This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
File:                     J_whhWzY4Denu4xjkqYZghOotPY.mft (raw, json)
Hash identifier:          r6RMcILZHCT1eLQwAOT5TaQdc0nKBUPXOb3JXviOHb8=
Subject key identifier:   6D:FD:79:A4:E2:AC:02:AD:DA:29:C0:89:FC:90:F7:3D:C9:0D:7C:FB
Authority key identifier: 27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6
Certificate issuer:       /CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
Certificate serial:       019B7291CCAECC73A18DCA7DAF748054191E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
Manifest number:          0E85
Signing time:             Wed 31 Dec 2025 04:01:56 +0000
Manifest this update:     Wed 31 Dec 2025 04:01:56 +0000
Manifest next update:     Thu 01 Jan 2026 04:01:56 +0000
Files and hashes:         1: J_whhWzY4Denu4xjkqYZghOotPY.crl (hash: qkqirHqqs6QInP+efZvhQIY1eUS9lKZ3k0j54zTMmuw=)
                          2: UEg2a8frOwQJ_ocv6mZt898VwKc.roa (hash: HhDZ6hinLTKa6qeDqW6QogtlJ6a4udPeZaa3rESZ/rM=)
                          3: zUk84pMkBH7qM-5eyE2RTVXesY8.roa (hash: 1Rye/GoMkKTXa8JBFflyaNlKfqeLYK+b0R1zK9MVT4Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Jan 2026 04:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:72:91:cc:ae:cc:73:a1:8d:ca:7d:af:74:80:54:19:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
        Validity
            Not Before: Dec 31 04:01:56 2025 GMT
            Not After : Jan  1 04:01:56 2026 GMT
        Subject: CN=6dfd79a4e2ac02adda29c089fc90f73dc90d7cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b0:46:f9:9c:25:a9:f0:b8:71:8c:a0:85:fa:
                    94:59:e3:f3:f3:54:51:8a:8d:b9:ce:47:de:75:af:
                    24:5b:8b:06:85:ef:cf:1a:94:54:9a:bb:5e:d8:45:
                    08:12:0d:18:3b:b8:2e:65:79:0b:6d:cd:0e:b0:55:
                    2c:f3:71:2e:8e:c4:c9:8d:89:25:ca:ca:a3:83:3c:
                    7b:0d:e1:fc:ee:83:d7:48:88:f3:50:9d:05:e2:b8:
                    8d:de:0d:be:d9:c4:ea:62:d5:8e:e8:a0:a1:7e:af:
                    c8:dc:ee:13:f0:f5:58:11:ed:97:f9:56:9a:88:8d:
                    01:b7:09:42:f7:22:c9:9d:4a:96:4c:95:12:12:06:
                    3a:02:44:3d:7b:70:68:55:4a:23:cd:47:a8:a9:0f:
                    39:8a:5a:97:81:46:68:75:f6:5d:97:6b:e6:bd:d2:
                    06:09:ba:f6:cd:a8:d6:7a:01:82:9a:13:96:8b:5a:
                    f2:09:e5:0f:f6:b9:26:ee:43:b6:ba:20:a2:9a:87:
                    36:0e:cd:4b:bd:82:5e:0e:1b:31:bc:02:cd:1e:b6:
                    ae:00:c0:50:95:f8:7c:5e:9b:52:1f:aa:86:29:b8:
                    06:45:69:2b:36:16:d1:1f:1e:0d:e0:b3:a4:c1:5f:
                    bb:c2:d1:dc:db:22:7c:83:53:f6:80:16:e8:47:55:
                    85:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FD:79:A4:E2:AC:02:AD:DA:29:C0:89:FC:90:F7:3D:C9:0D:7C:FB
