This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
File:                     Jr3a4E28sfgvVbB4MHuksIS5lLs.mft (raw, json)
Hash identifier:          2RmfMRUshkPhc8XJ/FZGHSXTFxb+vcsqvhByF/I/o9s=
Subject key identifier:   58:DF:4F:97:85:55:32:B5:ED:84:FF:E8:00:89:66:E9:2F:07:B2:D0
Authority key identifier: 26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB
Certificate issuer:       /CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
Certificate serial:       019AF19BB5C5B4FC3743D81077119E99491C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
Manifest number:          1769
Signing time:             Sat 06 Dec 2025 03:01:44 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:44 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:44 +0000
Files and hashes:         1: 6s_6R9Qg6B0BWMzsSYadcyCPTNI.roa (hash: 0TX6RB/i/PYM+jHhKWcDxzPxSqvqvW8BUSQ5qekuotk=)
                          2: Jr3a4E28sfgvVbB4MHuksIS5lLs.crl (hash: Q+o2RBFHBeLgKC1sTN/PfuhTD+Da0Qq5auLk6hXL2PI=)
                          3: On6P0oyCVsJaxIEE3GftNC4qztw.roa (hash: MHdX24gf5gM9PdREHRYQX0s+qP7Sh6jKR9PNtNbtiPk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:b5:c5:b4:fc:37:43:d8:10:77:11:9e:99:49:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
        Validity
            Not Before: Dec  6 03:01:44 2025 GMT
            Not After : Dec  7 03:01:44 2025 GMT
        Subject: CN=58df4f97855532b5ed84ffe8008966e92f07b2d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1d:6c:a6:d6:33:5a:28:7b:d0:c4:a4:e0:93:
                    62:b8:6c:2f:01:9a:01:4d:c1:57:9c:fc:87:c1:50:
                    84:a6:37:a0:c1:36:64:63:6b:73:42:e0:9d:2e:c9:
                    af:12:72:cb:28:34:81:29:ff:9e:ab:b9:6e:4d:2d:
                    0e:71:dd:17:2f:32:d9:93:a1:59:1d:8f:2f:7c:66:
                    40:88:72:c9:75:95:93:95:3d:63:dd:13:7c:f9:e4:
                    b8:bb:71:59:0a:29:b9:f7:0b:5b:d0:a6:c6:ec:5f:
                    b6:ae:b4:22:66:08:99:5f:02:9a:8c:84:f3:95:1c:
                    a4:1b:c7:f3:88:67:28:ea:62:2c:72:3f:93:a0:0a:
                    37:9d:e5:9d:9d:47:f4:bb:e8:52:6a:76:8a:b4:ca:
                    ec:23:8e:c7:72:45:c4:5b:30:4b:21:da:13:53:6e:
                    aa:46:0a:4d:4c:f2:bb:69:8e:66:e3:4d:8c:7f:b1:
                    5f:42:a0:a8:e0:00:2c:f2:9e:24:1c:a5:43:27:10:
                    cb:f1:80:16:8b:54:62:18:9c:11:79:96:f3:c2:50:
                    2f:34:8a:b6:0a:07:5e:4c:c6:1c:9b:72:e6:0d:d2:
                    90:c8:e7:c1:cd:da:67:78:0b:b9:4c:88:40:80:bf:
                    60:ac:88:bf:36:d7:3c:f1:ac:5a:52:15:31:0a:7a:
                    43:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DF:4F:97:85:55:32:B5:ED:84:FF:E8:00:89:66:E9:2F:07:B2:D0
