This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
File:                     jRHLAV35uqthIo27zhfdTgDmPBM.mft (raw, json)
Hash identifier:          tKNjKEU0uPsbhlK5ClfX6JBCRj6ZECNfoghOYyvJAdU=
Subject key identifier:   6A:C3:9C:1B:41:F4:4F:B3:AF:EC:02:62:CB:81:B3:89:77:8A:F4:82
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Certificate issuer:       /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial:       019AF276BE6D975712549CF323DF5710EE19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
Manifest number:          1701
Signing time:             Sat 06 Dec 2025 07:00:59 +0000
Manifest this update:     Sat 06 Dec 2025 07:00:59 +0000
Manifest next update:     Sun 07 Dec 2025 07:00:59 +0000
Files and hashes:         1: A3slZgyg9eemzONzeM4ZjQZOkQA.roa (hash: X0hOJW7H3OQv8gNe/Scffw0tX7rp3lfITg3c2bDp62I=)
                          2: Dyi32KlOskocQHPe6FUF7ELQs5U.roa (hash: D3EF+UreJY6p0ckzuksgWXVvYetF6sITxKDGv/w2L0k=)
                          3: FJEFcX2c3QiytgwJXtBXdfXF7AQ.roa (hash: wDOQFjMrdpmJOwUI55qSC810FFGrsaY4QPcOoJKWykM=)
                          4: G_noKzntiWHLaHSdta1FputJESM.roa (hash: 76HBYH18Q5+wfRzE5ydGp21BC62rcsuS2tSvCzBrWp8=)
                          5: K9IKE8UzWzIlRqgdm5DBscj4DXI.roa (hash: TmNOvsKyJxclTHoJrrP+Wz2lJl3QKp06vZRtwf2Wkwo=)
                          6: Orf0-crrS-m0d2xw75OekVLRhcU.roa (hash: NyC6YqKt0FNmC1unp3jevt47/gr2Ss5dzqvXJGD2AjU=)
                          7: THZGRo10wjMlm6DbRUy7KjrwfkM.roa (hash: 9FjGohVB5WEFkwBSNZEgEcooaudVJnnxxDK2Jy9/LgI=)
                          8: VmEKVuU_uT-v34QUxuvTEoMoaug.roa (hash: lCfgs7Wts05rdP9N+OaYxsLVxOabAGR5SUtGArrm95M=)
                          9: Vxz_brs8mMP8pyfBjMG6SqLCoLA.roa (hash: InPdcQtGkZTGLva52kv6ADnfkbCulTXgK4jOcLs8G7M=)
                          10: Xmin5XG-kRl49Vt7ZEcTgSLDhDM.roa (hash: DHMC7YXYfDSAA2x6JnOvMwJT1zdpAymlypp6F1bKmgY=)
                          11: Yfzph1m23vmbClyvIoORpS1CW-E.roa (hash: SuwU2G9eYZ/n+GS6xB/GEsh3UziEYPdyi1WD5kRpjAo=)
                          12: _vcj5hH5PQmqE-mf4-B7kcWGpfg.roa (hash: ReLlnYnzQbiQ5Pk/0fIjBSPY1fpdoMBMJpSnkiSreWk=)
                          13: d-sWN4azI8sU7mlb0U-920Rsmtc.roa (hash: eiusVr40X1jFuIAj+CFi96eXy2bKXAQXnB20dKkv/70=)
                          14: jRHLAV35uqthIo27zhfdTgDmPBM.crl (hash: V60oZUrh97vv8oGNAkCYOv//KSbPlUtf2BQy9d+YBJU=)
                          15: mwm5rC4rfoUfkUGj1keywZQhhGw.roa (hash: dDwtNYt9WubuetSqef0LQakniH0rgBVhQK32OI1f1fU=)
                          16: nyxtNnWsxM3-5IIVvMZ44cQVEYU.roa (hash: ub8VtVKtgWVEPS0rlKsjT0ZjeuiFnfLTw/tC6ZpW/Vo=)
                          17: v5kzcztD_Zc4DwbwnN4YfKR9YoA.roa (hash: 33e8kQ++AVlCN79vtcp+1+C+oGUNBxplYHYOGaRMl58=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:be:6d:97:57:12:54:9c:f3:23:df:57:10:ee:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
