This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
File:                     vJxAXxQuU-tnscSZI6t5XoQyjJs.mft (raw, json)
Hash identifier:          hbz/Jm3Qw4BxV+w7FD3y+P5NknhA6TnLMAXkjjnR5/g=
Subject key identifier:   04:CF:9B:4B:06:81:A6:86:C6:6B:C5:48:CF:5A:E9:E0:16:76:E2:F7
Authority key identifier: BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B
Certificate issuer:       /CN=bc9c405f142e53eb67b1c49923ab795e84328c9b
Certificate serial:       019B27774407ECF10522602E7CD4C3B1C232
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
Manifest number:          177C
Signing time:             Tue 16 Dec 2025 14:01:26 +0000
Manifest this update:     Tue 16 Dec 2025 14:01:26 +0000
Manifest next update:     Wed 17 Dec 2025 14:01:26 +0000
Files and hashes:         1: irXjb7CbWugP3w5JDOFWDswYhlc.roa (hash: xfc5cfeM1faq3Raf49DNOnepZD3IOLsHNfYtcKklaZE=)
                          2: vJxAXxQuU-tnscSZI6t5XoQyjJs.crl (hash: LdevyhVKMPGFr3g3JICAKRAF/H2UcowwxIw6W+0xjX4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 14:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:27:77:44:07:ec:f1:05:22:60:2e:7c:d4:c3:b1:c2:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc9c405f142e53eb67b1c49923ab795e84328c9b
        Validity
            Not Before: Dec 16 14:01:26 2025 GMT
            Not After : Dec 17 14:01:26 2025 GMT
        Subject: CN=04cf9b4b0681a686c66bc548cf5ae9e01676e2f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:39:71:ea:06:26:dc:20:ee:30:8e:7e:63:b1:
                    c8:8d:8d:5a:10:d7:db:37:65:61:27:62:13:e3:8f:
                    f0:55:bd:70:55:1a:27:ca:b0:6f:6c:0a:95:25:42:
                    b1:34:0b:a1:18:44:58:63:ee:aa:c0:79:6b:97:99:
                    2c:23:92:e1:89:7d:88:a2:80:8c:78:af:f2:96:65:
                    af:5b:4f:e1:85:1a:43:1c:4d:ff:f8:dc:86:c2:f5:
                    61:ad:b6:e8:29:64:0a:36:3d:f5:6c:a2:35:04:c2:
                    46:bf:fe:3e:14:9b:c0:a8:54:12:92:bc:20:45:35:
                    4b:10:ef:23:36:cc:67:a3:66:e1:a7:0b:52:b4:bc:
                    04:47:ec:86:9c:99:20:74:4b:50:8b:43:49:10:ee:
                    b9:90:58:db:7c:24:6c:8a:3b:05:61:e1:10:28:7d:
                    53:cb:97:52:21:41:d1:52:5e:70:7b:16:94:d6:67:
                    af:7f:e5:c5:64:c9:23:74:ba:52:1f:5b:7d:a2:f9:
                    37:92:6d:7d:53:4e:c5:b0:17:60:80:f8:32:1e:f6:
                    79:f4:9b:71:5f:0f:53:1b:65:cd:86:44:9f:63:fb:
                    f6:08:6d:58:e1:bb:79:40:30:a1:2f:17:bb:c0:f5:
                    67:35:17:57:c6:a4:df:34:09:89:5b:e5:5b:30:a8:
                    ea:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:CF:9B:4B:06:81:A6:86:C6:6B:C5:48:CF:5A:E9:E0:16:76:E2:F7
            X509v3 Authority Key Identifier:
                keyid:BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:ca:be:a5:4d:eb:cd:b8:5e:a3:0e:cd:39:e2:8b:2b:da:b8:
         47:b9:11:c9:4b:61:96:ef:70:d0:c8:60:d1:54:e6:38:fd:da:
         9c:03:f7:4f:75:94:55:65:92:20:9e:6e:39:95:be:58:7e:ef:
         c9:56:38:2b:07:20:97:2d:e3:ef:13:e4:51:10:a2:ef:53:8d:
         bf:92:5a:88:1d:9f:4a:15:47:5e:ae:54:0c:ee:48:33:62:49:
         5e:c1:85:68:7a:eb:a2:da:ee:1e:89:61:8b:b3:50:a3:0b:2b:
         70:e2:37:7f:1c:44:f7:61:dc:85:1b:fe:51:75:c7:79:7f:b7:
         73:11:a7:ef:41:61:99:48:53:62:30:7a:df:74:4e:47:4a:20:
         13:e8:56:f9:c1:3a:5e:e0:09:9d:42:21:cf:ad:0d:0c:5e:59:
         77:2a:02:0a:2a:67:12:f8:6a:5b:cb:92:91:6b:75:37:f1:96:
         9b:e7:9d:66:15:1f:37:6d:98:b5:89:98:a9:ff:6c:3a:65:bd:
         ff:15:65:2c:04:2d:5f:f1:8d:7b:63:e1:23:49:e7:be:a6:7a:
         9b:91:9e:13:7c:93:ea:da:37:ec:f4:b8:e7:c2:9f:93:13:bf:
         ed:c9:64:a3:b6:90:fa:92:0f:45:64:31:a0:ee:26:f0:d0:05:
         61:5b:9f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 19:11:46 2025 by rpki-client