This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
File:                     vJ8LmsHVZS89yh7xYjv5mrKWR98.mft (raw, json)
Hash identifier:          kq2tS34kHDz8KNQbaowtCFUnHzG+mRGkzeo0emlRMdc=
Subject key identifier:   EA:DB:4B:DE:68:3B:C2:0D:E5:B6:1B:53:E7:24:0B:04:0A:33:85:36
Authority key identifier: BC:9F:0B:9A:C1:D5:65:2F:3D:CA:1E:F1:62:3B:F9:9A:B2:96:47:DF
Certificate issuer:       /CN=bc9f0b9ac1d5652f3dca1ef1623bf99ab29647df
Certificate serial:       019AF2402137971AE3E3924375E0DAB2085A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
Manifest number:          1763
Signing time:             Sat 06 Dec 2025 06:01:20 +0000
Manifest this update:     Sat 06 Dec 2025 06:01:20 +0000
Manifest next update:     Sun 07 Dec 2025 06:01:20 +0000
Files and hashes:         1: FrLoQw9Tk2q53G3qePuE3CPqiJw.roa (hash: w3xxWOqtTqCnhtgzBMiz0Hnx9M0t8vYZOEOxsv+EFns=)
                          2: XuWyQ_h13oHMYelX1eEehMBE4QM.roa (hash: 55GFOmkogCsmTmcypUyvrH3xFalGu40zdpw3o3u8qPY=)
                          3: vJ8LmsHVZS89yh7xYjv5mrKWR98.crl (hash: tza7lg/CcobFwOI06SLg9Lj3TkCIAALx8OzxEubwqQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:40:21:37:97:1a:e3:e3:92:43:75:e0:da:b2:08:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc9f0b9ac1d5652f3dca1ef1623bf99ab29647df
        Validity
            Not Before: Dec  6 06:01:20 2025 GMT
            Not After : Dec  7 06:01:20 2025 GMT
        Subject: CN=eadb4bde683bc20de5b61b53e7240b040a338536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ee:79:a3:d4:6f:39:22:68:9a:21:b1:dc:33:
                    da:cd:16:e6:bf:9a:1d:f6:91:34:e6:9a:df:f4:c1:
                    0b:e4:f2:b8:69:5e:e8:74:10:f0:2b:57:e0:0c:ff:
                    b8:ae:1d:39:2c:55:c1:09:c0:77:9d:20:1c:81:ee:
                    a3:25:cb:81:d3:80:a4:77:83:26:f0:b0:7b:01:01:
                    52:b6:14:b0:d3:09:7c:d1:fd:77:b1:3e:32:6d:fc:
                    e0:39:f8:de:98:f7:52:9d:6e:65:68:bc:1d:21:11:
                    89:f8:42:b0:08:6a:ed:bd:63:28:02:16:20:18:40:
                    89:fc:75:ef:3d:79:cf:0a:ec:5c:8c:a7:5d:be:62:
                    2c:c4:0c:e0:3d:2a:79:c5:d9:95:a8:93:bc:a4:bb:
                    2e:7a:bd:98:25:b6:94:1f:97:2f:64:b9:0b:c6:2b:
                    99:32:35:1d:14:8c:25:b8:28:de:d4:d7:67:c9:43:
                    ee:b5:1a:1e:62:3c:71:2e:71:af:2f:c9:bd:c1:f4:
                    cb:f4:f2:b8:3d:ab:ba:35:98:86:0d:57:51:5e:1c:
                    6a:22:45:15:53:59:1a:1a:39:66:e4:68:63:05:28:
                    35:31:fe:15:21:8c:99:ca:d9:a8:d5:e2:f7:94:43:
                    65:03:12:79:3d:16:f6:d1:f4:86:5c:ca:b5:a4:3b:
                    de:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DB:4B:DE:68:3B:C2:0D:E5:B6:1B:53:E7:24:0B:04:0A:33:85:36
