This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
File:                     vZctRCdupBAu9q7TDyrljpmz51E.mft (raw, json)
Hash identifier:          8Cfm79u/FfmMePRiTziLWfJt/0gS0/a6YK2Ns0SO0Vk=
Subject key identifier:   C3:E0:F5:CB:0F:A1:3E:B9:34:EB:18:A5:30:1D:B8:63:2D:A6:7F:F0
Authority key identifier: BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
Certificate issuer:       /CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Certificate serial:       019AF088834DCE364789074ACECAD1DF3DAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
Manifest number:          1762
Signing time:             Fri 05 Dec 2025 22:01:09 +0000
Manifest this update:     Fri 05 Dec 2025 22:01:09 +0000
Manifest next update:     Sat 06 Dec 2025 22:01:09 +0000
Files and hashes:         1: lTr_UVi_A79a3K8ej8EhTQ-s56o.asa (hash: Kis6ukaDSScAbBexiq/JiDaCOANQ9hpiW6hUa9xiV5s=)
                          2: vZctRCdupBAu9q7TDyrljpmz51E.crl (hash: 92uagKIK5Ebm+Y+o/NzjLAJErrb2y9brXJedQnZUuGc=)
                          3: znul8D-ksNRhN2Cclb1d9oAN3m4.roa (hash: e1Z/F5VmaFQnbIQzB91uNx60SZ0/+TW0LayKFelguZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 22:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:88:83:4d:ce:36:47:89:07:4a:ce:ca:d1:df:3d:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
        Validity
            Not Before: Dec  5 22:01:09 2025 GMT
            Not After : Dec  6 22:01:09 2025 GMT
        Subject: CN=c3e0f5cb0fa13eb934eb18a5301db8632da67ff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:f3:35:58:84:89:c8:89:30:8d:c2:db:0f:4c:
                    27:40:40:19:d2:63:2b:f8:09:e2:2a:90:44:b5:3f:
                    3b:b0:78:a8:59:80:2f:e7:be:a6:83:c0:84:8d:84:
                    f9:7a:b0:c0:26:0d:61:dc:07:82:a8:e0:e8:f2:94:
                    6f:42:ec:14:a0:69:56:5d:42:eb:be:9d:d8:d9:ce:
                    30:16:ab:44:28:a4:c7:12:51:21:e0:5e:f6:79:69:
                    d0:46:0b:81:96:0c:bf:0b:5e:c2:9c:96:53:c2:65:
                    f8:0a:ee:1d:e9:9c:60:43:aa:bc:30:92:91:9c:ed:
                    fb:ae:4c:9a:4d:53:54:93:b6:2f:0c:29:38:e6:61:
                    b9:05:22:b7:64:a2:98:fd:2b:88:57:5a:75:e8:b8:
                    db:df:54:c6:b7:cc:58:62:73:f8:8c:6a:95:60:95:
                    41:c7:42:d1:3d:0e:a4:a5:55:38:63:b8:c2:2a:26:
                    72:9c:60:a7:04:38:94:c3:a0:cf:c5:4b:44:b3:53:
                    5a:b8:d2:b4:f5:51:61:97:b4:2f:4b:a6:5c:9b:8c:
                    7f:de:d6:b4:7b:2c:bb:c7:f6:95:7f:fa:df:7b:2c:
                    77:16:8d:8a:28:e4:1f:88:0e:1f:57:8f:1c:67:ef:
                    18:a4:7d:b5:40:03:17:61:8b:c8:d7:a6:53:e9:e6:
                    9d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E0:F5:CB:0F:A1:3E:B9:34:EB:18:A5:30:1D:B8:63:2D:A6:7F:F0
            X509v3 Authority Key Identifier:
                keyid:BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:34:ab:96:ba:fb:e6:7a:b7:30:ab:69:2b:e5:72:55:b4:d6:
         f9:1c:08:ee:bc:e9:8d:a4:90:5c:3a:14:d7:23:ab:e0:19:d1:
         2a:70:db:c5:ad:e0:f0:c9:37:06:18:e5:34:ae:de:04:5b:e6:
         ae:69:b1:74:fc:fb:33:7d:88:16:f0:42:de:ac:30:3f:35:f1:
         18:0f:ae:7a:fa:f1:11:47:5c:b3:c1:b7:c7:d3:ae:4e:86:db:
         af:6f:24:4b:f9:08:c7:91:c1:96:cb:f6:e4:98:19:32:b7:5f:
         28:9a:35:09:8e:8e:e4:ca:75:fc:a7:5c:ac:4e:43:ca:56:54:
         3b:21:75:1f:53:ba:ce:e8:f3:e0:6e:69:d9:1c:80:3b:35:d5:
         a4:e3:ba:0f:1c:78:6a:b0:52:66:e7:7b:ad:4a:68:cc:1a:e6:
         1b:59:b9:03:e2:bc:f2:82:a3:6f:aa:10:06:54:d9:c5:1f:eb:
         16:b1:af:ad:19:6e:35:2f:f7:37:96:cd:38:90:b6:29:a9:e0:
         c2:10:f2:88:04:3b:d5:75:bd:b2:16:bd:e7:fb:c8:09:5d:8a:
         97:44:60:f0:7d:59:29:a8:09:f8:5f:3a:f8:c7:f5:63:42:77:
         b0:f5:8a:a0:8b:6e:38:d4:71:d4:7c:8a:27:cf:1b:1e:fb:05:
         0b:79:7f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:40:15 2025 by rpki-client