This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
File:                     Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft (raw, json)
Hash identifier:          pw3KavAIgc0yhL9LjjWN3ep/mpkVqcHXowGKgjDRyII=
Subject key identifier:   3A:4B:51:04:16:FF:D5:83:1F:1B:B8:98:60:35:37:43:0F:29:DE:E0
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Certificate issuer:       /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial:       019AF23FE68F87B7A581A9FE206D7E12223A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
Manifest number:          1795
Signing time:             Sat 06 Dec 2025 06:01:05 +0000
Manifest this update:     Sat 06 Dec 2025 06:01:05 +0000
Manifest next update:     Sun 07 Dec 2025 06:01:05 +0000
Files and hashes:         1: 1-ezSRolehonzd7m4Tnnd0luM6m8.roa (hash: On/fPJ39Z5Xcbn6zLcHyJUdx0s6S7SIPAdEzMQoJ3XQ=)
                          2: 108BiaBt5OdPpJMqalaqOeNV69I.roa (hash: cjOLOxh24OsIAnTQULMJay2aUelwjlre1sYAhylQyv4=)
                          3: 7Qe59yEW7U7chp45wrlrOOBrcpk.roa (hash: Md3Sf2aP3zQKSv1JAQBFfYI5IElvnInpSGp9RK9f30s=)
                          4: 9nLBkii6i9kqzksN6JMZwCrzYV4.roa (hash: qHoR8g3sPS0H1p08Rknlh5VjMVgipRCKDg0svuFgx6s=)
                          5: BhZvXc2lnsh5uqYjh3zsVqW7yLs.roa (hash: mydo0BfsTsL08Otk+t8zOQ+cbdabxk/K36L8MDg8etE=)
                          6: FXwS1usM9Gw8btRI8PnsNDkj9_4.roa (hash: FQ76n5rBG3AqlfwNPRTLnoowtLaTPVNfG35bOGyU4Fo=)
                          7: OzRFfGtYydKtloUFGibUfBCyMDw.roa (hash: cWKDKlEnWPEyIjxNhIulWdfjuX7dn5MJ4+8rywovQak=)
                          8: PQXaxHl_x5hCLUsVIoHDCNRTgCQ.roa (hash: 92Bl42I20RnqTYIC6hXMCEhevLacaiZKxk7OT2RhVWs=)
                          9: V9BWXIygnOhJHYu8bdQZRzbbGqg.roa (hash: re8sSZ6coeyXhQek/2jPbAPj3KlkVxVW/0zknsrcySY=)
                          10: VYwvZ9OHIlRbhHXyXxBLwaXS8K8.roa (hash: dnJzWIPR+2RTl2ECqdSA76Gag1tIQoNuzSSgRCHhVCA=)
                          11: Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl (hash: 625dYrnX6QE6JqAE2TDwwn50YcnY93K03zwSwJZitiY=)
                          12: YfK2aOb88mXpBxncnyZwMMazaP0.roa (hash: hVpx7JF9g3hoT3mWsCzEbNroYXChIrskLkYxhbCkK+c=)
                          13: gWHF_rALnCC6aWL25OOLXmaYWd4.roa (hash: MNZsV6aY4RN1u/cCPIru0uGzTZOf4K/o0suBsxP2p4c=)
                          14: k5Aqa-da4KH0XLB24n43hX_ycfY.roa (hash: W7GIeml4QidNLEYcrSPcEhMsiifqshzVO/aRAhmqOJQ=)
                          15: nyEYNc_PtO4QoUwC3iOyBCPk0wQ.roa (hash: hp68ljnGn6WBzjjiaJx9jN9FM7xYYm0YWSh0AzIw1fY=)
                          16: o0SifTx2NU1sEhX0Vll10hyck8c.roa (hash: CTAgGKzxE8Fx3onDLMa7P2lInOfEaEKTgjP3A/rkyEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:e6:8f:87:b7:a5:81:a9:fe:20:6d:7e:12:22:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
        Validity
            Not Before: Dec  6 06:01:05 2025 GMT
            Not After : Dec  7 06:01:05 2025 GMT
        Subject: CN=3a4b510416ffd5831f1bb898603537430f29dee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:98:e1:ef:5f:5b:ac:bf:d9:6a:73:ce:c7:40:
                    4c:1b:73:31:bc:38:dc:13:e7:88:3a:34:c9:1d:73:
                    d4:90:20:b0:c7:62:66:ea:2b:0a:6b:e2:a7:df:89:
                    7b:53:8f:fd:31:1d:d3:27:0d:ec:49:9d:e7:4a:03:
                    66:bf:c4:c4:a3:99:2d:94:56:cd:18:01:f1:06:8f:
                    86:32:76:ac:c4:93:3c:0b:a7:42:55:f7:ba:5e:5e:
