This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
File:                     JnK5-1RrNl4yMjDc6puoyfvt_rg.mft (raw, json)
Hash identifier:          gxynsKc2bgaOWzDKd9WgsmsXI2BAU3bcoFtXkJxjgPs=
Subject key identifier:   50:9B:C4:E7:EE:DC:FA:2B:4A:11:DE:9C:BA:22:03:8C:B5:22:A0:FB
Authority key identifier: 26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
Certificate issuer:       /CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Certificate serial:       019B37C5C6DAA31150C8536D7E02BA74D7A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
Manifest number:          0C00
Signing time:             Fri 19 Dec 2025 18:01:06 +0000
Manifest this update:     Fri 19 Dec 2025 18:01:06 +0000
Manifest next update:     Sat 20 Dec 2025 18:01:06 +0000
Files and hashes:         1: ITb_XVl2tA11J6nAknkJ07xuM_A.roa (hash: Te0z4RiC3nV17xojwnpgYVjVq9us6VbZr6q0RMM9u2o=)
                          2: IiRUAz4hSIV7OUEiVfrgvucqsUU.roa (hash: T/7LHAq2EL6EwhYPqc8JG0TPs56tuDIUkENf+F5W/z8=)
                          3: JnK5-1RrNl4yMjDc6puoyfvt_rg.crl (hash: 3841+s91mHs5DGFrtu8l3pMoH9e/zdLppl6xpzdyax0=)
                          4: WyMoFYnAIn1sAAAmnPjWInPKCN0.roa (hash: 1MKnjj6EqbU+hUr91/B+f0YJrJKMU7mmnJwoLcY6nt0=)
                          5: x2L9sUbxW33fcs0aePdpG3ktSqs.roa (hash: t5ZLRaewJtsVQa5rjFmmNY5tynxtVjHiqD40jfPku7U=)
                          6: y9KTYkCcz9X-wHblp6V4OiKB-A8.roa (hash: MiEzpatVp+ndU9E4bxMOGWBIiRH8JujeOmOr6aRsU1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:c5:c6:da:a3:11:50:c8:53:6d:7e:02:ba:74:d7:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
        Validity
            Not Before: Dec 19 18:01:06 2025 GMT
            Not After : Dec 20 18:01:06 2025 GMT
        Subject: CN=509bc4e7eedcfa2b4a11de9cba22038cb522a0fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:df:19:fb:20:5a:e0:56:e9:11:b1:93:77:a6:
                    86:ca:87:da:f3:7e:aa:44:9d:64:64:7c:3d:f0:61:
                    66:fc:35:d3:3a:f5:2b:31:22:9f:e8:34:26:23:af:
                    28:a5:62:22:62:5a:42:3b:a1:e2:ee:32:a3:49:f5:
                    71:b5:4e:86:5c:a0:a5:8b:05:81:5e:5b:4a:0b:fa:
                    2b:64:02:f7:e9:ae:82:71:e8:1f:92:7c:5b:6c:15:
                    8b:d5:23:98:92:55:36:90:3c:d7:4f:27:12:b8:99:
                    8d:eb:ec:b7:88:f9:d0:0c:0c:00:32:ea:92:f7:0f:
                    46:75:88:96:85:7f:16:8f:70:2b:39:dd:7d:f2:e4:
                    b0:5a:2b:87:0d:02:59:1c:a7:c7:97:e3:a5:5d:e3:
                    3a:1e:10:0b:7f:8c:f2:4c:75:8a:3b:ee:b2:0f:9d:
                    b4:8f:8d:e7:83:1b:e5:f0:d8:10:b6:d2:f2:4b:3f:
                    a0:53:e4:1f:c0:0e:06:db:d0:f5:7b:af:06:66:ba:
                    23:c6:5c:fc:58:7c:ce:b6:e8:06:11:a2:87:01:a9:
                    0d:b2:41:d3:e9:1b:1b:63:0a:06:3f:bf:a9:80:38:
                    79:df:f9:7f:fd:dc:e4:b1:b3:4d:00:c9:39:ca:09:
