This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft
File:                     jvSnYgy-f8xHKj2gKckLX72UUZw.mft (raw, json)
Hash identifier:          dEPuf9oejZWJD37/3j0UJriT7+98+KzlXctKfjwT5T8=
Subject key identifier:   76:58:45:11:64:C9:30:E7:5E:07:A4:C7:C7:41:A6:FB:C9:26:87:CA
Authority key identifier: 8E:F4:A7:62:0C:BE:7F:CC:47:2A:3D:A0:29:C9:0B:5F:BD:94:51:9C
Certificate issuer:       /CN=8ef4a7620cbe7fcc472a3da029c90b5fbd94519c
Certificate serial:       019B955400636CE45B55DF1866AB8BD72385
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvSnYgy-f8xHKj2gKckLX72UUZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft
Manifest number:          08A5
Signing time:             Tue 06 Jan 2026 22:01:08 +0000
Manifest this update:     Tue 06 Jan 2026 22:01:08 +0000
Manifest next update:     Wed 07 Jan 2026 22:01:08 +0000
Files and hashes:         1: jvSnYgy-f8xHKj2gKckLX72UUZw.crl (hash: R+mR71GqZEHRL7QFh90MDGVw/USNtz3m3rPQ1tFlnH8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvSnYgy-f8xHKj2gKckLX72UUZw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Jan 2026 22:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:95:54:00:63:6c:e4:5b:55:df:18:66:ab:8b:d7:23:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef4a7620cbe7fcc472a3da029c90b5fbd94519c
        Validity
            Not Before: Jan  6 22:01:08 2026 GMT
            Not After : Jan  7 22:01:08 2026 GMT
        Subject: CN=7658451164c930e75e07a4c7c741a6fbc92687ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:50:16:95:24:99:73:00:c8:55:1b:9c:6c:c2:
                    7c:7d:70:fb:db:43:c4:e0:69:d7:31:da:ef:45:8a:
                    5e:5c:2b:0b:33:b6:88:92:32:b8:96:4a:bc:7a:af:
                    24:4d:99:b2:e4:ff:76:65:f8:92:aa:b6:0f:72:06:
                    6a:2c:b4:60:4c:41:64:86:54:a7:f0:00:41:fd:37:
                    12:ff:d7:02:b4:02:5f:0f:af:d6:a7:fa:d1:e7:cf:
                    38:7a:17:f4:5e:ca:d0:d6:f9:37:fa:a9:47:4e:6c:
                    1e:7e:c2:f5:1d:ce:ec:e5:e9:14:ae:d0:82:12:9b:
                    36:ec:1f:a9:fe:7d:e9:53:fe:6e:b8:fc:f9:98:f5:
                    1d:56:96:26:0c:c7:7a:0a:d7:1b:60:93:04:97:74:
                    db:c0:26:55:ac:3b:10:92:64:6c:fa:3e:9b:3c:24:
                    5b:d1:be:d4:c9:b3:90:0b:6d:14:50:c0:f8:26:ca:
                    2f:cc:a7:b9:1e:c5:03:4b:f2:30:6d:58:b2:bc:c7:
                    db:22:ca:25:5b:d6:02:98:5f:b1:0a:7e:c7:69:01:
                    29:14:35:a1:04:cb:8a:28:f2:55:97:9c:4d:bd:70:
                    3f:56:b9:ae:af:01:fe:e3:0d:a5:26:c9:ac:02:a9:
                    6a:b0:81:4c:aa:48:56:e0:b1:21:11:85:e5:0c:26:
                    43:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:58:45:11:64:C9:30:E7:5E:07:A4:C7:C7:41:A6:FB:C9:26:87:CA
            X509v3 Authority Key Identifier:
