This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
File:                     jrRB2tu-y2ll1OofBGzFyOKIF_w.mft (raw, json)
Hash identifier:          VHv7Qs9dBO/Z8YoSgvDWHtziVdnWX+/N6/tDShgQ8vM=
Subject key identifier:   4E:8D:F0:5A:DE:A9:14:95:11:96:D7:EF:26:A4:56:78:B9:E0:95:FF
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Certificate issuer:       /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial:       019B0C382EAED8C601DAAFF1F7FFCBC1BB7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
Manifest number:          0B24
Signing time:             Thu 11 Dec 2025 07:02:46 +0000
Manifest this update:     Thu 11 Dec 2025 07:02:46 +0000
Manifest next update:     Fri 12 Dec 2025 07:02:46 +0000
Files and hashes:         1: 0cnj558EOjikahEp8WX4VbLOubg.roa (hash: f158xPAAdd0ZG1iUt85VbS08KHTjeF2/q33G/RBnAZM=)
                          2: 1d5tIKFWKjHBDKkGnBRvTBWCJAk.roa (hash: fRtqk0iZm2CdbdhKX93X5/SECEfnUXkhKcE8ZqaJIDU=)
                          3: 4EZAXXjg-wdq7F5nmE22LQpMjC0.roa (hash: kcJ5zcoJ0uYbLEoOLz0za2EfJtjkENsqcX3HW2ukm9E=)
                          4: 4wsomeR7iVlRk7fXm0iht8PO9PY.roa (hash: yFGK/6SHSFcnWo+mmonM2EnCgU/D44Pg91uZp7acGs0=)
                          5: 7aEwr5jCQ71yDDM1z5QgxzZT-KY.roa (hash: EbipFyNyMO/QLR4UBnR/trLMTxu3kzh57Gr1ht8Dd+U=)
                          6: AXHQCfctIE8qm3CfgJv5m741MvA.roa (hash: lH4T05hC4Vf3bniB6mDX0OL+0fbAvH0yQpklYBKbyMI=)
                          7: AqZiwYxbJJKU6sbeWYL6QjFjjCI.roa (hash: Rp1l+EARGnu+3ML8br5NRV2qxEwQsfw/DKCrRjQMQbQ=)
                          8: D39tyqkHzUar743HSOtaz_PbEVw.roa (hash: 3v479Ukt7ALaWZSOqE7SXtI+6RElyE29evHrm/wKO5s=)
                          9: FZ30BS7c99CQqzoVNy_qf_6mJzg.roa (hash: +/HEuopMgXs1AcyNXLuf5qhJ2S6YVu77GGZUrjSbO5s=)
                          10: KBlKTtNnQaHkk-5YbbbibvBRTkE.roa (hash: pSjaqLIK2LwqQhWseUSzS6Sqy0q3c8S6SmBuHYWrOsU=)
                          11: M97K8l_S4kgf2GjVEHFM5S4eyIw.roa (hash: kcnyR0HYpZty2uhP+gfBAoyu5lobkvGxpr+BmjGMeCs=)
                          12: Mk19CM13YMFH7WXY4rkQd2VVD9M.roa (hash: ocRMjh+08/tYyEQx7PGNN6c6//DGSHJpqiQu69+SvEU=)
                          13: PBJjwWm3FNYmKDKlr11pHLlOrGk.roa (hash: /EDjQB/ySBsTi6pfh4zRjgsPbhtNFWDlr8va/X/KOwc=)
                          14: PQysa0gStaLJL9Thu5PyuDIF7kE.roa (hash: Mwu851ywkPXxaKp83LB3gVtyZ5Xct3QCemCLlVfmoYk=)
                          15: Rcm-VsbVwQTqSxhnX3cfsXYAnys.roa (hash: P7AmNuZa2NBTSOamUQskgJBnuNIbax2MQZYxQdwe/QA=)
