This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/80e3a3-211e-417d-83df-fac1fef4d0f7/1/Jvl3d56Qg2bdJGDjpveOoAAi2EU.mft
File:                     Jvl3d56Qg2bdJGDjpveOoAAi2EU.mft (raw, json)
Hash identifier:          RYHKjQwAlczcXHFjEW/BjdeYXRtIGWbWaFKXB6hwDUI=
Subject key identifier:   2D:46:1B:C2:07:EA:21:E9:01:2C:63:60:23:52:F8:25:C4:08:D5:C2
Authority key identifier: 26:F9:77:77:9E:90:83:66:DD:24:60:E3:A6:F7:8E:A0:00:22:D8:45
Certificate issuer:       /CN=26f977779e908366dd2460e3a6f78ea00022d845
Certificate serial:       019AF1D1846D3086DD5B09E5F3E4E2A599BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jvl3d56Qg2bdJGDjpveOoAAi2EU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/80e3a3-211e-417d-83df-fac1fef4d0f7/1/Jvl3d56Qg2bdJGDjpveOoAAi2EU.mft
Manifest number:          0411
Signing time:             Sat 06 Dec 2025 04:00:31 +0000
Manifest this update:     Sat 06 Dec 2025 04:00:31 +0000
Manifest next update:     Sun 07 Dec 2025 04:00:31 +0000
Files and hashes:         1: Jvl3d56Qg2bdJGDjpveOoAAi2EU.crl (hash: NulMGwCQ05BNOrbhlh/tZ02BFs3wbYszwXsL8Pjj3XU=)
                          2: Z8Jt0sta3A1LBMUR7NvayheVQNw.roa (hash: 8TbM0y/TLfXPDw9pjoFKLa5IZljcgBMxAI1pmS1uqtE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/80e3a3-211e-417d-83df-fac1fef4d0f7/1/Jvl3d56Qg2bdJGDjpveOoAAi2EU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/80e3a3-211e-417d-83df-fac1fef4d0f7/1/Jvl3d56Qg2bdJGDjpveOoAAi2EU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jvl3d56Qg2bdJGDjpveOoAAi2EU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 04:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d1:84:6d:30:86:dd:5b:09:e5:f3:e4:e2:a5:99:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26f977779e908366dd2460e3a6f78ea00022d845
        Validity
            Not Before: Dec  6 04:00:31 2025 GMT
            Not After : Dec  7 04:00:31 2025 GMT
        Subject: CN=2d461bc207ea21e9012c63602352f825c408d5c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ef:e9:7c:25:1c:02:7c:b1:6a:4f:97:6f:49:
                    88:0d:ab:67:3d:8f:28:13:4c:07:5e:60:0f:c7:46:
                    ff:7b:f5:62:cd:e2:3d:4f:bb:6d:53:f8:38:e1:5a:
                    4a:95:eb:a8:5d:cf:b0:67:27:0e:60:73:6d:31:b9:
                    12:5c:20:cb:58:52:5e:d4:e4:dd:a2:1e:19:af:2e:
                    1f:1e:34:b8:3c:ed:b6:8a:f0:91:93:c9:80:fc:69:
                    e2:02:07:d2:ff:06:a9:6d:cc:17:00:bf:4d:2c:21:
                    91:ff:59:05:3f:db:59:2a:c6:3f:7e:7f:58:d0:bc:
                    f9:95:ef:73:f7:a4:f3:48:8c:04:9b:86:fe:a1:c6:
                    4f:d9:09:17:94:d7:52:c0:2f:85:82:3a:a2:7d:8c:
                    dc:54:4c:2e:03:65:8d:6d:de:ae:6b:01:fc:69:a8:
                    e4:e7:9a:b5:5f:6b:1c:97:8a:1f:7e:7d:de:9e:ef:
                    12:19:f8:fd:4e:d8:d6:4a:5e:25:a9:b9:ed:4c:41:
                    64:98:39:b2:14:54:2e:34:14:30:c8:75:c8:18:76:
                    63:22:58:81:af:fd:61:c2:29:11:7f:45:be:d8:2a:
                    20:3a:ec:9c:33:c0:68:14:e0:d2:9c:6e:57:a9:86:
                    bd:e2:d4:20:d7:7d:6e:ce:3a:68:37:d3:9e:8f:fa:
