This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/V_nB-yK84e8kHdfviSpRjQVmqKs.mft
File:                     V_nB-yK84e8kHdfviSpRjQVmqKs.mft (raw, json)
Hash identifier:          boUIUpthT2eQuxtLaivyiigrkjQ4ZvaKWLC8TuDfX9Q=
Subject key identifier:   24:46:B0:3C:07:A5:B8:2E:C2:31:C5:EA:22:D1:9A:60:1F:CE:E5:16
Authority key identifier: 57:F9:C1:FB:22:BC:E1:EF:24:1D:D7:EF:89:2A:51:8D:05:66:A8:AB
Certificate issuer:       /CN=57f9c1fb22bce1ef241dd7ef892a518d0566a8ab
Certificate serial:       019B3EDB170C782143213BF353C5044CCEC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V_nB-yK84e8kHdfviSpRjQVmqKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/V_nB-yK84e8kHdfviSpRjQVmqKs.mft
Manifest number:          178B
Signing time:             Sun 21 Dec 2025 03:01:44 +0000
Manifest this update:     Sun 21 Dec 2025 03:01:44 +0000
Manifest next update:     Mon 22 Dec 2025 03:01:44 +0000
Files and hashes:         1: V_nB-yK84e8kHdfviSpRjQVmqKs.crl (hash: 3z8k3Mjya1+efV9XJoCvgqWHOOUiZQY3pVk5dvgnfFk=)
                          2: fnzKoJIItFzpKqsa1DSC_YU9Oz0.roa (hash: VMMeskb+gseTxaGOSqruyC/TYUaQqqzUpJ/qPck/ehc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/V_nB-yK84e8kHdfviSpRjQVmqKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/V_nB-yK84e8kHdfviSpRjQVmqKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V_nB-yK84e8kHdfviSpRjQVmqKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3e:db:17:0c:78:21:43:21:3b:f3:53:c5:04:4c:ce:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57f9c1fb22bce1ef241dd7ef892a518d0566a8ab
        Validity
            Not Before: Dec 21 03:01:44 2025 GMT
            Not After : Dec 22 03:01:44 2025 GMT
        Subject: CN=2446b03c07a5b82ec231c5ea22d19a601fcee516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8c:8f:b6:30:54:9c:24:5d:cf:27:46:e8:ce:
                    cd:de:cf:50:ca:6c:b8:76:01:bb:3e:93:9d:e2:22:
                    45:3d:0a:79:bf:2e:d1:54:ae:6d:11:59:a5:03:49:
                    0a:70:c1:a0:73:b9:d0:8d:d8:15:d0:2c:fa:71:03:
                    83:71:f0:d7:c0:c2:ac:64:37:e6:b1:74:e3:75:6c:
                    fb:f3:4a:e0:93:de:67:f2:6e:6e:51:f6:15:3f:a4:
                    0c:04:4e:3f:1b:66:da:0b:9a:22:d1:0f:7f:8e:af:
                    84:de:a9:91:5b:79:ec:7f:d6:b0:90:25:28:c9:63:
                    42:0f:8c:43:e5:4e:31:cc:06:aa:8e:26:b6:72:0e:
                    0b:7e:a2:63:59:d7:e6:d9:63:b7:55:6e:cd:98:ff:
                    96:8a:0f:70:fe:0a:4a:67:9e:ba:92:17:57:91:14:
                    34:8c:db:93:a2:62:52:c3:3c:06:a2:49:4e:c8:e7:
                    fe:52:50:f0:53:65:36:a4:b6:ce:5b:2a:f2:59:bc:
                    f8:69:ee:a7:11:6a:4b:2e:39:19:1f:b2:fa:b6:4c:
                    cd:ca:83:44:6e:ef:7e:92:95:37:18:e4:9f:ba:9b:
                    ec:1c:aa:03:13:28:e3:97:2a:b9:98:1c:2d:9d:b3:
                    f2:a1:05:d2:81:bf:0e:cd:a2:70:b6:f1:33:71:42:
                    c4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:46:B0:3C:07:A5:B8:2E:C2:31:C5:EA:22:D1:9A:60:1F:CE:E5:16
            X509v3 Authority Key Identifier:
                keyid:57:F9:C1:FB:22:BC:E1:EF:24:1D:D7:EF:89:2A:51:8D:05:66:A8:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V_nB-yK84e8kHdfviSpRjQVmqKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/V_nB-yK84e8kHdfviSpRjQVmqKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/V_nB-yK84e8kHdfviSpRjQVmqKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:90:8d:c2:6a:e5:6d:b4:83:4b:31:35:ee:b4:63:84:63:e3:
         1f:49:cb:02:3c:46:24:3b:f1:76:9e:0f:76:d4:b2:b1:dd:87:
         63:5b:3a:f3:3b:1a:77:a8:65:b8:3b:93:ff:34:33:96:6e:b1:
         42:3a:93:8b:5b:da:80:45:fe:b4:bd:42:75:9c:29:93:7e:52:
         fb:f2:a4:37:89:05:e5:55:00:cd:0c:de:4e:f1:38:d6:2b:40:
         36:02:b3:82:5f:6a:b8:1d:bc:8a:09:a8:a1:6b:41:07:c9:f2:
         79:16:2d:f8:9a:88:8c:87:f5:b1:90:1a:d1:bb:c0:6c:aa:4f:
         7c:38:a6:87:46:c3:dc:a9:65:36:6b:77:02:c8:fb:8c:12:32:
         b6:3f:4d:c9:98:a4:33:be:cc:d7:d0:ba:6f:8a:e9:a8:45:da:
         70:d6:7b:fe:8e:74:89:5b:1a:1e:f1:c0:29:dc:af:24:b7:9f:
         fa:63:ac:dc:0e:ac:68:e1:22:0d:50:90:b0:45:70:38:4e:07:
         bf:12:b4:2d:12:ee:9e:00:8c:e0:88:9f:df:f3:87:16:0a:29:
         6f:64:bb:81:5d:cc:aa:27:d5:85:17:bf:e3:b8:c1:a5:37:c9:
         f5:72:48:0e:d3:4c:18:40:79:98:09:d8:6c:5d:d6:93:22:6e:
         28:f2:d7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:59:30 2025 by rpki-client