This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
File:                     jzaP655VO90TFWJYSjNTsddVXFA.mft (raw, json)
Hash identifier:          zmF8ag3hKrSrCfYRL+kF7kepodqQidDHzeULZA+JhaQ=
Subject key identifier:   FA:0B:D3:47:20:E6:32:89:A0:CD:C0:8C:61:5E:DA:AB:BE:65:9C:9E
Authority key identifier: 8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
Certificate issuer:       /CN=8f368feb9e553bdd131562584a3353b1d7555c50
Certificate serial:       019B405BAB592A53C1A6B0689CF4F5430BEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
Manifest number:          179B
Signing time:             Sun 21 Dec 2025 10:01:47 +0000
Manifest this update:     Sun 21 Dec 2025 10:01:47 +0000
Manifest next update:     Mon 22 Dec 2025 10:01:47 +0000
Files and hashes:         1: VgDY9zN_B3grCrz_H8xjNykqXTQ.roa (hash: V5RUWHdPXufxGeDHhevmGSEqGhIbGyboqgCFXxKzrT8=)
                          2: eWNwoG2gNqVOl4jxtgq3km86-j8.roa (hash: tuYXWwSXyhuCjeV5A6/luy4IrIPezyScgsOJmMQtw38=)
                          3: jzaP655VO90TFWJYSjNTsddVXFA.crl (hash: oXWy9xEGBufGYqtX67fyvsj1GFQIdctXChoFWKzklUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:40:5b:ab:59:2a:53:c1:a6:b0:68:9c:f4:f5:43:0b:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f368feb9e553bdd131562584a3353b1d7555c50
        Validity
            Not Before: Dec 21 10:01:47 2025 GMT
            Not After : Dec 22 10:01:47 2025 GMT
        Subject: CN=fa0bd34720e63289a0cdc08c615edaabbe659c9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8a:62:30:04:6d:56:29:c4:28:bc:6b:cc:77:
                    03:15:27:83:bc:af:04:30:ed:e0:be:ee:42:80:ea:
                    84:ff:b8:3c:c7:79:5d:cc:8b:0b:e3:3d:d3:7b:73:
                    74:0f:ac:0e:3d:c4:a0:68:db:95:76:a5:8e:5c:17:
                    80:bb:36:42:b2:84:82:78:b1:2d:57:77:1d:87:fb:
                    9d:30:ba:0c:0d:1a:a6:b9:bf:0c:1e:b1:8b:36:fa:
                    21:80:2d:6b:af:8c:67:2b:12:6c:84:c5:7d:9b:cd:
                    33:07:3e:26:97:ea:b3:ab:ee:0c:a9:bb:a9:d0:b1:
                    96:15:3a:f7:75:4d:3a:6b:d1:84:4f:1c:41:bd:ac:
                    36:e6:3f:b8:00:5b:a6:43:5c:6e:f0:d8:d8:dd:e2:
                    35:86:04:45:c6:d9:b2:f2:e2:ed:3c:4f:9e:c7:b7:
                    0a:4a:22:1f:3d:49:28:90:06:ce:a2:54:bc:76:a5:
                    51:5f:6c:2b:65:5b:f6:39:2e:c2:50:0f:5a:8f:d9:
                    4b:25:a1:d3:4d:94:72:7f:4b:1f:0a:ee:07:46:92:
                    6b:4e:2e:c1:10:6a:21:f8:f9:52:e3:d7:99:d3:b9:
                    71:79:ee:3a:2f:1e:f4:cf:ff:a0:90:ac:11:58:18:
                    ba:2f:70:c3:c2:dc:8c:a7:07:70:b5:1d:6e:d5:f9:
                    25:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:0B:D3:47:20:E6:32:89:A0:CD:C0:8C:61:5E:DA:AB:BE:65:9C:9E
