This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
File:                     JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft (raw, json)
Hash identifier:          7B8M4v+PaGL097bUKrszvxR1D2Sy7urkqVAm7IYnj/s=
Subject key identifier:   F5:4F:48:4E:7A:50:5F:39:37:7A:9F:E6:1B:F2:C1:72:24:1A:4C:D7
Authority key identifier: 25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08
Certificate issuer:       /CN=252a182d91f456d850210dbf72da7e475fbf3c08
Certificate serial:       019AF2AD8D2E3705C75C140581168C7BA159
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
Manifest number:          1763
Signing time:             Sat 06 Dec 2025 08:00:51 +0000
Manifest this update:     Sat 06 Dec 2025 08:00:51 +0000
Manifest next update:     Sun 07 Dec 2025 08:00:51 +0000
Files and hashes:         1: AuVvPbpIxYfbjHQfau6WKQEGa-g.roa (hash: U6m8+4Sl84CkDxQZPw+ZQm1IJSjlEAy/sYjRvvU6Ths=)
                          2: JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl (hash: KXk+UMfYKcK4YJkxuhHZX+2joBlUrrXDsksjBlKL35g=)
                          3: dtGqDCamv_hVVWZjpqsIRYZCyw8.roa (hash: eV1f95aHCVJX6WIYYc+AMUUHYQd1RjaDWI8sAgDgSqE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:8d:2e:37:05:c7:5c:14:05:81:16:8c:7b:a1:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252a182d91f456d850210dbf72da7e475fbf3c08
        Validity
            Not Before: Dec  6 08:00:51 2025 GMT
            Not After : Dec  7 08:00:51 2025 GMT
        Subject: CN=f54f484e7a505f39377a9fe61bf2c172241a4cd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a2:fb:6b:a8:20:94:01:aa:40:b2:42:91:a4:
                    eb:35:01:f7:38:0a:14:97:6c:7a:11:1d:dc:c9:3a:
                    f4:85:e2:19:d7:ef:9c:7d:85:da:89:0e:ae:dc:ae:
                    bf:c2:28:32:cf:b2:20:49:3a:4f:f5:d1:12:f1:88:
                    c0:0c:c7:69:d1:09:87:6c:35:4c:93:2f:54:cf:fd:
                    a4:ad:25:62:b5:6d:ef:36:eb:fd:7d:1e:43:a1:1b:
                    4f:3f:bb:fc:3f:fa:f8:5a:b3:27:91:ec:3b:08:53:
                    61:a9:db:42:f0:ca:10:1f:8c:f0:fd:02:79:f7:81:
                    ed:3b:f0:bc:34:39:cd:92:55:8b:15:6d:14:d4:98:
                    6c:a5:24:56:cf:c8:23:d6:61:66:0d:b2:07:10:92:
                    16:70:e7:8c:ce:95:ca:db:f5:eb:16:b7:43:fc:11:
                    a1:7d:a6:5b:c9:bb:b8:46:00:e8:70:d0:c6:11:fd:
                    71:c6:26:14:d2:a3:a8:84:17:06:36:67:ad:83:05:
                    3d:92:40:b9:53:09:64:94:8f:78:3c:a2:5c:a5:62:
                    00:fc:c1:39:85:67:d5:ff:d8:8f:bf:63:2c:fc:17:
                    1a:89:3e:bf:c8:53:f4:51:3c:37:54:92:35:25:eb:
                    fe:1c:bf:29:46:20:ce:0f:2c:81:7d:99:8f:a0:82:
                    d7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4F:48:4E:7A:50:5F:39:37:7A:9F:E6:1B:F2:C1:72:24:1A:4C:D7
