This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
File:                     vbg-mb9yVPlIBXpemBvm-lwgVN0.mft (raw, json)
Hash identifier:          8BorYMRJ5B3+ZXig6f2StJQQ/YwXUnXaWT2fuFg7Yi8=
Subject key identifier:   91:86:8E:AB:B5:3D:E7:06:57:FB:66:C7:CE:66:1C:88:F2:7C:02:41
Authority key identifier: BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
Certificate issuer:       /CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Certificate serial:       019AF208C503BEEBEBD0ADFD4C38D46E3CAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
Manifest number:          107E
Signing time:             Sat 06 Dec 2025 05:00:52 +0000
Manifest this update:     Sat 06 Dec 2025 05:00:52 +0000
Manifest next update:     Sun 07 Dec 2025 05:00:52 +0000
Files and hashes:         1: 4_kj9c7eaRMU4u4iUuTYZj576fo.roa (hash: PO5fBF6ObWzUciinbt0VhtAYJ3DoUDA1KwTdUnCJHIU=)
                          2: QVDZyGSGE8leV4m3nFlQjeG0zeo.roa (hash: wjjiPyGj/k1SShnHJQ5vg5xM86+yeUphNDxttzv8s2M=)
                          3: UPczbud20oB9tgHwFSb2akGSJh4.roa (hash: 4+rja0/RrelXJUDvcZSlg9HpxqQMawG+/C9XB2H3Tfk=)
                          4: n2q3FitcqDO_c2NUyqKB-dDvksE.roa (hash: l/3zip7whQB/hB9QJijqYPsVoPjbHuHl7qhVrx0amJI=)
                          5: nKWeM_CH9-9zmDpDZswtnyydpVE.roa (hash: KvDVuK8tbyCYd/evgrfJE5X1yTC3BOlJ7Aj6N3EgX7Y=)
                          6: tn0vzIzUKvR4QDUVTfzGnbr56Zw.roa (hash: orJlZ9N3WJfEobcKgJS3DRi9EsasmDaNr36Kkpxuc5o=)
                          7: vbg-mb9yVPlIBXpemBvm-lwgVN0.crl (hash: ErgijVDGLpqeVQeEg+Dm56rNM2vGIe9Ipqc46xmBN1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:08:c5:03:be:eb:eb:d0:ad:fd:4c:38:d4:6e:3c:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
        Validity
            Not Before: Dec  6 05:00:52 2025 GMT
            Not After : Dec  7 05:00:52 2025 GMT
        Subject: CN=91868eabb53de70657fb66c7ce661c88f27c0241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1b:e8:6d:e6:56:58:6a:43:46:c0:a5:20:0e:
                    ed:7d:5c:43:6f:24:50:03:6c:28:76:0d:0a:43:2c:
                    06:f7:e6:45:b7:9c:43:3d:29:d2:ec:9a:17:b7:15:
                    83:b9:18:d7:f9:4e:01:52:d4:5b:fd:a3:c7:30:d5:
                    bf:35:34:35:43:01:fe:e2:3c:71:98:b8:2c:c7:a4:
                    e2:60:10:df:fd:47:1a:3a:86:59:43:41:f8:6d:93:
                    79:78:f4:77:e7:f9:c5:30:f1:ff:7e:c3:cc:78:26:
                    00:03:5c:66:44:c0:60:53:37:f8:3f:cc:62:34:62:
                    b0:70:2c:85:2f:30:20:3c:f5:c3:af:52:d8:34:1a:
                    65:4b:46:68:60:9a:4c:8e:11:2f:a7:88:98:f7:46:
                    7a:f3:96:a4:e7:b6:84:73:4a:bd:27:7d:b4:3d:fb:
                    ef:42:d4:81:a3:66:72:d1:f8:de:f9:b3:3c:b6:b2:
                    33:4a:08:ab:b8:52:85:6c:a0:e7:16:2e:d1:85:bc:
                    57:9e:f9:a1:c3:a3:a3:9a:36:f6:db:ea:5b:57:09:
                    c7:12:69:39:22:e8:b6:92:d9:14:b0:fa:53:81:c3:
                    9c:d4:76:f9:11:6e:10:46:cd:68:03:40:80:2f:94:
                    79:3e:73:a1:17:c2:65:48:cb:05:c6:64:f5:ef:22:
                    09:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:86:8E:AB:B5:3D:E7:06:57:FB:66:C7:CE:66:1C:88:F2:7C:02:41
            X509v3 Authority Key Identifier:
                keyid:BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:b3:4a:3f:e8:f5:bc:01:93:08:9b:3c:13:42:ab:15:64:5f:
         e7:72:d3:0c:27:9b:de:13:9c:78:7d:81:80:01:f0:21:f4:3f:
         03:30:ca:3c:6b:68:7d:b4:c4:f3:02:7f:d8:4d:73:b2:8f:c2:
         94:83:18:ed:d7:9d:80:e9:e1:b9:de:13:9d:78:ad:8c:fb:af:
         e3:df:e6:e7:aa:14:13:dd:4f:e9:a5:b1:3e:2d:5e:95:ea:9e:
         c7:41:dd:7f:b0:3d:c1:5e:91:dd:8d:56:a2:0a:f4:27:51:24:
         58:3b:85:48:a2:0a:b5:a9:dc:52:be:be:35:42:b7:2a:18:37:
         af:b6:ec:b6:e5:be:8f:f7:a7:8d:5c:65:83:12:0a:54:ea:68:
         bf:ce:69:a8:45:09:dc:02:2f:42:62:83:9c:8e:6d:a5:88:b6:
         8f:dc:59:8c:46:58:5c:45:c2:a1:3a:b5:24:6e:b3:63:72:3d:
         73:64:9f:8b:37:58:ad:5b:3d:ef:3c:8c:e4:2a:d1:e7:b4:e7:
         4d:75:59:9b:cd:d2:9b:50:07:b5:4c:f3:32:6c:71:c5:f7:de:
         61:f9:8e:e5:56:e8:be:46:bd:eb:23:53:a7:7d:83:fc:ea:cd:
         b1:14:a7:aa:c0:4f:5e:f1:9e:16:58:3b:47:15:a1:50:f1:47:
         58:1b:95:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:27:06 2025 by rpki-client