This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
File:                     jRrIPuOj-WjWatL99GFue7Hk0dc.mft (raw, json)
Hash identifier:          jVz17D6sr3LBGt4jSqR4vF+07HbL5FlDuU8C0f5cOYA=
Subject key identifier:   39:72:39:36:07:51:0D:69:0B:7B:E6:01:A3:0B:AF:8C:74:47:E2:52
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Certificate issuer:       /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial:       019B1ACD89DE9FB6591D1C2AB74D5E88CCF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
Manifest number:          0D0B
Signing time:             Sun 14 Dec 2025 03:00:36 +0000
Manifest this update:     Sun 14 Dec 2025 03:00:36 +0000
Manifest next update:     Mon 15 Dec 2025 03:00:36 +0000
Files and hashes:         1: 0hcYkFvLnPnX3tJPZIl-Uhot1i0.roa (hash: 6/eHz/J+k5SuDY5b5eslxHZpd3P/l7+bfENiu84Xo/Y=)
                          2: 5Xz9E7C6BAcx16iIMjwvM4HlgAw.roa (hash: O79+vzMdI2uDnbGewEwtLl1GFqHouBivbXJnQ4WHjFs=)
                          3: A3vCnLdcCAHsjG0TKS7PepEiSRQ.roa (hash: 8/8TxF0wXw7stYTcBeXGRpf0HZpKR5xHMrhdKNPhjb4=)
                          4: DhUtQy3iN2_fQJa67YADtfV1x40.roa (hash: PvfiO0WfcmadxN2Uhm/Lhfz/fnQ9kgC0PROhIJsPF54=)
                          5: Eb3nQCsubyrRRwgtef25b2tcJbQ.roa (hash: sgX7PEOSSTdMVUw2kIAqvpDSoV+TN56cGW37Ykizvek=)
                          6: FQFiaH-Uhznyo9tuv-39hg1SgIc.roa (hash: AaAgvoQWwsBdEDlzs9JJLKseENMJxUCvDZ1+feCaadI=)
                          7: HIBKVvtinhweoi9ybbfYokGtkjg.roa (hash: khv1qHXammr1ZO8qVWulyea62D34wTqiuoPZd9ngssM=)
                          8: J5xYYbeJ_te65Xv7xz07zAj6f-I.roa (hash: H6HLeHF12Jxz9+TguAyIB+SiOH3fzKS1WVXypIulN7Q=)
                          9: JjM1scO0M1VRz2BqKO1r_ZLa970.roa (hash: jE4M6onTNWLyp2LT8jDW1lcK5SlJ5FLJoUcPkAM9kEQ=)
                          10: JtkTsuHPsoBKn0hRChOrC4JXTN4.roa (hash: M9uGhnRBSZAnmB8BCT/jdRx465I3Ctf37Vtgm+Jt4nc=)
                          11: LNIAH1MylX8WQQ-W8xfPHTlOsW0.roa (hash: GFXXpakvt3mJ4yGbBFawI3+WVF7sKNF14A1lgtziIek=)
                          12: Lxv8RdYN9P2vj1nZyAjFF9lNkU8.roa (hash: xMtpILHpW8icGyga3EnNkKUNmrRxGITTuJWIIZqDxDI=)
                          13: MudRzNeUk2R859eEP09GJeDExf0.roa (hash: 2o3NbfW7AkgEJtAc91HUgnIB/5KesUMTjVvuVU09fp4=)
                          14: RTZYU-7DG4fUoipBd0qSh8BirjI.roa (hash: 3eo6AFVTXAYcIIpYV9OFjF0R4DRTO3nfrXKCxpb3Q8c=)
                          15: XO5629FFpWYFF8ZRrD5XKcMM2vo.roa (hash: wKy5dCiE9pBzbJNPaAeHBHoxO/6aKqqjDAe2f2qYl60=)
                          16: gwSC7EAy3C72kqaOxsQmMkrjxyA.roa (hash: oVgyYlrKyPjekvA+50Kp0/QR+pQendS8nmEKcr8YBXw=)
                          17: jRrIPuOj-WjWatL99GFue7Hk0dc.crl (hash: OloH0lIvhOrU0JoL3FJ2ju92scpPsPvTFdXTykMbtuw=)
                          18: lO8z4PUnAAW_FQZ30LG2G_SaC34.roa (hash: TP4CK9avYURoeZBLUriM0sZhHgj7m8xB680P8/Q/778=)
                          19: ptIzMM5pGR32qdt6NWym3eUNiak.roa (hash: bSsM8QyZGEjlRqx/UPAoekl3qkyD03EUapHU3WIbdX4=)
