This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
File:                     JaiVOVIABCcNNCU73BbYd4QVbho.mft (raw, json)
Hash identifier:          P+tWpnf0TK3zyn9AQSXg3jnIaBfertIoGu8urU/HD34=
Subject key identifier:   E6:2A:9B:04:C5:2C:CE:45:8D:A0:BA:E4:B8:DF:26:8B:43:65:12:4B
Authority key identifier: 25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A
Certificate issuer:       /CN=25a89539520004270d34253bdc16d87784156e1a
Certificate serial:       019B4A714CB38005359AF3921FB732F5984A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
Manifest number:          1797
Signing time:             Tue 23 Dec 2025 09:01:37 +0000
Manifest this update:     Tue 23 Dec 2025 09:01:37 +0000
Manifest next update:     Wed 24 Dec 2025 09:01:37 +0000
Files and hashes:         1: DS50rlRZwLY8XuiZwHc5tBN6hvU.roa (hash: b+B4AXqT01CIYHbKVSC14drPdJqiCbfJo8D2ZJ20764=)
                          2: DZyhv4UYtYvTfPYlPoAjBnE9aVw.roa (hash: jy6kbh6prGxhGFzaKnByCAPnjYIf8B6UCrmQZYycLPg=)
                          3: ElFRzESyd_FARx8sdZQyvtKhhiQ.roa (hash: IEIHuOHLB6gBvdNNBa+2SrGflQf88tZq8uIpIn/+Bss=)
                          4: FDLG3C3BdLH5mkEdaIkf5JVVR9k.roa (hash: eIvSohIS9AHs7C/UrNBbvINwpxqPAthufHpH6qHXtGg=)
                          5: JaiVOVIABCcNNCU73BbYd4QVbho.crl (hash: AhD66HDML+aAIzv14U1BNDYYHlFoAY+KdvsrrM0mMg8=)
                          6: L7hjIkY3zoZbF7otJPkyYp1-3GQ.roa (hash: KFKmyw3tb9aiPbS7iVWhwyX+8k/yoTNSo8uFnLcyUwc=)
                          7: vsFMEu8HS7LJh_IaQ_W3ChIz1iU.roa (hash: zvI+1QpRjWuIExjKMTnNsiDmzbwtShfXAATLbqaVci8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Dec 2025 09:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4a:71:4c:b3:80:05:35:9a:f3:92:1f:b7:32:f5:98:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a89539520004270d34253bdc16d87784156e1a
        Validity
            Not Before: Dec 23 09:01:37 2025 GMT
            Not After : Dec 24 09:01:37 2025 GMT
        Subject: CN=e62a9b04c52cce458da0bae4b8df268b4365124b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:96:01:30:fd:5f:77:cf:19:18:65:0d:ce:54:
                    3f:df:4a:40:93:ed:40:3f:a5:9c:0b:a8:ef:ac:ca:
                    fe:9a:5e:a8:6f:5e:b5:df:ff:14:7b:bc:5c:97:b8:
                    43:56:87:71:9d:2e:1c:ab:c0:88:3f:61:f0:75:98:
                    bf:75:8f:45:14:ec:2a:0b:a8:9f:b0:52:21:90:a3:
                    a4:83:cd:b7:45:d8:fa:d2:a8:47:8a:58:70:94:11:
                    fa:ba:46:17:89:b4:2b:81:eb:05:23:92:fe:15:5f:
                    c7:64:7a:0c:4b:b8:21:38:f8:1e:68:61:8a:10:11:
                    f2:90:c7:db:ce:ed:d2:60:41:a5:98:1c:ef:d1:9e:
                    08:fa:f8:b8:d5:19:87:8b:08:09:7d:f1:2c:b7:90:
                    f3:be:7f:c6:d0:99:47:89:18:1c:17:ff:a6:e0:cb:
                    62:e5:75:78:38:8a:aa:ba:60:07:d8:a0:4e:d0:d9:
                    fb:e1:26:a6:f0:5b:c3:dd:5a:78:d9:20:7c:22:65:
                    2f:c2:fd:b7:cd:04:55:31:8b:8d:62:85:14:2f:0e:
                    aa:b1:54:57:7e:66:70:26:05:ed:9e:15:72:bf:01:
                    44:a9:ad:7a:68:70:66:b9:b3:97:37:40:b8:e9:70:
                    f3:2e:1d:fa:72:3e:5f:82:8e:e3:8f:ab:3f:59:a8:
                    29:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2A:9B:04:C5:2C:CE:45:8D:A0:BA:E4:B8:DF:26:8B:43:65:12:4B
            X509v3 Authority Key Identifier:
                keyid:25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:23:2e:2c:2f:90:8a:97:80:1a:a3:65:14:a0:8c:ec:a9:90:
         d2:37:fc:12:61:08:44:ce:7c:fd:88:2f:7a:fd:bb:ad:c8:36:
         82:31:81:3c:cc:fd:bd:48:86:5a:e6:33:f0:16:6e:ad:ee:99:
         19:a4:47:86:ca:bc:1b:bc:c4:fd:2d:b8:de:e1:07:cb:f5:32:
         bb:9b:e7:25:54:67:10:3b:4f:4f:ac:77:0d:31:72:c2:a2:a8:
         9c:9d:90:7b:e9:65:73:b4:8f:92:cc:61:8e:98:fb:9a:90:42:
         d2:dc:8f:b3:58:dd:a7:27:31:01:e6:22:41:75:ba:44:ff:bf:
         ba:74:55:19:25:34:2d:03:47:09:3e:52:16:91:9e:e5:76:9a:
         7b:20:23:33:35:ff:14:c7:f5:f9:73:09:59:5b:e5:8b:6c:41:
         e8:a2:50:61:f2:49:f7:20:2d:97:ee:2b:e5:3e:72:6c:c4:13:
         18:fe:06:76:42:67:eb:fb:90:80:4b:dc:fa:08:36:c9:b3:77:
         d7:0e:71:4d:a9:75:93:99:7b:c6:e7:58:43:d9:4c:1a:9f:8e:
         5c:cc:96:3f:d8:87:62:58:83:3b:d0:fb:1c:6b:c2:1d:12:a1:
         f2:b6:11:8c:77:cc:69:c2:c0:a9:35:a8:e7:bf:04:6a:0a:d4:
         43:e6:ee:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 17:15:50 2025 by rpki-client