt2ayENEdI
IUUstg8sh72Mp3d+FGBYyAk8w+RsTLZCJMCgguFP04PHya6mNBDJoKt6mCCNvzmv
oy1v/7vDgWywrsg/N3vQci4aX/z2/ZzE/AWpkk9clhn7bIpVIef6rHD86fAjo/tF
riy3E/YZW9sHpz9DwiZL3GWH8/osdJBcAcIjIYF5eH6iPddHLJg4kGt9X1dEjNw/
h24GAwoS5ggV5S0A8XHLVrW5Fw+uOEI9Y+SQKUZkABVyTD1I7OwlX33OoOjhE5Lg
DbZUmDtFAEq4rg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:18:35 2025 by rpki-client