This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
File:                     jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft (raw, json)
Hash identifier:          IKxPNpMGZI8EiLQA03dSgU/My5nIfDut2SVFcjWZkiM=
Subject key identifier:   1E:ED:8B:C6:CF:FA:3D:D8:5F:FC:48:5D:48:B0:68:2D:63:B5:24:68
Authority key identifier: 8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED
Certificate issuer:       /CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded
Certificate serial:       019B3C10304F490CAC0D5EF90FED865D1D42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
Manifest number:          046B
Signing time:             Sat 20 Dec 2025 14:00:52 +0000
Manifest this update:     Sat 20 Dec 2025 14:00:52 +0000
Manifest next update:     Sun 21 Dec 2025 14:00:52 +0000
Files and hashes:         1: Eja8uROuzIbK3iaci49r3-WhTxE.roa (hash: ZAVnNyA2dIyWXYHRVd60vJEBGOSH2/TqvMkOURX86Bo=)
                          2: jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl (hash: DsBmHl0MIiVSSVg9tNkOxo+d+ypEBujLwx7UWLK/3wA=)
                          3: uoyL0ZKxvvYBLDNKHJ1IzqSk5WI.roa (hash: ACYXuw8g/6+3rYxew9u9OnID8RwadfPf3oWdg4WuNrU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 14:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:10:30:4f:49:0c:ac:0d:5e:f9:0f:ed:86:5d:1d:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded
        Validity
            Not Before: Dec 20 14:00:52 2025 GMT
            Not After : Dec 21 14:00:52 2025 GMT
        Subject: CN=1eed8bc6cffa3dd85ffc485d48b0682d63b52468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b8:43:c4:6c:79:0b:6c:a6:23:df:c5:10:28:
                    b5:75:40:46:98:73:ce:21:d3:2d:cb:1a:1c:0f:ce:
                    af:8f:9c:48:80:e6:a0:0a:30:18:0d:2d:95:d3:fb:
                    90:8b:e9:e3:d6:3e:b3:c0:32:ad:0d:64:a6:01:f2:
                    09:3d:49:44:dd:dd:68:56:1c:84:bf:82:58:81:78:
                    f5:27:67:e0:d8:eb:79:31:84:4e:9b:33:56:09:ef:
                    e7:71:09:af:cf:1a:1a:e8:bb:24:57:c8:9c:e4:c4:
                    b9:17:b4:bc:d3:3c:a2:e3:7e:99:53:16:35:b9:fa:
                    d6:a9:46:20:92:f7:12:89:65:d6:a1:c8:5b:21:58:
                    bd:76:94:35:84:90:07:4d:83:37:13:6c:68:ef:75:
                    e4:ab:3c:21:da:2c:bc:57:3d:9b:35:96:7e:d3:04:
                    0e:a8:17:92:23:19:72:af:fb:c1:73:06:7c:dc:81:
                    f9:e0:ee:29:57:29:ce:90:51:9d:c4:31:cd:f3:3a:
                    e8:f3:80:9c:b1:9d:70:42:1b:47:33:fa:92:b7:cc:
                    6a:d6:ab:b7:26:53:54:52:4d:02:8c:b6:87:dd:78:
                    1b:21:bc:46:1b:1b:76:e6:89:5c:0e:45:35:aa:37:
                    9b:65:32:36:ab:fc:6a:7d:72:10:08:5a:8a:1e:f5:
                    77:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:ED:8B:C6:CF:FA:3D:D8:5F:FC:48:5D:48:B0:68:2D:63:B5:24:68
            X509v3 Authority Key Identifier:
                keyid:8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:45:6e:20:71:3b:ad:38:89:31:40:b5:99:af:8d:d1:48:87:
         c8:df:e4:e6:a8:f0:be:23:1f:77:5b:ae:c8:e9:a9:39:f4:1e:
         f5:b3:0c:13:44:ac:a7:fe:71:a8:c3:3d:61:bb:c9:e7:0b:ba:
         ec:36:78:93:7e:e8:7d:47:3b:dc:ae:f1:98:5f:5f:ba:41:fe:
         2b:9c:11:59:7c:fa:c7:08:19:03:1b:88:dd:ad:bd:d8:77:1b:
         6a:39:2b:a1:8f:8b:a7:d1:dd:7d:ed:a4:bf:a0:1f:33:be:af:
         5a:a9:05:ee:22:6a:cc:3d:34:e3:0c:e6:42:59:5d:07:cd:d3:
         fd:0e:f8:32:31:02:e5:c4:2e:97:2f:e9:4b:78:ca:5e:6f:8b:
         bc:5c:e5:79:c6:c9:d9:d3:c2:47:1e:13:bd:63:fe:57:da:1e:
         4d:0a:4d:17:43:04:2a:f6:d1:9a:c6:a3:28:4d:36:5f:bd:e5:
         17:c5:93:ff:5c:9b:d9:1e:8a:af:dd:ed:01:30:6c:8c:9a:90:
         c0:17:c0:55:3f:d8:90:4a:76:ec:84:c7:1e:5e:a2:68:d6:ce:
         2c:fc:d2:bb:58:c8:28:d1:bc:ec:bd:17:55:4e:63:fd:90:7c:
         c1:e4:83:b9:68:43:56:d7:dd:3b:0a:61:29:3e:ca:6c:b0:82:
         92:76:dd:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs8EDBPSQysDV75D+2GXR1CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlZjdjMDljMWEzZjczZWJlNjE3NDBhYjY1ZTU4OWY5MTY1
NWJkZWQwHhcNMjUxMjIwMTQwMDUyWhcNMjUxMjIxMTQwMDUyWjAzMTEwLwYDVQQD
EygxZWVkOGJjNmNmZmEzZGQ4NWZmYzQ4NWQ0OGIwNjgyZDYzYjUyNDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7hDxGx5C2ymI9/FECi1dUBGmHPO
IdMtyxocD86vj5xIgOagCjAYDS2V0/uQi+nj1j6zwDKtDWSmAfIJPUlE3d1oVhyE
v4JYgXj1J2fg2Ot5MYROmzNWCe/ncQmvzxoa6LskV8ic5MS5F7S80zyi436ZUxY1
ufrWqUYgkvcSiWXWochbIVi9dpQ1hJAHTYM3E2xo73Xkqzwh2iy8Vz2bNZZ+0wQO
qBeSIxlyr/vBcwZ83IH54O4pVynOkFGdxDHN8zro84CcsZ1wQhtHM/qSt8xq1qu3
JlNUUk0CjLaH3XgbIbxGGxt25olcDkU1qjebZTI2q/xqfXIQCFqKHvV3iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7ti8bP+j3YX/xIXUiwaC1jtSRoMB8GA1UdIwQY
MBaAFI73wJwaP3Pr5hdAq2XlifkWVb3tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanZmQW5Cb19jLXZtRjBDclplV0otUlpWdmUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS84YzZkODgtNTJjMy00N2U2LTgwMDkt
ZjYyYmU5ZThhNjcxLzEvanZmQW5Cb19jLXZtRjBDclplV0otUlpWdmUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS84YzZkODgtNTJjMy00N2U2LTgwMDktZjYyYmU5ZThhNjcx
LzEvanZmQW5Cb19jLXZtRjBDclplV0otUlpWdmUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdUVuIHE7
rTiJMUC1ma+N0UiHyN/k5qjwviMfd1uuyOmpOfQe9bMME0Ssp/5xqMM9YbvJ5wu6
7DZ4k37ofUc73K7xmF9fukH+K5wRWXz6xwgZAxuI3a292HcbajkroY+Lp9Hdfe2k
v6AfM76vWqkF7iJqzD004wzmQlldB83T/Q74MjEC5cQuly/pS3jKXm+LvFzlecbJ
2dPCRx4TvWP+V9oeTQpNF0MEKvbRmsajKE02X73lF8WT/1yb2R6Kr93tATBsjJqQ
wBfAVT/YkEp27ITHHl6iaNbOLPzSu1jIKNG87L0XVU5j/ZB8weSDuWhDVtfdOwph
KT7KbLCCknbdkA==
-----END CERTIFICATE-----
Generated at Sat Dec 20 22:20:07 2025 by rpki-client