This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.mft
File:                     j6nQXioyGuy6TsxKvsD3jqzeVbA.mft (raw, json)
Hash identifier:          mMjECcEn+NMnO6GGU09hi6sHdZVwfoLszAHAo6UnoXw=
Subject key identifier:   FB:8E:E2:2F:88:E1:3C:93:3D:07:95:5C:C8:CD:A4:73:04:FF:8F:F9
Authority key identifier: 8F:A9:D0:5E:2A:32:1A:EC:BA:4E:CC:4A:BE:C0:F7:8E:AC:DE:55:B0
Certificate issuer:       /CN=8fa9d05e2a321aecba4ecc4abec0f78eacde55b0
Certificate serial:       019B266437A2D53DAC28ACD9A631AB76A661
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.mft
Manifest number:          37
Signing time:             Tue 16 Dec 2025 09:01:00 +0000
Manifest this update:     Tue 16 Dec 2025 09:01:00 +0000
Manifest next update:     Wed 17 Dec 2025 09:01:00 +0000
Files and hashes:         1: U3twjM0H57q4OKhp0S-d6jU2ZK0.roa (hash: ucLz1Rl2bM04jZf+Xxc2nzOXMHVXNvLglCQznDB9st4=)
                          2: d476BYeaJLqNSnr-4TzLtIvX_-4.asa (hash: DGmo0q0ksnUeOLLpbyw3uKqXcWfdPN/1LjZwfME/+Cs=)
                          3: j6nQXioyGuy6TsxKvsD3jqzeVbA.crl (hash: tNz7dsbonjVxWj+EO72gYFUz9UXrD8pfC+FOrd75adI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 09:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:26:64:37:a2:d5:3d:ac:28:ac:d9:a6:31:ab:76:a6:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fa9d05e2a321aecba4ecc4abec0f78eacde55b0
        Validity
            Not Before: Dec 16 09:01:00 2025 GMT
            Not After : Dec 17 09:01:00 2025 GMT
        Subject: CN=fb8ee22f88e13c933d07955cc8cda47304ff8ff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d2:e9:24:49:39:6d:c7:a6:66:0a:d2:1b:ba:
                    32:3e:f1:6a:76:d3:e6:0d:af:09:9d:56:21:81:d2:
                    55:cd:a6:df:92:32:bd:f1:7a:25:aa:72:76:33:bb:
                    ca:88:63:2d:1d:47:54:d4:ea:37:cc:e5:e0:c6:ea:
                    ac:8e:ae:d7:3e:f9:ef:61:33:88:6b:27:f5:9e:1e:
                    7b:77:5b:b7:e1:05:16:63:b6:77:82:5b:7b:4e:09:
                    38:75:69:fa:3a:bc:48:ef:1a:7f:09:da:90:67:f1:
                    1a:fe:6f:a2:c7:8f:63:37:3d:6f:1e:62:e4:71:ee:
                    68:c1:b2:03:57:5d:b6:96:89:6c:24:d5:70:94:a9:
                    cd:8a:88:07:51:0e:f5:89:a1:d2:b5:fc:73:48:c1:
                    af:e7:94:23:38:7a:99:15:30:b2:5f:31:05:05:37:
                    6e:be:f5:bf:3f:11:8c:ee:6d:de:b5:0b:a5:be:e3:
                    1d:5c:84:20:b1:e4:c8:ba:47:d6:e6:ab:56:b0:d2:
                    b3:aa:0d:04:3a:7c:a8:eb:ac:ca:9e:b2:d3:90:45:
                    61:d9:f9:45:63:aa:71:50:06:72:05:30:b6:e5:72:
                    e7:f1:a1:37:b5:23:1b:44:04:8c:95:34:02:59:05:
                    c0:eb:27:fc:3f:2c:f8:c6:db:85:07:61:75:56:01:
                    cb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:8E:E2:2F:88:E1:3C:93:3D:07:95:5C:C8:CD:A4:73:04:FF:8F:F9