                          20: tUIacj6VOPH10m5Y6XUJyWIow6U.roa (hash: 9uc/yuqmiqky5HfjpLsVrt/99q8zfLW5nmttPUpS6nU=)
                          21: tesrxSIX8wDOD0usavdzlelTyC8.roa (hash: 2mw6qDJEVPvk2SB5Frfa2IZ+DHf6Rgtla+C91qwtmwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1a:cd:89:de:9f:b6:59:1d:1c:2a:b7:4d:5e:88:cc:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
        Validity
            Not Before: Dec 14 03:00:36 2025 GMT
            Not After : Dec 15 03:00:36 2025 GMT
        Subject: CN=3972393607510d690b7be601a30baf8c7447e252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1b:b4:f4:3d:5e:93:60:fd:f7:9e:e7:a1:01:
                    df:9a:e5:20:80:42:29:e5:3f:3f:8c:02:63:5f:2a:
                    ae:4b:c5:2a:e3:fe:f4:43:ff:20:2a:a2:4d:42:08:
                    72:dc:d9:e1:24:69:07:d5:9a:bc:b4:b5:d5:2a:32:
                    53:8c:c5:26:a4:53:ce:0e:31:c4:8b:ba:11:9c:48:
                    bd:8e:d4:13:7a:36:e8:bf:ac:a2:31:2e:52:f3:54:
                    ec:1b:b5:37:82:be:b0:df:fe:a5:9b:29:5d:52:18:
                    d8:a0:60:3a:9e:3c:5c:21:cc:33:b3:9b:f0:82:d7:
                    bb:86:e5:c7:28:6c:0e:ad:42:57:1b:4e:f2:4e:8f:
                    d0:cc:a1:17:58:b6:ea:9b:cd:18:ec:b6:6b:34:9b:
                    e7:0a:f4:2c:f8:f5:a6:0f:57:25:c5:1f:0b:ee:bd:
                    dc:bb:74:46:92:1d:6a:33:b0:ba:b2:8e:78:5b:bd:
                    7e:d2:d2:e2:e6:4a:ce:9b:64:94:60:d6:ed:20:cf:
                    64:bb:a5:26:ac:99:c0:0f:b3:d6:5f:78:6c:40:f7:
                    4d:9b:8c:e5:ce:c7:56:5d:95:56:2e:ea:1c:28:b4:
                    d6:e6:71:6e:a2:aa:1d:c3:af:77:09:70:a7:63:2e:
                    b5:0e:35:e1:cc:cb:6a:76:d6:52:ed:83:5c:86:b2:
                    2d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:72:39:36:07:51:0D:69:0B:7B:E6:01:A3:0B:AF:8C:74:47:E2:52
            X509v3 Authority Key Identifier:
                keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:c8:55:41:f7:30:f7:ad:ea:fa:8c:41:a5:46:2a:dc:67:75:
         aa:7d:c4:c4:18:a0:c8:a0:ba:4d:7e:56:58:af:b9:bb:d1:53:
         2c:ac:86:39:da:25:87:db:bb:fe:52:54:28:ca:47:96:a0:2d:
         0d:51:da:d2:a2:90:44:bb:85:11:f5:6e:fb:36:0e:e4:71:d3:
         fb:2f:6c:94:4a:4e:23:4c:33:1f:eb:84:b9:f0:67:cc:ba:4a:
         a5:86:43:f0:5f:92:83:08:74:da:03:ab:c8:28:bf:09:a6:f1:
         9d:7b:f6:e8:1b:c7:de:c6:12:9f:3d:b9:27:9a:d6:bb:1c:22:
         4b:0e:d3:61:df:5c:bd:be:b8:51:d3:6d:45:0b:6b:44:8b:b8:
         db:2a:23:13:ed:d7:ec:ff:a3:b7:b8:70:76:31:c2:16:8d:70:
         2a:19:14:77:10:5b:f9:4f:cc:ef:08:9c:62:d9:29:30:33:47:
         70:40:0b:5c:50:5c:55:c5:45:5f:93:00:a1:1e:ae:cd:1a:9f:
         db:e7:d2:ab:19:61:a0:2a:4d:02:fc:e4:60:23:78:d7:ea:a7:
         8b:32:aa:2d:59:53:b3:d3:31:b5:6d:01:47:46:68:0f:37:6e:
         3f:3e:9d:f2:18:1d:79:45:19:cd:4f:8d:b8:cd:76:5c:89:e4:
         4a:c1:05:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 10:06:05 2025 by rpki-client