This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
File:                     jRrIPuOj-WjWatL99GFue7Hk0dc.mft (raw, json)
Hash identifier:          0QOWyrM6fajfcqze4dgQgCZAAUhuBzFqwI2oCt5R7vQ=
Subject key identifier:   B3:9A:8A:38:E9:FF:46:47:79:A4:B4:6E:0A:13:C3:F4:94:BE:8F:75
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Certificate issuer:       /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial:       019B37C57CD067EA50072BBBEABE93D6E7C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
Manifest number:          0D1A
Signing time:             Fri 19 Dec 2025 18:00:47 +0000
Manifest this update:     Fri 19 Dec 2025 18:00:47 +0000
Manifest next update:     Sat 20 Dec 2025 18:00:47 +0000
Files and hashes:         1: 0hcYkFvLnPnX3tJPZIl-Uhot1i0.roa (hash: 6/eHz/J+k5SuDY5b5eslxHZpd3P/l7+bfENiu84Xo/Y=)
                          2: 5Xz9E7C6BAcx16iIMjwvM4HlgAw.roa (hash: O79+vzMdI2uDnbGewEwtLl1GFqHouBivbXJnQ4WHjFs=)
                          3: A3vCnLdcCAHsjG0TKS7PepEiSRQ.roa (hash: 8/8TxF0wXw7stYTcBeXGRpf0HZpKR5xHMrhdKNPhjb4=)
                          4: DhUtQy3iN2_fQJa67YADtfV1x40.roa (hash: PvfiO0WfcmadxN2Uhm/Lhfz/fnQ9kgC0PROhIJsPF54=)
                          5: Eb3nQCsubyrRRwgtef25b2tcJbQ.roa (hash: sgX7PEOSSTdMVUw2kIAqvpDSoV+TN56cGW37Ykizvek=)
                          6: FQFiaH-Uhznyo9tuv-39hg1SgIc.roa (hash: AaAgvoQWwsBdEDlzs9JJLKseENMJxUCvDZ1+feCaadI=)
                          7: HIBKVvtinhweoi9ybbfYokGtkjg.roa (hash: khv1qHXammr1ZO8qVWulyea62D34wTqiuoPZd9ngssM=)
                          8: J5xYYbeJ_te65Xv7xz07zAj6f-I.roa (hash: H6HLeHF12Jxz9+TguAyIB+SiOH3fzKS1WVXypIulN7Q=)
                          9: JjM1scO0M1VRz2BqKO1r_ZLa970.roa (hash: jE4M6onTNWLyp2LT8jDW1lcK5SlJ5FLJoUcPkAM9kEQ=)
                          10: JtkTsuHPsoBKn0hRChOrC4JXTN4.roa (hash: M9uGhnRBSZAnmB8BCT/jdRx465I3Ctf37Vtgm+Jt4nc=)
                          11: LNIAH1MylX8WQQ-W8xfPHTlOsW0.roa (hash: GFXXpakvt3mJ4yGbBFawI3+WVF7sKNF14A1lgtziIek=)
                          12: Lxv8RdYN9P2vj1nZyAjFF9lNkU8.roa (hash: xMtpILHpW8icGyga3EnNkKUNmrRxGITTuJWIIZqDxDI=)
                          13: MudRzNeUk2R859eEP09GJeDExf0.roa (hash: 2o3NbfW7AkgEJtAc91HUgnIB/5KesUMTjVvuVU09fp4=)
                          14: RTZYU-7DG4fUoipBd0qSh8BirjI.roa (hash: 3eo6AFVTXAYcIIpYV9OFjF0R4DRTO3nfrXKCxpb3Q8c=)
                          15: XO5629FFpWYFF8ZRrD5XKcMM2vo.roa (hash: wKy5dCiE9pBzbJNPaAeHBHoxO/6aKqqjDAe2f2qYl60=)
                          16: gwSC7EAy3C72kqaOxsQmMkrjxyA.roa (hash: oVgyYlrKyPjekvA+50Kp0/QR+pQendS8nmEKcr8YBXw=)
                          17: jRrIPuOj-WjWatL99GFue7Hk0dc.crl (hash: kbKFbQTPLalFn4LRKyNkxR0sScWiTCesEdAlgsVNDYU=)
                          18: lO8z4PUnAAW_FQZ30LG2G_SaC34.roa (hash: TP4CK9avYURoeZBLUriM0sZhHgj7m8xB680P8/Q/778=)
                          19: ptIzMM5pGR32qdt6NWym3eUNiak.roa (hash: bSsM8QyZGEjlRqx/UPAoekl3qkyD03EUapHU3WIbdX4=)
