This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
File:                     jRHLAV35uqthIo27zhfdTgDmPBM.mft (raw, json)
Hash identifier:          8EVJw3qeSWbuAzLgbr9SBZrQkkozghg0X423vpOnD7U=
Subject key identifier:   45:16:CF:61:EA:C9:1E:52:32:F6:6E:6F:86:99:76:9E:18:88:43:69
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Certificate issuer:       /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial:       019B37FC7E35B1F6120BF87CE7B374126966
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
Manifest number:          1725
Signing time:             Fri 19 Dec 2025 19:00:52 +0000
Manifest this update:     Fri 19 Dec 2025 19:00:52 +0000
Manifest next update:     Sat 20 Dec 2025 19:00:52 +0000
Files and hashes:         1: A3slZgyg9eemzONzeM4ZjQZOkQA.roa (hash: X0hOJW7H3OQv8gNe/Scffw0tX7rp3lfITg3c2bDp62I=)
                          2: Dyi32KlOskocQHPe6FUF7ELQs5U.roa (hash: D3EF+UreJY6p0ckzuksgWXVvYetF6sITxKDGv/w2L0k=)
                          3: FJEFcX2c3QiytgwJXtBXdfXF7AQ.roa (hash: wDOQFjMrdpmJOwUI55qSC810FFGrsaY4QPcOoJKWykM=)
                          4: G_noKzntiWHLaHSdta1FputJESM.roa (hash: 76HBYH18Q5+wfRzE5ydGp21BC62rcsuS2tSvCzBrWp8=)
                          5: K9IKE8UzWzIlRqgdm5DBscj4DXI.roa (hash: TmNOvsKyJxclTHoJrrP+Wz2lJl3QKp06vZRtwf2Wkwo=)
                          6: Orf0-crrS-m0d2xw75OekVLRhcU.roa (hash: NyC6YqKt0FNmC1unp3jevt47/gr2Ss5dzqvXJGD2AjU=)
                          7: THZGRo10wjMlm6DbRUy7KjrwfkM.roa (hash: 9FjGohVB5WEFkwBSNZEgEcooaudVJnnxxDK2Jy9/LgI=)
                          8: VmEKVuU_uT-v34QUxuvTEoMoaug.roa (hash: lCfgs7Wts05rdP9N+OaYxsLVxOabAGR5SUtGArrm95M=)
                          9: Vxz_brs8mMP8pyfBjMG6SqLCoLA.roa (hash: InPdcQtGkZTGLva52kv6ADnfkbCulTXgK4jOcLs8G7M=)
                          10: Xmin5XG-kRl49Vt7ZEcTgSLDhDM.roa (hash: DHMC7YXYfDSAA2x6JnOvMwJT1zdpAymlypp6F1bKmgY=)
                          11: Yfzph1m23vmbClyvIoORpS1CW-E.roa (hash: SuwU2G9eYZ/n+GS6xB/GEsh3UziEYPdyi1WD5kRpjAo=)
                          12: _vcj5hH5PQmqE-mf4-B7kcWGpfg.roa (hash: ReLlnYnzQbiQ5Pk/0fIjBSPY1fpdoMBMJpSnkiSreWk=)
                          13: d-sWN4azI8sU7mlb0U-920Rsmtc.roa (hash: eiusVr40X1jFuIAj+CFi96eXy2bKXAQXnB20dKkv/70=)
                          14: jRHLAV35uqthIo27zhfdTgDmPBM.crl (hash: HR8tQ0ow9buxDFqHY9cbYdPWMEwIeBPGeaYn4rlU14k=)
                          15: mwm5rC4rfoUfkUGj1keywZQhhGw.roa (hash: dDwtNYt9WubuetSqef0LQakniH0rgBVhQK32OI1f1fU=)
                          16: nyxtNnWsxM3-5IIVvMZ44cQVEYU.roa (hash: ub8VtVKtgWVEPS0rlKsjT0ZjeuiFnfLTw/tC6ZpW/Vo=)
                          17: v5kzcztD_Zc4DwbwnN4YfKR9YoA.roa (hash: 33e8kQ++AVlCN79vtcp+1+C+oGUNBxplYHYOGaRMl58=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:fc:7e:35:b1:f6:12:0b:f8:7c:e7:b3:74:12:69:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