                          16: TwzZQrIn09c-90CtvFLCLT3vcWs.roa (hash: uBt9dC+yxyfdnRMBiRH64GG0vCjQQ3KJBUaUSBKn8oI=)
                          17: Uam3fdY-U_8FUcIs9C1Cu9j0kXU.roa (hash: lAwNykQezUevV1G5+PHKNJlIk5Yd8h58FItNjQ6jmrw=)
                          18: Wwx0ymxnwTUNgGtoQ6bmuG8xi8I.roa (hash: Duif3Xsm8vx9BAQ1DEEh/dpjs1UJXZja4M1PuzJXkHE=)
                          19: XJQW6cjujhEORDl3asfzceRsQq8.roa (hash: YLe1WKPBAxaQWWhGaDY3bNQMSMuaVm8vzXhx0IIMUzM=)
                          20: XT1M1ME1w2GWT-wkJaT2Unr_kG8.roa (hash: 6fvlVJZbvpl7K75DLt8sGvC1abVm/uU97W3kp9Hv4hM=)
                          21: _lamG1HEM7mb6bmsKbHc8nn-fqc.roa (hash: ROvWpEyglQp+R05KL7+1XLdi25nHMs/xhuTfvf2zT2Q=)
                          22: c7cuR8jM5ESCEdKWzn6Siap8SEM.roa (hash: qOyezps75UzBZYkfPtZJrdacsUxG8J2RGpaqwu8N1Ao=)
                          23: ggUHuIPOPPE-89UdjLxjcIyVmr8.roa (hash: l16B+QGa89xf55rT0g5lF4JoYmICgpxoLlxmUHh6Waw=)
                          24: jrRB2tu-y2ll1OofBGzFyOKIF_w.crl (hash: PTT59muDQUDfL4B9Xh8Df31T+Y2gqs0Ghhe+X/wYTYE=)
                          25: myuHLHpyvIWVo7r4a7BKOY_2D-A.roa (hash: sU21QK+MvKUNd41OSpLJ5a3eezolBlBsLGOTa3oodWk=)
                          26: oASSpW3DbHAVm3j51eaZaxJHZhI.roa (hash: yrEWLwCdNgFCB4MeKY8zqq0fw2GLTP+HZekfTPCwc/g=)
                          27: pc5QkYWJRHSIUT4-aISn1B0ETL0.roa (hash: bGUIoNzoUj7sJpYGAF2W/rabzS0jqmoXnaDeHRq18Tc=)
                          28: q9Fght0eWnwg9L4cOjC-8MWuD_0.roa (hash: DogNwIUzNPICLsbvaitegQlMAv0jPMlhURxKnx1oUnY=)
                          29: roxXwaFrf3KkjRm0sygAv7oGPuc.roa (hash: +XL9L+dok2bHXelVksLQxh9+U/cP9zrebc0SlrcIfKY=)
                          30: s36NnV4BEmNAGVVpW4Q6tZ1SdBs.roa (hash: +o3+HumRoGhYfsOubY4wwqGbFSgOLOFq9cUXdWeku6E=)
                          31: wMyjLOgWza8MLMZCt_GDmRvtb-g.roa (hash: dLOXSzRovdIImBdeUt2cN/TfriVM7Y6eHA/JyGJylMA=)
                          32: x3oHSLWJTj_nRpaxfUL8ie-v564.roa (hash: rcQHEneP9Wl13Ne7TTIzTdgQDNerZYtatjj28AIQOU8=)
                          33: xnbnTYEk6pxTHp3aCupMEEiEuBo.roa (hash: PfXqwnVuJaXTHy1N+55NXgp7CewIcPccfbBMZ0YAVuQ=)
                          34: yYXgfxt8HTsdD3YIDsNR5rGZFng.roa (hash: hznzSNguKbgcPbcq/VbNPpTcerKPJa34QXTAsmwowYg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0c:38:2e:ae:d8:c6:01:da:af:f1:f7:ff:cb:c1:bb:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
        Validity
            Not Before: Dec 11 07:02:46 2025 GMT
            Not After : Dec 12 07:02:46 2025 GMT
