This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
File:                     jrRB2tu-y2ll1OofBGzFyOKIF_w.mft (raw, json)
Hash identifier:          VsneDObXMxmoXhBPyPACr315i9YCXVwgY/iAkawEekI=
Subject key identifier:   6B:4B:63:97:C7:DC:96:A3:FC:B5:A5:B7:44:43:77:15:B2:E7:C5:DD
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Certificate issuer:       /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial:       019AF2AD6C5709E2807BF9CC33CB7B891B0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
Manifest number:          0B16
Signing time:             Sat 06 Dec 2025 08:00:42 +0000
Manifest this update:     Sat 06 Dec 2025 08:00:42 +0000
Manifest next update:     Sun 07 Dec 2025 08:00:42 +0000
Files and hashes:         1: 0cnj558EOjikahEp8WX4VbLOubg.roa (hash: f158xPAAdd0ZG1iUt85VbS08KHTjeF2/q33G/RBnAZM=)
                          2: 1d5tIKFWKjHBDKkGnBRvTBWCJAk.roa (hash: fRtqk0iZm2CdbdhKX93X5/SECEfnUXkhKcE8ZqaJIDU=)
                          3: 4EZAXXjg-wdq7F5nmE22LQpMjC0.roa (hash: kcJ5zcoJ0uYbLEoOLz0za2EfJtjkENsqcX3HW2ukm9E=)
                          4: 4wsomeR7iVlRk7fXm0iht8PO9PY.roa (hash: yFGK/6SHSFcnWo+mmonM2EnCgU/D44Pg91uZp7acGs0=)
                          5: 7aEwr5jCQ71yDDM1z5QgxzZT-KY.roa (hash: EbipFyNyMO/QLR4UBnR/trLMTxu3kzh57Gr1ht8Dd+U=)
                          6: AXHQCfctIE8qm3CfgJv5m741MvA.roa (hash: lH4T05hC4Vf3bniB6mDX0OL+0fbAvH0yQpklYBKbyMI=)
                          7: AqZiwYxbJJKU6sbeWYL6QjFjjCI.roa (hash: Rp1l+EARGnu+3ML8br5NRV2qxEwQsfw/DKCrRjQMQbQ=)
                          8: BtwXJmGDzOWtfm5BTQTLyiwjUuM.roa (hash: eNIxSFwcUmiPlZbgTFHqO+Ul1U5PmjB2Al77LDuyMtc=)
                          9: D39tyqkHzUar743HSOtaz_PbEVw.roa (hash: 3v479Ukt7ALaWZSOqE7SXtI+6RElyE29evHrm/wKO5s=)
                          10: FZ30BS7c99CQqzoVNy_qf_6mJzg.roa (hash: +/HEuopMgXs1AcyNXLuf5qhJ2S6YVu77GGZUrjSbO5s=)
                          11: KBlKTtNnQaHkk-5YbbbibvBRTkE.roa (hash: pSjaqLIK2LwqQhWseUSzS6Sqy0q3c8S6SmBuHYWrOsU=)
                          12: M97K8l_S4kgf2GjVEHFM5S4eyIw.roa (hash: kcnyR0HYpZty2uhP+gfBAoyu5lobkvGxpr+BmjGMeCs=)
                          13: Mk19CM13YMFH7WXY4rkQd2VVD9M.roa (hash: ocRMjh+08/tYyEQx7PGNN6c6//DGSHJpqiQu69+SvEU=)
                          14: PBJjwWm3FNYmKDKlr11pHLlOrGk.roa (hash: /EDjQB/ySBsTi6pfh4zRjgsPbhtNFWDlr8va/X/KOwc=)
                          15: PQysa0gStaLJL9Thu5PyuDIF7kE.roa (hash: Mwu851ywkPXxaKp83LB3gVtyZ5Xct3QCemCLlVfmoYk=)
                          16: Rcm-VsbVwQTqSxhnX3cfsXYAnys.roa (hash: P7AmNuZa2NBTSOamUQskgJBnuNIbax2MQZYxQdwe/QA=)