            X509v3 Authority Key Identifier:
                keyid:27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:af:e3:2b:12:bc:36:f9:b0:f2:53:a8:7a:cc:c3:6f:d4:50:
         6d:7f:3e:d6:a6:a1:92:cc:00:11:2b:b6:b0:ba:e4:90:2a:88:
         1f:17:76:21:28:5c:08:5f:cf:03:9e:e0:0a:7b:fd:80:65:dd:
         31:4f:05:3b:eb:cb:85:be:5a:d4:fa:a1:bf:a1:50:b3:a3:98:
         31:34:4b:f5:42:06:2c:00:ba:70:73:af:70:1e:05:ca:19:ea:
         5b:78:08:e1:b2:13:93:0d:4f:b3:51:91:35:9c:1d:13:e8:43:
         b4:4d:87:08:9f:a8:f8:b3:05:f7:70:05:4b:c5:fc:ed:45:b5:
         3f:2a:18:c3:2c:6f:9b:d9:3b:4a:86:82:6b:13:7d:68:20:8c:
         65:b1:1b:97:8f:1b:bd:38:d0:17:20:a5:92:48:6d:76:d5:47:
         e0:38:c8:77:9e:ae:af:b4:92:f2:71:00:18:8f:43:58:4e:4b:
         e2:a7:20:e1:c7:af:c5:7a:39:3d:5e:55:3f:53:37:8a:56:b1:
         5b:27:fb:a3:fa:1f:a3:72:72:f2:58:7d:a9:4e:90:20:70:cd:
         65:4c:f6:f9:e5:69:2d:f7:f0:0f:5d:22:88:ad:b4:27:f9:76:
         91:3c:49:5b:19:b5:bc:a0:91:e6:bd:ce:5e:24:1c:e8:4e:53:
         cd:fc:93:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtykcyuzHOhjcp9r3SAVBkeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZmMyMTg1NmNkOGUwMzdhN2JiOGM2MzkyYTYxOTgyMTNh
OGI0ZjYwHhcNMjUxMjMxMDQwMTU2WhcNMjYwMTAxMDQwMTU2WjAzMTEwLwYDVQQD
Eyg2ZGZkNzlhNGUyYWMwMmFkZGEyOWMwODlmYzkwZjczZGM5MGQ3Y2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorBG+ZwlqfC4cYyghfqUWePz81RR
io25zkfeda8kW4sGhe/PGpRUmrte2EUIEg0YO7guZXkLbc0OsFUs83EujsTJjYkl
ysqjgzx7DeH87oPXSIjzUJ0F4riN3g2+2cTqYtWO6KChfq/I3O4T8PVYEe2X+Vaa
iI0BtwlC9yLJnUqWTJUSEgY6AkQ9e3BoVUojzUeoqQ85ilqXgUZodfZdl2vmvdIG
Cbr2zajWegGCmhOWi1ryCeUP9rkm7kO2uiCimoc2Ds1LvYJeDhsxvALNHrauAMBQ
lfh8XptSH6qGKbgGRWkrNhbRHx4N4LOkwV+7wtHc2yJ8g1P2gBboR1WFJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG39eaTirAKt2inAifyQ9z3JDXz7MB8GA1UdIwQY
MBaAFCf8IYVs2OA3p7uMY5KmGYITqLT2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSl93aGhXelk0RGVudTR4amtxWVpnaE9vdFBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9jN2ZhNDgtMjg3Ni00MjJiLTg4MjUt
ZTFmMzY3ZTc5NjIwLzEvSl93aGhXelk0RGVudTR4amtxWVpnaE9vdFBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9jN2ZhNDgtMjg3Ni00MjJiLTg4MjUtZTFmMzY3ZTc5NjIw
LzEvSl93aGhXelk0RGVudTR4amtxWVpnaE9vdFBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABK/jKxK8
Nvmw8lOoeszDb9RQbX8+1qahkswAESu2sLrkkCqIHxd2IShcCF/PA57gCnv9gGXd
MU8FO+vLhb5a1Pqhv6FQs6OYMTRL9UIGLAC6cHOvcB4FyhnqW3gI4bITkw1Ps1GR
NZwdE+hDtE2HCJ+o+LMF93AFS8X87UW1PyoYwyxvm9k7SoaCaxN9aCCMZbEbl48b
vTjQFyClkkhtdtVH4DjId56ur7SS8nEAGI9DWE5L4qcg4cevxXo5PV5VP1M3ilax
Wyf7o/ofo3Jy8lh9qU6QIHDNZUz2+eVpLffwD10iiK20J/l2kTxJWxm1vKCR5r3O
XiQc6E5TzfyT1w==
-----END CERTIFICATE-----
Generated at Wed Dec 31 10:27:47 2025 by rpki-client