This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
File:                     jRrIPuOj-WjWatL99GFue7Hk0dc.mft (raw, json)
Hash identifier:          dOG7vZ2niP8w/InT4L8LdzjMfBLumDTuEviZbNN1oS0=
Subject key identifier:   6A:D7:61:F0:35:3D:99:C0:A7:64:CD:CC:82:82:BF:A9:E2:E2:C2:64
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Certificate issuer:       /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial:       019AF23F758A6C8EA3E5A034C43D4268D9D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
Manifest number:          0CF6
Signing time:             Sat 06 Dec 2025 06:00:36 +0000
Manifest this update:     Sat 06 Dec 2025 06:00:36 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:36 +0000
Files and hashes:         1: 0hcYkFvLnPnX3tJPZIl-Uhot1i0.roa (hash: 6/eHz/J+k5SuDY5b5eslxHZpd3P/l7+bfENiu84Xo/Y=)
                          2: 5Xz9E7C6BAcx16iIMjwvM4HlgAw.roa (hash: O79+vzMdI2uDnbGewEwtLl1GFqHouBivbXJnQ4WHjFs=)
                          3: A3vCnLdcCAHsjG0TKS7PepEiSRQ.roa (hash: 8/8TxF0wXw7stYTcBeXGRpf0HZpKR5xHMrhdKNPhjb4=)
                          4: DhUtQy3iN2_fQJa67YADtfV1x40.roa (hash: PvfiO0WfcmadxN2Uhm/Lhfz/fnQ9kgC0PROhIJsPF54=)
                          5: Eb3nQCsubyrRRwgtef25b2tcJbQ.roa (hash: sgX7PEOSSTdMVUw2kIAqvpDSoV+TN56cGW37Ykizvek=)
                          6: FQFiaH-Uhznyo9tuv-39hg1SgIc.roa (hash: AaAgvoQWwsBdEDlzs9JJLKseENMJxUCvDZ1+feCaadI=)
                          7: HIBKVvtinhweoi9ybbfYokGtkjg.roa (hash: khv1qHXammr1ZO8qVWulyea62D34wTqiuoPZd9ngssM=)
                          8: J5xYYbeJ_te65Xv7xz07zAj6f-I.roa (hash: H6HLeHF12Jxz9+TguAyIB+SiOH3fzKS1WVXypIulN7Q=)
                          9: JjM1scO0M1VRz2BqKO1r_ZLa970.roa (hash: jE4M6onTNWLyp2LT8jDW1lcK5SlJ5FLJoUcPkAM9kEQ=)
                          10: JtkTsuHPsoBKn0hRChOrC4JXTN4.roa (hash: M9uGhnRBSZAnmB8BCT/jdRx465I3Ctf37Vtgm+Jt4nc=)
                          11: LNIAH1MylX8WQQ-W8xfPHTlOsW0.roa (hash: GFXXpakvt3mJ4yGbBFawI3+WVF7sKNF14A1lgtziIek=)
                          12: Lxv8RdYN9P2vj1nZyAjFF9lNkU8.roa (hash: xMtpILHpW8icGyga3EnNkKUNmrRxGITTuJWIIZqDxDI=)
                          13: MudRzNeUk2R859eEP09GJeDExf0.roa (hash: 2o3NbfW7AkgEJtAc91HUgnIB/5KesUMTjVvuVU09fp4=)
                          14: RTZYU-7DG4fUoipBd0qSh8BirjI.roa (hash: 3eo6AFVTXAYcIIpYV9OFjF0R4DRTO3nfrXKCxpb3Q8c=)
                          15: XO5629FFpWYFF8ZRrD5XKcMM2vo.roa (hash: wKy5dCiE9pBzbJNPaAeHBHoxO/6aKqqjDAe2f2qYl60=)
                          16: gwSC7EAy3C72kqaOxsQmMkrjxyA.roa (hash: oVgyYlrKyPjekvA+50Kp0/QR+pQendS8nmEKcr8YBXw=)
                          17: jRrIPuOj-WjWatL99GFue7Hk0dc.crl (hash: FKjznRooK2nFDeBTZseyfSEXAoQoZYJYix7GqTIm43g=)
                          18: lO8z4PUnAAW_FQZ30LG2G_SaC34.roa (hash: TP4CK9avYURoeZBLUriM0sZhHgj7m8xB680P8/Q/778=)
                          19: ptIzMM5pGR32qdt6NWym3eUNiak.roa (hash: bSsM8QyZGEjlRqx/UPAoekl3qkyD03EUapHU3WIbdX4=)
                          20: tUIacj6VOPH10m5Y6XUJyWIow6U.roa (hash: 9uc/yuqmiqky5HfjpLsVrt/99q8zfLW5nmttPUpS6nU=)
                          21: tesrxSIX8wDOD0usavdzlelTyC8.roa (hash: 2mw6qDJEVPvk2SB5Frfa2IZ+DHf6Rgtla+C91qwtmwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:75:8a:6c:8e:a3:e5:a0:34:c4:3d:42:68:d9:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
        Validity
            Not Before: Dec  6 06:00:36 2025 GMT
            Not After : Dec  7 06:00:36 2025 GMT
        Subject: CN=6ad761f0353d99c0a764cdcc8282bfa9e2e2c264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:13:a3:ef:46:a4:dc:90:7b:3b:7a:e0:b0:95:
                    2c:fb:28:5d:fb:af:41:95:f8:44:69:5e:5f:34:bb:
                    7d:11:55:95:66:5e:23:ab:d9:5c:72:e3:97:83:10:
                    35:cf:fd:d8:02:21:4f:98:2e:63:8f:2f:65:55:ec:
                    8b:17:c8:3d:3b:89:ca:77:55:cb:1a:09:b4:83:a5:
                    78:dd:97:c6:7d:5a:53:f2:2c:36:d3:3b:31:84:2d:
                    a2:41:79:91:eb:f9:d4:13:99:1e:03:75:b7:1d:85:
                    39:dd:e1:7a:77:cb:a5:bd:70:f4:be:94:ad:a3:4a:
                    29:d3:20:dd:fd:dc:29:a6:16:44:da:a0:c6:74:d0:
                    e1:20:4e:f1:1e:ef:de:4b:88:07:19:8c:35:4c:12:
                    bc:e2:28:ae:01:d3:b8:f6:e1:55:d7:bf:c9:f0:73:
                    f5:fa:2f:71:e6:4c:5e:3a:eb:6d:8c:01:86:bd:90:
                    84:78:4e:3b:95:17:1b:98:6e:40:d4:97:ab:99:b9:
                    2b:48:c3:22:35:88:ac:fb:30:d3:7d:80:4c:26:90:
                    72:dc:31:dc:3b:5d:56:dc:56:02:86:71:66:35:c8:
                    a3:35:ab:dd:81:fa:d1:99:65:bd:0a:de:90:2f:54:
                    60:c2:80:fa:3d:0b:f1:2b:ba:3c:f6:9e:4f:91:3b:
                    fb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D7:61:F0:35:3D:99:C0:A7:64:CD:CC:82:82:BF:A9:E2:E2:C2:64
            X509v3 Authority Key Identifier:
                keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:95:f7:20:eb:cf:0a:9f:28:0d:cc:60:cc:c5:48:fc:f5:5c:
         be:fa:a9:23:99:6d:c9:49:74:3c:35:18:c1:2e:ad:12:57:c8:
         5b:d3:ee:a1:b0:05:df:7f:ed:c3:3b:d5:81:30:87:67:d4:21:
         3b:88:1c:7e:19:5f:2b:a2:24:09:f1:86:59:de:4d:8a:48:b8:
         3c:68:c5:c5:48:a2:9b:98:5c:e9:61:2c:b7:10:ce:be:c2:75:
         31:90:0d:c5:ec:17:aa:93:4d:19:c6:c7:e4:99:4b:1e:c0:aa:
         62:e1:4e:7f:63:44:81:2d:72:3b:64:ca:24:92:b5:59:99:3a:
         8b:35:ec:b9:a6:1c:aa:e3:c1:b2:3d:aa:21:36:63:c8:92:83:
         bd:89:d8:da:46:6d:a0:4e:5a:e0:df:90:bd:5f:4b:71:d1:0a:
         66:06:4d:85:dc:00:6e:92:cd:75:c8:cc:f8:45:2a:e8:81:04:
         7b:1e:eb:e2:ca:40:2b:86:fb:fc:94:c6:d5:bb:8f:8b:f7:79:
         86:08:bb:4e:c4:02:8c:a4:82:99:51:d5:f1:cf:54:6b:43:40:
         43:65:54:93:7a:5b:14:e3:76:1c:09:59:eb:fe:83:0f:95:01:
         50:55:5c:ce:b9:bf:27:76:cc:d3:b4:9b:95:70:4c:c5:36:ed:
         cc:a4:21:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryP3WKbI6j5aA0xD1CaNnRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl
NGQxZDcwHhcNMjUxMjA2MDYwMDM2WhcNMjUxMjA3MDYwMDM2WjAzMTEwLwYDVQQD
Eyg2YWQ3NjFmMDM1M2Q5OWMwYTc2NGNkY2M4MjgyYmZhOWUyZTJjMjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthOj70ak3JB7O3rgsJUs+yhd+69B
lfhEaV5fNLt9EVWVZl4jq9lccuOXgxA1z/3YAiFPmC5jjy9lVeyLF8g9O4nKd1XL
Ggm0g6V43ZfGfVpT8iw20zsxhC2iQXmR6/nUE5keA3W3HYU53eF6d8ulvXD0vpSt
o0op0yDd/dwpphZE2qDGdNDhIE7xHu/eS4gHGYw1TBK84iiuAdO49uFV17/J8HP1
+i9x5kxeOuttjAGGvZCEeE47lRcbmG5A1JermbkrSMMiNYis+zDTfYBMJpBy3DHc
O11W3FYChnFmNcijNavdgfrRmWW9Ct6QL1RgwoD6PQvxK7o89p5PkTv7dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGrXYfA1PZnAp2TNzIKCv6ni4sJkMB8GA1UdIwQY
MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt
ZGRmNTY3ZWRlZDAzLzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz
LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGJX3IOvP
Cp8oDcxgzMVI/PVcvvqpI5ltyUl0PDUYwS6tElfIW9PuobAF33/twzvVgTCHZ9Qh
O4gcfhlfK6IkCfGGWd5Niki4PGjFxUiim5hc6WEstxDOvsJ1MZANxewXqpNNGcbH
5JlLHsCqYuFOf2NEgS1yO2TKJJK1WZk6izXsuaYcquPBsj2qITZjyJKDvYnY2kZt
oE5a4N+QvV9LcdEKZgZNhdwAbpLNdcjM+EUq6IEEex7r4spAK4b7/JTG1buPi/d5
hgi7TsQCjKSCmVHV8c9Ua0NAQ2VUk3pbFON2HAlZ6/6DD5UBUFVczrm/J3bM07Sb
lXBMxTbtzKQhww==
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:06:13 2025 by rpki-client