This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.mft
File:                     JaVTeUIj5rTGMnebUTcdxOfXBwU.mft (raw, json)
Hash identifier:          2gYRoS8nCLRazGDpMZh1HtdGuyy5KGz7VARrZAzEm7s=
Subject key identifier:   9E:46:5C:FB:9F:DC:37:B7:C5:78:AE:14:48:65:18:E7:B1:C9:F3:89
Authority key identifier: 25:A5:53:79:42:23:E6:B4:C6:32:77:9B:51:37:1D:C4:E7:D7:07:05
Certificate issuer:       /CN=25a553794223e6b4c632779b51371dc4e7d70705
Certificate serial:       019AF6F8E53E66DB24F5A8B0EC0F70166B59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JaVTeUIj5rTGMnebUTcdxOfXBwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.mft
Manifest number:          141A
Signing time:             Sun 07 Dec 2025 04:01:37 +0000
Manifest this update:     Sun 07 Dec 2025 04:01:37 +0000
Manifest next update:     Mon 08 Dec 2025 04:01:37 +0000
Files and hashes:         1: AamKKecGtsamRu5tPrCvb4wPCCg.roa (hash: R/0dKm7RYIaO6gMOFzcg/w47GHlEc3dvGlaSi8cjRio=)
                          2: JaVTeUIj5rTGMnebUTcdxOfXBwU.crl (hash: /UCS8SBr0FdyaG2pjBSghhek45Lu8nn5aA4aSs0axM8=)
                          3: hK2MvsUGX-en-QRS8wt3Wf_U0nw.roa (hash: TPzEJ4PR056FgBQncfoR2MgdCQdkMjaLd6UC5c1/V+U=)
                          4: sZzOId0-MCcpYuzen4Nr9pbpCWM.roa (hash: uaC6M8HkP81VbJLKmwQxRrL5lIIVQEkwETGYd2tWcYo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JaVTeUIj5rTGMnebUTcdxOfXBwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f6:f8:e5:3e:66:db:24:f5:a8:b0:ec:0f:70:16:6b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a553794223e6b4c632779b51371dc4e7d70705
        Validity
            Not Before: Dec  7 04:01:37 2025 GMT
            Not After : Dec  8 04:01:37 2025 GMT
        Subject: CN=9e465cfb9fdc37b7c578ae14486518e7b1c9f389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:90:75:c0:a0:f5:c9:6b:30:64:73:98:ef:57:
                    a8:a4:08:b1:74:66:1e:c1:af:41:4e:e0:49:98:cb:
                    65:06:26:da:b5:f1:e0:08:ff:f1:d0:ad:2b:8f:d6:
                    68:84:c3:ee:cb:3c:eb:f5:68:f7:5b:46:e0:45:d4:
                    9d:df:3e:ab:54:07:aa:0a:66:5f:a1:09:ee:31:25:
                    29:d0:76:2a:c9:d9:f7:d6:31:29:48:9d:bd:c6:0e:
                    45:63:74:84:8d:43:88:3f:cc:ad:d8:f2:45:0b:b8:
                    96:ab:28:a3:dd:84:fd:c5:f7:3f:51:94:40:43:8a:
                    6b:51:5d:20:56:0c:8b:aa:8d:6b:b5:0c:ed:e7:4c:
                    e2:ec:72:07:cd:cc:d4:5e:f9:5f:4b:98:e0:11:4a:
                    64:f3:d1:bb:2c:89:71:5c:36:37:03:5c:ed:e5:a3:
                    59:1d:56:f1:ad:78:45:bb:26:7c:ed:0b:1f:41:83:
                    de:7c:97:93:03:cd:31:51:15:07:83:ec:44:77:89:
                    4d:d8:77:3d:fa:5e:c7:3d:d2:8d:12:10:3e:93:32:
                    2d:ed:85:1b:10:e0:21:37:5d:34:64:c0:42:0f:fc:
                    0b:d9:f7:53:98:6e:a2:e5:53:d3:22:99:95:0c:85:
                    8c:3d:0c:b4:6d:ea:1d:3a:39:ae:68:c1:b8:a1:4f:
                    7a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:46:5C:FB:9F:DC:37:B7:C5:78:AE:14:48:65:18:E7:B1:C9:F3:89
            X509v3 Authority Key Identifier:
                keyid:25:A5:53:79:42:23:E6:B4:C6:32:77:9B:51:37:1D:C4:E7:D7:07:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaVTeUIj5rTGMnebUTcdxOfXBwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:31:ed:f7:b4:af:2c:7e:53:f1:c3:56:ac:9e:ca:0b:40:ac:
         d2:b9:96:9d:90:11:ed:d6:c5:27:5c:02:e6:bc:82:af:d8:cc:
         0f:df:19:19:ff:e7:5a:64:01:26:9b:94:b6:7e:c0:88:3e:77:
         08:dd:47:27:6a:37:0f:13:45:e7:38:9b:1b:9d:7d:5c:87:fb:
         77:99:4a:fb:15:4d:91:3c:f0:44:ae:fb:f5:22:7b:3b:5e:c1:
         5e:72:bd:a5:8c:01:8a:57:1d:a3:83:5b:6d:08:7b:5b:d4:cf:
         46:f2:5b:41:a7:71:1c:07:07:ae:5d:e5:75:de:36:9e:b0:97:
         0a:a9:dc:de:a7:4e:33:75:ff:16:01:f2:98:c1:41:18:d6:09:
         cb:46:0a:a2:b4:cc:81:8a:c4:b3:b5:e1:ae:c5:53:21:6a:45:
         e7:bd:44:fa:2d:f6:5a:de:b3:a8:80:be:30:92:73:34:5c:22:
         c3:97:b2:2c:e0:86:c9:18:3d:d5:1e:f8:99:73:a3:bd:e6:d0:
         4a:01:6f:05:f4:46:97:8b:e2:c0:00:f8:d3:c1:e8:d7:80:e5:
         20:40:d6:4e:4e:93:1a:49:3c:87:29:b6:66:72:8c:56:d9:11:
         23:b3:08:a5:4a:57:34:7a:2c:85:a8:15:28:38:5d:38:d6:00:
         cd:25:4f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:08:48 2025 by rpki-client