This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
File:                     vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft (raw, json)
Hash identifier:          9849KkjkNB+7D1VXYqI1AKYtROYKeX/RQ5CuUS4Y9Co=
Subject key identifier:   FB:F2:FB:16:4B:EF:37:81:20:2B:F5:1B:EC:D5:31:CB:82:92:38:71
Authority key identifier: BC:66:3C:6E:77:9D:AE:9B:DB:04:68:54:F1:89:FE:8C:5C:3C:32:E1
Certificate issuer:       /CN=bc663c6e779dae9bdb046854f189fe8c5c3c32e1
Certificate serial:       019B273F884602AEA36785B42E1F2DA879D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
Manifest number:          0DAE
Signing time:             Tue 16 Dec 2025 13:00:33 +0000
Manifest this update:     Tue 16 Dec 2025 13:00:33 +0000
Manifest next update:     Wed 17 Dec 2025 13:00:33 +0000
Files and hashes:         1: 5xqkx7rxr0A4ZoZWTCOMeWbUwt0.roa (hash: 4Hck3JY+pm1ENmjLoSNCLwI2ygQA04QrM7UO64TPQ/E=)
                          2: Tf-7kei6W8Gb1yTlztC-z7hqkGM.roa (hash: A3Jg7NsFsBNEFPdV1BOzgwIAFoCzktMr6ou5P5ENzQU=)
                          3: vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl (hash: 1aBradL5qcdlb8hV7B8VF97d3c2Ht0TrPBogxpbwsCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 13:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:27:3f:88:46:02:ae:a3:67:85:b4:2e:1f:2d:a8:79:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc663c6e779dae9bdb046854f189fe8c5c3c32e1
        Validity
            Not Before: Dec 16 13:00:33 2025 GMT
            Not After : Dec 17 13:00:33 2025 GMT
        Subject: CN=fbf2fb164bef3781202bf51becd531cb82923871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6c:5a:fe:4e:08:cc:45:c8:23:c3:5d:3a:c6:
                    cd:91:1b:23:2d:1b:ae:1f:5d:c9:f3:49:29:86:27:
                    7d:0a:71:87:5e:ef:1b:e9:0e:fd:53:17:da:1e:ba:
                    b6:eb:b0:51:ce:d2:aa:5b:4b:22:60:da:24:ff:03:
                    f2:68:8b:a6:b7:88:d3:ad:66:2a:50:78:4a:1a:33:
                    05:c4:65:a9:8e:6a:ae:15:aa:84:56:d4:d7:e0:98:
                    31:db:3a:8b:98:ec:60:c4:9c:b4:36:b7:90:59:43:
                    e7:44:8d:53:05:3d:44:e3:27:1e:07:58:bf:cf:ee:
                    e3:69:e5:9a:49:96:55:bc:73:a4:3d:0d:d2:d1:64:
                    45:aa:94:f4:cb:ab:ee:ef:08:18:46:b6:01:fd:96:
                    91:d9:f8:1c:b8:03:70:e7:0d:a4:1e:77:43:a3:25:
                    f1:7d:af:46:90:14:c4:3e:06:57:5d:86:73:29:9c:
                    70:28:43:59:16:06:0a:26:b4:fb:c1:73:db:51:75:
                    36:54:05:e9:b4:26:fc:05:60:fb:1f:d3:ce:1d:7d:
                    05:df:f9:32:77:62:91:40:c8:ba:cb:11:37:a8:8b:
                    7e:50:53:91:1a:9a:8d:77:54:6f:b5:fa:4e:68:a6:
                    4f:5c:8d:50:8e:0b:35:96:bc:ca:a7:ef:4d:92:da:
                    dc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F2:FB:16:4B:EF:37:81:20:2B:F5:1B:EC:D5:31:CB:82:92:38:71
            X509v3 Authority Key Identifier:
                keyid:BC:66:3C:6E:77:9D:AE:9B:DB:04:68:54:F1:89:FE:8C:5C:3C:32:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:95:da:ac:60:8c:01:c0:63:26:5c:78:d9:b4:ff:8f:97:27:
         e3:8b:e3:0c:79:0d:6c:1f:63:8e:ef:a4:e9:cf:dc:2b:eb:6b:
         39:85:4b:4b:84:cc:bd:d2:c4:75:85:09:cd:bc:5b:23:e3:37:
         7e:06:bd:3d:3b:3a:85:f9:25:3d:88:ad:9e:86:d5:a1:cc:61:
         68:85:a6:9c:ef:a6:0d:bd:a3:a4:ca:f8:8b:a6:0e:0b:31:ed:
         fe:76:4c:32:20:23:a0:bc:86:44:81:0b:1d:da:eb:36:dc:18:
         61:a1:4c:49:e2:f6:63:3c:0d:f2:85:89:b4:a7:6c:e7:0e:93:
         9e:5e:d0:32:6d:1d:bc:27:a0:9c:18:26:b5:85:41:87:8b:e8:
         2d:ea:33:fa:a6:0e:46:84:ec:66:26:85:31:61:6e:5f:ec:31:
         9b:49:19:d5:b1:54:2c:63:3c:10:69:c2:0b:c0:3f:54:20:ab:
         28:68:d0:32:90:8a:55:08:07:c5:12:b6:6c:eb:5c:48:c1:5d:
         a1:71:2c:a8:8f:87:61:21:23:25:1c:ef:01:74:fc:2f:b6:f5:
         cb:aa:f3:31:c6:22:24:08:3a:44:23:24:3b:50:7f:b6:fd:4e:
         5c:3c:70:b7:6d:b2:00:7c:8d:dd:67:52:a6:4e:f4:bc:c9:64:
         d8:0d:63:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 20:19:23 2025 by rpki-client