This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft
File:                     V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft (raw, json)
Hash identifier:          NlgpXKeOKfv85RSEVfF7Xq/FzgZdDGcCBMnPAJ4KJtM=
Subject key identifier:   DD:F6:8B:EC:44:1C:FB:63:82:F7:9A:7A:28:C8:FD:6F:4A:F1:71:28
Authority key identifier: 57:C5:A7:6F:28:B7:1E:A8:DB:F9:99:AB:AA:B7:A6:59:83:9A:C1:82
Certificate issuer:       /CN=57c5a76f28b71ea8dbf999abaab7a659839ac182
Certificate serial:       019AF3F735448C61D680BE88E55EB15EE3BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft
Manifest number:          10F4
Signing time:             Sat 06 Dec 2025 14:00:55 +0000
Manifest this update:     Sat 06 Dec 2025 14:00:55 +0000
Manifest next update:     Sun 07 Dec 2025 14:00:55 +0000
Files and hashes:         1: 7mW3WjVVw9eGN8jbjHf3-to5ckg.roa (hash: mgTvCDtWlsTF65gNfXMneOYsagkRwGQqVAdRKNVR7wE=)
                          2: V8Wnbyi3Hqjb-ZmrqremWYOawYI.crl (hash: o+VipWVk5STGYa2eIwSR7zBfbfYEkN0aXKfIxG328V8=)
                          3: opZuDmDWQL5ca_7w2GLyUTRdL5E.roa (hash: icGuPqMDdyClVp/nHf/m0TN12+gflYp9hAwPQL0ezMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:f7:35:44:8c:61:d6:80:be:88:e5:5e:b1:5e:e3:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57c5a76f28b71ea8dbf999abaab7a659839ac182
        Validity
            Not Before: Dec  6 14:00:55 2025 GMT
            Not After : Dec  7 14:00:55 2025 GMT
        Subject: CN=ddf68bec441cfb6382f79a7a28c8fd6f4af17128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:96:7c:e5:c7:0f:4f:ee:c9:e3:be:08:6d:fd:
                    2d:54:4b:22:01:64:ab:d3:5d:3f:a7:92:6c:80:1f:
                    1a:bb:a3:34:23:48:40:fb:58:08:63:ff:e3:ce:be:
                    37:07:76:e6:09:64:ff:0d:c1:9f:e8:ed:86:cc:55:
                    e1:9c:f0:5e:66:75:dd:a3:96:c0:db:a6:95:bf:5b:
                    cc:f0:f0:11:b5:5c:31:2a:ef:7c:5c:ba:65:87:f6:
                    30:10:2a:a6:3d:d9:9f:40:f2:c2:d5:b2:b5:af:8f:
                    5e:1e:ef:b9:e5:dd:b4:f3:91:80:df:e6:e5:99:c4:
                    7c:0a:25:70:ac:30:02:e7:f0:03:8f:f9:4d:86:b1:
                    d2:1b:3c:10:8b:29:7a:4d:04:c3:71:f6:25:0c:54:
                    5e:b6:ba:61:ff:c1:49:ac:ef:ad:67:e6:31:e1:b7:
                    d6:18:98:a5:07:d0:35:b2:33:07:53:1f:4a:f6:df:
                    90:49:2d:81:8e:64:60:fa:2a:23:d5:77:e0:dd:da:
                    32:71:b0:11:15:b5:1c:91:fd:e5:06:c2:21:4e:8b:
                    f6:28:55:d9:93:51:80:c6:fe:4c:11:86:c9:ba:34:
                    bb:04:61:9a:43:cf:a0:12:53:73:46:9a:9e:16:03:
                    dd:02:55:01:e4:7e:11:f7:5d:68:ec:d9:8f:92:03:
                    74:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F6:8B:EC:44:1C:FB:63:82:F7:9A:7A:28:C8:FD:6F:4A:F1:71:28
            X509v3 Authority Key Identifier:
                keyid:57:C5:A7:6F:28:B7:1E:A8:DB:F9:99:AB:AA:B7:A6:59:83:9A:C1:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:c1:a7:7a:43:23:05:cc:e4:f4:25:0a:87:f3:20:36:59:bb:
         8d:ce:3d:5a:46:b4:25:09:61:bb:c9:a8:0b:18:e9:e8:9e:c6:
         10:8f:c6:22:81:67:df:6e:ac:0f:7a:4d:23:fa:b7:d8:b1:7a:
         ed:6b:f6:c0:55:69:ec:86:2f:26:ef:b8:80:22:7a:9c:da:2b:
         05:79:2f:a7:88:d3:dd:27:e1:82:fe:56:96:67:84:8e:4d:5d:
         f1:f1:58:c2:b2:10:ff:49:99:b2:e1:d8:a8:f9:d3:b0:52:64:
         7f:42:bc:3b:f1:74:39:d0:20:ef:ea:89:a8:68:d9:b4:9d:f2:
         77:8e:2f:d4:fe:79:ba:31:a4:86:4f:f2:92:04:d0:cf:50:05:
         b3:dd:71:bc:dd:e3:7f:62:f5:4d:39:3c:06:47:01:f5:e4:8e:
         85:c8:28:f2:80:eb:96:54:ff:c1:44:fd:77:15:a7:92:db:00:
         0a:d2:fc:91:f1:cb:a9:3e:a3:61:b5:77:37:76:b2:c0:37:6f:
         b4:6f:16:fd:2c:09:21:2e:d3:86:71:84:84:78:b7:2a:dc:cb:
         96:e3:f0:5a:e5:0d:26:f5:20:37:9d:88:44:45:38:84:e9:40:
         2e:f6:c9:5a:49:81:f4:05:ce:aa:73:bd:96:67:36:b0:2d:3e:
         81:5e:ac:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:13:47 2025 by rpki-client