This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
File:                     VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft (raw, json)
Hash identifier:          iaCoHwh699FrHOIUr0c7u8MZ7rGtzQyfT/M4+cJ7Je0=
Subject key identifier:   77:DC:EB:42:7B:65:8F:70:EC:A0:1D:B8:33:9D:20:0C:A7:D1:C0:A8
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Certificate issuer:       /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial:       019AF27743FBA8C45865677603BE4C8F84AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
Manifest number:          0875
Signing time:             Sat 06 Dec 2025 07:01:33 +0000
Manifest this update:     Sat 06 Dec 2025 07:01:33 +0000
Manifest next update:     Sun 07 Dec 2025 07:01:33 +0000
Files and hashes:         1: 3dGwkRWWpILiTjLEIwVgV4YgfXQ.roa (hash: X7GuBDiiZxLUWcKwRJTyK80YMGSo7Qt/ARffBe3wJbU=)
                          2: 5tB5ByxSbF59bwczAJMebVmGVhg.roa (hash: VpTZXtVFgcpzubG2bd7rY2Y6S8TiluIYtQEQ1FxJjvY=)
                          3: BCe51wdJdatnD_yWIP7PwaIdEjQ.roa (hash: 2T6H89EN0+t3yWpgUzWNrNOkAOHQ+BKEtdze6Uw6EqQ=)
                          4: GWYPtxB8TBBSQsuwwtMs1KGGll4.roa (hash: Qc8LqozNkByx2tI097ii70x80sDBr19R1Ta+ZsAdPPE=)
                          5: IvcTWioLntaVObWnHDTqee1HdxI.roa (hash: F5wacVp8IsIRR7k7HiLkMHccE0z8o3X/ZqRyhyu0b0Q=)
                          6: K3YxRwDdL_XElrH0a-XhASpuuLY.roa (hash: vT35nn1zBvKDq4dLqBDsW47hdQnad5PJ2DAvMIQlMsI=)
                          7: L-zOPzmtsqDfMHwda_RhlWweurM.roa (hash: K+Qa6SDk+P9jfEXGeQPbkFjUDkOGmN/t+jWt6LVdbCI=)
                          8: SQdli5SNglGHDotHhFa3ePaF_ws.roa (hash: 0EyufiMDxA/CMj9L5zfJI0+7IZVo81G4EUH1nYlF9h0=)
                          9: UdN6GQS6nMB84Y7mxOEvW5F7VLw.roa (hash: D7bSo9vOpouIOxO1RTZm5IioqQd+GVhKEwyeWJ2daI0=)
                          10: VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl (hash: Xl53641NWTRqJaV31iAkInv1LVqJukE73TAPhBeId6Y=)
                          11: VyNbaZHM8-r0n3OtFhOVv7FEcxE.roa (hash: Dw7GI0ZYWm2DlRWea6LSDfXZteNKplJSeO/M3Fbw6ew=)
                          12: ZFNPpkJjAEJqP0LzaHCbcOYgV2Q.roa (hash: Zl0lVHMtT1Mdxmi4wDwpl3L8wvugA65MrAmdD5x0BTQ=)
                          13: cdUHvSSzeVk2kQzX1mHqKxhfmZg.roa (hash: 2xANcXQ2qVWXH5fAbLpWYBlwCCDXMuV3fNwWKA7y19g=)
                          14: gr1QABwrnutvYqTsmMvHeD4z8Zs.roa (hash: 8oqaZVGE+ETInAY17RGzyDJuW9fVUcpN8TRFq8wBOLE=)
                          15: hbiqB0P-ZoFBn9K3zFxrvk7ikOw.roa (hash: Xx9dMlHq95OiWVklB54nFVbDwniDAuE72y398DJB8bo=)
                          16: jFk2pIEFYHLlisI5UBfJYdpJZS8.roa (hash: FeYRqeLiGKr5DLRwGtOB64OsUr56V0ixj8w5P9c4Ouk=)
                          17: kIG4-YLcSWaOiJ1A8Swnp8k8vnQ.roa (hash: 3XBx35nMPD/co1ZPPAeDyRHHe5WXWcNIzfxaZD2g45U=)
                          18: mVG4H-bxC4gAAge0Z_G5-u15wQ8.roa (hash: wC+7y2a/aysucvYqXRmLS6U7ll3xITO55rZoqtKn4JU=)
                          19: uFuuZlRwY4F1Pfy1HlZ_5uA7_vE.roa (hash: WT8DOhFElmbEVLOg27FPha0R8y0H60qZdr9LfEj1sTk=)
                          20: vHWD5zLyKhPdfmLcc6rX4l2BIao.roa (hash: vmnaNfmj0DaTEpP8jICsJ6+YB5LdPguiBsnwREkNUQg=)
                          21: yBwWyW48SPQ9QSmXQsXcfwjYIiA.roa (hash: Ifr/qgG+hmQP+h/aITKVPFiP9MWRH8VkxGe5nsJvg2I=)
                          22: yIs7-43LvI6qFPUZ4Fc1B5P-Nd8.roa (hash: 7iyioJq4gHgZnNWCIj3ZbngUuVlDh727OLbKlKLfGaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:77:43:fb:a8:c4:58:65:67:76:03:be:4c:8f:84:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
        Validity
            Not Before: Dec  6 07:01:33 2025 GMT
            Not After : Dec  7 07:01:33 2025 GMT
        Subject: CN=77dceb427b658f70eca01db8339d200ca7d1c0a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8f:98:3f:cd:4c:47:74:e9:79:55:3c:dc:a8:
                    1b:02:90:ef:13:97:61:46:cc:a6:52:4a:4b:40:ae:
                    b8:82:91:57:63:c3:83:2a:2c:79:68:9c:9e:12:3c:
                    a2:88:4e:db:92:d3:82:74:8d:4b:aa:14:92:8b:25:
                    57:ec:6f:32:c9:b2:31:59:51:95:bb:21:41:36:04:
                    20:98:f3:75:c7:0f:6d:80:6d:e4:43:55:41:1d:73:
                    95:c7:e0:d7:a2:a8:0a:67:e1:32:93:a2:a1:d6:23:
                    d7:de:38:24:28:98:55:7c:6a:54:89:cf:73:83:2f:
                    42:f9:5d:01:16:97:14:a9:1b:37:e8:f9:37:f8:20:
                    a1:4a:02:09:87:52:92:a1:70:9b:1f:ed:76:36:3c:
                    f2:ba:a0:27:6a:fa:52:62:44:cd:bd:df:65:00:78:
                    12:f7:01:f3:63:12:91:c0:31:b8:ad:93:83:eb:70:
                    b2:ca:71:58:5c:c8:bc:ad:2f:22:f1:f7:50:e3:ac:
                    d2:79:ea:d8:98:8a:cc:0c:2d:5a:be:1a:8c:40:05:
                    e6:dc:32:5a:7f:21:32:5d:0b:11:b0:f2:f8:5e:a5:
                    50:c9:25:e1:45:c2:d7:fe:11:51:9a:6f:54:ae:0f:
                    10:6b:3f:ef:56:dc:4f:49:28:17:8b:05:d3:95:8a:
                    26:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DC:EB:42:7B:65:8F:70:EC:A0:1D:B8:33:9D:20:0C:A7:D1:C0:A8
            X509v3 Authority Key Identifier:
                keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:7e:70:aa:92:68:da:13:96:7f:2a:e6:75:79:a7:4b:61:e3:
         59:66:59:93:d4:81:e6:ce:2e:2b:c2:9b:96:04:ba:bd:29:ef:
         85:a5:03:f4:11:41:fc:ac:75:da:6d:84:c2:f8:2a:e2:17:04:
         af:ef:41:c9:74:81:a6:ea:ca:9d:9a:d5:54:d1:2f:19:2d:7f:
         d8:fd:70:8e:ea:94:b7:e5:f5:44:fe:d7:36:49:f8:be:33:40:
         29:42:19:75:57:8a:68:8f:00:3d:82:1d:ca:23:e7:4a:94:52:
         22:17:48:57:57:e0:56:cd:b4:83:75:1c:1a:83:4e:23:db:4e:
         60:3b:38:10:bb:e7:fa:49:9b:a5:cd:d5:69:f3:2f:9f:a7:52:
         4e:f4:a6:41:14:e0:e1:99:9a:c3:1c:31:ba:a8:a6:4b:41:83:
         02:fe:6c:af:1b:2f:a9:19:94:d7:77:a8:97:c0:a8:3e:fd:4b:
         94:4b:04:c4:eb:1d:2a:40:1c:6f:56:55:55:41:04:1c:e0:dd:
         47:66:e1:07:99:da:9e:40:d2:2a:1c:c8:e3:c8:11:30:ab:d1:
         90:d5:89:3b:bf:fe:93:da:77:f9:ca:49:d7:c5:a0:5d:ed:19:
         44:9d:2b:b5:22:44:63:15:c8:e6:ed:e9:aa:e2:a7:eb:e2:fb:
         6b:0f:f3:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryd0P7qMRYZWd2A75Mj4SsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy
NjhmNTQwHhcNMjUxMjA2MDcwMTMzWhcNMjUxMjA3MDcwMTMzWjAzMTEwLwYDVQQD
Eyg3N2RjZWI0MjdiNjU4ZjcwZWNhMDFkYjgzMzlkMjAwY2E3ZDFjMGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlI+YP81MR3TpeVU83KgbApDvE5dh
RsymUkpLQK64gpFXY8ODKix5aJyeEjyiiE7bktOCdI1LqhSSiyVX7G8yybIxWVGV
uyFBNgQgmPN1xw9tgG3kQ1VBHXOVx+DXoqgKZ+Eyk6Kh1iPX3jgkKJhVfGpUic9z
gy9C+V0BFpcUqRs36Pk3+CChSgIJh1KSoXCbH+12NjzyuqAnavpSYkTNvd9lAHgS
9wHzYxKRwDG4rZOD63CyynFYXMi8rS8i8fdQ46zSeerYmIrMDC1avhqMQAXm3DJa
fyEyXQsRsPL4XqVQySXhRcLX/hFRmm9Urg8Qaz/vVtxPSSgXiwXTlYomAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfc60J7ZY9w7KAduDOdIAyn0cCoMB8GA1UdIwQY
MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt
N2FhN2ZjMzU5NjU1LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1
LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiX5wqpJo
2hOWfyrmdXmnS2HjWWZZk9SB5s4uK8KblgS6vSnvhaUD9BFB/Kx12m2Ewvgq4hcE
r+9ByXSBpurKnZrVVNEvGS1/2P1wjuqUt+X1RP7XNkn4vjNAKUIZdVeKaI8APYId
yiPnSpRSIhdIV1fgVs20g3UcGoNOI9tOYDs4ELvn+kmbpc3VafMvn6dSTvSmQRTg
4ZmawxwxuqimS0GDAv5srxsvqRmU13eol8CoPv1LlEsExOsdKkAcb1ZVVUEEHODd
R2bhB5nankDSKhzI48gRMKvRkNWJO7/+k9p3+cpJ18WgXe0ZRJ0rtSJEYxXI5u3p
quKn6+L7aw/zXQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:31:57 2025 by rpki-client