            X509v3 Authority Key Identifier:
                keyid:8F:A9:D0:5E:2A:32:1A:EC:BA:4E:CC:4A:BE:C0:F7:8E:AC:DE:55:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:cd:3f:c8:c6:6e:bd:56:47:76:41:aa:b3:cc:30:09:49:21:
         61:11:54:67:7b:3d:b0:95:b5:4b:33:c1:26:e2:b9:56:68:17:
         a4:a8:6a:cc:ea:30:1b:e3:44:95:6c:7c:40:88:18:4e:3e:fc:
         20:81:5a:e0:1f:a3:02:b0:74:d7:12:0a:d0:19:8f:70:13:03:
         91:61:0a:13:88:69:27:54:23:6c:59:c0:d5:fc:83:35:af:a7:
         0d:cc:72:04:53:11:f8:a9:81:ed:37:cb:ae:84:f3:24:50:c0:
         36:37:46:4d:55:3b:80:f2:52:6c:4c:f2:5b:94:fc:cf:be:fe:
         ef:5b:18:6a:6b:b6:37:00:cc:2e:69:d0:42:76:5f:86:a5:ba:
         bc:78:dc:47:45:11:28:f6:c3:53:f2:e8:d0:4f:77:62:5c:a5:
         13:3d:66:e7:9b:a2:9e:ac:e3:27:ae:6c:0b:d2:99:80:b5:d7:
         22:d7:20:0f:3b:87:f9:9f:00:a0:71:91:47:00:fc:47:ae:16:
         8e:51:71:35:fe:b0:fc:a1:50:cd:9f:06:1e:e7:b0:d8:32:e3:
         08:6b:bf:ce:72:7e:11:86:fe:f1:10:d2:6e:ce:9a:92:22:1d:
         8e:00:2d:f5:70:40:91:97:d8:00:4d:85:80:2e:5d:82:31:80:
         60:ff:59:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsmZDei1T2sKKzZpjGrdqZhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYTlkMDVlMmEzMjFhZWNiYTRlY2M0YWJlYzBmNzhlYWNk
ZTU1YjAwHhcNMjUxMjE2MDkwMTAwWhcNMjUxMjE3MDkwMTAwWjAzMTEwLwYDVQQD
EyhmYjhlZTIyZjg4ZTEzYzkzM2QwNzk1NWNjOGNkYTQ3MzA0ZmY4ZmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9LpJEk5bcemZgrSG7oyPvFqdtPm
Da8JnVYhgdJVzabfkjK98XolqnJ2M7vKiGMtHUdU1Oo3zOXgxuqsjq7XPvnvYTOI
ayf1nh57d1u34QUWY7Z3glt7Tgk4dWn6OrxI7xp/CdqQZ/Ea/m+ix49jNz1vHmLk
ce5owbIDV122lolsJNVwlKnNiogHUQ71iaHStfxzSMGv55QjOHqZFTCyXzEFBTdu
vvW/PxGM7m3etQulvuMdXIQgseTIukfW5qtWsNKzqg0EOnyo66zKnrLTkEVh2flF
Y6pxUAZyBTC25XLn8aE3tSMbRASMlTQCWQXA6yf8Pyz4xtuFB2F1VgHL1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPuO4i+I4TyTPQeVXMjNpHME/4/5MB8GA1UdIwQY
MBaAFI+p0F4qMhrsuk7MSr7A946s3lWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajZuUVhpb3lHdXk2VHN4S3ZzRDNqcXplVmJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zYWJkYzctMTZhMi00NDRiLTljZWYt
ODNmYmQ4NjY2OTk0LzEvajZuUVhpb3lHdXk2VHN4S3ZzRDNqcXplVmJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8zYWJkYzctMTZhMi00NDRiLTljZWYtODNmYmQ4NjY2OTk0
LzEvajZuUVhpb3lHdXk2VHN4S3ZzRDNqcXplVmJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACs0/yMZu
vVZHdkGqs8wwCUkhYRFUZ3s9sJW1SzPBJuK5VmgXpKhqzOowG+NElWx8QIgYTj78
IIFa4B+jArB01xIK0BmPcBMDkWEKE4hpJ1QjbFnA1fyDNa+nDcxyBFMR+KmB7TfL
roTzJFDANjdGTVU7gPJSbEzyW5T8z77+71sYamu2NwDMLmnQQnZfhqW6vHjcR0UR
KPbDU/Lo0E93YlylEz1m55uinqzjJ65sC9KZgLXXItcgDzuH+Z8AoHGRRwD8R64W
jlFxNf6w/KFQzZ8GHuew2DLjCGu/znJ+EYb+8RDSbs6akiIdjgAt9XBAkZfYAE2F
gC5dgjGAYP9ZLA==
-----END CERTIFICATE-----
Generated at Tue Dec 16 12:42:23 2025 by rpki-client