This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.mft
File:                     V7gOYLWt9FrrpcDIq8zGOZeg8ds.mft (raw, json)
Hash identifier:          zgukZzSPB+JawpcXiXd1vQLl5cF/ALkHgg5oiqGypF4=
Subject key identifier:   21:0D:FD:F5:7A:57:9F:67:5C:26:B0:79:49:72:E3:4C:6B:BC:79:8F
Authority key identifier: 57:B8:0E:60:B5:AD:F4:5A:EB:A5:C0:C8:AB:CC:C6:39:97:A0:F1:DB
Certificate issuer:       /CN=57b80e60b5adf45aeba5c0c8abccc63997a0f1db
Certificate serial:       019AF3F7B31C18B88514DA2B741114EE2119
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.mft
Manifest number:          176B
Signing time:             Sat 06 Dec 2025 14:01:27 +0000
Manifest this update:     Sat 06 Dec 2025 14:01:27 +0000
Manifest next update:     Sun 07 Dec 2025 14:01:27 +0000
Files and hashes:         1: 0HQu8Zx0bqoT8VblZx7T-KABTMs.roa (hash: PMmgS2CzSt2RGIZOxQkouUiRA5CO+OAI06wmRBvm14c=)
                          2: HAFTWYZhRl2JhSvJ17kRi_EORRw.roa (hash: 19em40Igf72cORttMpVzO/f9hKOd+3zplkZkJTc0zOw=)
                          3: V7gOYLWt9FrrpcDIq8zGOZeg8ds.crl (hash: 7NF+XJXXAsbPrXenBNdWclwBxcl/wboX9WGWsq6hsJQ=)
                          4: XzHbUO4u5QutpWYtZyqfUUIrRTI.roa (hash: dO0CtFUpXZ4k5F0vBkaTPTnFApdf6AbyjKu5COO/Zms=)
                          5: yQx5YUSfcqcgx3IA4ICMejwqPbs.roa (hash: cBatkYbqWez1EI7dU65y7uQSmyGeXkq58ToIkxccLCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:f7:b3:1c:18:b8:85:14:da:2b:74:11:14:ee:21:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57b80e60b5adf45aeba5c0c8abccc63997a0f1db
        Validity
            Not Before: Dec  6 14:01:27 2025 GMT
            Not After : Dec  7 14:01:27 2025 GMT
        Subject: CN=210dfdf57a579f675c26b0794972e34c6bbc798f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6e:23:12:e2:01:06:b1:88:b3:7a:ab:85:b1:
                    3d:34:ca:84:12:ee:59:88:d2:96:3b:fd:f6:3a:b1:
                    d0:de:69:44:4d:0e:91:1a:f6:a7:d5:a2:2b:6d:ff:
                    be:5b:c6:8b:18:59:5e:71:e2:3b:93:d9:8d:5d:4c:
                    42:df:d7:ba:cd:2e:f1:c7:75:0f:bc:7b:f1:fb:4a:
                    95:ab:05:42:66:fa:c7:cf:06:dc:0c:fe:9e:18:44:
                    a9:29:ee:c0:da:81:21:12:ce:e4:2d:f1:eb:6f:e7:
                    63:6c:80:17:cd:89:7a:12:80:38:3e:e8:e6:b4:50:
                    d5:71:69:bc:28:87:7b:db:96:0a:a5:fa:bd:9a:f0:
                    1a:5e:63:a7:98:cd:b7:64:05:39:44:f7:13:5b:a8:
                    95:48:d1:06:0a:d8:73:3d:da:fe:26:f0:98:62:32:
                    5d:94:63:12:1b:e6:b6:ab:a8:d8:f3:51:1b:48:d1:
                    4c:d1:48:5d:dc:5e:f9:22:67:c6:57:6d:43:04:d2:
                    2e:78:a4:17:f1:d8:92:a8:44:6d:f1:3d:bf:42:3f:
                    b9:39:3a:dd:6c:ab:b8:5f:88:dc:48:5d:e2:c7:a7:
                    b3:cc:bd:ae:e3:c0:88:c1:7b:d1:8a:09:ca:9c:1b:
                    35:4f:e4:58:f4:c1:d7:eb:24:e4:01:ef:8b:39:38:
                    2a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:0D:FD:F5:7A:57:9F:67:5C:26:B0:79:49:72:E3:4C:6B:BC:79:8F
            X509v3 Authority Key Identifier:
                keyid:57:B8:0E:60:B5:AD:F4:5A:EB:A5:C0:C8:AB:CC:C6:39:97:A0:F1:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:16:1f:d8:fb:88:53:e2:24:01:cb:10:74:9d:c8:41:b4:cf:
         e5:70:7b:86:96:f5:22:22:f1:24:44:d5:9d:d3:60:eb:6f:d3:
         ea:40:58:ed:0b:5d:f2:b4:c3:e3:1a:f4:a6:d2:6f:66:7f:d3:
         f4:af:10:a7:7e:0e:74:41:aa:a6:2a:36:91:d5:a7:2b:a4:26:
         01:26:24:54:5b:b1:c4:43:88:6d:20:ba:fb:60:b1:61:10:04:
         df:7b:0e:73:18:74:40:8f:97:2b:57:7c:0c:b6:be:67:08:81:
         41:65:74:66:f8:f3:33:33:bf:b9:4d:a4:d9:c8:83:b8:94:9c:
         45:74:91:17:e0:43:98:46:20:27:4e:54:67:45:ab:87:3b:51:
         1c:58:8c:0f:22:45:ac:09:f3:0e:8a:b7:cf:3d:4a:2c:a3:d0:
         43:92:d3:3b:23:bb:5e:eb:88:e3:6a:f4:9c:bf:d9:79:5d:35:
         5a:fd:d8:5d:27:56:6f:42:2e:79:a7:65:6c:14:94:e9:cb:65:
         d5:b5:0d:d6:f7:cb:2e:7d:e3:92:57:be:73:29:27:8d:0a:0d:
         7a:d9:b9:3b:f8:53:98:23:fe:d8:46:8f:2b:5e:fa:60:96:4a:
         80:da:46:e1:7d:ae:8b:ff:f3:a8:5b:37:67:91:84:b4:4d:19:
         e8:78:41:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:45:39 2025 by rpki-client