This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
File:                     JtmhbC-n1MNwtTJSFL5EILYR8fk.mft (raw, json)
Hash identifier:          gw3TKnlxQKf/sQ+qwDYDa3yEgX+ZMP4HcegfM+uTbhg=
Subject key identifier:   DE:C3:F6:04:15:63:BD:81:4B:82:A0:A8:C6:67:81:9B:61:17:C4:81
Authority key identifier: 26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
Certificate issuer:       /CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Certificate serial:       019B281B5CA78C5470D361B929EFEE22B60A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
Manifest number:          177F
Signing time:             Tue 16 Dec 2025 17:00:40 +0000
Manifest this update:     Tue 16 Dec 2025 17:00:40 +0000
Manifest next update:     Wed 17 Dec 2025 17:00:40 +0000
Files and hashes:         1: 8ugHhLiToKwnzK4NKapWEcPlKh0.roa (hash: 4E0a2T2uUeIhUUG04lFzaUEsCu56I9vGRdi00E/gn7k=)
                          2: JtmhbC-n1MNwtTJSFL5EILYR8fk.crl (hash: 8eF4trZ7EMU7PR3pysEwC8h+tWzkAGoPz2PuFfxYECw=)
                          3: zGlqz5otF9hY2Y3sk2pn1erhTAU.roa (hash: ofXFe05Yp+tSBC9fBzRKiln4g1Kad9/L6uAtEFx8Z54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 14:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:28:1b:5c:a7:8c:54:70:d3:61:b9:29:ef:ee:22:b6:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
        Validity
            Not Before: Dec 16 17:00:40 2025 GMT
            Not After : Dec 17 17:00:40 2025 GMT
        Subject: CN=dec3f6041563bd814b82a0a8c667819b6117c481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:df:e2:ad:87:c3:28:25:53:3c:cd:be:29:99:
                    06:2a:68:56:00:fd:dd:d5:5d:54:af:a6:c4:f9:02:
                    39:48:0a:83:79:cc:e0:f1:a5:f4:aa:a4:c2:2f:57:
                    c9:02:f2:bd:c3:59:5b:13:70:18:a1:b1:53:6b:6d:
                    d2:82:91:61:41:3c:83:cf:cf:d7:2e:7e:99:f8:09:
                    28:b2:60:38:87:bd:c6:af:aa:30:44:54:7d:16:d9:
                    ef:a2:1e:c7:f1:ea:53:e7:06:5b:67:19:be:ab:73:
                    37:ca:8f:19:79:94:22:f8:d3:6c:b0:aa:36:7a:cf:
                    e9:65:07:6c:c7:02:cb:09:8c:c7:9a:eb:a3:32:ad:
                    b3:83:e6:e1:70:f8:e4:5f:bd:bc:fe:cd:d8:4e:21:
                    2c:a9:07:e5:2e:3f:16:7a:5b:5f:b6:3c:3a:a2:c3:
                    f6:83:23:b8:62:f1:53:16:ba:ba:d0:72:63:02:49:
                    35:57:fa:9b:d2:c1:5d:ec:9c:f3:2e:4e:3c:74:a0:
                    c8:61:e1:d2:c6:d0:2b:e2:07:de:5d:8b:67:ab:fc:
                    2b:ab:56:24:db:35:e0:32:00:48:55:fc:e6:c5:65:
                    b7:a3:19:0e:02:7b:5f:80:53:34:ca:e8:b4:a3:60:
                    d2:d5:f0:7b:a8:99:a6:a4:ee:60:bd:66:38:50:2a:
                    db:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C3:F6:04:15:63:BD:81:4B:82:A0:A8:C6:67:81:9B:61:17:C4:81