                          20: tUIacj6VOPH10m5Y6XUJyWIow6U.roa (hash: 9uc/yuqmiqky5HfjpLsVrt/99q8zfLW5nmttPUpS6nU=)
                          21: tesrxSIX8wDOD0usavdzlelTyC8.roa (hash: 2mw6qDJEVPvk2SB5Frfa2IZ+DHf6Rgtla+C91qwtmwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:c5:7c:d0:67:ea:50:07:2b:bb:ea:be:93:d6:e7:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
        Validity
            Not Before: Dec 19 18:00:47 2025 GMT
            Not After : Dec 20 18:00:47 2025 GMT
        Subject: CN=b39a8a38e9ff464779a4b46e0a13c3f494be8f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:29:13:5b:dc:57:ad:53:2e:71:51:c0:0d:e1:
                    e9:29:cc:9a:f0:36:f8:2b:4a:24:ee:4e:ec:34:88:
                    9b:43:05:2f:ba:4a:16:f2:e7:af:ad:22:92:dd:95:
                    ba:eb:30:29:3f:d7:4d:ab:79:bc:bd:ca:bc:9e:d9:
                    b6:bc:28:84:16:0a:4e:95:78:8f:66:0a:82:86:c2:
                    a7:aa:97:d5:93:20:89:b5:15:8a:21:30:29:c3:d2:
                    a7:07:da:51:01:d9:0a:56:c5:52:78:2c:c2:3d:49:
                    4c:59:18:29:94:e8:25:f0:7d:1c:09:f1:d3:40:f3:
                    e5:78:89:a0:00:14:7f:ab:44:2c:8f:8a:4d:08:76:
                    27:90:67:ed:33:f7:81:62:1b:19:03:f6:66:82:65:
                    ab:74:e8:fb:ca:38:6e:1d:06:e9:88:95:4d:8d:1d:
                    35:81:be:34:77:3e:2b:09:63:34:4c:67:05:21:d0:
                    b8:95:69:95:87:6f:a7:e2:30:2c:b0:37:11:cb:f8:
                    df:7a:75:57:0e:a2:68:14:6c:ab:6b:46:bf:f5:6b:
                    0e:a8:ae:e1:9a:a2:81:0b:5b:9f:51:2a:47:7e:59:
                    a4:da:14:89:04:c7:03:0c:b9:b3:ab:10:52:67:e9:
                    74:90:cd:ed:a5:38:70:49:76:84:19:3c:46:80:82:
                    70:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:9A:8A:38:E9:FF:46:47:79:A4:B4:6E:0A:13:C3:F4:94:BE:8F:75
            X509v3 Authority Key Identifier:
                keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:c8:5b:da:3c:54:39:66:a2:04:24:47:97:56:b3:fd:d9:7b:
         05:d5:af:8c:18:88:81:82:bf:d7:ce:81:4c:22:3c:a2:b9:67:
         3a:9d:3c:90:2a:33:a2:b2:35:b4:a5:7c:91:ea:b5:9e:8e:e2:
         f5:8d:53:a6:7f:fb:7f:2c:26:13:ef:55:34:1b:59:93:b3:da:
         8e:86:76:94:37:f0:f7:9a:3a:25:ef:3a:c9:0d:02:02:32:41:
         5b:f1:5a:b5:45:12:76:a0:e4:f1:00:ef:fc:2e:57:19:0e:98:
         a6:81:ae:7e:b7:36:00:34:3b:2c:ac:01:b2:ad:7c:b9:c2:2e:
         42:98:b1:7b:a9:ed:6b:b0:b9:31:d4:55:7c:a6:46:9b:ef:64:
         59:23:5a:ef:63:21:2a:f0:ea:3b:66:d5:95:f6:8d:6d:84:fb:
         70:c5:72:32:e8:11:22:30:62:59:71:42:d6:a0:ef:d9:2e:75:
         3f:7a:b5:de:32:ae:eb:b9:34:aa:ab:43:4c:33:69:48:f5:3b:
         79:00:48:14:4a:6d:9c:87:92:8e:2e:1d:d4:df:4d:dc:cf:83:
         53:98:41:46:bc:f9:f3:5c:7c:79:75:a7:e9:be:d1:ca:82:d2:
         0b:3e:a9:8b:be:e5:8d:3b:71:c9:7d:3e:71:df:58:2b:bc:8c:
         e4:77:85:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 21:49:37 2025 by rpki-client