This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
File:                     JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft (raw, json)
Hash identifier:          XTlmqhoOA+5oiQCO7qKQLJrxSQtv1DJkcbRP9du0aXI=
Subject key identifier:   76:AB:58:F9:A5:FA:DF:46:59:42:94:E4:97:33:F7:A8:02:3B:88:14
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Certificate issuer:       /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial:       019B394695242DCB7B5EE49AC2F1A0437900
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
Manifest number:          17C0
Signing time:             Sat 20 Dec 2025 01:01:25 +0000
Manifest this update:     Sat 20 Dec 2025 01:01:25 +0000
Manifest next update:     Sun 21 Dec 2025 01:01:25 +0000
Files and hashes:         1: 05T5QjbJNc87hT4My9l-JdCX1h4.roa (hash: iWvw7hOFWKPo65JahFO85oDHfJOnZV1Mm2k2unmLhhE=)
                          2: 1RAZSq7_BCIXMPLmCNYBwnRPVeM.roa (hash: iP8JwzeV1htPI5dhx1UE8Z1vTHtvlA2uWPOR/wMsfgs=)
                          3: 5m85a6z_82pxvCFTAubCZE3IDRY.roa (hash: yTwyQOsGZdUMHgKCUc+pKc+Yl8K88OgV6IbbvGfhyYk=)
                          4: CmOI9SR69ovMKrxlDxbUWh5QUU0.roa (hash: ebd4rV/RF1OTbOXyyPqPuU0N5clQOOerkc0GReb1J2w=)
                          5: Cw3KSb4w5fVGO1h3Oj_H-hpchVg.roa (hash: uQeSPU2EF8IdzkDhENLmsFnhh9oxYjUNdNs+h74gmgY=)
                          6: JAH3IXMvbG6Ys2dPmwodnWJGeoI.roa (hash: Gw60ldKvXUBK2ktt+kjbpS50udL3AC6hPM4eFLUJXXw=)
                          7: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl (hash: SOXuE6pjkHVM16uSe40O4v1wW5Xqfu2YU+ZH04xHfmM=)
                          8: MShAtHeWztAlPc3jlUQy364-usI.roa (hash: uXNKCC9uNF/PElyEDFjDG2Gy5GTpwTB7KSx+eVEkKh8=)
                          9: OX7N03gSPb4sMX_V-5X6zyQ6WaA.roa (hash: BlJco9f8HDqfOjHCtNduALgKgBNAz1Kj7Oy3Vc4sp3s=)
                          10: WMM-Jj0p6VWzGlo6msh5tpjK74c.roa (hash: /4WO/iijr2ysoJfrqLnn3dB9+scGttOptVRk8eNo8H4=)
                          11: g4rTsZZ6qTMpSVPR-7TASI0eYf8.roa (hash: H0dCl0trInj59i3ls7vMuF/05FWvOMm7A3kIRBvL3Rw=)
                          12: h7K92qiMiWFLtkqLXfWLx7T3RS0.roa (hash: SXAVcoWGoZlytOpyw4bPPikyafW7og6IlMVyTr7sX3s=)
                          13: kojEemV1y3p1Ig0PF0Qwwmhe1Bs.roa (hash: Oye8rISWv3W8lfSMiPLOOdMEyDfiF8khVTUsBLT1Pro=)
                          14: pPQq_lolA8g8QxXqDDucDfwuETo.roa (hash: L1m+KNUP0y0o8T6Tj0pDmrtwsUBi0b51YKd4t4w0w/g=)
                          15: qhjSfnViRtAuJX9-HloVGl6e8yQ.roa (hash: 0c4CC/UoASiPziDV/ISjZ0Wa5pg6sbXo1QCcNSiEk04=)
                          16: wEmUsp4YHWLJBUqUou-fXnddnNI.roa (hash: mZCp4WYgBJMwxzFtP8EVDxeoQ9DuWh60+a4TXLeKQbA=)
                          17: y-pn8RraONHwfEgvYCmy9KpUOY0.roa (hash: zmcX/epZylhylzX1wyhHHsMXLsM0/FpkS0XcD4y5qRg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:46:95:24:2d:cb:7b:5e:e4:9a:c2:f1:a0:43:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
        Validity
            Not Before: Dec 20 01:01:25 2025 GMT
            Not After : Dec 21 01:01:25 2025 GMT
        Subject: CN=76ab58f9a5fadf46594294e49733f7a8023b8814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:98:ac:ac:e1:e4:fe:58:57:84:ab:ee:e0:26:
                    01:5d:94:b9:ca:68:44:24:49:6b:93:1b:fe:3c:f5:
                    e9:9a:e3:07:7e:7e:60:e0:d8:44:85:e8:12:bf:a3:
                    92:50:ae:c5:7a:62:e1:c7:a6:cd:a8:1b:57:29:53:
                    e7:98:12:e8:dd:fc:36:15:16:84:c0:51:10:5c:92:
                    d6:3a:d6:16:01:1e:37:81:82:64:9e:07:c3:a8:91:
                    89:d8:15:29:96:01:40:c4:f8:90:70:9f:c7:c8:dd:
                    24:2b:7b:e0:de:55:88:bd:67:2c:02:99:08:3f:b5:
                    cc:6b:df:dc:75:f1:f4:ac:90:a3:57:eb:01:bd:32:
                    c9:ff:6c:e5:f6:57:10:53:bb:4d:d6:95:ff:c8:fc:
                    4f:8a:17:85:aa:ad:c1:65:6b:f5:e8:66:db:51:19:
                    4b:0b:d8:c6:ad:ac:2d:12:ad:f8:ed:bb:3e:e8:2d:
                    c0:f3:04:96:d2:94:71:d7:98:60:46:19:e1:55:ad:
                    55:46:fc:9f:03:93:f0:e4:e8:49:47:60:01:f7:cd:
                    dd:74:03:14:e6:d7:1e:fa:e8:18:d6:9e:00:33:58:
                    39:3e:9e:c1:13:3f:4c:2a:b9:70:28:ff:5c:bb:d8:
                    a0:5b:55:ef:7d:3d:53:9c:84:38:ca:af:ca:32:6a:
                    14:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:AB:58:F9:A5:FA:DF:46:59:42:94:E4:97:33:F7:A8:02:3B:88:14
            X509v3 Authority Key Identifier:
                keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:05:f6:a2:a2:e6:23:07:e8:a8:0c:c9:a7:83:b9:fa:b4:ff:
         50:e1:5e:8e:50:e8:f8:83:95:c4:64:7f:9e:f9:fd:5d:57:49:
         13:41:e5:f9:f4:2e:50:ee:22:e4:b7:c4:eb:11:bb:4d:0f:30:
         01:ec:fc:10:f3:f3:aa:ee:88:cf:31:0c:bb:6b:2e:bc:e7:35:
         ee:b5:cb:a9:ed:5c:08:8d:9f:2e:c9:94:ff:5b:f8:a6:1a:0d:
         14:b5:30:7f:cb:84:d5:5c:15:c7:be:c3:a9:91:46:8d:25:2e:
         87:7b:32:54:bc:a0:17:34:91:36:4c:4b:3f:9a:39:fb:1d:d1:
         23:83:99:65:d7:5b:3e:45:33:46:9a:2b:84:65:24:5a:bf:78:
         60:0e:96:ce:93:e3:90:d6:55:cc:4a:5d:6a:2c:a1:c9:a9:9c:
         db:38:ff:94:ee:78:db:98:e5:fc:41:e2:98:43:30:a3:e1:52:
         fc:de:99:4c:fc:79:87:7a:3f:27:57:18:14:29:78:2f:b5:ee:
         7f:9e:16:62:0e:af:64:37:34:db:9f:6c:f2:36:f7:c1:ea:c8:
         6a:3e:b3:24:0e:24:c7:7d:55:e7:93:70:e1:cb:b4:f8:5c:3b:
         6b:aa:03:98:b8:89:34:4a:4c:04:14:bd:e1:b6:8c:0f:86:0f:
         d2:4e:12:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs5RpUkLct7XuSawvGgQ3kAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZTRhZWQzZWY3MmJlZTMxNDE2NjBkMTE0OWUxNmQwNzky
MDVmM2MwHhcNMjUxMjIwMDEwMTI1WhcNMjUxMjIxMDEwMTI1WjAzMTEwLwYDVQQD
Eyg3NmFiNThmOWE1ZmFkZjQ2NTk0Mjk0ZTQ5NzMzZjdhODAyM2I4ODE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJisrOHk/lhXhKvu4CYBXZS5ymhE
JElrkxv+PPXpmuMHfn5g4NhEhegSv6OSUK7FemLhx6bNqBtXKVPnmBLo3fw2FRaE
wFEQXJLWOtYWAR43gYJkngfDqJGJ2BUplgFAxPiQcJ/HyN0kK3vg3lWIvWcsApkI
P7XMa9/cdfH0rJCjV+sBvTLJ/2zl9lcQU7tN1pX/yPxPiheFqq3BZWv16GbbURlL
C9jGrawtEq347bs+6C3A8wSW0pRx15hgRhnhVa1VRvyfA5Pw5OhJR2AB983ddAMU
5tce+ugY1p4AM1g5Pp7BEz9MKrlwKP9cu9igW1XvfT1TnIQ4yq/KMmoUsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHarWPml+t9GWUKU5Jcz96gCO4gUMB8GA1UdIwQY
MBaAFCXkrtPvcr7jFBZg0RSeFtB5IF88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEt
ZWQzZTM4Zjk1NzdmLzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEtZWQzZTM4Zjk1Nzdm
LzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQQX2oqLm
IwfoqAzJp4O5+rT/UOFejlDo+IOVxGR/nvn9XVdJE0Hl+fQuUO4i5LfE6xG7TQ8w
Aez8EPPzqu6IzzEMu2suvOc17rXLqe1cCI2fLsmU/1v4phoNFLUwf8uE1VwVx77D
qZFGjSUuh3syVLygFzSRNkxLP5o5+x3RI4OZZddbPkUzRporhGUkWr94YA6WzpPj
kNZVzEpdaiyhyamc2zj/lO5425jl/EHimEMwo+FS/N6ZTPx5h3o/J1cYFCl4L7Xu
f54WYg6vZDc0259s8jb3werIaj6zJA4kx31V55Nw4cu0+Fw7a6oDmLiJNEpMBBS9
4baMD4YP0k4SzA==
-----END CERTIFICATE-----
Generated at Sat Dec 20 10:48:31 2025 by rpki-client