This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
File:                     jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft (raw, json)
Hash identifier:          VHRnvRRr/dGaVmXuqlu+Wj9osf0Z9p/9OpyBngAa24w=
Subject key identifier:   D8:00:C6:CD:E4:E0:4A:02:64:E8:CC:32:35:7F:E4:47:8B:C3:AD:62
Authority key identifier: 8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A
Certificate issuer:       /CN=8cfff21538e225618314615e4f0d0688b7b0dd5a
Certificate serial:       019AF2ADBDEC30942AF57B7079409DB84413
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
Manifest number:          083D
Signing time:             Sat 06 Dec 2025 08:01:03 +0000
Manifest this update:     Sat 06 Dec 2025 08:01:03 +0000
Manifest next update:     Sun 07 Dec 2025 08:01:03 +0000
Files and hashes:         1: 8cHr2mkJzn1QpKoQW6YmFw7DlzE.roa (hash: t5szeV65SN4GVGDNCF4ePCjQmk1+gvyVxgvAgyz5YRg=)
                          2: gN1BkwtfLG0CVafSuu-7jUV0eE0.roa (hash: kgY2FVBsviF4YuznOeSj1jvbVSAFPg3ICiRBU7zTAS8=)
                          3: jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl (hash: LmD9BL0GnwYF3IGhREXoub7Wu2pZmZLFRxmdnNYMwaA=)
                          4: tLaWKw3WmHb20kxwM4G1kQ4uW9w.roa (hash: obhetsuugpMrSbVSqt3NiPZQ+jRMpp3fx8OhfxyMvVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:bd:ec:30:94:2a:f5:7b:70:79:40:9d:b8:44:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cfff21538e225618314615e4f0d0688b7b0dd5a
        Validity
            Not Before: Dec  6 08:01:03 2025 GMT
            Not After : Dec  7 08:01:03 2025 GMT
        Subject: CN=d800c6cde4e04a0264e8cc32357fe4478bc3ad62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:80:64:78:cc:2e:a8:2c:f4:26:99:3f:dc:0b:
                    f0:01:0f:45:44:45:53:8d:a4:9a:f4:26:8b:c3:4f:
                    95:d3:a0:1c:91:e0:8d:8e:d3:c7:98:3d:c4:26:80:
                    f9:5d:33:d7:34:82:bf:e4:0b:e5:b6:92:bd:b5:ec:
                    90:ba:e4:cd:f7:a2:2a:ff:ad:cf:8f:55:35:5d:b4:
                    a2:4c:ed:f2:83:c2:a5:a2:f3:2f:9a:d6:3f:87:75:
                    6d:b6:36:f4:cd:d8:63:e4:02:3f:23:ce:cc:73:66:
                    6c:56:7d:f5:12:53:f6:fa:7b:55:e1:ef:47:9c:37:
                    0a:d5:30:52:03:6b:b1:96:7e:4d:d0:d7:64:b3:05:
                    59:f9:ff:90:24:b5:73:6e:51:55:92:73:98:0a:51:
                    d0:de:0b:23:c6:21:57:57:ae:f4:9f:80:45:5c:a1:
                    4d:a4:27:13:ea:9a:01:f9:84:c0:a5:81:0d:a6:e2:
                    b0:7b:a4:b6:1f:cc:0c:56:24:f5:40:71:59:e4:bf:
                    7c:fa:a2:ea:b4:87:3f:0a:1c:e1:07:e9:13:ee:84:
                    af:a3:b4:28:c1:ac:59:1b:b4:57:92:95:7b:20:46:
                    cd:fb:2c:16:3e:a7:db:2b:db:40:60:21:30:33:7b:
                    88:2b:50:56:82:85:c4:80:8c:fa:ea:04:fb:c2:ea:
                    ae:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:00:C6:CD:E4:E0:4A:02:64:E8:CC:32:35:7F:E4:47:8B:C3:AD:62
            X509v3 Authority Key Identifier:
                keyid:8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:ce:9c:12:97:0a:25:68:97:f6:86:01:b4:b6:16:a0:67:c9:
         25:9b:54:a8:cc:f1:f0:31:bd:44:20:24:ee:b5:db:94:6f:b9:
         14:07:2e:f2:df:18:3c:d9:16:7e:12:11:75:91:d6:d0:9f:b1:
         80:a6:25:b7:ae:9c:9b:3c:fb:7f:f1:c5:d6:3e:95:ca:fc:2d:
         94:12:54:cd:de:79:e2:ca:73:6a:f7:4b:ec:66:d7:90:b6:87:
         16:5b:97:b8:c8:61:25:74:7e:25:56:b3:f2:1d:8e:64:68:14:
         20:bc:03:1a:ed:04:62:1a:5f:fb:ca:8e:9d:09:38:d6:ae:78:
         ad:03:90:14:28:ef:a1:87:0c:13:00:98:d6:96:46:6d:1d:09:
         df:55:68:1f:74:35:99:b9:7b:96:ed:ac:3b:b4:f2:43:cd:95:
         10:25:18:73:7c:db:6f:5d:c1:19:36:3d:37:75:71:e9:db:0e:
         b7:a6:12:e1:60:70:21:c5:6c:e4:d2:73:62:27:7b:08:c5:70:
         4f:2c:d8:fd:f5:a0:7f:f1:00:c5:5c:d5:35:25:cb:1a:a6:bd:
         36:b2:13:58:fa:2c:87:18:97:21:df:91:75:25:37:af:7d:2d:
         cc:cf:13:b9:20:f8:00:ee:f8:80:97:41:93:60:50:83:c2:39:
         1d:a2:b4:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryrb3sMJQq9XtweUCduEQTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZmZmMjE1MzhlMjI1NjE4MzE0NjE1ZTRmMGQwNjg4Yjdi
MGRkNWEwHhcNMjUxMjA2MDgwMTAzWhcNMjUxMjA3MDgwMTAzWjAzMTEwLwYDVQQD
EyhkODAwYzZjZGU0ZTA0YTAyNjRlOGNjMzIzNTdmZTQ0NzhiYzNhZDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIBkeMwuqCz0Jpk/3AvwAQ9FREVT
jaSa9CaLw0+V06AckeCNjtPHmD3EJoD5XTPXNIK/5AvltpK9teyQuuTN96Iq/63P
j1U1XbSiTO3yg8KlovMvmtY/h3Vttjb0zdhj5AI/I87Mc2ZsVn31ElP2+ntV4e9H
nDcK1TBSA2uxln5N0NdkswVZ+f+QJLVzblFVknOYClHQ3gsjxiFXV670n4BFXKFN
pCcT6poB+YTApYENpuKwe6S2H8wMViT1QHFZ5L98+qLqtIc/ChzhB+kT7oSvo7Qo
waxZG7RXkpV7IEbN+ywWPqfbK9tAYCEwM3uIK1BWgoXEgIz66gT7wuquVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgAxs3k4EoCZOjMMjV/5EeLw61iMB8GA1UdIwQY
MBaAFIz/8hU44iVhgxRhXk8NBoi3sN1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalBfeUZUamlKV0dERkdGZVR3MEdpTGV3M1ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi82NzUwMWEtNzhkYi00YzM4LThhOTUt
MjYxNjY2YzNhNTg5LzEvalBfeUZUamlKV0dERkdGZVR3MEdpTGV3M1ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi82NzUwMWEtNzhkYi00YzM4LThhOTUtMjYxNjY2YzNhNTg5
LzEvalBfeUZUamlKV0dERkdGZVR3MEdpTGV3M1ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4s6cEpcK
JWiX9oYBtLYWoGfJJZtUqMzx8DG9RCAk7rXblG+5FAcu8t8YPNkWfhIRdZHW0J+x
gKYlt66cmzz7f/HF1j6VyvwtlBJUzd554spzavdL7GbXkLaHFluXuMhhJXR+JVaz
8h2OZGgUILwDGu0EYhpf+8qOnQk41q54rQOQFCjvoYcMEwCY1pZGbR0J31VoH3Q1
mbl7lu2sO7TyQ82VECUYc3zbb13BGTY9N3Vx6dsOt6YS4WBwIcVs5NJzYid7CMVw
TyzY/fWgf/EAxVzVNSXLGqa9NrITWPoshxiXId+RdSU3r30tzM8TuSD4AO74gJdB
k2BQg8I5HaK0zw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:08:03 2025 by rpki-client