                keyid:8E:F4:A7:62:0C:BE:7F:CC:47:2A:3D:A0:29:C9:0B:5F:BD:94:51:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvSnYgy-f8xHKj2gKckLX72UUZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:bd:76:b0:22:e2:62:d4:08:f9:fb:34:c2:2b:62:7d:12:c4:
         2e:22:1f:e2:81:72:3a:42:f2:54:85:36:a1:71:1d:26:29:93:
         a1:1e:e5:63:f9:08:68:6a:7d:8d:94:77:69:60:23:b2:c4:83:
         e2:ce:da:d8:e8:b3:3d:95:fb:ee:03:49:ef:10:19:33:19:34:
         c7:01:c2:38:73:7e:ee:2c:43:5e:dd:6c:81:8d:cb:3a:71:74:
         31:18:69:98:02:74:59:69:18:7e:b6:a4:24:db:50:c9:50:09:
         2e:2a:a4:b7:17:29:51:91:a6:cb:92:01:2d:79:bb:35:66:ab:
         90:0c:21:26:80:ef:2e:0f:aa:11:8c:2a:ac:05:a7:88:6f:01:
         56:29:63:8d:30:b6:de:c8:5b:4d:31:ea:f8:f2:5e:5f:1b:59:
         d1:8c:b8:99:3e:59:5a:c2:ca:cf:ba:6b:d3:2e:ab:19:23:fd:
         a8:df:36:f5:55:9e:d8:5d:86:08:f2:ab:3e:09:3d:2f:3d:71:
         f5:ff:82:a2:9c:6e:5a:d8:d4:7f:26:dc:97:e8:12:25:09:be:
         c3:4c:2e:5f:3f:c2:e9:0d:63:25:44:ad:87:b5:ef:d6:a6:75:
         84:dc:79:54:90:62:d3:2f:e0:5d:f4:c6:91:45:78:02:d4:8d:
         bc:b4:8c:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZuVVABjbORbVd8YZquL1yOFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlZjRhNzYyMGNiZTdmY2M0NzJhM2RhMDI5YzkwYjVmYmQ5
NDUxOWMwHhcNMjYwMTA2MjIwMTA4WhcNMjYwMTA3MjIwMTA4WjAzMTEwLwYDVQQD
Eyg3NjU4NDUxMTY0YzkzMGU3NWUwN2E0YzdjNzQxYTZmYmM5MjY4N2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVAWlSSZcwDIVRucbMJ8fXD720PE
4GnXMdrvRYpeXCsLM7aIkjK4lkq8eq8kTZmy5P92ZfiSqrYPcgZqLLRgTEFkhlSn
8ABB/TcS/9cCtAJfD6/Wp/rR5884ehf0XsrQ1vk3+qlHTmwefsL1Hc7s5ekUrtCC
Eps27B+p/n3pU/5uuPz5mPUdVpYmDMd6CtcbYJMEl3TbwCZVrDsQkmRs+j6bPCRb
0b7UybOQC20UUMD4JsovzKe5HsUDS/IwbViyvMfbIsolW9YCmF+xCn7HaQEpFDWh
BMuKKPJVl5xNvXA/VrmurwH+4w2lJsmsAqlqsIFMqkhW4LEhEYXlDCZDwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZYRRFkyTDnXgekx8dBpvvJJofKMB8GA1UdIwQY
MBaAFI70p2IMvn/MRyo9oCnJC1+9lFGcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanZTbllneS1mOHhIS2oyZ0tja0xYNzJVVVp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9jYjRmNmUtZWRiMi00OGJiLWJhYWIt
YTBiMDhhOWYwNWM2LzEvanZTbllneS1mOHhIS2oyZ0tja0xYNzJVVVp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9jYjRmNmUtZWRiMi00OGJiLWJhYWItYTBiMDhhOWYwNWM2
LzEvanZTbllneS1mOHhIS2oyZ0tja0xYNzJVVVp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW712sCLi
YtQI+fs0witifRLELiIf4oFyOkLyVIU2oXEdJimToR7lY/kIaGp9jZR3aWAjssSD
4s7a2OizPZX77gNJ7xAZMxk0xwHCOHN+7ixDXt1sgY3LOnF0MRhpmAJ0WWkYfrak
JNtQyVAJLiqktxcpUZGmy5IBLXm7NWarkAwhJoDvLg+qEYwqrAWniG8BViljjTC2
3shbTTHq+PJeXxtZ0Yy4mT5ZWsLKz7pr0y6rGSP9qN829VWe2F2GCPKrPgk9Lz1x
9f+CopxuWtjUfybcl+gSJQm+w0wuXz/C6Q1jJUSth7Xv1qZ1hNx5VJBi0y/gXfTG
kUV4AtSNvLSMUQ==
-----END CERTIFICATE-----
Generated at Wed Jan 7 06:59:38 2026 by rpki-client