            X509v3 Authority Key Identifier:
                keyid:26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:31:58:57:29:cb:f0:ef:24:2a:07:5a:21:49:b2:09:8f:81:
         6e:9f:39:d0:de:05:1c:e3:a5:71:37:18:32:a0:25:31:79:f8:
         e7:37:b3:5d:8c:45:68:77:39:f7:c9:e0:5f:25:9d:c4:25:33:
         83:c8:33:44:56:71:3c:88:26:4e:10:09:c1:eb:ad:0e:c2:be:
         5b:67:68:9a:e1:de:b9:dc:9d:3a:86:31:6f:54:1f:d3:3a:66:
         3b:1c:50:01:e4:47:ff:97:ee:18:1d:65:d1:84:a4:df:f6:80:
         3b:03:f1:dd:ec:f8:e6:45:60:6b:da:55:d6:6e:76:8a:8a:fc:
         40:26:f2:74:01:f4:ae:bc:9a:5b:24:08:64:0f:c3:c7:88:ee:
         6f:74:b1:58:73:55:0a:5b:c0:c4:d7:d9:49:3a:40:95:82:94:
         97:77:f1:3c:5e:75:c9:a4:60:ba:d2:ad:36:ea:97:50:66:83:
         9e:6e:ff:5a:8f:69:ec:35:ce:42:a6:c5:c2:97:46:c0:91:77:
         dc:89:67:72:43:48:f9:8e:18:2a:1d:aa:f7:ca:c2:3a:95:99:
         d1:55:b7:01:9a:31:e4:cb:d5:53:94:23:08:38:e1:a5:0f:48:
         a1:55:53:de:98:66:ea:c6:e5:6e:da:3c:36:c3:7b:53:ac:71:
         7e:0b:72:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxm7XFtPw3Q9gQdxGemUkcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YmRkYWUwNGRiY2IxZjgyZjU1YjA3ODMwN2JhNGIwODRi
OTk0YmIwHhcNMjUxMjA2MDMwMTQ0WhcNMjUxMjA3MDMwMTQ0WjAzMTEwLwYDVQQD
Eyg1OGRmNGY5Nzg1NTUzMmI1ZWQ4NGZmZTgwMDg5NjZlOTJmMDdiMmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkB1sptYzWih70MSk4JNiuGwvAZoB
TcFXnPyHwVCEpjegwTZkY2tzQuCdLsmvEnLLKDSBKf+eq7luTS0Ocd0XLzLZk6FZ
HY8vfGZAiHLJdZWTlT1j3RN8+eS4u3FZCim59wtb0KbG7F+2rrQiZgiZXwKajITz
lRykG8fziGco6mIscj+ToAo3neWdnUf0u+hSanaKtMrsI47HckXEWzBLIdoTU26q
RgpNTPK7aY5m402Mf7FfQqCo4AAs8p4kHKVDJxDL8YAWi1RiGJwReZbzwlAvNIq2
CgdeTMYcm3LmDdKQyOfBzdpneAu5TIhAgL9grIi/Ntc88axaUhUxCnpDnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjfT5eFVTK17YT/6ACJZukvB7LQMB8GA1UdIwQY
MBaAFCa92uBNvLH4L1WweDB7pLCEuZS7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnIzYTRFMjhzZmd2VmJCNE1IdWtzSVM1bExzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9mZWIzYmEtZWU5MC00ZjAzLTllMDAt
ZjYxNzlhOTEwYjE1LzEvSnIzYTRFMjhzZmd2VmJCNE1IdWtzSVM1bExzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9mZWIzYmEtZWU5MC00ZjAzLTllMDAtZjYxNzlhOTEwYjE1
LzEvSnIzYTRFMjhzZmd2VmJCNE1IdWtzSVM1bExzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAajFYVynL
8O8kKgdaIUmyCY+Bbp850N4FHOOlcTcYMqAlMXn45zezXYxFaHc598ngXyWdxCUz
g8gzRFZxPIgmThAJweutDsK+W2domuHeudydOoYxb1Qf0zpmOxxQAeRH/5fuGB1l
0YSk3/aAOwPx3ez45kVga9pV1m52ior8QCbydAH0rryaWyQIZA/Dx4jub3SxWHNV
ClvAxNfZSTpAlYKUl3fxPF51yaRgutKtNuqXUGaDnm7/Wo9p7DXOQqbFwpdGwJF3
3IlnckNI+Y4YKh2q98rCOpWZ0VW3AZox5MvVU5QjCDjhpQ9IoVVT3phm6sblbto8
NsN7U6xxfgty9A==
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:26:44 2025 by rpki-client