        Validity
            Not Before: Dec 19 19:00:52 2025 GMT
            Not After : Dec 20 19:00:52 2025 GMT
        Subject: CN=4516cf61eac91e5232f66e6f8699769e18884369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:00:d8:3f:24:b2:b0:79:78:e9:8c:fa:cb:8f:
                    45:fb:8f:ff:80:53:e4:93:f3:bc:c7:bd:10:07:4b:
                    b4:88:d4:13:15:79:4f:ac:1a:c4:13:42:49:3a:e8:
                    0b:76:14:6a:fd:0b:3b:c5:a5:17:6e:ca:16:8f:5d:
                    7f:84:a3:c4:f9:17:52:99:43:56:b5:43:34:c0:bb:
                    e9:15:df:57:14:b3:36:bd:2d:0f:51:54:1e:83:b9:
                    52:a0:e2:c6:58:59:28:d4:47:ca:48:fe:f3:fe:d9:
                    8c:01:8c:b1:03:66:fe:47:d8:65:85:34:fd:e5:7d:
                    2b:dc:06:c0:58:c1:01:c2:50:29:11:e1:1d:f6:a5:
                    50:ac:d8:4e:35:a7:44:44:80:7b:c7:d5:61:0d:17:
                    89:b4:ac:5b:06:f8:0b:8b:b4:c6:a3:ee:7b:b1:24:
                    b9:c2:d1:66:27:ed:0c:11:6d:c2:9e:2a:c4:db:31:
                    5d:a0:33:15:47:f2:82:1a:65:4b:db:31:c9:1d:e8:
                    b8:5c:2b:db:7d:51:2e:24:ab:0f:04:72:67:02:1c:
                    03:e6:bd:42:f5:4c:f7:3c:c2:46:95:e6:ab:20:af:
                    41:17:45:2b:3c:93:6c:46:3a:b3:cd:87:87:e6:44:
                    73:ff:66:0c:fd:d4:90:5b:1c:89:51:8f:24:fc:24:
                    ce:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:16:CF:61:EA:C9:1E:52:32:F6:6E:6F:86:99:76:9E:18:88:43:69
            X509v3 Authority Key Identifier:
                keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:c4:d1:db:90:8f:60:73:4f:64:11:90:6e:0c:4b:2e:4a:ae:
         81:7b:fb:cb:62:a7:73:ec:fa:99:ef:db:d4:0d:46:fc:60:b1:
         a3:7e:8a:df:a2:df:90:7d:36:a5:b0:36:8f:dc:a7:3d:99:2f:
         97:cf:08:b9:6e:52:c6:4e:79:75:60:bc:5c:ba:c9:f8:23:9e:
         68:37:5d:fd:78:38:d3:06:89:f1:e1:84:3d:d9:31:92:a5:8d:
         9a:3d:17:55:4d:86:f5:ee:1d:82:dc:be:5b:eb:ca:74:3b:bc:
         e4:51:eb:73:b9:b6:51:e5:88:e5:6b:d1:e3:26:fc:9d:48:55:
         cc:01:f6:9d:87:07:2e:df:49:4a:e7:8c:63:e7:a6:9d:14:65:
         38:e0:af:51:00:65:64:1b:bb:cf:36:e0:b3:1a:dc:61:a9:af:
         70:c5:0a:e6:98:c7:0d:3c:b9:df:0d:64:4f:f2:27:fc:14:8f:
         1f:3b:c5:54:4b:8b:f7:ff:7c:e8:c1:3d:8d:a0:30:d9:fc:8d:
         9e:5a:a4:ca:20:23:35:17:6e:fd:71:89:59:65:78:99:4b:ad:
         be:03:cf:6e:7c:8a:c2:9c:9a:99:f4:7c:41:b7:1f:fd:06:bf:
         3e:44:30:ae:81:35:70:7f:2a:21:13:f0:fb:d9:5c:f8:d9:f3:
         33:79:c2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:51:00 2025 by rpki-client