        Subject: CN=4e8df05adea914951196d7ef26a45678b9e095ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4e:58:23:6d:77:eb:98:a2:37:c9:06:a8:82:
                    a4:50:62:0f:73:63:67:44:82:f3:90:ca:2e:71:86:
                    66:fe:7f:d7:4d:dc:3c:e7:ac:bc:e1:55:65:fe:54:
                    5f:ff:51:bd:3e:4a:bf:df:ce:4b:a8:48:66:a9:77:
                    15:e1:99:be:59:6e:6f:1d:bb:63:b8:63:94:c7:2c:
                    2c:e2:35:ea:88:06:9f:b4:27:62:a2:4c:03:12:a8:
                    42:c1:08:44:55:97:2f:e4:d3:b2:e3:fd:6f:3b:47:
                    87:04:0d:79:22:46:05:12:87:9e:1a:7a:8a:69:7d:
                    4a:3e:9e:e6:b6:d2:90:f1:37:9f:5a:f5:0e:a9:6b:
                    ac:f3:31:76:8c:68:16:9d:76:61:c8:85:cb:61:33:
                    4f:18:9e:7e:a2:fe:03:2e:68:ef:bf:2f:b4:89:45:
                    59:1c:5c:3f:7b:16:00:c4:09:26:8a:03:1b:e9:d2:
                    60:ab:90:52:db:f6:cd:08:1a:bf:13:e1:7b:e7:8b:
                    9c:af:60:c2:21:9a:29:d1:5c:9c:3a:69:e2:68:6b:
                    99:39:38:9e:a8:66:a4:98:6e:78:f3:bd:02:2f:c5:
                    d8:b9:3c:24:7d:12:10:82:33:76:95:79:e6:e9:dd:
                    a7:3d:08:63:47:09:91:46:8d:8a:6d:fc:a5:fc:df:
                    87:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:8D:F0:5A:DE:A9:14:95:11:96:D7:EF:26:A4:56:78:B9:E0:95:FF
            X509v3 Authority Key Identifier:
                keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:71:8c:11:af:22:03:96:03:dc:0b:b6:a2:fe:38:e0:df:71:
         ba:fa:5f:3f:d5:06:97:26:16:46:0f:75:ca:18:c6:59:62:88:
         5e:d6:3f:5b:58:a4:59:4f:b9:d4:5e:45:b0:10:10:b9:f8:d4:
         43:c0:55:17:88:90:64:76:f4:c0:71:90:71:a1:78:78:0d:13:
         8a:96:83:72:25:c5:07:b8:4a:51:3a:1b:11:88:8e:d8:84:f6:
         72:76:b6:77:09:c4:83:ba:05:3f:9a:fe:2e:88:db:73:6f:14:
         5f:ef:f9:df:5a:4b:bf:c5:c2:f6:ec:c2:3a:22:8c:7e:5e:40:
         06:3e:48:0a:4b:5b:bc:db:d6:a1:ed:f8:a8:1d:40:ec:46:7d:
         e9:3a:e5:96:89:6a:00:4c:8c:90:fd:1a:e5:09:df:8d:a1:61:
         8e:50:4d:eb:19:a6:d1:b3:47:88:cb:e5:2f:7c:ec:82:e1:a5:
         68:68:e5:59:77:77:d2:05:ce:f4:6a:d1:70:b0:8d:43:ab:c9:
         54:9a:26:57:43:9b:03:df:9f:5c:c8:61:2b:61:be:f7:40:1f:
         c0:0c:48:ab:31:f5:17:c0:41:a1:fa:f1:56:54:a3:56:e8:c3:
         8c:5f:7a:53:a1:a2:53:63:39:91:89:63:99:7b:2d:43:ce:ce:
         b6:86:c4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 13:47:10 2025 by rpki-client