This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft
File:                     raJar-Ophw6VJK-gJlmH7VpaTaM.mft (raw, json)
Hash identifier:          R4MfYJCW5uul0LtAXByTByRi6W2yGGdb5A1YlUNjnUA=
Subject key identifier:   37:31:1D:19:DF:94:1A:33:1E:7E:EA:F4:07:03:2D:01:2F:7F:F4:46
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Certificate issuer:       /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial:       019B1539E743205B0AF77B24C38D88BC446E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft
Manifest number:          17AE
Signing time:             Sat 13 Dec 2025 01:01:14 +0000
Manifest this update:     Sat 13 Dec 2025 01:01:14 +0000
Manifest next update:     Sun 14 Dec 2025 01:01:14 +0000
Files and hashes:         1: 3cvNvdSi3XGnlgqLMUXhh7Fbsns.roa (hash: RjSiDuOGFmz06JKyEcD4gXSDvTvwzOibXX44/BaGwzM=)
                          2: 4qU0lYZixQn_ajK7o9tm4-h59Yc.roa (hash: rJ9oCMP6AUNUzaOpIFXW5T5zkn6qUN20PTxwfzReYSQ=)
                          3: LC5Mu0EHFpOuyF3AsdML60Oq8I4.roa (hash: W64k0JzMt5VdTs+SJjlrI8vTWVThfolarZ2v/pELr38=)
                          4: XG0f4whg8DTzg4ZpQd0f-UdmRXY.roa (hash: ZGcU72mX8VKGJYV72um72oY45czQYPy5f+/AekBe7rg=)
                          5: eTZvFVUGnDNHwq2npFaevM_pjLg.roa (hash: 18cD37AihQlqKhfJw/uFQO048dE0tdQTn3vqNmQm/DI=)
                          6: jOJJqoS_PgQTtahvKFyYtdpryQc.roa (hash: NLWvbfmQ0GpKEPm+5C3Z0gDnOHe3vz+adN0kchftPSM=)
                          7: ngVIm6V8McjWt-UsDZ8SI1OBzB8.roa (hash: TG6EiZUK8fMKZ//ITtR5n/6R2Ry6qOs7fabIjuGyGt8=)
                          8: owgmBs4vbkkXbw2K0OuU1ejAVjM.roa (hash: hWN+IDhiOv5MeOYFdicsOLf4isT8+TWoYgyTGhIN3B8=)
                          9: raJar-Ophw6VJK-gJlmH7VpaTaM.crl (hash: wA198vUVSM0k0Rzk1l1wKaI1kTcW7rPYghNScbhg+Pw=)
                          10: w47kV22DUX2rmSAV17IslbqJZkE.roa (hash: jwhv3mxFNCUIHi+oaeb9HMdIuv95C0du8+Aflx3W8ng=)
                          11: zBMwGWWflzLxBSFNPzJ2aqEBgrE.roa (hash: Frie/26MAD4moXE2hcnRczEyt7GQngLuPdcorC2uOx4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Dec 2025 00:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:15:39:e7:43:20:5b:0a:f7:7b:24:c3:8d:88:bc:44:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
        Validity
            Not Before: Dec 13 01:01:14 2025 GMT
            Not After : Dec 14 01:01:14 2025 GMT
        Subject: CN=37311d19df941a331e7eeaf407032d012f7ff446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ab:f6:59:86:6e:e3:70:3e:3a:6b:09:89:a4:
                    65:99:bf:f5:55:f6:c8:a1:9d:19:61:08:f0:a5:ca:
                    78:9e:b2:85:99:34:02:6a:39:84:68:67:7e:f6:5a:
                    f8:90:a0:97:07:99:9c:c3:7b:aa:96:57:29:ba:6c:
                    bc:94:ca:d7:cb:88:32:89:e2:1d:a1:4c:90:0a:e0:
                    42:bd:4f:40:5f:c9:7f:ac:b7:00:41:5a:d2:62:71:
                    e6:c1:ef:bb:83:64:93:36:ce:24:4d:6c:f1:58:98:
                    ad:d4:8f:7a:3f:ef:1b:45:0d:2a:fd:04:9b:71:6c:
                    4f:d2:c7:cf:d8:7c:89:27:89:08:49:6f:99:67:56:
                    4e:71:d8:aa:b2:9b:bb:24:48:25:32:78:81:b5:a7:
                    da:23:03:0a:45:cb:01:78:5c:b2:3c:9e:03:43:f6:
                    d1:d2:5f:6e:83:64:e2:52:60:38:cd:21:83:ae:75:
                    7a:61:78:46:b4:00:ce:f3:c1:52:2c:c5:57:1a:e3:
                    b4:e3:bf:fa:67:ce:60:07:a7:6d:51:65:d4:38:d6:
                    6a:83:c1:85:ef:67:96:71:b0:8d:0e:ff:34:67:2d:
                    a5:fa:e3:2f:bc:4b:74:36:82:7e:14:17:93:83:08:
                    2d:1b:58:65:a8:f3:80:41:48:ad:ba:99:6b:0f:d9:
                    28:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:31:1D:19:DF:94:1A:33:1E:7E:EA:F4:07:03:2D:01:2F:7F:F4:46
            X509v3 Authority Key Identifier:
                keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:7d:d8:64:db:b7:0b:17:07:f1:39:70:64:49:58:b2:6b:e2:
         39:04:f9:84:35:86:e8:51:b5:d6:f9:5d:b1:9f:9f:15:fe:08:
         65:13:2f:83:61:58:fe:3a:a5:9a:e0:89:02:cd:73:c7:fa:9b:
         d6:8c:62:f3:98:6b:a8:11:a5:46:10:46:75:6b:67:5c:21:c5:
         d8:f1:6b:59:fd:85:55:ea:28:1d:b8:b1:e8:5a:92:11:48:7c:
         3b:45:14:89:4c:86:7f:2a:23:78:e2:7c:9d:03:86:42:97:a0:
         9f:5f:d3:7c:1e:29:22:b5:af:e2:4d:f3:61:af:1b:ed:37:48:
         1e:3b:e0:ca:2c:6d:e7:b4:6e:91:24:d1:3e:72:75:37:13:73:
         a2:64:3b:03:5b:db:18:7d:a6:6d:fe:cf:65:37:f8:f4:8c:1b:
         e6:06:3a:75:b4:cf:d1:da:00:bb:da:24:dd:71:02:5a:a8:17:
         0f:48:9d:15:64:7c:60:6b:6b:8e:95:c1:2f:bd:e0:e3:49:69:
         1c:08:f3:e6:ab:a6:b6:7f:17:7e:52:fb:fa:98:bd:6b:69:26:
         71:bb:15:48:8d:ad:9a:e9:3a:d9:ae:f7:d1:5c:fe:d4:6a:f2:
         92:9f:8a:42:9c:ef:1e:db:57:8f:26:ba:46:07:b1:71:5f:e4:
         52:80:d4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 13 04:16:15 2025 by rpki-client