This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
File:                     vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft (raw, json)
Hash identifier:          RnMxtUHY0lDTcT77K3BGNOK2H+eiq+VZeB/XcHL6V8o=
Subject key identifier:   F6:01:F4:4C:28:25:3E:99:C0:5A:16:C8:FF:BC:C1:79:43:93:0E:0F
Authority key identifier: BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B
Certificate issuer:       /CN=beb12ce6a91030e27d5abad146df27bc2880652b
Certificate serial:       019AF2AD49DD7A16D756463B1A893A93C82A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
Manifest number:          1769
Signing time:             Sat 06 Dec 2025 08:00:34 +0000
Manifest this update:     Sat 06 Dec 2025 08:00:34 +0000
Manifest next update:     Sun 07 Dec 2025 08:00:34 +0000
Files and hashes:         1: 68bf9tdtZQgGYg3-0B5PInDhCfY.roa (hash: f8IkiTce5GYVcsogjzR0QdHaU5oLadDEov52ZX8Qu0s=)
                          2: IRSQE14-Tz7sBccAsgZYt7JbvIs.roa (hash: HHWOf34cKB/cnxnIC3HjVQrTDRzDkhRKh2V00sDdnHA=)
                          3: ZTuZG35aq-_FRZAbaGaaD5vcMwI.roa (hash: ulXglv5m+ng8W6iFQKnfH2V7n7R22IWQlAJ1C+Bod0g=)
                          4: e7SUl4mSjdeGsAW__A2CvddXoNY.roa (hash: CZDiVjjgs0Krs+aiXIc/FeDFsKFYjTe8hPduuFN8E2k=)
                          5: vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl (hash: q8XCO59jtSCt9e+DyeBZTfA9CHHhYh1eYb2Jy9vorZ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 08:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:49:dd:7a:16:d7:56:46:3b:1a:89:3a:93:c8:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beb12ce6a91030e27d5abad146df27bc2880652b
        Validity
            Not Before: Dec  6 08:00:34 2025 GMT
            Not After : Dec  7 08:00:34 2025 GMT
        Subject: CN=f601f44c28253e99c05a16c8ffbcc17943930e0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:10:ef:e7:05:4b:cb:39:e9:9a:1f:83:b6:4b:
                    49:ef:c5:26:38:81:ab:d8:f8:f1:cb:15:ce:3f:c9:
                    b3:9c:ac:22:40:af:7f:3f:d7:7d:d5:77:35:d9:1c:
                    45:30:86:31:09:e8:52:ec:bb:83:71:1d:75:35:9e:
                    1c:f2:37:97:c6:0f:53:e5:6f:90:a7:4a:88:f4:6e:
                    63:39:d0:b8:49:89:54:4f:e5:2f:b4:25:0e:c5:24:
                    dc:8d:d1:2d:58:e7:2b:a8:de:07:0e:a3:88:af:2c:
                    2c:a7:3d:b2:a4:47:37:ae:f2:64:a4:6e:77:ee:fa:
                    be:98:1d:18:11:4b:a1:63:25:44:eb:bd:66:50:8d:
                    15:e0:6e:b5:3a:ee:e7:ac:bd:0b:ca:ee:33:70:fd:
                    2a:a8:27:4f:2f:5c:0f:55:46:8e:45:d9:c5:eb:ef:
                    66:d3:b6:a1:a2:e8:81:55:04:11:f6:37:3e:fd:82:
                    8b:20:aa:8a:2c:64:35:77:fe:bf:b5:92:b0:ca:01:
                    ba:30:66:7b:cc:6f:a2:be:4c:e6:d4:f2:06:db:ba:
                    c1:20:5f:9a:2b:d7:71:b9:e1:8b:ef:82:d6:ea:4a:
                    14:f4:52:e2:da:00:bf:e7:76:d0:37:ff:2e:b4:fe:
                    32:51:a9:6c:b7:bc:ec:cc:e8:75:56:e6:5b:eb:27:
                    74:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:01:F4:4C:28:25:3E:99:C0:5A:16:C8:FF:BC:C1:79:43:93:0E:0F
            X509v3 Authority Key Identifier:
                keyid:BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:9c:72:c0:6b:96:7d:f4:93:ba:21:f6:45:51:4c:ee:6b:a1:
         b8:f8:5e:99:32:d4:41:0c:d0:a4:cd:55:56:25:26:76:77:08:
         9b:93:f8:ec:52:2d:a9:b4:27:11:dd:f1:52:79:32:b2:00:04:
         2c:37:4a:fb:06:f9:39:b0:61:1b:e0:05:8c:f0:1f:fc:86:73:
         d0:4a:ed:5c:ce:d0:92:c8:67:f8:a8:41:32:2f:6f:21:b2:7f:
         5d:48:7c:b5:31:08:a6:5e:e2:6f:90:de:8a:34:67:21:e1:f6:
         4d:3d:ac:30:ba:c4:f8:7a:21:b3:24:df:b7:c7:a4:e4:ed:27:
         d9:d9:80:94:0b:09:79:01:74:26:28:7c:0a:26:32:04:5b:6c:
         b6:c6:4c:56:f8:75:4a:82:3e:ec:0e:2b:2a:e7:cf:2f:92:08:
         3b:b2:c6:64:e7:9b:6d:a4:1d:e2:16:15:90:1d:14:80:d8:14:
         05:c6:59:d8:74:72:fe:fc:e2:27:6d:2b:e7:37:99:24:50:ba:
         8d:61:62:58:5b:c4:f4:6b:53:8d:22:e1:1f:7d:db:1d:d8:ee:
         d8:97:d0:8a:4c:ca:50:4e:35:10:b3:58:39:6c:de:e4:dd:67:
         60:af:9f:6d:9f:d6:4e:6c:1f:a5:30:0a:0e:21:c5:3b:c0:1f:
         d8:ea:79:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:46:18 2025 by rpki-client