This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
File:                     J-cRzjQCblevMpDH3izSHcZx4Pw.mft (raw, json)
Hash identifier:          rIGYcoV0j0w2nj8362sKxbisWb5rYfumT9944q0oBdY=
Subject key identifier:   18:42:3F:D9:47:C7:41:21:F9:83:CE:C2:AF:FF:21:6B:6E:39:55:FF
Authority key identifier: 27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC
Certificate issuer:       /CN=27e711ce34026e57af3290c7de2cd21dc671e0fc
Certificate serial:       019AF3C046A4C717E490F77EA438FA04C2A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
Manifest number:          1765
Signing time:             Sat 06 Dec 2025 13:00:55 +0000
Manifest this update:     Sat 06 Dec 2025 13:00:55 +0000
Manifest next update:     Sun 07 Dec 2025 13:00:55 +0000
Files and hashes:         1: J-cRzjQCblevMpDH3izSHcZx4Pw.crl (hash: QBt5JpRjvnAU3dg/pQDmJLB87mSPsdCgzHHETnJXDSU=)
                          2: cSxqzHQIFX03E67QT7FwyB0-2wc.roa (hash: ehpsqzEAcx4o5Hfss771kB3qGbR5m4ewO+AFeZ/9pUw=)
                          3: d1pbdA__eUq65yVNaUqfoJfF1gA.roa (hash: GBeDmf/sEIKh081o/6CjC+lT/hastrtkWuFWWekc6pY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:c0:46:a4:c7:17:e4:90:f7:7e:a4:38:fa:04:c2:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27e711ce34026e57af3290c7de2cd21dc671e0fc
        Validity
            Not Before: Dec  6 13:00:55 2025 GMT
            Not After : Dec  7 13:00:55 2025 GMT
        Subject: CN=18423fd947c74121f983cec2afff216b6e3955ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:77:0b:57:65:19:94:7f:d2:fb:b4:45:26:b5:
                    e3:1e:46:57:21:c2:64:84:9c:a6:cd:42:e9:57:e1:
                    8e:d8:93:a3:7a:92:71:9e:49:17:b0:6b:ea:7f:1d:
                    24:6f:d3:8a:15:98:5c:a7:3b:e4:86:e5:71:30:f5:
                    a2:66:5d:dd:a5:25:40:87:1f:c6:f6:86:ad:7f:bf:
                    b4:c1:ef:16:7c:97:ea:90:58:28:54:e6:e1:39:75:
                    a5:bc:90:aa:60:76:c9:2b:8e:7f:75:69:63:46:d4:
                    df:e1:48:c5:64:2d:9a:25:29:4d:0f:0b:f9:c0:7d:
                    0d:b8:8a:d4:6c:d3:99:00:98:f1:9d:ac:a7:1e:65:
                    96:08:11:d5:7c:ba:0b:47:d6:14:65:9b:9c:06:e5:
                    4e:78:57:b7:e7:73:0d:91:d1:a8:6e:3f:14:26:8e:
                    34:7f:77:8e:ee:d2:68:df:b4:6d:fb:52:fa:59:e3:
                    7c:ef:92:c7:5e:41:f2:4b:71:0a:fa:d8:1a:7b:c4:
                    a6:3e:8b:cd:db:3b:06:43:a5:27:da:78:4f:c7:55:
                    ee:b8:8b:d1:57:89:9e:f2:5b:55:58:14:ca:aa:83:
                    62:a0:8a:b7:df:a9:91:d3:2a:89:7e:6d:03:86:c8:
                    90:11:86:69:3a:4a:f0:b9:b2:f7:29:ab:36:ce:7a:
                    99:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:42:3F:D9:47:C7:41:21:F9:83:CE:C2:AF:FF:21:6B:6E:39:55:FF