                    d6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:46:1B:C2:07:EA:21:E9:01:2C:63:60:23:52:F8:25:C4:08:D5:C2
            X509v3 Authority Key Identifier:
                keyid:26:F9:77:77:9E:90:83:66:DD:24:60:E3:A6:F7:8E:A0:00:22:D8:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jvl3d56Qg2bdJGDjpveOoAAi2EU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/80e3a3-211e-417d-83df-fac1fef4d0f7/1/Jvl3d56Qg2bdJGDjpveOoAAi2EU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/80e3a3-211e-417d-83df-fac1fef4d0f7/1/Jvl3d56Qg2bdJGDjpveOoAAi2EU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:df:33:b0:3d:7c:6b:29:21:71:50:2e:76:33:b4:a6:18:1d:
         63:89:b8:c2:82:29:b6:bf:b1:76:88:48:26:88:11:12:a8:d5:
         f9:3f:03:95:29:56:d5:46:b0:79:d1:1b:20:f3:a6:7c:ed:29:
         90:ee:c6:35:6c:f2:06:c0:ba:e5:30:a6:94:17:d2:70:81:e9:
         7c:ce:eb:60:ca:37:46:16:02:90:b6:31:ed:38:ee:a4:a2:02:
         d8:46:4b:00:10:71:65:3d:ae:49:e9:d5:08:0c:f0:f6:83:1e:
         2d:c9:90:8c:59:b3:d1:57:ed:13:9a:d0:e0:0d:fd:b8:d2:fb:
         da:7b:c7:1e:2b:37:a1:03:17:07:71:91:08:85:a8:ea:27:df:
         d3:8e:16:a8:52:a6:c7:07:4e:b3:33:da:1b:d6:6e:fc:e4:8d:
         57:57:37:06:94:54:9d:15:8d:66:59:3c:6c:d5:86:9b:d6:ca:
         e6:99:c5:be:78:e3:39:4f:dc:70:c8:13:dc:41:39:2a:61:d5:
         76:f3:9e:2c:70:ff:a2:a9:50:51:ca:b1:49:41:08:33:08:ab:
         a4:d6:93:6e:b2:56:82:a0:94:de:31:1d:9f:2b:0f:85:5e:64:
         e1:68:23:bf:85:85:3d:81:34:4d:21:e3:57:22:67:68:d6:bb:
         6d:65:67:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrx0YRtMIbdWwnl8+TipZm8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2Zjk3Nzc3OWU5MDgzNjZkZDI0NjBlM2E2Zjc4ZWEwMDAy
MmQ4NDUwHhcNMjUxMjA2MDQwMDMxWhcNMjUxMjA3MDQwMDMxWjAzMTEwLwYDVQQD
EygyZDQ2MWJjMjA3ZWEyMWU5MDEyYzYzNjAyMzUyZjgyNWM0MDhkNWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu/pfCUcAnyxak+Xb0mIDatnPY8o
E0wHXmAPx0b/e/VizeI9T7ttU/g44VpKleuoXc+wZycOYHNtMbkSXCDLWFJe1OTd
oh4Zry4fHjS4PO22ivCRk8mA/GniAgfS/wapbcwXAL9NLCGR/1kFP9tZKsY/fn9Y
0Lz5le9z96TzSIwEm4b+ocZP2QkXlNdSwC+FgjqifYzcVEwuA2WNbd6uawH8aajk
55q1X2scl4offn3enu8SGfj9TtjWSl4lqbntTEFkmDmyFFQuNBQwyHXIGHZjIliB
r/1hwikRf0W+2CogOuycM8BoFODSnG5XqYa94tQg131uzjpoN9Oej/rWdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1GG8IH6iHpASxjYCNS+CXECNXCMB8GA1UdIwQY
MBaAFCb5d3eekINm3SRg46b3jqAAIthFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnZsM2Q1NlFnMmJkSkdEanB2ZU9vQUFpMkVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC84MGUzYTMtMjExZS00MTdkLTgzZGYt
ZmFjMWZlZjRkMGY3LzEvSnZsM2Q1NlFnMmJkSkdEanB2ZU9vQUFpMkVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC84MGUzYTMtMjExZS00MTdkLTgzZGYtZmFjMWZlZjRkMGY3
LzEvSnZsM2Q1NlFnMmJkSkdEanB2ZU9vQUFpMkVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGt8zsD18
aykhcVAudjO0phgdY4m4woIptr+xdohIJogREqjV+T8DlSlW1UawedEbIPOmfO0p
kO7GNWzyBsC65TCmlBfScIHpfM7rYMo3RhYCkLYx7TjupKIC2EZLABBxZT2uSenV
CAzw9oMeLcmQjFmz0VftE5rQ4A39uNL72nvHHis3oQMXB3GRCIWo6iff044WqFKm
xwdOszPaG9Zu/OSNV1c3BpRUnRWNZlk8bNWGm9bK5pnFvnjjOU/ccMgT3EE5KmHV
dvOeLHD/oqlQUcqxSUEIMwirpNaTbrJWgqCU3jEdnysPhV5k4Wgjv4WFPYE0TSHj
VyJnaNa7bWVntA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:06:07 2025 by rpki-client