This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
File:                     vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft (raw, json)
Hash identifier:          r8/4ZAaX6JWWWAYuY3FRlQxy7Yl6CosCXD4CBh6dmb4=
Subject key identifier:   28:CF:F5:A0:8D:54:43:B8:E4:6D:50:83:6D:24:87:3A:18:4D:A0:94
Authority key identifier: BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
Certificate issuer:       /CN=bee0a94997672a920a290ccbfd049126f7075c99
Certificate serial:       019AF2ADADE1F466A230E080C4A864DC57C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
Manifest number:          1763
Signing time:             Sat 06 Dec 2025 08:00:59 +0000
Manifest this update:     Sat 06 Dec 2025 08:00:59 +0000
Manifest next update:     Sun 07 Dec 2025 08:00:59 +0000
Files and hashes:         1: N_iXT6yoM0IiJyQUNbfBu971Pc8.roa (hash: N5hBaTrYl3FRJAHCB5WOt0nXtIURvZkeHKhzHTcrevA=)
                          2: TDfXhLaJicDqER43mZJ9Gt5o4NM.roa (hash: xPlhAH8Cus6o3YMGrcO3bp4+1D+Angi7zwsI6/D/vLM=)
                          3: vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl (hash: odDaEiWzNLt6LG/aVyODi9H+iLGCuQqEllUinB+UOS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:ad:e1:f4:66:a2:30:e0:80:c4:a8:64:dc:57:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bee0a94997672a920a290ccbfd049126f7075c99
        Validity
            Not Before: Dec  6 08:00:59 2025 GMT
            Not After : Dec  7 08:00:59 2025 GMT
        Subject: CN=28cff5a08d5443b8e46d50836d24873a184da094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:95:59:8b:26:70:05:af:94:87:64:00:10:3e:
                    5e:3b:74:97:29:e9:2a:c3:cf:cc:c0:74:a9:3c:8c:
                    f1:dd:a3:e1:25:84:09:3e:76:1a:ec:bf:0a:d8:e1:
                    df:d1:11:56:da:9f:85:28:b2:d6:5b:ae:5e:e7:31:
                    60:24:06:8b:9f:c3:e3:9a:1b:f7:61:f5:c5:25:d4:
                    06:9e:26:bf:f3:19:9a:50:4d:c6:e1:8e:c3:28:ff:
                    d3:12:57:e4:9c:c3:d5:5d:b4:98:76:f1:b8:58:68:
                    8f:c6:1b:13:23:e1:e8:36:5a:58:4a:00:31:6a:22:
                    28:47:3a:40:5c:9a:aa:46:9a:65:03:a0:62:b7:d4:
                    04:58:a7:32:6c:27:10:bc:09:50:b3:8b:93:95:96:
                    2c:1a:1f:c8:93:d9:38:93:60:b7:cd:b9:cc:e5:bf:
                    37:0e:67:8e:df:46:8f:47:d7:35:43:de:4f:71:95:
                    29:04:fa:2e:9a:28:2c:ec:b1:c3:d7:5f:e4:cb:08:
                    43:d3:64:80:2a:39:03:c7:b4:73:e2:d9:81:61:49:
                    6b:89:38:24:71:86:c2:ab:17:43:a7:d1:78:54:18:
                    62:1a:15:89:7a:33:de:20:3f:b4:23:be:e3:23:04:
                    da:c5:51:66:44:f5:d2:79:e3:07:d3:b2:01:2c:a9:
                    95:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:CF:F5:A0:8D:54:43:B8:E4:6D:50:83:6D:24:87:3A:18:4D:A0:94
