This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.mft
File:                     JaVTeUIj5rTGMnebUTcdxOfXBwU.mft (raw, json)
Hash identifier:          cezcoviA+zC7PT5z/yaXbEc7MwNJ2QqfLXnmBBl5WuA=
Subject key identifier:   AA:56:5F:39:19:20:9C:D7:2E:7E:0E:C2:4F:A3:1F:44:FD:31:AD:79
Authority key identifier: 25:A5:53:79:42:23:E6:B4:C6:32:77:9B:51:37:1D:C4:E7:D7:07:05
Certificate issuer:       /CN=25a553794223e6b4c632779b51371dc4e7d70705
Certificate serial:       019B3A904F86FD927ED0C562AAC19057A894
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JaVTeUIj5rTGMnebUTcdxOfXBwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.mft
Manifest number:          143D
Signing time:             Sat 20 Dec 2025 07:01:34 +0000
Manifest this update:     Sat 20 Dec 2025 07:01:34 +0000
Manifest next update:     Sun 21 Dec 2025 07:01:34 +0000
Files and hashes:         1: AamKKecGtsamRu5tPrCvb4wPCCg.roa (hash: R/0dKm7RYIaO6gMOFzcg/w47GHlEc3dvGlaSi8cjRio=)
                          2: JaVTeUIj5rTGMnebUTcdxOfXBwU.crl (hash: EEpzuwMytI6hSy5Uowxx03S84W+yBNSKIuNm+IhYhOw=)
                          3: hK2MvsUGX-en-QRS8wt3Wf_U0nw.roa (hash: TPzEJ4PR056FgBQncfoR2MgdCQdkMjaLd6UC5c1/V+U=)
                          4: sZzOId0-MCcpYuzen4Nr9pbpCWM.roa (hash: uaC6M8HkP81VbJLKmwQxRrL5lIIVQEkwETGYd2tWcYo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JaVTeUIj5rTGMnebUTcdxOfXBwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3a:90:4f:86:fd:92:7e:d0:c5:62:aa:c1:90:57:a8:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a553794223e6b4c632779b51371dc4e7d70705
        Validity
            Not Before: Dec 20 07:01:34 2025 GMT
            Not After : Dec 21 07:01:34 2025 GMT
        Subject: CN=aa565f3919209cd72e7e0ec24fa31f44fd31ad79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:93:8b:f2:07:ef:41:a2:c3:3a:3e:0e:da:bc:
                    59:2b:d1:e1:75:3a:b3:4b:b0:d4:b4:e0:2a:87:2c:
                    83:e3:bf:51:2c:75:8c:3a:df:d2:84:7a:6e:47:c1:
                    15:42:27:5f:31:da:9c:91:f7:96:df:80:c7:1c:5d:
                    97:45:59:11:91:25:0a:da:89:7d:5b:c2:19:ac:b7:
                    30:56:06:a5:0e:ad:63:16:b6:ec:dc:68:62:89:ea:
                    eb:9b:30:e6:88:40:ee:44:78:16:e2:7d:5d:30:81:
                    4b:57:bb:eb:8c:c5:f6:51:2f:41:c6:67:3f:4d:fb:
                    06:38:47:46:93:a6:76:04:ae:9f:17:0f:e5:e3:48:
                    69:67:e4:ce:c1:3e:ef:48:53:b4:0b:f8:99:34:49:
                    1d:b6:3d:f7:66:b5:33:49:b3:b9:bc:e0:38:89:4f:
                    dd:8a:59:ef:07:95:ba:53:66:b6:b6:29:f0:13:22:
                    e4:6a:30:22:5e:0c:b6:68:7a:27:fc:b7:18:6c:80:
                    7e:dd:33:a7:de:7d:09:3b:60:8d:6b:32:34:a3:cd:
                    d2:78:ea:05:13:c5:48:e7:55:56:83:33:cb:99:02:
                    43:15:b5:46:87:d0:56:f3:3a:40:89:da:59:db:e3:
                    20:a1:5f:61:c3:66:5e:06:e4:da:da:eb:d2:4e:83:
                    7c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:56:5F:39:19:20:9C:D7:2E:7E:0E:C2:4F:A3:1F:44:FD:31:AD:79
            X509v3 Authority Key Identifier:
                keyid:25:A5:53:79:42:23:E6:B4:C6:32:77:9B:51:37:1D:C4:E7:D7:07:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaVTeUIj5rTGMnebUTcdxOfXBwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:9e:ae:11:e6:a1:7c:33:fa:22:7a:15:bc:83:b8:0d:70:40:
         d9:17:62:c4:6f:3b:66:8f:2f:2a:b5:22:41:3c:b0:fc:03:15:
         75:c6:b9:2b:01:2d:01:85:42:51:c7:db:69:00:55:65:70:ea:
         8f:84:1e:1e:50:03:3d:29:fb:f1:69:4c:7b:2b:01:40:c1:69:
         5d:36:07:5e:e6:f8:c5:69:d9:f2:1b:2a:d3:e1:43:1f:76:48:
         71:be:d9:0a:1c:c0:28:41:fc:73:c7:5f:7a:91:46:eb:84:dd:
         6f:63:5d:4f:d0:34:03:98:a3:63:2d:9c:68:4b:87:74:23:ca:
         78:40:9c:4e:df:ba:df:57:d6:ba:af:9b:6a:e1:d7:c1:91:1a:
         a0:ab:1f:72:2a:75:b4:ab:1d:6e:50:72:06:96:e3:bd:83:df:
         54:da:b7:b4:f8:29:da:00:c2:d7:61:98:24:5c:ae:6a:ec:ae:
         53:d3:ce:5c:f9:ca:b0:ff:ea:b6:ca:b5:83:af:40:1a:04:76:
         bb:34:b2:cb:2f:3a:fe:fb:32:25:01:88:7a:56:89:79:ab:f2:
         32:f8:1c:94:25:d2:12:dd:59:60:ef:d7:97:c3:c2:77:17:57:
         39:1c:a4:24:97:a9:e4:01:f6:be:83:97:13:76:3b:cb:d4:17:
         f4:93:09:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs6kE+G/ZJ+0MViqsGQV6iUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YTU1Mzc5NDIyM2U2YjRjNjMyNzc5YjUxMzcxZGM0ZTdk
NzA3MDUwHhcNMjUxMjIwMDcwMTM0WhcNMjUxMjIxMDcwMTM0WjAzMTEwLwYDVQQD
EyhhYTU2NWYzOTE5MjA5Y2Q3MmU3ZTBlYzI0ZmEzMWY0NGZkMzFhZDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pOL8gfvQaLDOj4O2rxZK9HhdTqz
S7DUtOAqhyyD479RLHWMOt/ShHpuR8EVQidfMdqckfeW34DHHF2XRVkRkSUK2ol9
W8IZrLcwVgalDq1jFrbs3GhiierrmzDmiEDuRHgW4n1dMIFLV7vrjMX2US9Bxmc/
TfsGOEdGk6Z2BK6fFw/l40hpZ+TOwT7vSFO0C/iZNEkdtj33ZrUzSbO5vOA4iU/d
ilnvB5W6U2a2tinwEyLkajAiXgy2aHon/LcYbIB+3TOn3n0JO2CNazI0o83SeOoF
E8VI51VWgzPLmQJDFbVGh9BW8zpAidpZ2+MgoV9hw2ZeBuTa2uvSToN87wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpWXzkZIJzXLn4Owk+jH0T9Ma15MB8GA1UdIwQY
MBaAFCWlU3lCI+a0xjJ3m1E3HcTn1wcFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmFWVGVVSWo1clRHTW5lYlVUY2R4T2ZYQndVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8xZjk2Y2MtNWVhNi00OWUzLThmNWYt
MzBlOTI5ZWQxMDYzLzEvSmFWVGVVSWo1clRHTW5lYlVUY2R4T2ZYQndVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8xZjk2Y2MtNWVhNi00OWUzLThmNWYtMzBlOTI5ZWQxMDYz
LzEvSmFWVGVVSWo1clRHTW5lYlVUY2R4T2ZYQndVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQp6uEeah
fDP6InoVvIO4DXBA2RdixG87Zo8vKrUiQTyw/AMVdca5KwEtAYVCUcfbaQBVZXDq
j4QeHlADPSn78WlMeysBQMFpXTYHXub4xWnZ8hsq0+FDH3ZIcb7ZChzAKEH8c8df
epFG64Tdb2NdT9A0A5ijYy2caEuHdCPKeECcTt+631fWuq+bauHXwZEaoKsfcip1
tKsdblByBpbjvYPfVNq3tPgp2gDC12GYJFyuauyuU9POXPnKsP/qtsq1g69AGgR2
uzSyyy86/vsyJQGIelaJeavyMvgclCXSEt1ZYO/Xl8PCdxdXORykJJep5AH2voOX
E3Y7y9QX9JMJaA==
-----END CERTIFICATE-----
Generated at Sat Dec 20 09:02:11 2025 by rpki-client