This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
File:                     jK0wO8cLEvg9v4n8FInLRhLPVSY.mft (raw, json)
Hash identifier:          0IaSOIsJuhiSqzEY7vjjkljTrAl9KEKehS1Hs97P/kA=
Subject key identifier:   7C:1E:6F:21:C1:6C:13:F7:AD:0E:A1:32:00:04:48:A0:30:6F:47:8D
Authority key identifier: 8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
Certificate issuer:       /CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Certificate serial:       019AF208B23669EBC704F6170116653DE7C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
Manifest number:          03BB
Signing time:             Sat 06 Dec 2025 05:00:47 +0000
Manifest this update:     Sat 06 Dec 2025 05:00:47 +0000
Manifest next update:     Sun 07 Dec 2025 05:00:47 +0000
Files and hashes:         1: EZBWVER6RlsPS5zwpSfeXDYY4_4.roa (hash: TmP6HB2vfugTxNqU8/mbrbGgjAkZNuZVMOPZ6v4m2ZU=)
                          2: UWM-Kz1OP0UjWcYPffeOWK62TZs.roa (hash: lnPff/3R3t0peMh+icEOeZMrkDG2dfoemotH4CHOKR8=)
                          3: jK0wO8cLEvg9v4n8FInLRhLPVSY.crl (hash: 8j4Qv2idmPE2CcsYr3wEUSb8WSr7ACMtWFYGGN5Cgr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:08:b2:36:69:eb:c7:04:f6:17:01:16:65:3d:e7:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
        Validity
            Not Before: Dec  6 05:00:47 2025 GMT
            Not After : Dec  7 05:00:47 2025 GMT
        Subject: CN=7c1e6f21c16c13f7ad0ea132000448a0306f478d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:20:36:11:40:1a:d5:aa:aa:5d:e9:59:2f:ad:
                    90:f5:2a:83:1e:d8:f3:0a:7e:f3:1d:48:43:42:4d:
                    b5:4f:ac:5e:fe:cc:11:46:b3:8b:01:0b:6b:19:92:
                    16:1b:c7:dd:9b:ef:59:89:46:da:4c:a7:76:c8:3a:
                    ac:2e:20:8f:01:de:bc:3a:5b:77:d9:de:2a:4f:5a:
                    d2:59:16:7a:cb:bb:e9:c3:a9:31:aa:26:b9:74:fb:
                    2d:68:51:9f:fc:95:8c:e7:d5:a7:c7:42:69:5f:f9:
                    44:11:a6:51:f3:2a:c7:f8:fe:6d:da:68:4b:45:08:
                    b8:36:7c:a1:98:f7:4d:72:ac:68:ed:fc:20:3f:9f:
                    4e:5f:02:9a:73:ef:6f:ba:4b:a4:10:09:1a:17:d7:
                    51:19:c4:70:ef:f6:58:66:75:25:ea:a4:76:e3:c5:
                    18:7c:ce:9a:65:30:08:2d:36:57:d6:0d:e2:26:f2:
                    d3:39:10:f8:ae:e9:01:e3:b2:c7:60:6a:99:39:66:
                    92:a3:2d:10:48:67:56:2e:95:5e:64:ee:f1:00:e8:
                    f5:d7:16:dc:c2:7b:77:d6:52:39:2f:dd:42:e4:98:
                    4f:91:7d:fc:67:e3:64:05:17:07:70:95:be:82:56:
                    e3:c9:19:df:c8:97:e7:a3:a9:f9:38:a2:05:f0:1e:
                    aa:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:1E:6F:21:C1:6C:13:F7:AD:0E:A1:32:00:04:48:A0:30:6F:47:8D