            X509v3 Authority Key Identifier:
                keyid:BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:8c:a9:0f:71:08:8f:8b:0b:f8:55:8f:f9:20:ed:4d:d5:45:
         f2:15:d8:a6:6a:b0:43:d6:d1:11:f0:da:37:76:6e:aa:dd:59:
         d0:b1:f9:09:0b:0f:23:c3:b2:c4:9d:05:74:8b:4c:0f:ed:ed:
         d4:f9:18:a4:87:73:2b:db:09:d1:f5:c9:b5:3a:2e:80:53:0f:
         80:84:ba:59:72:b8:ec:19:18:d3:1f:54:db:b1:08:de:37:7f:
         de:96:b5:db:05:38:fa:66:3f:ee:b5:30:9b:9a:fb:3e:6f:eb:
         89:20:09:28:c2:5a:c8:3c:e6:d3:de:49:0a:e6:26:f1:2f:8a:
         13:c3:90:75:87:89:51:ca:cb:9d:11:70:1a:1d:d4:82:26:46:
         de:dc:65:44:11:29:da:26:58:61:7e:56:23:05:82:21:77:8a:
         23:3f:75:3d:2d:90:c9:35:77:35:24:78:f2:c9:4f:ac:d4:e7:
         e9:21:51:c8:8c:c8:b0:a1:63:b3:aa:f8:7c:bd:03:a0:00:63:
         dd:86:a9:c4:9f:1c:2a:aa:7e:76:80:bb:7c:7b:39:a9:5c:93:
         87:83:5e:16:28:3f:ff:85:18:58:ed:40:e5:88:94:c3:13:3d:
         46:a6:9f:fe:85:cc:bd:69:4f:c5:b3:ac:b4:12:a3:94:ca:93:
         3c:8c:02:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryra3h9GaiMOCAxKhk3FfBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlZTBhOTQ5OTc2NzJhOTIwYTI5MGNjYmZkMDQ5MTI2Zjcw
NzVjOTkwHhcNMjUxMjA2MDgwMDU5WhcNMjUxMjA3MDgwMDU5WjAzMTEwLwYDVQQD
EygyOGNmZjVhMDhkNTQ0M2I4ZTQ2ZDUwODM2ZDI0ODczYTE4NGRhMDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJVZiyZwBa+Uh2QAED5eO3SXKekq
w8/MwHSpPIzx3aPhJYQJPnYa7L8K2OHf0RFW2p+FKLLWW65e5zFgJAaLn8Pjmhv3
YfXFJdQGnia/8xmaUE3G4Y7DKP/TElfknMPVXbSYdvG4WGiPxhsTI+HoNlpYSgAx
aiIoRzpAXJqqRpplA6Bit9QEWKcybCcQvAlQs4uTlZYsGh/Ik9k4k2C3zbnM5b83
DmeO30aPR9c1Q95PcZUpBPoumigs7LHD11/kywhD02SAKjkDx7Rz4tmBYUlriTgk
cYbCqxdDp9F4VBhiGhWJejPeID+0I77jIwTaxVFmRPXSeeMH07IBLKmVqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjP9aCNVEO45G1Qg20khzoYTaCUMB8GA1UdIwQY
MBaAFL7gqUmXZyqSCikMy/0EkSb3B1yZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnVDcFNaZG5LcElLS1F6TF9RU1JKdmNIWEprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jM2UzMjktMTVlZi00MjNhLWJiMTIt
M2E2MDYzY2ZlYTk1LzEvdnVDcFNaZG5LcElLS1F6TF9RU1JKdmNIWEprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9jM2UzMjktMTVlZi00MjNhLWJiMTItM2E2MDYzY2ZlYTk1
LzEvdnVDcFNaZG5LcElLS1F6TF9RU1JKdmNIWEprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARoypD3EI
j4sL+FWP+SDtTdVF8hXYpmqwQ9bREfDaN3Zuqt1Z0LH5CQsPI8OyxJ0FdItMD+3t
1PkYpIdzK9sJ0fXJtTougFMPgIS6WXK47BkY0x9U27EI3jd/3pa12wU4+mY/7rUw
m5r7Pm/riSAJKMJayDzm095JCuYm8S+KE8OQdYeJUcrLnRFwGh3UgiZG3txlRBEp
2iZYYX5WIwWCIXeKIz91PS2QyTV3NSR48slPrNTn6SFRyIzIsKFjs6r4fL0DoABj
3YapxJ8cKqp+doC7fHs5qVyTh4NeFig//4UYWO1A5YiUwxM9Rqaf/oXMvWlPxbOs
tBKjlMqTPIwCxg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:20:08 2025 by rpki-client