This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.mft
File:                     JaVTeUIj5rTGMnebUTcdxOfXBwU.mft (raw, json)
Hash identifier:          Xtx9q6idB12s/n1Y9VOGJJDWLzjNCPOCKqlHeVcp15o=
Subject key identifier:   14:5B:EA:A1:2D:C9:47:0A:73:0B:60:4E:74:3C:B9:07:03:6B:53:F4
Authority key identifier: 25:A5:53:79:42:23:E6:B4:C6:32:77:9B:51:37:1D:C4:E7:D7:07:05
Certificate issuer:       /CN=25a553794223e6b4c632779b51371dc4e7d70705
Certificate serial:       019B5B64D68CCDC1FE0F8D909F7569D70A20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JaVTeUIj5rTGMnebUTcdxOfXBwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.mft
Manifest number:          144E
Signing time:             Fri 26 Dec 2025 16:01:33 +0000
Manifest this update:     Fri 26 Dec 2025 16:01:33 +0000
Manifest next update:     Sat 27 Dec 2025 16:01:33 +0000
Files and hashes:         1: AamKKecGtsamRu5tPrCvb4wPCCg.roa (hash: R/0dKm7RYIaO6gMOFzcg/w47GHlEc3dvGlaSi8cjRio=)
                          2: JaVTeUIj5rTGMnebUTcdxOfXBwU.crl (hash: ggYLYkqwkqXcCwK1aVsTNaRaH914Q3wkXUQXM/fj+VE=)
                          3: hK2MvsUGX-en-QRS8wt3Wf_U0nw.roa (hash: TPzEJ4PR056FgBQncfoR2MgdCQdkMjaLd6UC5c1/V+U=)
                          4: sZzOId0-MCcpYuzen4Nr9pbpCWM.roa (hash: uaC6M8HkP81VbJLKmwQxRrL5lIIVQEkwETGYd2tWcYo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JaVTeUIj5rTGMnebUTcdxOfXBwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 15:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5b:64:d6:8c:cd:c1:fe:0f:8d:90:9f:75:69:d7:0a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a553794223e6b4c632779b51371dc4e7d70705
        Validity
            Not Before: Dec 26 16:01:33 2025 GMT
            Not After : Dec 27 16:01:33 2025 GMT
        Subject: CN=145beaa12dc9470a730b604e743cb907036b53f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7a:b8:f5:da:b0:8b:87:f0:11:55:c0:e2:0e:
                    7b:ec:66:2e:9b:c4:ea:a6:b3:ec:9b:07:31:3f:b9:
                    37:9c:f7:76:e4:17:4c:d6:1a:da:19:a8:05:aa:86:
                    95:74:c1:a3:3a:e9:a9:7e:74:e4:83:1b:80:c0:cb:
                    1c:86:1b:cc:b8:ea:ab:d5:42:8b:38:6a:07:d1:b0:
                    c4:cb:67:58:78:76:aa:07:e0:e5:ac:9b:3c:71:23:
                    3f:31:67:3f:83:e6:7b:c4:8d:d9:ab:a8:c7:2a:3f:
                    3c:cd:78:fa:c8:27:74:3e:b9:66:86:f7:84:47:69:
                    76:da:07:5b:84:45:03:2e:7e:e5:d8:00:34:01:3c:
                    7f:ae:97:88:67:fb:e4:91:51:31:d8:b9:bc:41:2d:
                    30:3a:82:72:f6:81:d4:86:45:b0:a0:b1:36:46:d8:
                    32:29:d7:18:31:ee:64:50:96:bd:6d:f4:ba:e7:06:
                    d3:a7:9e:c6:b4:36:da:52:14:52:fd:9e:10:f0:3b:
                    7b:49:6c:a1:d7:63:65:12:2e:b8:56:a8:bf:7b:24:
                    0c:9c:c6:f9:32:4e:f8:8c:a2:b5:10:53:14:34:cd:
                    c0:d8:5b:fe:fe:55:a6:6c:c3:91:aa:86:52:86:d4:
                    87:38:10:78:cc:e3:b6:a2:f6:b5:ce:92:f2:ea:85:
                    3e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:5B:EA:A1:2D:C9:47:0A:73:0B:60:4E:74:3C:B9:07:03:6B:53:F4
            X509v3 Authority Key Identifier:
                keyid:25:A5:53:79:42:23:E6:B4:C6:32:77:9B:51:37:1D:C4:E7:D7:07:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaVTeUIj5rTGMnebUTcdxOfXBwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:b0:a8:e9:2c:82:90:37:61:f4:d1:d6:f2:84:ca:07:e7:44:
         d7:d9:34:9f:de:e9:47:47:13:21:d8:19:82:8d:59:9f:77:24:
         c4:1f:e4:e6:bb:65:94:f7:09:fb:51:db:ad:e6:bc:4e:9e:cd:
         66:aa:71:9c:cd:25:ad:07:d7:96:d8:f6:c6:a7:3a:62:8a:98:
         f0:09:1b:33:4a:e7:53:2e:f6:04:0d:b6:d8:12:8f:eb:9f:1c:
         6f:90:ac:17:2d:15:b2:b7:62:25:5b:55:dc:47:97:17:41:4c:
         b5:c0:3f:3e:bc:56:9b:86:6e:6b:9f:fe:ef:22:3c:5a:44:6c:
         d9:ba:c4:4b:44:b5:9e:4a:18:0f:89:bf:ba:bf:4b:b1:cc:8a:
         68:f7:1b:b1:c2:93:68:6e:e3:5a:46:53:28:a6:94:c3:ae:d1:
         21:1d:96:47:12:2f:c2:e9:c2:58:ce:85:ee:7c:78:3f:4d:5b:
         ce:7a:62:ca:b3:99:90:60:31:8f:64:f6:f8:22:b1:f4:57:fa:
         6a:80:a4:13:1e:81:02:91:01:e3:98:52:72:85:61:4e:82:f7:
         80:84:e0:0e:9f:b2:a8:da:bd:39:b6:24:cc:c6:fe:9a:1e:c4:
         a7:e7:f5:6e:e6:12:34:ae:bb:2e:b8:bd:38:5c:15:a4:31:fc:
         5c:48:22:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 21:22:54 2025 by rpki-client