This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
File:                     JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft (raw, json)
Hash identifier:          jp41BdEsh5aXU8GXKmNQouZEw4aE+v+10emif4ZUwYQ=
Subject key identifier:   03:3D:10:63:08:F7:AA:F9:C9:13:DF:C5:73:1D:82:3F:93:8E:CB:68
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Certificate issuer:       /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial:       019AF5AEB00B3E97F27F5017E1793B0DEBA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
Manifest number:          179D
Signing time:             Sat 06 Dec 2025 22:00:57 +0000
Manifest this update:     Sat 06 Dec 2025 22:00:57 +0000
Manifest next update:     Sun 07 Dec 2025 22:00:57 +0000
Files and hashes:         1: 05T5QjbJNc87hT4My9l-JdCX1h4.roa (hash: iWvw7hOFWKPo65JahFO85oDHfJOnZV1Mm2k2unmLhhE=)
                          2: 1RAZSq7_BCIXMPLmCNYBwnRPVeM.roa (hash: iP8JwzeV1htPI5dhx1UE8Z1vTHtvlA2uWPOR/wMsfgs=)
                          3: 5m85a6z_82pxvCFTAubCZE3IDRY.roa (hash: yTwyQOsGZdUMHgKCUc+pKc+Yl8K88OgV6IbbvGfhyYk=)
                          4: CmOI9SR69ovMKrxlDxbUWh5QUU0.roa (hash: ebd4rV/RF1OTbOXyyPqPuU0N5clQOOerkc0GReb1J2w=)
                          5: Cw3KSb4w5fVGO1h3Oj_H-hpchVg.roa (hash: uQeSPU2EF8IdzkDhENLmsFnhh9oxYjUNdNs+h74gmgY=)
                          6: JAH3IXMvbG6Ys2dPmwodnWJGeoI.roa (hash: Gw60ldKvXUBK2ktt+kjbpS50udL3AC6hPM4eFLUJXXw=)
                          7: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl (hash: BuJcr+5lsjEnRSYj8vJtmbZIdoVI/GJDQbJc2KmC1og=)
                          8: MShAtHeWztAlPc3jlUQy364-usI.roa (hash: uXNKCC9uNF/PElyEDFjDG2Gy5GTpwTB7KSx+eVEkKh8=)
                          9: OX7N03gSPb4sMX_V-5X6zyQ6WaA.roa (hash: BlJco9f8HDqfOjHCtNduALgKgBNAz1Kj7Oy3Vc4sp3s=)
                          10: WMM-Jj0p6VWzGlo6msh5tpjK74c.roa (hash: /4WO/iijr2ysoJfrqLnn3dB9+scGttOptVRk8eNo8H4=)
                          11: g4rTsZZ6qTMpSVPR-7TASI0eYf8.roa (hash: H0dCl0trInj59i3ls7vMuF/05FWvOMm7A3kIRBvL3Rw=)
                          12: h7K92qiMiWFLtkqLXfWLx7T3RS0.roa (hash: SXAVcoWGoZlytOpyw4bPPikyafW7og6IlMVyTr7sX3s=)
                          13: kojEemV1y3p1Ig0PF0Qwwmhe1Bs.roa (hash: Oye8rISWv3W8lfSMiPLOOdMEyDfiF8khVTUsBLT1Pro=)
                          14: pPQq_lolA8g8QxXqDDucDfwuETo.roa (hash: L1m+KNUP0y0o8T6Tj0pDmrtwsUBi0b51YKd4t4w0w/g=)
                          15: qhjSfnViRtAuJX9-HloVGl6e8yQ.roa (hash: 0c4CC/UoASiPziDV/ISjZ0Wa5pg6sbXo1QCcNSiEk04=)
                          16: wEmUsp4YHWLJBUqUou-fXnddnNI.roa (hash: mZCp4WYgBJMwxzFtP8EVDxeoQ9DuWh60+a4TXLeKQbA=)
                          17: y-pn8RraONHwfEgvYCmy9KpUOY0.roa (hash: zmcX/epZylhylzX1wyhHHsMXLsM0/FpkS0XcD4y5qRg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:ae:b0:0b:3e:97:f2:7f:50:17:e1:79:3b:0d:eb:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
        Validity
            Not Before: Dec  6 22:00:57 2025 GMT
            Not After : Dec  7 22:00:57 2025 GMT
        Subject: CN=033d106308f7aaf9c913dfc5731d823f938ecb68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:74:cd:a3:c8:4a:37:bb:f7:26:0e:6e:3b:d0:
                    e1:b3:1e:8e:9b:97:90:a8:02:fc:84:2c:29:19:fe:
                    bb:06:4b:3b:3a:dc:97:e8:87:c1:c6:d2:d3:fe:85:
                    98:c0:bc:7a:7f:46:cd:f8:53:d8:93:55:97:d1:56:
                    c5:11:47:5e:04:cf:42:f2:4a:a2:9a:3e:fc:34:a5:
                    cb:ac:da:fe:6e:e8:06:48:1f:d1:34:bf:27:c1:c9:
                    ed:05:9e:27:12:69:61:a2:6f:3b:61:d2:58:9c:8f:
                    c3:fb:a9:00:05:4e:1e:83:e2:f2:fd:ae:70:99:1a:
                    d4:3d:55:48:ba:15:b4:00:1f:c8:19:dd:c8:f3:6a:
                    6f:ec:ef:28:71:e5:2e:4c:43:4a:ea:83:a5:20:d0:
                    36:ba:fa:fb:3a:be:ac:1c:3a:ed:ed:48:1a:18:6e:
                    5a:e0:40:2a:d3:e8:ad:1f:b2:51:ea:06:59:9c:71:
                    bb:d4:9a:02:13:9c:a8:5b:25:94:98:e2:ab:80:aa:
                    07:52:ac:79:8c:6d:2b:6a:17:09:06:a1:0b:33:99:
                    33:bc:45:5a:a2:a0:da:5c:85:27:02:18:06:02:dc:
                    50:89:aa:11:81:fa:19:c1:d2:d3:9d:2e:1b:cf:dd:
                    72:f0:05:30:59:47:f8:a5:38:17:bc:71:32:6d:9e:
                    94:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:3D:10:63:08:F7:AA:F9:C9:13:DF:C5:73:1D:82:3F:93:8E:CB:68
            X509v3 Authority Key Identifier:
                keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:a8:25:3e:45:9f:55:e0:9e:29:f6:c5:03:ea:2b:ef:b7:a0:
         44:fc:cb:d1:fd:1f:dc:85:04:f4:2d:2b:b0:38:d4:87:b8:ae:
         50:da:05:8b:52:2f:2c:b2:5a:21:5a:59:47:c7:d1:ec:28:45:
         32:2f:71:89:8b:97:d3:21:d0:95:e1:c7:88:31:7f:95:2a:58:
         27:ee:3b:1c:b0:5a:ed:45:c7:06:8e:8b:b4:b0:3c:b2:a2:ad:
         9f:08:a3:35:0e:8c:72:bf:d6:ca:4c:1c:06:10:d6:dc:c8:c7:
         8a:ea:81:51:5d:b2:a6:ee:a9:62:7f:54:c0:ca:d3:04:10:57:
         05:04:9d:73:04:51:86:ec:07:df:01:13:0e:d9:b6:f1:a0:eb:
         96:33:23:e7:bf:61:b0:3c:57:60:32:a0:d0:e8:37:e6:68:38:
         45:de:9a:84:cc:99:bd:46:95:21:e2:c7:2a:87:ee:ef:e0:f4:
         5d:0b:6a:82:4f:d6:8c:2c:d2:93:ca:50:c2:61:22:01:54:70:
         29:51:8e:aa:cb:a8:04:87:bc:6d:da:15:c5:68:67:25:54:43:
         1b:20:a5:a7:8d:6f:a7:98:41:fc:f7:b4:7d:2c:60:4a:97:fe:
         26:52:70:35:4d:90:d7:aa:2b:d7:d0:81:f8:71:70:ae:c0:fd:
         b8:7c:7f:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr1rrALPpfyf1AX4Xk7DeukMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZTRhZWQzZWY3MmJlZTMxNDE2NjBkMTE0OWUxNmQwNzky
MDVmM2MwHhcNMjUxMjA2MjIwMDU3WhcNMjUxMjA3MjIwMDU3WjAzMTEwLwYDVQQD
EygwMzNkMTA2MzA4ZjdhYWY5YzkxM2RmYzU3MzFkODIzZjkzOGVjYjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHTNo8hKN7v3Jg5uO9Dhsx6Om5eQ
qAL8hCwpGf67Bks7OtyX6IfBxtLT/oWYwLx6f0bN+FPYk1WX0VbFEUdeBM9C8kqi
mj78NKXLrNr+bugGSB/RNL8nwcntBZ4nEmlhom87YdJYnI/D+6kABU4eg+Ly/a5w
mRrUPVVIuhW0AB/IGd3I82pv7O8oceUuTENK6oOlINA2uvr7Or6sHDrt7UgaGG5a
4EAq0+itH7JR6gZZnHG71JoCE5yoWyWUmOKrgKoHUqx5jG0rahcJBqELM5kzvEVa
oqDaXIUnAhgGAtxQiaoRgfoZwdLTnS4bz91y8AUwWUf4pTgXvHEybZ6U6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAM9EGMI96r5yRPfxXMdgj+TjstoMB8GA1UdIwQY
MBaAFCXkrtPvcr7jFBZg0RSeFtB5IF88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEt
ZWQzZTM4Zjk1NzdmLzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEtZWQzZTM4Zjk1Nzdm
LzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoKglPkWf
VeCeKfbFA+or77egRPzL0f0f3IUE9C0rsDjUh7iuUNoFi1IvLLJaIVpZR8fR7ChF
Mi9xiYuX0yHQleHHiDF/lSpYJ+47HLBa7UXHBo6LtLA8sqKtnwijNQ6Mcr/Wykwc
BhDW3MjHiuqBUV2ypu6pYn9UwMrTBBBXBQSdcwRRhuwH3wETDtm28aDrljMj579h
sDxXYDKg0Og35mg4Rd6ahMyZvUaVIeLHKofu7+D0XQtqgk/WjCzSk8pQwmEiAVRw
KVGOqsuoBIe8bdoVxWhnJVRDGyClp41vp5hB/Pe0fSxgSpf+JlJwNU2Q16or19CB
+HFwrsD9uHx/qQ==
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:48:38 2025 by rpki-client