This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
File:                     JaiVOVIABCcNNCU73BbYd4QVbho.mft (raw, json)
Hash identifier:          bga8f/I70N4LaOjDdDfBPOwSu9omnE5xsZKSa0Fej/0=
Subject key identifier:   93:1E:10:5B:41:98:BF:CC:6D:96:A5:25:44:CD:DA:23:64:12:47:C3
Authority key identifier: 25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A
Certificate issuer:       /CN=25a89539520004270d34253bdc16d87784156e1a
Certificate serial:       019B3CECB24F93D1CFCFE5DE279619B648C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
Manifest number:          1790
Signing time:             Sat 20 Dec 2025 18:01:43 +0000
Manifest this update:     Sat 20 Dec 2025 18:01:43 +0000
Manifest next update:     Sun 21 Dec 2025 18:01:43 +0000
Files and hashes:         1: DS50rlRZwLY8XuiZwHc5tBN6hvU.roa (hash: b+B4AXqT01CIYHbKVSC14drPdJqiCbfJo8D2ZJ20764=)
                          2: DZyhv4UYtYvTfPYlPoAjBnE9aVw.roa (hash: jy6kbh6prGxhGFzaKnByCAPnjYIf8B6UCrmQZYycLPg=)
                          3: ElFRzESyd_FARx8sdZQyvtKhhiQ.roa (hash: IEIHuOHLB6gBvdNNBa+2SrGflQf88tZq8uIpIn/+Bss=)
                          4: FDLG3C3BdLH5mkEdaIkf5JVVR9k.roa (hash: eIvSohIS9AHs7C/UrNBbvINwpxqPAthufHpH6qHXtGg=)
                          5: JaiVOVIABCcNNCU73BbYd4QVbho.crl (hash: 9Wg9owQ7r5awADw0Oe0m1yTl2Uy5BetRu/DOusgycTw=)
                          6: L7hjIkY3zoZbF7otJPkyYp1-3GQ.roa (hash: KFKmyw3tb9aiPbS7iVWhwyX+8k/yoTNSo8uFnLcyUwc=)
                          7: vsFMEu8HS7LJh_IaQ_W3ChIz1iU.roa (hash: zvI+1QpRjWuIExjKMTnNsiDmzbwtShfXAATLbqaVci8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:ec:b2:4f:93:d1:cf:cf:e5:de:27:96:19:b6:48:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a89539520004270d34253bdc16d87784156e1a
        Validity
            Not Before: Dec 20 18:01:43 2025 GMT
            Not After : Dec 21 18:01:43 2025 GMT
        Subject: CN=931e105b4198bfcc6d96a52544cdda23641247c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bf:ea:74:f1:02:c9:81:c8:96:0f:11:f5:f8:
                    b2:e9:48:e9:b8:3d:2a:fd:15:ff:34:d4:a1:a6:b7:
                    65:d5:3c:28:3b:43:68:ce:11:fb:13:f9:24:b2:d8:
                    45:13:ad:00:01:8f:bf:f4:c3:fb:91:00:39:75:73:
                    13:d6:2b:68:bf:d3:b5:b9:20:72:c1:21:cb:df:69:
                    ab:9f:a9:33:2c:be:af:62:ad:6a:d1:82:1e:e3:bf:
                    31:9f:47:10:46:af:30:1d:fc:ce:44:61:1a:a0:91:
                    28:79:0d:c2:77:aa:35:a2:29:7a:bf:98:99:fd:02:
                    3a:4e:00:c7:1f:f7:98:0e:be:c1:e4:fa:77:cf:ad:
                    96:50:29:8b:92:cd:92:1b:b2:e7:74:4b:1d:eb:c8:
                    e5:d3:5e:a2:15:1b:3d:89:fc:0c:51:3d:62:6f:b0:
                    52:1c:2a:7f:4c:da:4b:16:9f:3b:e4:77:a5:e3:36:
                    17:65:99:59:b8:5c:c8:99:42:4c:86:fc:06:46:f7:
                    c4:52:72:de:d8:e2:16:d0:2f:3b:e7:83:85:3b:8c:
                    f6:1a:a8:81:b1:c9:d0:f8:33:e0:c0:f5:9a:4a:6a:
                    18:77:db:36:1c:a2:dd:21:f9:b7:4b:ca:44:70:1d:
                    99:a0:93:1f:5e:08:db:22:bc:50:d6:8f:c4:68:8e:
                    e0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:1E:10:5B:41:98:BF:CC:6D:96:A5:25:44:CD:DA:23:64:12:47:C3
            X509v3 Authority Key Identifier:
                keyid:25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:a8:73:98:bb:fe:07:a8:74:ae:b3:97:af:a7:95:d2:3c:ed:
         1b:c5:25:d1:83:a0:e5:1d:70:fc:a7:07:0a:6c:73:9e:fc:e6:
         7a:16:5e:71:a6:c5:28:6e:84:0b:da:6b:f2:1e:a6:ce:2c:cc:
         b8:25:c1:6b:df:99:ba:f1:6e:b4:d2:b6:d2:7b:e2:77:24:ff:
         d9:e5:04:30:2c:d7:dd:c1:4b:cd:6b:ec:65:70:a3:d5:20:ce:
         86:78:1d:95:ba:3f:5e:80:b5:01:6d:64:ea:55:2c:5c:0e:09:
         79:8f:f3:fd:be:d8:b7:31:c1:84:e0:ad:1b:ce:f2:d7:e1:eb:
         87:f5:e1:a9:7e:8b:a1:3d:97:06:0a:73:cf:e0:29:fd:c5:82:
         9b:d9:df:11:d5:44:6f:23:83:5f:5d:fe:86:65:7d:18:83:98:
         c1:08:f9:3a:d9:31:0f:da:27:bb:75:06:80:33:7f:c0:b8:89:
         fb:ff:ef:ad:c8:2b:ab:5b:4e:eb:5a:bd:16:87:a1:29:49:58:
         73:5a:e8:e0:32:9d:fd:ed:da:8d:23:a5:47:b4:39:2e:3f:05:
         cb:07:29:c0:78:da:f6:e1:3c:4e:75:d5:f0:ee:29:c7:e7:ae:
         22:f1:56:7c:29:b7:9e:06:02:bd:1d:3b:28:5a:76:3a:f3:72:
         b3:c8:fe:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 01:19:54 2025 by rpki-client