This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
File:                     JaiVOVIABCcNNCU73BbYd4QVbho.mft (raw, json)
Hash identifier:          2alI3vH5diNqofoEklIc4yOyBZzcaWPIBJ0dexsZtA8=
Subject key identifier:   FC:AC:E6:D6:36:3A:A6:BF:AB:8B:AD:EA:CF:79:C9:59:91:8B:A5:87
Authority key identifier: 25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A
Certificate issuer:       /CN=25a89539520004270d34253bdc16d87784156e1a
Certificate serial:       019B1C17D9D9B26715A8ED34C8BE0BABED98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
Manifest number:          177F
Signing time:             Sun 14 Dec 2025 09:01:23 +0000
Manifest this update:     Sun 14 Dec 2025 09:01:23 +0000
Manifest next update:     Mon 15 Dec 2025 09:01:23 +0000
Files and hashes:         1: DS50rlRZwLY8XuiZwHc5tBN6hvU.roa (hash: b+B4AXqT01CIYHbKVSC14drPdJqiCbfJo8D2ZJ20764=)
                          2: DZyhv4UYtYvTfPYlPoAjBnE9aVw.roa (hash: jy6kbh6prGxhGFzaKnByCAPnjYIf8B6UCrmQZYycLPg=)
                          3: ElFRzESyd_FARx8sdZQyvtKhhiQ.roa (hash: IEIHuOHLB6gBvdNNBa+2SrGflQf88tZq8uIpIn/+Bss=)
                          4: FDLG3C3BdLH5mkEdaIkf5JVVR9k.roa (hash: eIvSohIS9AHs7C/UrNBbvINwpxqPAthufHpH6qHXtGg=)
                          5: JaiVOVIABCcNNCU73BbYd4QVbho.crl (hash: f+exEGNBKLIsxboxB0tbDLSI/8RoyzWJhraF05AEP4g=)
                          6: L7hjIkY3zoZbF7otJPkyYp1-3GQ.roa (hash: KFKmyw3tb9aiPbS7iVWhwyX+8k/yoTNSo8uFnLcyUwc=)
                          7: vsFMEu8HS7LJh_IaQ_W3ChIz1iU.roa (hash: zvI+1QpRjWuIExjKMTnNsiDmzbwtShfXAATLbqaVci8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1c:17:d9:d9:b2:67:15:a8:ed:34:c8:be:0b:ab:ed:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a89539520004270d34253bdc16d87784156e1a
        Validity
            Not Before: Dec 14 09:01:23 2025 GMT
            Not After : Dec 15 09:01:23 2025 GMT
        Subject: CN=fcace6d6363aa6bfab8badeacf79c959918ba587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c3:89:ef:ec:09:09:0c:4f:30:65:0c:73:57:
                    1a:91:e5:c7:5a:a5:ab:d2:2d:4c:30:59:88:f0:48:
                    d8:2f:50:a9:3d:f0:5c:71:b7:f7:e4:49:35:3c:a6:
                    99:09:75:a6:1e:ec:1e:de:bb:e2:37:40:e0:41:01:
                    2e:42:69:c7:e1:30:31:ff:69:fc:cd:1a:95:1d:e9:
                    e2:16:9a:3c:39:1a:89:37:15:22:6b:13:0b:5a:a5:
                    68:92:ca:34:04:23:5f:a3:78:df:e5:26:69:b6:02:
                    d4:04:af:a6:59:aa:e6:95:e4:02:84:4f:6e:9a:a5:
                    28:cb:de:6a:ec:15:81:43:81:a7:99:64:99:80:5d:
                    13:84:7b:ea:67:35:56:36:75:f8:37:54:fe:9e:ec:
                    16:18:a0:96:06:c6:ff:a5:ba:1c:90:a5:15:a5:9c:
                    6b:c6:81:1f:1b:98:09:b6:c1:6a:25:40:53:43:1a:
                    79:dd:bf:6f:52:4a:6a:7b:4e:92:f7:16:34:89:c6:
                    36:21:0e:24:54:e6:58:6a:7c:a5:1b:12:81:4f:9c:
                    1d:55:52:d1:12:dd:57:6f:e8:e7:a8:0c:df:b3:20:
                    65:e8:c6:14:f2:50:39:7d:e6:9a:4c:8d:e4:08:4d:
                    cc:56:42:ef:32:dc:cb:c7:c4:0f:d7:2a:a1:d1:07:
                    ed:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:AC:E6:D6:36:3A:A6:BF:AB:8B:AD:EA:CF:79:C9:59:91:8B:A5:87
            X509v3 Authority Key Identifier:
                keyid:25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:0b:1e:aa:14:f8:e9:84:f9:11:88:a8:ca:05:ec:e3:74:21:
         6d:c3:20:bc:90:4a:0c:2b:fb:22:80:da:9f:b7:9d:1e:8f:74:
         5f:80:f4:f9:e0:e6:0a:9f:b9:44:e2:84:60:d4:24:66:4b:e2:
         11:da:d9:4f:db:02:9e:ac:5c:4d:60:bf:80:b4:48:a7:1a:c5:
         ae:6d:62:60:c3:f4:03:54:4d:a1:09:7d:38:25:64:25:75:67:
         00:f8:3b:97:f2:72:67:04:25:f5:51:be:d2:ba:67:c2:ca:6c:
         1b:06:52:5a:1b:a0:8b:f8:26:50:9f:d3:ea:b2:92:53:7f:b7:
         d5:34:5a:e9:ee:d3:11:e5:f9:fe:c8:9f:d2:ac:df:76:3b:32:
         c3:72:d8:18:de:4f:b7:e4:40:31:46:4c:ff:7a:9d:b7:26:65:
         60:b8:e0:e6:39:d3:24:4a:e9:ad:4a:8b:58:aa:e4:ca:92:1d:
         f9:93:92:f9:1e:d5:fc:23:41:d5:b0:6e:17:62:4e:4d:f9:ff:
         5a:4c:e2:ae:58:54:8d:a6:aa:43:99:7b:2c:83:b7:a9:e4:3d:
         2a:b9:7c:f0:c5:aa:cd:9d:93:08:2e:46:04:01:c0:62:f0:e2:
         b4:b2:6b:96:f8:1c:70:19:6a:bb:b6:56:68:90:e7:f3:90:19:
         a5:c7:28:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 12:04:15 2025 by rpki-client