                          17: TwzZQrIn09c-90CtvFLCLT3vcWs.roa (hash: uBt9dC+yxyfdnRMBiRH64GG0vCjQQ3KJBUaUSBKn8oI=)
                          18: Uam3fdY-U_8FUcIs9C1Cu9j0kXU.roa (hash: lAwNykQezUevV1G5+PHKNJlIk5Yd8h58FItNjQ6jmrw=)
                          19: VqfndgI1WXWYkkNQ7P51RtzLV7s.roa (hash: Tf8vSneLEZ7pp74+YG36uAKrUxWg7jfHCnPEuoLOpSw=)
                          20: Wwx0ymxnwTUNgGtoQ6bmuG8xi8I.roa (hash: Duif3Xsm8vx9BAQ1DEEh/dpjs1UJXZja4M1PuzJXkHE=)
                          21: XJQW6cjujhEORDl3asfzceRsQq8.roa (hash: YLe1WKPBAxaQWWhGaDY3bNQMSMuaVm8vzXhx0IIMUzM=)
                          22: XT1M1ME1w2GWT-wkJaT2Unr_kG8.roa (hash: 6fvlVJZbvpl7K75DLt8sGvC1abVm/uU97W3kp9Hv4hM=)
                          23: _lamG1HEM7mb6bmsKbHc8nn-fqc.roa (hash: ROvWpEyglQp+R05KL7+1XLdi25nHMs/xhuTfvf2zT2Q=)
                          24: c7cuR8jM5ESCEdKWzn6Siap8SEM.roa (hash: qOyezps75UzBZYkfPtZJrdacsUxG8J2RGpaqwu8N1Ao=)
                          25: ggUHuIPOPPE-89UdjLxjcIyVmr8.roa (hash: l16B+QGa89xf55rT0g5lF4JoYmICgpxoLlxmUHh6Waw=)
                          26: jrRB2tu-y2ll1OofBGzFyOKIF_w.crl (hash: KihUlYraGMPxKBgUqTzhurmM+vvYibFBa7LUg++yGD8=)
                          27: myuHLHpyvIWVo7r4a7BKOY_2D-A.roa (hash: sU21QK+MvKUNd41OSpLJ5a3eezolBlBsLGOTa3oodWk=)
                          28: oASSpW3DbHAVm3j51eaZaxJHZhI.roa (hash: yrEWLwCdNgFCB4MeKY8zqq0fw2GLTP+HZekfTPCwc/g=)
                          29: pc5QkYWJRHSIUT4-aISn1B0ETL0.roa (hash: bGUIoNzoUj7sJpYGAF2W/rabzS0jqmoXnaDeHRq18Tc=)
                          30: q9Fght0eWnwg9L4cOjC-8MWuD_0.roa (hash: DogNwIUzNPICLsbvaitegQlMAv0jPMlhURxKnx1oUnY=)
                          31: roxXwaFrf3KkjRm0sygAv7oGPuc.roa (hash: +XL9L+dok2bHXelVksLQxh9+U/cP9zrebc0SlrcIfKY=)
                          32: s36NnV4BEmNAGVVpW4Q6tZ1SdBs.roa (hash: +o3+HumRoGhYfsOubY4wwqGbFSgOLOFq9cUXdWeku6E=)
                          33: wMyjLOgWza8MLMZCt_GDmRvtb-g.roa (hash: dLOXSzRovdIImBdeUt2cN/TfriVM7Y6eHA/JyGJylMA=)
                          34: x3oHSLWJTj_nRpaxfUL8ie-v564.roa (hash: rcQHEneP9Wl13Ne7TTIzTdgQDNerZYtatjj28AIQOU8=)
                          35: xnbnTYEk6pxTHp3aCupMEEiEuBo.roa (hash: PfXqwnVuJaXTHy1N+55NXgp7CewIcPccfbBMZ0YAVuQ=)
                          36: yYXgfxt8HTsdD3YIDsNR5rGZFng.roa (hash: hznzSNguKbgcPbcq/VbNPpTcerKPJa34QXTAsmwowYg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:6c:57:09:e2:80:7b:f9:cc:33:cb:7b:89:1b:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
        Validity
