This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
File:                     J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft (raw, json)
Hash identifier:          RUxgIy2agWvLUbWAERGXXKFyfvtXnsi1ZmRl+2jOwEg=
Subject key identifier:   C4:0F:93:26:66:5B:9E:25:0C:14:E9:06:CC:25:5F:58:6C:54:12:4E
Authority key identifier: 27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C
Certificate issuer:       /CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
Certificate serial:       019AFBE759C8A39EB66330692B6B53044D97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
Manifest number:          177C
Signing time:             Mon 08 Dec 2025 03:00:34 +0000
Manifest this update:     Mon 08 Dec 2025 03:00:34 +0000
Manifest next update:     Tue 09 Dec 2025 03:00:34 +0000
Files and hashes:         1: 23bca3VQeIrruEqgH6VNWFAiuWs.roa (hash: AgG1ZxIJ9G4cx9MANuRKQ+cw/0IS8xxAcB1MqAzxpGw=)
                          2: 64rEanXhDA2OJWgNqMgPZ5FM7ec.roa (hash: 8qJk7sdPmgd5qyBKhZltol3z/GSxNSlFaZ8AUoHL904=)
                          3: J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl (hash: vMMb8ks9pH8C3D10sJTELOtrifUxn1n+5TFFJsJtip0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:fb:e7:59:c8:a3:9e:b6:63:30:69:2b:6b:53:04:4d:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
        Validity
            Not Before: Dec  8 03:00:34 2025 GMT
            Not After : Dec  9 03:00:34 2025 GMT
        Subject: CN=c40f9326665b9e250c14e906cc255f586c54124e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:90:8f:8d:84:aa:f7:87:a2:b6:fc:d4:2b:c9:
                    1e:c0:23:b0:1b:58:74:fa:8d:e1:73:3e:ec:b8:57:
                    7d:58:3c:32:c9:7c:8b:15:90:bd:57:3e:06:be:a9:
                    33:aa:96:86:8a:82:23:28:7d:ed:64:fa:2d:c9:db:
                    e8:a7:2d:08:e2:b3:68:d3:9b:04:d8:9f:67:d5:0b:
                    41:24:10:c4:18:a2:a6:27:96:25:a3:b3:dc:c7:13:
                    a0:b9:13:78:64:22:cb:5b:84:4c:35:3a:0c:14:38:
                    04:18:0f:fb:ba:16:61:f3:16:09:44:f9:e0:13:9a:
                    0d:a8:e4:31:23:a1:e3:be:c6:3d:0b:15:f6:4d:eb:
                    0c:17:7b:57:82:1b:c3:07:e8:32:af:23:72:c5:de:
                    12:64:92:d3:22:02:77:22:ce:be:53:d8:cb:91:0b:
                    e9:f9:9a:78:8d:53:b6:35:48:97:b3:6a:79:3c:39:
                    61:26:39:0e:c5:8b:66:aa:3a:20:f8:42:e5:c4:a9:
                    72:ca:8e:7a:72:df:34:6d:11:55:20:67:66:ff:ee:
                    5a:a7:e3:86:ee:c2:93:89:8d:be:1a:cc:48:ef:f6:
                    44:91:fe:df:fd:fb:f6:9c:35:7c:37:d0:bf:19:2e:
                    45:61:06:7c:61:2b:0e:f0:b0:c4:ed:af:9a:ce:d5:
                    25:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0F:93:26:66:5B:9E:25:0C:14:E9:06:CC:25:5F:58:6C:54:12:4E