            X509v3 Authority Key Identifier:
                keyid:8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:83:84:b4:75:07:85:9d:0e:50:35:b3:4f:9e:fd:ad:3a:82:
         8c:d9:52:7d:0a:4c:4b:c7:5a:94:38:fe:36:cf:b0:b8:97:f1:
         c8:7c:6b:63:74:69:51:42:72:fe:46:da:d8:b1:00:7a:00:39:
         48:13:27:10:f1:24:f5:e2:40:42:90:66:1e:75:73:f5:86:a6:
         88:61:6c:a2:1f:a8:77:68:98:bd:83:97:7b:53:93:4b:00:db:
         33:3f:92:95:57:bd:3f:54:4c:3b:fc:c7:e8:9f:cd:94:49:6f:
         f1:13:52:91:b6:84:55:ab:51:2d:8a:cc:02:b4:a9:27:8f:4f:
         82:f3:ab:ef:5c:d0:10:9d:55:71:b1:1f:e3:64:c6:d4:d6:ab:
         4e:da:8d:a4:61:82:16:42:23:66:e1:b7:d1:bb:9d:58:69:a0:
         6c:f7:ba:bc:6f:08:15:a2:4c:f6:54:eb:47:50:e1:73:58:4f:
         61:b0:fd:43:c5:85:f0:b9:5f:6d:d0:88:69:a5:fc:5b:6c:dc:
         e4:fb:d2:13:64:9d:95:ca:3e:42:f5:30:2f:26:7a:d5:e9:40:
         c0:65:cc:aa:68:b6:db:6d:47:3c:5d:2a:77:eb:83:56:df:ab:
         5d:27:00:f8:f8:8f:12:20:77:0f:30:86:13:5d:73:31:5d:2e:
         2b:c0:77:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryCLI2aevHBPYXARZlPefDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjYWQzMDNiYzcwYjEyZjgzZGJmODlmYzE0ODljYjQ2MTJj
ZjU1MjYwHhcNMjUxMjA2MDUwMDQ3WhcNMjUxMjA3MDUwMDQ3WjAzMTEwLwYDVQQD
Eyg3YzFlNmYyMWMxNmMxM2Y3YWQwZWExMzIwMDA0NDhhMDMwNmY0NzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyA2EUAa1aqqXelZL62Q9SqDHtjz
Cn7zHUhDQk21T6xe/swRRrOLAQtrGZIWG8fdm+9ZiUbaTKd2yDqsLiCPAd68Olt3
2d4qT1rSWRZ6y7vpw6kxqia5dPstaFGf/JWM59Wnx0JpX/lEEaZR8yrH+P5t2mhL
RQi4NnyhmPdNcqxo7fwgP59OXwKac+9vukukEAkaF9dRGcRw7/ZYZnUl6qR248UY
fM6aZTAILTZX1g3iJvLTORD4rukB47LHYGqZOWaSoy0QSGdWLpVeZO7xAOj11xbc
wnt31lI5L91C5JhPkX38Z+NkBRcHcJW+glbjyRnfyJfno6n5OKIF8B6qawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHwebyHBbBP3rQ6hMgAESKAwb0eNMB8GA1UdIwQY
MBaAFIytMDvHCxL4Pb+J/BSJy0YSz1UmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakswd084Y0xFdmc5djRuOEZJbkxSaExQVlNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8xZDNmOWUtOWE2Yy00Yzg2LWEwMzYt
NDgyNTU1NDUyODMxLzEvakswd084Y0xFdmc5djRuOEZJbkxSaExQVlNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8xZDNmOWUtOWE2Yy00Yzg2LWEwMzYtNDgyNTU1NDUyODMx
LzEvakswd084Y0xFdmc5djRuOEZJbkxSaExQVlNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZoOEtHUH
hZ0OUDWzT579rTqCjNlSfQpMS8dalDj+Ns+wuJfxyHxrY3RpUUJy/kba2LEAegA5
SBMnEPEk9eJAQpBmHnVz9YamiGFsoh+od2iYvYOXe1OTSwDbMz+SlVe9P1RMO/zH
6J/NlElv8RNSkbaEVatRLYrMArSpJ49PgvOr71zQEJ1VcbEf42TG1NarTtqNpGGC
FkIjZuG30budWGmgbPe6vG8IFaJM9lTrR1Dhc1hPYbD9Q8WF8LlfbdCIaaX8W2zc
5PvSE2Sdlco+QvUwLyZ61elAwGXMqmi2221HPF0qd+uDVt+rXScA+PiPEiB3DzCG
E11zMV0uK8B3YA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:45:08 2025 by rpki-client