            X509v3 Authority Key Identifier:
                keyid:26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:a5:a0:3f:1b:4c:64:a1:6a:b2:5b:3b:25:34:3e:54:1a:65:
         72:a9:85:e6:99:4b:fa:75:d7:b8:0a:49:9b:e4:f1:d1:de:18:
         20:b8:14:ff:2c:25:bb:88:8a:79:46:a2:8e:7f:3f:f1:b0:6d:
         ab:43:bd:04:09:81:01:ca:da:27:cc:6f:86:bd:78:ca:61:09:
         60:38:98:2b:5d:d7:65:a8:39:ac:7f:43:8c:f1:54:96:bc:92:
         e4:72:53:ac:39:0e:cb:be:45:f6:df:3e:0e:3b:fc:57:e3:31:
         11:8f:d6:04:87:d4:e5:34:3b:3f:a9:f0:9d:ac:e1:95:0d:f6:
         d0:c5:0d:85:32:84:b5:4d:1f:34:60:35:de:86:a6:98:1e:b2:
         a7:cb:bc:2d:c7:10:d2:47:4e:a9:c7:09:ff:3f:84:c0:d6:a9:
         ed:60:9f:ed:4a:8c:7b:db:7a:e3:03:a8:4a:18:23:e6:7c:f9:
         5e:5d:eb:39:12:2a:b5:a9:86:a0:70:ac:72:83:a4:4e:42:02:
         d8:26:f7:8f:2f:6c:1d:b7:f6:dc:19:77:d7:cd:f2:cd:a4:3e:
         66:2e:f2:42:e9:17:2f:d6:87:17:50:f3:fb:6f:7f:4d:e8:6e:
         ef:91:41:d4:da:ea:d8:35:82:62:02:b5:77:e2:ee:bb:5d:36:
         24:84:a3:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsoG1ynjFRw02G5Ke/uIrYKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2ZDlhMTZjMmZhN2Q0YzM3MGI1MzI1MjE0YmU0NDIwYjYx
MWYxZjkwHhcNMjUxMjE2MTcwMDQwWhcNMjUxMjE3MTcwMDQwWjAzMTEwLwYDVQQD
EyhkZWMzZjYwNDE1NjNiZDgxNGI4MmEwYThjNjY3ODE5YjYxMTdjNDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN/irYfDKCVTPM2+KZkGKmhWAP3d
1V1Ur6bE+QI5SAqDeczg8aX0qqTCL1fJAvK9w1lbE3AYobFTa23SgpFhQTyDz8/X
Ln6Z+AkosmA4h73Gr6owRFR9Ftnvoh7H8epT5wZbZxm+q3M3yo8ZeZQi+NNssKo2
es/pZQdsxwLLCYzHmuujMq2zg+bhcPjkX728/s3YTiEsqQflLj8Weltftjw6osP2
gyO4YvFTFrq60HJjAkk1V/qb0sFd7JzzLk48dKDIYeHSxtAr4gfeXYtnq/wrq1Yk
2zXgMgBIVfzmxWW3oxkOAntfgFM0yui0o2DS1fB7qJmmpO5gvWY4UCrb6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7D9gQVY72BS4KgqMZngZthF8SBMB8GA1UdIwQY
MBaAFCbZoWwvp9TDcLUyUhS+RCC2EfH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnRtaGJDLW4xTU53dFRKU0ZMNUVJTFlSOGZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9jNWZjNTQtNzRjMi00ZjNkLTk1YzEt
NDQwMjNjM2I3ODRlLzEvSnRtaGJDLW4xTU53dFRKU0ZMNUVJTFlSOGZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9jNWZjNTQtNzRjMi00ZjNkLTk1YzEtNDQwMjNjM2I3ODRl
LzEvSnRtaGJDLW4xTU53dFRKU0ZMNUVJTFlSOGZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl6WgPxtM
ZKFqsls7JTQ+VBplcqmF5plL+nXXuApJm+Tx0d4YILgU/ywlu4iKeUaijn8/8bBt
q0O9BAmBAcraJ8xvhr14ymEJYDiYK13XZag5rH9DjPFUlryS5HJTrDkOy75F9t8+
Djv8V+MxEY/WBIfU5TQ7P6nwnazhlQ320MUNhTKEtU0fNGA13oammB6yp8u8LccQ
0kdOqccJ/z+EwNap7WCf7UqMe9t64wOoShgj5nz5Xl3rORIqtamGoHCscoOkTkIC
2Cb3jy9sHbf23Bl3183yzaQ+Zi7yQukXL9aHF1Dz+29/Tehu75FB1Nrq2DWCYgK1
d+Luu102JISj+w==
-----END CERTIFICATE-----
Generated at Wed Dec 17 00:25:23 2025 by rpki-client