This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft
File:                     JFXX_uSkmeyvEdLT2o44neMjQS8.mft (raw, json)
Hash identifier:          80oOUOQWnrnhgzknYQBpcz9rXOFe/vh6UIuv8Yf7puE=
Subject key identifier:   91:AC:A7:F4:06:6B:15:30:B9:91:42:B6:B1:21:2D:45:D9:7A:BD:C3
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Certificate issuer:       /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial:       019B39EA9BD7F35F5BFE7825844ACAA56A7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft
Manifest number:          14C3
Signing time:             Sat 20 Dec 2025 04:00:35 +0000
Manifest this update:     Sat 20 Dec 2025 04:00:35 +0000
Manifest next update:     Sun 21 Dec 2025 04:00:35 +0000
Files and hashes:         1: 1GXRp3uT7hSMRzWjOxU0QktVRiY.roa (hash: aqIqmb81zi2cD6sMblBWQoAdH8B6EoMHMa2iFTOnb0c=)
                          2: 6lMo-bSFzDg5wL3NOiRjbrcK2RY.roa (hash: OiBfhCe7w46CvvhhcdsCsLe1D5izq3ttehX+QIx0FLE=)
                          3: 7w1YPyzlBEZNMOyEUCFkNc0ECPQ.roa (hash: 0dazsLMYx/MeDO19uGuuYzM5rCd3NgH7NYuHWn+o7Y8=)
                          4: 9S6VN8W0AB42Tjfsy_52eVj_HF8.roa (hash: U/0clwp2HZIEVyJ8jDxjulKSBf1aha8MkLQgHpOloog=)
                          5: ASXdDgGnh8Klj0fzlnnnOhv5loU.roa (hash: wWWbyDkcRSYhjOCMVp5ySQLPVFoGVo9Lc8yvPSW0eIM=)
                          6: FCh0pju_b1XDjIA8N5RktFi16SI.roa (hash: nzz37F+/F7FQRtoCdt1NMVOBQ7kMdP9rhDen0hB2f8U=)
                          7: JFXX_uSkmeyvEdLT2o44neMjQS8.crl (hash: 5drs7kG6x9t5ZH7hlhtkf3/Z/ma7G9iHUNB4UP4++hw=)
                          8: KKECh8K7hNffHVDT8ywINErgd1U.roa (hash: jFVe6x1L0XuZf3m6Z9ZwhiY43bHKM8ZXgM5AwxJ+SJ4=)
                          9: Neg-GaKgdY6gnpXCEHzkL9JlhS0.roa (hash: YgY5UaAq6hQXGaoygI0YizLwZ/ppqq3rjPmBhu92jjc=)
                          10: QBe6vAE6rYSA8KCQoO7i8f2keWY.roa (hash: /ZgtoN8+dacZMoQUvXB0j9wPVe+O1WRxUSH58QMyIv8=)
                          11: VuBKMZZHrZ1QSjnK1f8rGYyQD34.roa (hash: Yy9aJSbZa8jisjdlzD3JGDY9sTvRVpXk74KknU+efOI=)
                          12: XkXy4rFVu6JKAbUcEbjCs_ol8Mc.roa (hash: KEboU/fmZ1raaMqRFHeXS/DA8vof1Lf7hts2MdqUMFk=)
                          13: ZMDHfiorAQeHiAr2VSo31IrsX9Y.roa (hash: 2rW77gP54+olCRPQkqdpt6U7rC4Eivix0JgQsNBRA0A=)
                          14: b9LZtPjPcGkqch-QIMPmNiY1GfY.roa (hash: wVwwQPvK556ifQMFCqlsaWU8LCMEwKfjuZYfw4kZ7Ug=)
                          15: eq_1NPXQGhoWTMBNC9PaXKKEltM.roa (hash: Hq4HlvjEPgU16G6jBR0u/BxOO81trhl4PXHhgLXPBd4=)
                          16: nyD5kT8Kt-D5NETW9j2rpiicwKU.roa (hash: tM4j8/Zpx7QBzH6Z/oDhfNNxQlQmyGZ6J5a+EkHExUg=)
                          17: vhjrtMMdROIFj167BFR3pGrdrb8.roa (hash: mHe16RuP6X+5Fin2ZffJO/Ym51XZo7pnKG1BIGBPcUQ=)
                          18: vtNeTxZnHuMsF3rl3ZSPlMog7F0.roa (hash: FfGF+21HwGvE0iZhE2YJptjryuHFZ0BNSqu9xGqCr6Q=)
                          19: xtI4FxymYzhmmmKad9ZOkzTos1E.roa (hash: Xd4WHKpPZgsYedQWZYH07M7z75l0J2MM4sU9jDdQuXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:ea:9b:d7:f3:5f:5b:fe:78:25:84:4a:ca:a5:6a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
        Validity
            Not Before: Dec 20 04:00:35 2025 GMT
            Not After : Dec 21 04:00:35 2025 GMT
        Subject: CN=91aca7f4066b1530b99142b6b1212d45d97abdc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9a:ab:75:96:2d:3e:70:0f:6e:09:60:7a:f2:
                    79:6a:22:ec:07:1c:6f:61:e7:0e:7e:dd:15:fc:60:
                    77:43:81:ff:92:eb:31:f6:c7:02:d9:a6:0a:f6:77:
                    b4:08:a9:04:03:6f:56:2b:4a:a7:d8:f4:d0:99:43:
                    a9:28:c9:9c:c1:9a:7e:b9:ed:96:78:03:f9:69:e9:
                    87:8a:26:55:d5:81:f6:2b:14:21:b3:cd:9f:c6:02:
                    81:df:20:2d:e4:dc:fd:be:ad:7f:98:ea:8c:90:2c:
                    b5:ab:0b:91:78:60:ef:33:f4:5f:87:89:e9:1e:ff:
                    71:11:38:71:67:be:b5:c9:cd:6e:0b:89:33:0a:b1:
                    96:e1:1a:b1:d0:e4:bf:3c:e1:b2:e6:7c:71:cc:13:
                    73:fc:57:f2:97:5c:38:00:21:1e:75:85:dc:c4:ee:
                    29:2b:ce:cf:0c:e2:3b:f9:59:d3:61:f4:11:4a:2c:
                    d5:6d:3d:a2:2e:70:d8:48:39:99:a9:bf:a6:6b:28:
                    ac:e0:25:a8:ea:74:e1:c7:77:83:81:be:b3:03:8b:
                    76:f3:bb:8d:54:7c:1e:6c:66:2f:66:4f:b8:45:19:
                    66:27:08:fe:d2:78:c9:03:9d:35:f5:3d:66:3d:62:
                    a7:b8:b1:43:2e:9a:24:f1:a0:94:74:23:5d:89:ce:
                    dd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:AC:A7:F4:06:6B:15:30:B9:91:42:B6:B1:21:2D:45:D9:7A:BD:C3
            X509v3 Authority Key Identifier:
                keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:18:35:9f:df:c1:c0:92:ca:cd:bb:69:3c:7f:62:35:07:23:
         13:51:22:76:aa:52:e6:b7:3c:bf:f4:87:82:ef:f8:23:4d:cf:
         3d:ba:7f:06:c2:ae:32:99:5d:68:2b:92:bb:49:1c:7e:eb:31:
         11:c0:95:72:b2:72:77:87:7b:93:71:56:21:45:c2:f9:98:c8:
         06:03:02:88:77:41:25:ce:d8:11:c4:3d:25:55:14:ba:cc:49:
         df:07:0d:81:63:15:f3:b0:32:bc:e9:bd:67:4c:ba:a6:0b:b6:
         8f:78:4c:63:f4:1e:17:ec:c4:45:db:19:69:32:33:bb:37:7b:
         53:ad:1c:c2:f7:23:91:a0:3d:41:c0:1d:4a:e6:fe:83:7f:d0:
         ad:04:a4:23:98:2b:0f:91:48:d5:8c:c0:21:53:0a:fb:8f:7f:
         80:0f:27:de:89:93:f4:61:51:09:eb:d9:c4:21:c9:54:17:35:
         61:04:d9:21:b8:47:65:68:89:8d:85:2f:92:e8:37:d7:9e:b0:
         20:e8:02:fa:70:d8:e0:b4:b2:ce:3e:56:13:d2:f6:89:e8:b6:
         93:88:98:b5:d9:a6:5d:8b:c2:66:f6:6e:2f:b0:74:d7:e5:d7:
         16:9c:8e:45:b7:12:6b:23:cb:c9:cc:68:c4:c1:85:51:92:69:
         af:e0:73:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs56pvX819b/nglhErKpWp/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NTVkN2ZlZTRhNDk5ZWNhZjExZDJkM2RhOGUzODlkZTMy
MzQxMmYwHhcNMjUxMjIwMDQwMDM1WhcNMjUxMjIxMDQwMDM1WjAzMTEwLwYDVQQD
Eyg5MWFjYTdmNDA2NmIxNTMwYjk5MTQyYjZiMTIxMmQ0NWQ5N2FiZGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZqrdZYtPnAPbglgevJ5aiLsBxxv
YecOft0V/GB3Q4H/kusx9scC2aYK9ne0CKkEA29WK0qn2PTQmUOpKMmcwZp+ue2W
eAP5aemHiiZV1YH2KxQhs82fxgKB3yAt5Nz9vq1/mOqMkCy1qwuReGDvM/Rfh4np
Hv9xEThxZ761yc1uC4kzCrGW4Rqx0OS/POGy5nxxzBNz/Ffyl1w4ACEedYXcxO4p
K87PDOI7+VnTYfQRSizVbT2iLnDYSDmZqb+mayis4CWo6nThx3eDgb6zA4t287uN
VHwebGYvZk+4RRlmJwj+0njJA5019T1mPWKnuLFDLpok8aCUdCNdic7dZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGsp/QGaxUwuZFCtrEhLUXZer3DMB8GA1UdIwQY
MBaAFCRV1/7kpJnsrxHS09qOOJ3jI0EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt
MWUwNDY1NTEzYjYzLzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz
LzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEhg1n9/B
wJLKzbtpPH9iNQcjE1EidqpS5rc8v/SHgu/4I03PPbp/BsKuMpldaCuSu0kcfusx
EcCVcrJyd4d7k3FWIUXC+ZjIBgMCiHdBJc7YEcQ9JVUUusxJ3wcNgWMV87AyvOm9
Z0y6pgu2j3hMY/QeF+zERdsZaTIzuzd7U60cwvcjkaA9QcAdSub+g3/QrQSkI5gr
D5FI1YzAIVMK+49/gA8n3omT9GFRCevZxCHJVBc1YQTZIbhHZWiJjYUvkug3156w
IOgC+nDY4LSyzj5WE9L2iei2k4iYtdmmXYvCZvZuL7B01+XXFpyORbcSayPLycxo
xMGFUZJpr+Bzjg==
-----END CERTIFICATE-----
Generated at Sat Dec 20 08:45:40 2025 by rpki-client