        Validity
            Not Before: Dec  6 07:00:59 2025 GMT
            Not After : Dec  7 07:00:59 2025 GMT
        Subject: CN=6ac39c1b41f44fb3afec0262cb81b389778af482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c5:c5:d6:46:55:98:28:8f:8b:9c:86:42:60:
                    79:d3:91:1d:08:95:3d:d9:f8:54:91:5b:71:86:4e:
                    bf:c1:c1:cb:f6:53:de:e7:20:6b:66:82:7d:f2:3e:
                    b0:ff:4c:98:d0:eb:2c:1a:fd:89:20:ed:4d:42:01:
                    4d:04:79:81:26:fe:c1:d4:c1:7a:8c:26:eb:9c:c5:
                    89:92:a9:1a:52:33:ea:80:70:94:43:21:1e:1b:08:
                    83:82:bc:60:5f:d9:e1:b8:bc:b9:aa:1d:2b:b5:38:
                    74:55:f8:6e:51:dd:4e:20:f6:5d:e5:35:70:89:8a:
                    eb:d8:27:05:57:2e:cf:3f:5f:d6:31:69:61:c5:61:
                    af:a2:c2:c0:8b:3f:d6:78:d6:93:d0:1e:33:6c:c8:
                    1c:fe:f9:33:83:16:f7:e7:57:ef:b7:80:b1:ef:d5:
                    8e:2e:b3:b7:2c:61:4d:1d:0d:dd:c6:0d:55:bd:47:
                    26:8a:4d:8d:11:e2:97:30:b3:97:01:c8:e4:9b:a0:
                    c9:ef:c2:44:b4:87:16:b7:23:0b:34:bf:aa:1f:3b:
                    01:fb:a0:f0:55:7d:2e:2f:ef:f7:a0:a0:23:34:29:
                    53:8f:2d:a9:21:92:be:19:21:2f:14:92:8a:03:c0:
                    04:f8:01:4a:5e:35:c7:08:2f:fe:46:d6:3d:77:f4:
                    78:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C3:9C:1B:41:F4:4F:B3:AF:EC:02:62:CB:81:B3:89:77:8A:F4:82
            X509v3 Authority Key Identifier:
                keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:f7:98:57:8c:ed:25:cd:b2:50:d0:4d:78:7d:2f:0c:12:c1:
         18:12:3d:cb:f7:51:78:27:5f:83:84:04:18:c6:a7:21:a6:fd:
         b1:43:b4:65:94:24:3d:b9:a1:8b:a5:48:63:40:d0:11:1e:40:
         5b:c2:8f:65:df:c5:87:93:19:26:36:98:96:6b:f1:03:c5:c0:
         1e:53:d8:86:5a:2c:d7:64:56:9f:40:e1:49:01:47:d5:38:fd:
         b6:c2:4e:2e:74:45:ac:b8:ae:09:44:9e:5c:ba:14:b5:f7:0d:
         84:40:0d:e2:23:76:30:6f:d0:83:a4:d5:13:82:3e:c2:d5:00:
         85:83:01:50:34:ee:12:92:41:69:cd:f0:95:f9:c5:10:0b:95:
         7f:1f:ab:43:b6:bd:97:c2:5a:5a:94:ba:fd:fe:f7:77:e5:db:
         d1:38:97:bb:81:d8:17:fb:3e:18:32:82:ce:4b:b1:8e:d9:99:
         0f:ff:26:17:ae:50:0e:db:4d:c4:cb:9a:7f:42:58:b2:19:c1:
         ba:ea:71:43:f0:c9:45:19:01:be:4c:e6:de:6e:07:69:e0:73:
         2c:89:b7:30:25:09:ab:6a:b2:7b:2b:70:b0:00:de:98:21:76:
         a6:45:b2:4e:8d:1d:1c:8a:d9:28:4d:24:84:e0:ac:fb:32:30:
         0b:2c:b1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:25:42 2025 by rpki-client