                    d4:d5:01:b5:95:8c:0c:6c:0d:36:5a:96:a4:74:d0:
                    bb:85:94:c2:d3:ea:be:e6:6d:a5:56:f6:97:6d:fc:
                    4e:b1:98:28:62:e6:1d:1e:bd:e6:72:d3:d9:30:3c:
                    fc:d7:6d:2d:e7:56:de:9a:6b:4d:61:57:cf:58:16:
                    15:84:f3:09:a2:9e:84:ed:ab:35:19:e8:cb:1b:ea:
                    f3:db:c4:9e:51:d0:e1:7f:68:06:d8:25:58:53:b5:
                    c5:49:65:11:b6:a1:4a:14:a2:d5:dd:24:99:59:05:
                    5e:68:bb:6e:3a:fe:45:a9:64:fc:93:51:85:26:e7:
                    ee:06:06:c1:dc:19:6b:6e:f1:df:38:5a:5c:ee:cd:
                    9e:fd:f0:f8:88:d4:04:40:93:e5:bc:bc:77:8c:c5:
                    1a:c2:5b:72:ab:36:b0:87:dc:fe:dc:2d:64:77:b0:
                    25:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:4B:51:04:16:FF:D5:83:1F:1B:B8:98:60:35:37:43:0F:29:DE:E0
            X509v3 Authority Key Identifier:
                keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:03:34:7b:16:ae:94:bd:12:72:e1:80:57:80:9e:67:82:dc:
         d9:a6:10:14:9b:47:fa:91:39:ad:c9:39:60:08:ed:5d:fc:01:
         d4:b1:81:69:ab:a8:b5:e0:63:8b:27:b8:80:b6:1d:ea:0d:01:
         f2:81:4e:a2:c0:ee:55:7b:87:b8:f5:0a:b0:0f:97:ab:25:5f:
         a3:9b:3c:14:74:cc:04:f4:55:bb:52:66:e4:57:4e:04:c0:44:
         6b:7e:98:79:d1:76:4b:64:d6:b7:c6:50:ae:f2:57:0e:8e:68:
         da:9d:1a:fa:58:70:bd:32:f9:df:fa:c8:b8:16:b9:3e:a8:e7:
         6a:a6:e9:0f:f9:41:44:e7:4d:a2:67:79:95:d4:9f:90:3d:d9:
         d5:13:41:b7:78:71:a7:09:99:fa:4a:bf:f4:11:06:9d:41:96:
         61:54:78:d9:48:48:3c:a3:f2:52:6d:1e:09:41:a9:8f:54:60:
         db:da:5e:0e:1b:76:e6:aa:2b:39:bc:e6:c1:ee:e0:55:52:70:
         e7:06:66:b3:70:ad:c4:7f:04:1c:1e:59:34:1c:b5:8a:ce:6b:
         a5:fe:b7:d7:87:c5:a9:32:bb:79:1f:db:bf:82:51:ee:10:e8:
         d9:84:3b:d2:1f:d5:1d:ad:d8:ad:ef:35:0e:f1:41:cc:8d:b2:
         49:fe:d3:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryP+aPh7elgan+IG1+EiI6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MTgyYWFiNWFkOWVmYTM4MGE2YzZmMDZjMDE2ZTE1OGJl
OTc3YmMwHhcNMjUxMjA2MDYwMTA1WhcNMjUxMjA3MDYwMTA1WjAzMTEwLwYDVQQD
EygzYTRiNTEwNDE2ZmZkNTgzMWYxYmI4OTg2MDM1Mzc0MzBmMjlkZWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJjh719brL/ZanPOx0BMG3MxvDjc
E+eIOjTJHXPUkCCwx2Jm6isKa+Kn34l7U4/9MR3TJw3sSZ3nSgNmv8TEo5ktlFbN
GAHxBo+GMnasxJM8C6dCVfe6Xl7U1QG1lYwMbA02WpakdNC7hZTC0+q+5m2lVvaX
bfxOsZgoYuYdHr3mctPZMDz8120t51bemmtNYVfPWBYVhPMJop6E7as1GejLG+rz
28SeUdDhf2gG2CVYU7XFSWURtqFKFKLV3SSZWQVeaLtuOv5FqWT8k1GFJufuBgbB
3BlrbvHfOFpc7s2e/fD4iNQEQJPlvLx3jMUawltyqzawh9z+3C1kd7AloQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpLUQQW/9WDHxu4mGA1N0MPKd7gMB8GA1UdIwQY
MBaAFFcYKqta2e+jgKbG8GwBbhWL6Xe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84YzUxY2ItYTNiZC00NzZkLTg4MGYt
YTk2YzYyNjZhYmRiLzEvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni84YzUxY2ItYTNiZC00NzZkLTg4MGYtYTk2YzYyNjZhYmRi
LzEvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwM0exau
lL0ScuGAV4CeZ4Lc2aYQFJtH+pE5rck5YAjtXfwB1LGBaauoteBjiye4gLYd6g0B
8oFOosDuVXuHuPUKsA+XqyVfo5s8FHTMBPRVu1Jm5FdOBMBEa36YedF2S2TWt8ZQ
rvJXDo5o2p0a+lhwvTL53/rIuBa5PqjnaqbpD/lBROdNomd5ldSfkD3Z1RNBt3hx
pwmZ+kq/9BEGnUGWYVR42UhIPKPyUm0eCUGpj1Rg29peDht25qorObzmwe7gVVJw
5wZms3CtxH8EHB5ZNBy1is5rpf6314fFqTK7eR/bv4JR7hDo2YQ70h/VHa3Yre81
DvFBzI2ySf7TMg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:21:53 2025 by rpki-client