            Not Before: Dec  6 08:00:42 2025 GMT
            Not After : Dec  7 08:00:42 2025 GMT
        Subject: CN=6b4b6397c7dc96a3fcb5a5b744437715b2e7c5dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:de:08:a0:2b:54:33:bb:cf:fb:21:85:2f:f5:
                    d4:87:60:5e:c2:33:8c:38:d6:8b:74:cf:53:b5:f7:
                    e1:04:5f:94:4f:ec:87:99:8a:d9:ec:3e:b0:8c:e7:
                    37:e3:7d:02:5f:32:f7:af:57:89:41:e7:44:c4:1c:
                    20:20:93:ef:0f:bc:7d:71:cc:44:43:ff:bf:7f:00:
                    25:6a:68:39:f5:9a:2d:6e:28:02:d4:72:a0:67:fe:
                    af:7f:b7:51:a3:ed:c4:6a:48:7a:6b:62:44:bf:76:
                    35:16:0f:6c:d2:b3:8a:5b:40:da:bb:13:68:75:94:
                    60:b7:53:54:8c:f1:5c:f1:f9:ab:1e:4c:52:6f:9e:
                    82:85:78:fe:b8:ae:b9:c3:cc:49:65:2b:93:c6:ad:
                    93:91:a0:36:b3:cd:47:e8:b4:21:9f:54:b7:6c:07:
                    7e:d8:e9:47:c3:86:15:4a:4a:74:61:67:46:b0:ff:
                    dc:ab:97:80:44:23:3a:74:64:44:4f:8d:29:a1:b8:
                    6a:16:29:92:42:a7:ac:22:c4:9e:86:eb:9e:a1:a5:
                    c7:ff:f4:ca:5d:e8:8b:70:dd:9d:cb:29:82:e1:ca:
                    71:5c:ad:94:88:3d:bc:fd:93:12:8e:de:ab:46:9a:
                    77:71:b4:9c:0e:71:97:92:7f:19:b0:ae:0a:7a:36:
                    64:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4B:63:97:C7:DC:96:A3:FC:B5:A5:B7:44:43:77:15:B2:E7:C5:DD
            X509v3 Authority Key Identifier:
                keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:4d:f2:50:82:77:74:bd:1e:1a:95:f3:bf:2a:2d:f7:9e:0e:
         b9:89:2b:66:04:50:0b:c8:37:10:e6:96:be:17:a3:26:c6:4b:
         94:3f:69:03:0a:49:f6:ff:ea:45:ca:2f:15:75:0c:aa:83:10:
         35:27:d4:b8:c9:90:68:f4:ef:34:e4:f9:60:fb:a4:5f:5e:25:
         e2:0f:d4:bc:c0:da:bd:9c:60:35:3a:25:16:55:28:e3:c9:e5:
         c8:3c:83:00:0b:07:db:35:2b:92:ca:38:33:29:c6:10:47:c6:
         8d:ab:f4:6b:2b:2e:7c:38:2c:1b:c5:80:60:7a:39:04:f5:14:
         aa:bd:89:7d:64:64:dd:e0:42:2e:ec:1f:70:9e:fb:26:b1:fa:
         22:4d:93:58:5c:ae:f3:37:3a:1d:f0:de:ee:4d:0d:a5:8e:87:
         d5:25:fe:02:36:8e:33:a9:45:9b:7c:33:b6:e9:70:56:80:24:
         fe:c4:8c:9b:2e:29:11:71:81:b2:46:99:1c:ad:a2:52:bb:50:
         f7:e0:bb:51:cf:04:67:7c:24:7f:07:a8:32:07:57:40:f7:db:
         fb:55:e9:ad:1b:40:62:7e:41:63:1b:dd:43:03:db:22:3b:99:
         51:98:0d:d3:1e:08:c7:14:48:05:14:4f:2b:0e:fb:77:67:fe:
         bc:71:77:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:42:16 2025 by rpki-client