            X509v3 Authority Key Identifier:
                keyid:BC:9F:0B:9A:C1:D5:65:2F:3D:CA:1E:F1:62:3B:F9:9A:B2:96:47:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:eb:d1:a6:80:04:9a:56:97:63:58:7a:3c:c6:9d:7b:69:10:
         a2:6e:d6:e4:05:65:82:52:4e:03:2d:28:7d:68:31:de:6e:11:
         84:1b:a1:1f:97:d3:cb:ca:c7:33:d9:f3:12:8a:00:6d:b6:5f:
         05:6d:6b:e8:a2:99:9b:d1:f1:8f:17:25:88:f7:07:ff:1a:00:
         61:43:5d:e4:61:9b:ec:92:33:bb:69:e0:b0:d5:2d:b2:38:e6:
         8b:4e:30:84:e8:75:32:8d:58:c8:2b:98:d8:68:a6:c7:dc:a9:
         4d:21:0c:1a:60:7e:46:51:17:cc:7f:7e:8b:47:3c:94:6f:f4:
         21:a4:49:89:c7:db:db:77:f1:9a:09:1e:89:66:4c:f9:ae:54:
         ff:0d:f8:d4:ca:73:ed:d1:e7:90:41:37:d0:ea:d8:cd:67:b7:
         55:7e:41:2c:42:57:73:1e:58:9b:8f:c7:32:21:dc:6e:bf:49:
         80:ef:4b:35:6c:80:72:c4:4a:ed:e3:ca:f8:99:0f:7b:3d:02:
         cb:a4:30:70:bb:73:e3:5a:fa:99:ac:0a:da:a5:f0:1d:ce:08:
         20:72:25:c0:95:32:19:63:89:8f:1e:2d:98:88:19:15:33:a5:
         fa:ac:66:b8:f5:28:e0:6e:4b:66:36:13:38:ec:f0:c7:5b:8c:
         9d:dc:44:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryQCE3lxrj45JDdeDasghaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOWYwYjlhYzFkNTY1MmYzZGNhMWVmMTYyM2JmOTlhYjI5
NjQ3ZGYwHhcNMjUxMjA2MDYwMTIwWhcNMjUxMjA3MDYwMTIwWjAzMTEwLwYDVQQD
EyhlYWRiNGJkZTY4M2JjMjBkZTViNjFiNTNlNzI0MGIwNDBhMzM4NTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO55o9RvOSJomiGx3DPazRbmv5od
9pE05prf9MEL5PK4aV7odBDwK1fgDP+4rh05LFXBCcB3nSAcge6jJcuB04Ckd4Mm
8LB7AQFSthSw0wl80f13sT4ybfzgOfjemPdSnW5laLwdIRGJ+EKwCGrtvWMoAhYg
GECJ/HXvPXnPCuxcjKddvmIsxAzgPSp5xdmVqJO8pLsuer2YJbaUH5cvZLkLxiuZ
MjUdFIwluCje1NdnyUPutRoeYjxxLnGvL8m9wfTL9PK4Pau6NZiGDVdRXhxqIkUV
U1kaGjlm5GhjBSg1Mf4VIYyZytmo1eL3lENlAxJ5PRb20fSGXMq1pDvewwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOrbS95oO8IN5bYbU+ckCwQKM4U2MB8GA1UdIwQY
MBaAFLyfC5rB1WUvPcoe8WI7+ZqylkffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdko4TG1zSFZaUzg5eWg3eFlqdjVtcktXUjk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80OTkyYjYtZmRhZS00YzlmLWJmM2Ut
OTVjODk0MmRmNzI0LzEvdko4TG1zSFZaUzg5eWg3eFlqdjVtcktXUjk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS80OTkyYjYtZmRhZS00YzlmLWJmM2UtOTVjODk0MmRmNzI0
LzEvdko4TG1zSFZaUzg5eWg3eFlqdjVtcktXUjk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAROvRpoAE
mlaXY1h6PMade2kQom7W5AVlglJOAy0ofWgx3m4RhBuhH5fTy8rHM9nzEooAbbZf
BW1r6KKZm9HxjxcliPcH/xoAYUNd5GGb7JIzu2ngsNUtsjjmi04whOh1Mo1YyCuY
2Gimx9ypTSEMGmB+RlEXzH9+i0c8lG/0IaRJicfb23fxmgkeiWZM+a5U/w341Mpz
7dHnkEE30OrYzWe3VX5BLEJXcx5Ym4/HMiHcbr9JgO9LNWyAcsRK7ePK+JkPez0C
y6QwcLtz41r6mawK2qXwHc4IIHIlwJUyGWOJjx4tmIgZFTOl+qxmuPUo4G5LZjYT
OOzwx1uMndxEOg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:06:22 2025 by rpki-client