                    2d:00:cc:e7:50:e5:91:f7:10:fd:d0:e5:cc:6a:a0:
                    78:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:9B:C4:E7:EE:DC:FA:2B:4A:11:DE:9C:BA:22:03:8C:B5:22:A0:FB
            X509v3 Authority Key Identifier:
                keyid:26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:bb:c0:e7:ae:4d:cc:1f:93:dd:4f:7c:74:74:62:11:21:97:
         2d:ee:31:5a:49:9d:14:c4:ce:ac:ed:44:12:21:a3:9f:45:67:
         d8:69:02:64:34:6e:6f:8d:0c:66:85:45:c5:76:61:e3:5a:9f:
         e3:67:57:cf:7b:e1:91:98:aa:fe:33:43:d5:28:8f:7d:6a:d1:
         5d:9d:fb:a9:fc:1c:36:23:38:0c:d4:6c:85:a0:ca:9d:c9:13:
         b7:e4:68:63:b7:be:72:e6:25:56:51:38:5d:84:b0:76:b9:ad:
         c9:8f:8c:98:7e:30:32:57:85:ef:81:62:62:87:63:fc:90:58:
         93:1a:04:2f:b7:e6:fc:51:0f:1f:b0:8d:90:b0:7b:69:0c:d1:
         67:91:fd:2e:7b:f2:0f:62:5f:94:17:06:38:73:58:0d:2e:0a:
         2b:f9:6c:e8:ef:ee:d5:de:d4:3a:38:8b:64:23:d0:78:39:cc:
         0d:89:48:ed:79:b7:9f:2a:fe:b9:77:5f:c8:ed:c7:c4:db:90:
         12:af:2e:87:f2:ca:dc:a1:43:1b:b8:47:29:80:ad:e6:97:cf:
         33:be:ca:70:ce:38:cf:b9:fa:7c:64:7e:37:db:17:0c:47:a0:
         6a:fc:6e:c5:24:02:8a:d8:76:e2:cd:11:11:9a:09:e9:a8:84:
         e2:32:5d:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs3xcbaoxFQyFNtfgK6dNehMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NzJiOWZiNTQ2YjM2NWUzMjMyMzBkY2VhOWJhOGM5ZmJl
ZGZlYjgwHhcNMjUxMjE5MTgwMTA2WhcNMjUxMjIwMTgwMTA2WjAzMTEwLwYDVQQD
Eyg1MDliYzRlN2VlZGNmYTJiNGExMWRlOWNiYTIyMDM4Y2I1MjJhMGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqd8Z+yBa4FbpEbGTd6aGyofa836q
RJ1kZHw98GFm/DXTOvUrMSKf6DQmI68opWIiYlpCO6Hi7jKjSfVxtU6GXKCliwWB
XltKC/orZAL36a6CcegfknxbbBWL1SOYklU2kDzXTycSuJmN6+y3iPnQDAwAMuqS
9w9GdYiWhX8Wj3ArOd198uSwWiuHDQJZHKfHl+OlXeM6HhALf4zyTHWKO+6yD520
j43ngxvl8NgQttLySz+gU+QfwA4G29D1e68GZrojxlz8WHzOtugGEaKHAakNskHT
6RsbYwoGP7+pgDh53/l//dzksbNNAMk5ygktAMznUOWR9xD90OXMaqB40wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCbxOfu3PorShHenLoiA4y1IqD7MB8GA1UdIwQY
MBaAFCZyuftUazZeMjIw3OqbqMn77f64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm5LNS0xUnJObDR5TWpEYzZwdW95ZnZ0X3JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9iMTNiNTUtMTI4OC00NWU2LTg4NzYt
YTcwZGI1ODI4MGZjLzEvSm5LNS0xUnJObDR5TWpEYzZwdW95ZnZ0X3JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9iMTNiNTUtMTI4OC00NWU2LTg4NzYtYTcwZGI1ODI4MGZj
LzEvSm5LNS0xUnJObDR5TWpEYzZwdW95ZnZ0X3JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATbvA565N
zB+T3U98dHRiESGXLe4xWkmdFMTOrO1EEiGjn0Vn2GkCZDRub40MZoVFxXZh41qf
42dXz3vhkZiq/jND1SiPfWrRXZ37qfwcNiM4DNRshaDKnckTt+RoY7e+cuYlVlE4
XYSwdrmtyY+MmH4wMleF74FiYodj/JBYkxoEL7fm/FEPH7CNkLB7aQzRZ5H9Lnvy
D2JflBcGOHNYDS4KK/ls6O/u1d7UOjiLZCPQeDnMDYlI7Xm3nyr+uXdfyO3HxNuQ
Eq8uh/LK3KFDG7hHKYCt5pfPM77KcM44z7n6fGR+N9sXDEegavxuxSQCith24s0R
EZoJ6aiE4jJdFw==
-----END CERTIFICATE-----
Generated at Sat Dec 20 00:40:48 2025 by rpki-client