            X509v3 Authority Key Identifier:
                keyid:27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:be:7e:85:1c:52:09:de:ce:fe:45:97:b7:34:23:82:4b:01:
         5a:d9:f7:10:8d:9c:d7:65:76:98:23:72:14:2a:e4:48:c2:b1:
         2e:7e:bf:18:7f:07:10:b5:5e:2c:aa:b9:0a:f6:6f:37:98:90:
         c6:0e:8b:65:19:d8:be:49:86:11:07:bc:77:61:7c:27:5a:84:
         22:05:0e:c2:96:7c:48:4c:1c:f3:fc:21:6a:e5:d3:c1:f0:e1:
         52:d0:69:21:b0:b7:ff:06:7a:73:b9:78:53:11:c7:a6:d8:ed:
         dc:93:6a:f8:62:ae:a9:bd:ee:fc:9a:e5:f4:66:93:fe:59:e8:
         25:42:9b:99:7e:5d:e4:0b:e0:a6:e5:89:24:74:27:02:ba:c4:
         b0:f2:10:05:de:f7:ea:ab:79:c5:b3:24:08:b4:ec:fd:b8:fb:
         68:05:8d:49:e6:ef:f6:fd:c8:6f:8d:99:6a:ee:0e:cf:b5:ee:
         88:19:c4:84:d5:ff:2f:af:4f:64:ca:e6:bc:3d:fe:f1:4a:45:
         c3:9b:99:f3:01:31:9b:96:32:2c:21:2e:d1:8a:a8:ff:e1:fb:
         f2:3b:53:63:0b:14:9b:f5:d2:41:66:31:8e:85:2e:d8:ef:e3:
         a3:b7:a4:05:e3:b6:a6:7a:4d:05:32:b5:04:62:f4:7b:aa:25:
         5b:41:c5:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr751nIo562YzBpK2tTBE2XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZDczMDRjMWI1OWRjMjI3MzFiYjUzZWZmNWE4NGVkOWEz
MDYxNGMwHhcNMjUxMjA4MDMwMDM0WhcNMjUxMjA5MDMwMDM0WjAzMTEwLwYDVQQD
EyhjNDBmOTMyNjY2NWI5ZTI1MGMxNGU5MDZjYzI1NWY1ODZjNTQxMjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypCPjYSq94eitvzUK8kewCOwG1h0
+o3hcz7suFd9WDwyyXyLFZC9Vz4GvqkzqpaGioIjKH3tZPotydvopy0I4rNo05sE
2J9n1QtBJBDEGKKmJ5Ylo7PcxxOguRN4ZCLLW4RMNToMFDgEGA/7uhZh8xYJRPng
E5oNqOQxI6HjvsY9CxX2TesMF3tXghvDB+gyryNyxd4SZJLTIgJ3Is6+U9jLkQvp
+Zp4jVO2NUiXs2p5PDlhJjkOxYtmqjog+ELlxKlyyo56ct80bRFVIGdm/+5ap+OG
7sKTiY2+GsxI7/ZEkf7f/fv2nDV8N9C/GS5FYQZ8YSsO8LDE7a+aztUlzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQPkyZmW54lDBTpBswlX1hsVBJOMB8GA1UdIwQY
MBaAFCfXMEwbWdwicxu1Pv9ahO2aMGFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjljd1RCdFozQ0p6RzdVLV8xcUU3Wm93WVV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9jMTNlMTItZTUwZC00MzM4LThhMmYt
ZmZmYjVhNGU3NjJhLzEvSjljd1RCdFozQ0p6RzdVLV8xcUU3Wm93WVV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9jMTNlMTItZTUwZC00MzM4LThhMmYtZmZmYjVhNGU3NjJh
LzEvSjljd1RCdFozQ0p6RzdVLV8xcUU3Wm93WVV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW75+hRxS
Cd7O/kWXtzQjgksBWtn3EI2c12V2mCNyFCrkSMKxLn6/GH8HELVeLKq5CvZvN5iQ
xg6LZRnYvkmGEQe8d2F8J1qEIgUOwpZ8SEwc8/whauXTwfDhUtBpIbC3/wZ6c7l4
UxHHptjt3JNq+GKuqb3u/Jrl9GaT/lnoJUKbmX5d5AvgpuWJJHQnArrEsPIQBd73
6qt5xbMkCLTs/bj7aAWNSebv9v3Ib42Zau4Oz7XuiBnEhNX/L69PZMrmvD3+8UpF
w5uZ8wExm5YyLCEu0Yqo/+H78jtTYwsUm/XSQWYxjoUu2O/jo7ekBeO2pnpNBTK1
BGL0e6olW0HF2Q==
-----END CERTIFICATE-----
Generated at Mon Dec 8 08:41:54 2025 by rpki-client