            X509v3 Authority Key Identifier:
                keyid:27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:2a:82:bd:f4:2e:57:00:30:44:37:e7:b6:db:09:b6:48:c7:
         6d:26:fe:86:01:6c:eb:ad:03:06:c9:eb:64:d9:57:16:ef:71:
         71:f8:3f:f7:eb:38:9b:e1:2c:9c:83:ff:8b:79:10:f7:f9:34:
         3c:0a:b9:a3:10:3f:24:c4:74:c3:40:6f:e7:d5:93:02:48:80:
         a6:f8:16:98:57:61:63:dc:a6:b9:47:a3:9d:ec:3c:74:cd:a1:
         fa:d7:53:e7:63:78:7e:75:b6:e9:5c:7a:13:87:97:37:2f:c6:
         5d:ae:7c:fa:80:be:4c:fc:99:63:77:62:fb:64:19:b3:62:ca:
         7c:98:a8:c4:61:79:08:da:b2:f5:15:7d:81:76:b8:7e:bd:a9:
         32:ee:9c:bc:b5:91:a3:62:5c:dc:93:e7:f4:2b:a8:85:37:45:
         31:a7:27:ec:93:6f:22:59:ff:e5:ba:bf:1e:a2:ea:e7:81:61:
         54:a3:6f:9a:33:50:e0:66:b3:ac:44:93:6c:b6:0e:6a:bd:66:
         16:92:4a:bc:48:3f:7e:bf:5a:85:f8:3b:65:0a:e4:40:91:60:
         0a:a0:c4:db:15:92:38:56:62:1d:f2:5b:87:9a:2a:5b:c9:f2:
         0a:6e:ca:b8:01:d2:69:a2:84:11:c9:98:6f:88:8e:86:e4:a4:
         e7:5d:58:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzwEakxxfkkPd+pDj6BMKoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZTcxMWNlMzQwMjZlNTdhZjMyOTBjN2RlMmNkMjFkYzY3
MWUwZmMwHhcNMjUxMjA2MTMwMDU1WhcNMjUxMjA3MTMwMDU1WjAzMTEwLwYDVQQD
EygxODQyM2ZkOTQ3Yzc0MTIxZjk4M2NlYzJhZmZmMjE2YjZlMzk1NWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHcLV2UZlH/S+7RFJrXjHkZXIcJk
hJymzULpV+GO2JOjepJxnkkXsGvqfx0kb9OKFZhcpzvkhuVxMPWiZl3dpSVAhx/G
9oatf7+0we8WfJfqkFgoVObhOXWlvJCqYHbJK45/dWljRtTf4UjFZC2aJSlNDwv5
wH0NuIrUbNOZAJjxnaynHmWWCBHVfLoLR9YUZZucBuVOeFe353MNkdGobj8UJo40
f3eO7tJo37Rt+1L6WeN875LHXkHyS3EK+tgae8SmPovN2zsGQ6Un2nhPx1XuuIvR
V4me8ltVWBTKqoNioIq336mR0yqJfm0DhsiQEYZpOkrwubL3Kas2znqZ+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhCP9lHx0Eh+YPOwq//IWtuOVX/MB8GA1UdIwQY
MBaAFCfnEc40Am5XrzKQx94s0h3GceD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSi1jUnpqUUNibGV2TXBESDNpelNIY1p4NFB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8yNmMwZjktMjRhNC00NmZkLTgwNDIt
YjcyZTVmZWY4ODZhLzEvSi1jUnpqUUNibGV2TXBESDNpelNIY1p4NFB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8yNmMwZjktMjRhNC00NmZkLTgwNDItYjcyZTVmZWY4ODZh
LzEvSi1jUnpqUUNibGV2TXBESDNpelNIY1p4NFB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfSqCvfQu
VwAwRDfnttsJtkjHbSb+hgFs660DBsnrZNlXFu9xcfg/9+s4m+EsnIP/i3kQ9/k0
PAq5oxA/JMR0w0Bv59WTAkiApvgWmFdhY9ymuUejnew8dM2h+tdT52N4fnW26Vx6
E4eXNy/GXa58+oC+TPyZY3di+2QZs2LKfJioxGF5CNqy9RV9gXa4fr2pMu6cvLWR
o2Jc3JPn9CuohTdFMacn7JNvIln/5bq/HqLq54FhVKNvmjNQ4GazrESTbLYOar1m
FpJKvEg/fr9ahfg7ZQrkQJFgCqDE2xWSOFZiHfJbh5oqW8nyCm7KuAHSaaKEEcmY
b4iOhuSk511Yzw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:44:35 2025 by rpki-client