            X509v3 Authority Key Identifier:
                keyid:8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:6b:03:8e:3b:d7:b3:93:05:28:8a:b1:20:fd:76:34:03:7d:
         6e:6d:36:c5:bb:ff:38:b6:ca:98:42:37:00:c5:1f:ba:af:b8:
         07:b8:59:0a:b3:6b:f9:f6:b8:c1:19:9e:b0:55:79:27:f2:82:
         ec:19:9e:3a:f9:38:ca:c8:bd:b9:e0:5b:ed:4e:9c:11:19:94:
         88:26:5f:8b:55:b4:a3:b0:b4:5a:a5:a3:2d:a1:83:d8:00:95:
         3a:f7:8f:7a:60:7b:f4:00:a7:0e:53:3e:0a:a7:d2:e2:bf:0e:
         a7:05:a2:f4:32:2c:8f:0f:51:88:85:67:ff:44:0d:28:43:23:
         d6:01:f4:d8:61:ce:75:df:48:a3:2b:e7:cd:cd:06:93:75:a5:
         97:e7:db:98:90:ba:8e:2b:91:ae:6b:1a:1f:67:14:3c:f7:fa:
         a8:38:4b:d6:ec:9d:a1:a8:ab:f5:0c:6f:28:f4:f8:17:de:04:
         e5:80:08:b5:d7:3b:14:c4:43:ce:c8:55:16:2a:d2:08:ba:8d:
         f8:f0:e6:2b:61:45:bd:6f:4a:47:c1:e4:15:e2:75:f6:b2:81:
         16:03:a8:9b:6d:30:04:9b:56:8c:99:46:0c:f5:21:52:f6:89:
         ff:3e:f8:2e:06:cd:7e:31:56:d7:bc:ad:c5:26:8f:51:99:bc:
         eb:14:4b:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtAW6tZKlPBprBonPT1QwvuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMzY4ZmViOWU1NTNiZGQxMzE1NjI1ODRhMzM1M2IxZDc1
NTVjNTAwHhcNMjUxMjIxMTAwMTQ3WhcNMjUxMjIyMTAwMTQ3WjAzMTEwLwYDVQQD
EyhmYTBiZDM0NzIwZTYzMjg5YTBjZGMwOGM2MTVlZGFhYmJlNjU5YzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYpiMARtVinEKLxrzHcDFSeDvK8E
MO3gvu5CgOqE/7g8x3ldzIsL4z3Te3N0D6wOPcSgaNuVdqWOXBeAuzZCsoSCeLEt
V3cdh/udMLoMDRqmub8MHrGLNvohgC1rr4xnKxJshMV9m80zBz4ml+qzq+4Mqbup
0LGWFTr3dU06a9GETxxBvaw25j+4AFumQ1xu8NjY3eI1hgRFxtmy8uLtPE+ex7cK
SiIfPUkokAbOolS8dqVRX2wrZVv2OS7CUA9aj9lLJaHTTZRyf0sfCu4HRpJrTi7B
EGoh+PlS49eZ07lxee46Lx70z/+gkKwRWBi6L3DDwtyMpwdwtR1u1fklfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoL00cg5jKJoM3AjGFe2qu+ZZyeMB8GA1UdIwQY
MBaAFI82j+ueVTvdExViWEozU7HXVVxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanphUDY1NVZPOTBURldKWVNqTlRzZGRWWEZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8wNTQ3Y2ItYzVkYy00ZTJmLWFmZjct
M2VjYTdkZjJhZTU3LzEvanphUDY1NVZPOTBURldKWVNqTlRzZGRWWEZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8wNTQ3Y2ItYzVkYy00ZTJmLWFmZjctM2VjYTdkZjJhZTU3
LzEvanphUDY1NVZPOTBURldKWVNqTlRzZGRWWEZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS2sDjjvX
s5MFKIqxIP12NAN9bm02xbv/OLbKmEI3AMUfuq+4B7hZCrNr+fa4wRmesFV5J/KC
7BmeOvk4ysi9ueBb7U6cERmUiCZfi1W0o7C0WqWjLaGD2ACVOvePemB79ACnDlM+
CqfS4r8OpwWi9DIsjw9RiIVn/0QNKEMj1gH02GHOdd9Ioyvnzc0Gk3Wll+fbmJC6
jiuRrmsaH2cUPPf6qDhL1uydoair9QxvKPT4F94E5YAItdc7FMRDzshVFirSCLqN
+PDmK2FFvW9KR8HkFeJ19rKBFgOom20wBJtWjJlGDPUhUvaJ/z74LgbNfjFW17yt
xSaPUZm86xRLfA==
-----END CERTIFICATE-----
Generated at Sun Dec 21 14:11:57 2025 by rpki-client