            X509v3 Authority Key Identifier:
                keyid:25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:e9:de:9b:05:c4:76:75:ae:0e:e7:1e:06:64:2f:84:18:d4:
         70:ae:8d:8d:83:42:92:56:48:c0:0e:1e:ec:62:b8:6d:2a:d7:
         75:9f:27:38:84:60:a8:b8:42:b1:1c:2e:ee:19:27:f0:b2:9d:
         08:10:9c:61:f9:10:a3:a8:f2:bf:70:30:a4:33:56:e1:eb:f2:
         4c:1d:05:4d:92:44:bf:58:75:e4:c6:12:98:58:c0:60:70:26:
         96:64:3a:ec:00:91:5a:63:b4:30:77:9c:e9:fe:ad:ba:3b:ae:
         b7:60:7e:91:85:97:a8:82:f1:a9:25:f5:da:34:a0:ed:e6:d2:
         df:a0:3d:98:b4:ab:95:84:46:e1:0a:7e:36:17:9d:58:9d:ce:
         7f:9a:5f:03:b3:4b:75:d1:35:40:2a:81:0b:19:0e:26:c8:92:
         75:a7:1b:7e:d9:6f:8f:c3:ea:6d:4a:0d:a5:a5:25:dd:a8:2f:
         d6:5e:85:d2:53:44:c3:e3:d9:7b:0c:62:68:53:e7:3c:72:34:
         c1:aa:32:fb:bc:45:41:43:b7:de:ef:07:f1:7d:40:85:ee:03:
         84:93:30:89:12:08:c5:2b:b6:d6:37:15:68:30:32:71:c6:44:
         06:03:e3:f6:b4:03:9e:3a:bb:f6:18:76:6d:06:84:0f:6e:6f:
         ad:a5:29:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryrY0uNwXHXBQFgRaMe6FZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MmExODJkOTFmNDU2ZDg1MDIxMGRiZjcyZGE3ZTQ3NWZi
ZjNjMDgwHhcNMjUxMjA2MDgwMDUxWhcNMjUxMjA3MDgwMDUxWjAzMTEwLwYDVQQD
EyhmNTRmNDg0ZTdhNTA1ZjM5Mzc3YTlmZTYxYmYyYzE3MjI0MWE0Y2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaL7a6gglAGqQLJCkaTrNQH3OAoU
l2x6ER3cyTr0heIZ1++cfYXaiQ6u3K6/wigyz7IgSTpP9dES8YjADMdp0QmHbDVM
ky9Uz/2krSVitW3vNuv9fR5DoRtPP7v8P/r4WrMnkew7CFNhqdtC8MoQH4zw/QJ5
94HtO/C8NDnNklWLFW0U1JhspSRWz8gj1mFmDbIHEJIWcOeMzpXK2/XrFrdD/BGh
faZbybu4RgDocNDGEf1xxiYU0qOohBcGNmetgwU9kkC5UwlklI94PKJcpWIA/ME5
hWfV/9iPv2Ms/BcaiT6/yFP0UTw3VJI1Jev+HL8pRiDODyyBfZmPoILXQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPVPSE56UF85N3qf5hvywXIkGkzXMB8GA1UdIwQY
MBaAFCUqGC2R9FbYUCENv3LafkdfvzwIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlNvWUxaSDBWdGhRSVEyX2N0cC1SMS1fUEFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9iNzdlNmEtYWNlMy00ZmYyLWIyMmEt
NTgyZjlkMmUzOGIyLzEvSlNvWUxaSDBWdGhRSVEyX2N0cC1SMS1fUEFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9iNzdlNmEtYWNlMy00ZmYyLWIyMmEtNTgyZjlkMmUzOGIy
LzEvSlNvWUxaSDBWdGhRSVEyX2N0cC1SMS1fUEFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk+nemwXE
dnWuDuceBmQvhBjUcK6NjYNCklZIwA4e7GK4bSrXdZ8nOIRgqLhCsRwu7hkn8LKd
CBCcYfkQo6jyv3AwpDNW4evyTB0FTZJEv1h15MYSmFjAYHAmlmQ67ACRWmO0MHec
6f6tujuut2B+kYWXqILxqSX12jSg7ebS36A9mLSrlYRG4Qp+NhedWJ3Of5pfA7NL
ddE1QCqBCxkOJsiSdacbftlvj8PqbUoNpaUl3agv1l6F0lNEw+PZewxiaFPnPHI0
waoy+7xFQUO33u8H8X1Ahe4DhJMwiRIIxSu21jcVaDAyccZEBgPj9rQDnjq79hh2
bQaED25vraUpyQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:44:08 2025 by rpki-client