This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
File:                     vP0tpUR9AHYW693Cpw_qxed8Sos.mft (raw, json)
Hash identifier:          BmHbAXhCyfBoJi/fhKUio1RJsJ2kFhOsRzooKXn0DPY=
Subject key identifier:   79:73:27:65:E5:F7:F9:D4:A8:25:0C:53:D5:8D:DD:94:76:66:FD:96
Authority key identifier: BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B
Certificate issuer:       /CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
Certificate serial:       019AF1D2072B14E8238139507C24A63DA747
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
Manifest number:          0FE8
Signing time:             Sat 06 Dec 2025 04:01:04 +0000
Manifest this update:     Sat 06 Dec 2025 04:01:04 +0000
Manifest next update:     Sun 07 Dec 2025 04:01:04 +0000
Files and hashes:         1: 8qm9bEbxwfNKbG7VK6lFr1L7h68.roa (hash: 75uVkQx0ihlVy8p/hI6UBtxjUc4hu50c+jP7jjKtmh4=)
                          2: CwdCUQsFV7CyApTMyt6j3A_OJVA.roa (hash: SME0C7xkpjziLPa0GzpInguFdkdM75z/nCo/zXQqOyk=)
                          3: vP0tpUR9AHYW693Cpw_qxed8Sos.crl (hash: gl9tPIg+jwmu5ag2oUHqMHaZdu8ts4yXvqey/9Gm8Kg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 04:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d2:07:2b:14:e8:23:81:39:50:7c:24:a6:3d:a7:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
        Validity
            Not Before: Dec  6 04:01:04 2025 GMT
            Not After : Dec  7 04:01:04 2025 GMT
        Subject: CN=79732765e5f7f9d4a8250c53d58ddd947666fd96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5f:1a:f4:dd:05:1c:e7:7f:e3:58:3d:db:de:
                    59:c7:05:d0:77:7c:a8:1f:a1:47:d3:70:9f:68:d9:
                    51:14:03:9a:44:2d:c3:ab:68:03:46:68:bb:0d:04:
                    77:d8:a7:4b:c4:ba:ee:3c:3f:9f:41:f6:60:05:45:
                    c8:6d:09:09:86:e2:1e:7c:66:f8:24:03:58:bb:66:
                    12:bf:63:4a:68:83:68:6a:49:e5:b9:43:02:72:99:
                    ad:ed:c3:f9:4f:e5:dd:24:aa:c2:f5:33:be:e1:b5:
                    8d:b9:b5:42:8a:d6:cc:93:e6:6c:00:b5:1c:7a:e6:
                    87:c5:04:e7:ba:d2:8b:03:74:cd:ff:f0:6c:60:9c:
                    fd:2b:69:ae:40:b7:c3:f0:7b:3f:7d:8d:2e:3d:37:
                    17:20:44:31:56:7f:92:aa:bd:13:e5:4e:27:c8:b6:
                    1c:18:82:24:8a:5e:67:da:52:e2:b1:e6:3b:00:b0:
                    88:7f:71:cb:09:9d:8a:4a:96:8e:e5:05:29:06:92:
                    58:53:cb:0e:23:b9:54:0e:01:04:8a:c4:f7:a6:d5:
                    86:2c:5c:6c:78:85:d0:68:4a:9e:f0:54:f7:e2:5e:
                    8d:8d:72:a6:38:5b:c1:3a:de:b7:89:26:51:d6:d8:
                    d8:73:89:24:3e:dc:4c:a4:c7:be:b2:b7:73:03:2d:
                    82:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:73:27:65:E5:F7:F9:D4:A8:25:0C:53:D5:8D:DD:94:76:66:FD:96
            X509v3 Authority Key Identifier:
                keyid:BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:45:20:1a:67:51:ae:da:a8:17:cb:56:07:c4:32:37:b4:49:
         56:22:69:b5:31:8a:57:88:92:f0:9e:26:04:5c:12:c9:7e:7b:
         8d:7c:db:f5:da:40:79:9e:f4:11:88:17:f5:b4:77:fc:8c:1a:
         24:9e:92:f7:5d:ea:7c:2e:e6:13:50:ee:ae:7e:ee:85:22:a4:
         fa:37:58:ce:1d:be:c7:46:37:88:42:05:c5:30:c4:cb:29:d1:
         fa:89:92:71:3c:63:af:5b:3f:4f:2e:9d:a9:e0:58:b5:8b:45:
         da:b8:02:dc:78:88:a7:0b:95:60:cf:dd:d2:fe:c8:9b:e3:ca:
         8d:12:d5:fb:c6:7b:a3:1a:19:86:fd:33:9a:a8:e9:71:3b:47:
         28:6e:f3:1b:c3:c9:1b:d7:4e:e6:46:7a:d2:f0:7b:af:7d:34:
         ad:d4:e8:0f:0b:31:34:43:f1:b4:c4:6f:76:2a:ed:83:8f:07:
         57:18:4e:14:1b:b8:3c:56:18:50:9b:86:e4:63:7a:7f:fe:40:
         46:93:1d:fc:2d:bb:48:b0:ab:49:e4:2b:9e:fc:f4:47:1c:e2:
         dc:ae:79:fc:f1:f0:10:46:7d:8d:87:12:f8:da:d0:b5:ac:4c:
         81:78:2d:c7:7e:3f:48:f1:29:ad:da:10:fe:4c:45:67:ca:37:
         a0:73:b6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:03:52 2025 by rpki-client