This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft
File:                     V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft (raw, json)
Hash identifier:          cDTNwTp/61e3YyELB6mGCJHemlDBpbXeQVpYFxIaNWs=
Subject key identifier:   94:5D:1D:1C:3F:44:5E:7B:40:0B:83:81:D1:5E:95:45:06:28:C8:81
Authority key identifier: 57:C5:A7:6F:28:B7:1E:A8:DB:F9:99:AB:AA:B7:A6:59:83:9A:C1:82
Certificate issuer:       /CN=57c5a76f28b71ea8dbf999abaab7a659839ac182
Certificate serial:       019B432516D4C56702C636E3BFCD2396E24E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft
Manifest number:          111D
Signing time:             Sun 21 Dec 2025 23:01:02 +0000
Manifest this update:     Sun 21 Dec 2025 23:01:02 +0000
Manifest next update:     Mon 22 Dec 2025 23:01:02 +0000
Files and hashes:         1: 7mW3WjVVw9eGN8jbjHf3-to5ckg.roa (hash: mgTvCDtWlsTF65gNfXMneOYsagkRwGQqVAdRKNVR7wE=)
                          2: V8Wnbyi3Hqjb-ZmrqremWYOawYI.crl (hash: vjcw16VQg4UWtKkMZSnoE7CAWmsdxW7dfCll9vThHCU=)
                          3: opZuDmDWQL5ca_7w2GLyUTRdL5E.roa (hash: icGuPqMDdyClVp/nHf/m0TN12+gflYp9hAwPQL0ezMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:43:25:16:d4:c5:67:02:c6:36:e3:bf:cd:23:96:e2:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57c5a76f28b71ea8dbf999abaab7a659839ac182
        Validity
            Not Before: Dec 21 23:01:02 2025 GMT
            Not After : Dec 22 23:01:02 2025 GMT
        Subject: CN=945d1d1c3f445e7b400b8381d15e95450628c881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:61:19:64:44:bf:a4:2a:bd:9d:fe:3a:9f:5e:
                    04:c8:1f:fc:60:4a:c1:fd:a2:29:dc:a1:3b:ca:59:
                    57:a1:68:2e:97:da:52:f7:12:07:22:a6:71:96:c8:
                    72:7c:c9:fb:c3:40:c9:8b:87:fd:62:fd:29:1a:2b:
                    71:e1:c0:3d:81:7c:c7:b7:d3:c7:d8:55:2e:b2:da:
                    89:ba:a4:2d:8b:0c:5f:b5:f4:3e:e1:df:57:7a:46:
                    3a:50:9a:a1:f2:f5:ab:e5:2d:44:46:b2:05:63:e4:
                    e6:fc:22:8b:50:f0:1c:a2:47:9e:2b:92:88:39:4f:
                    cc:c6:eb:51:b9:ed:83:2b:24:63:ed:d4:4f:1d:6c:
                    39:37:ea:f5:26:62:e2:c2:6a:3d:9c:4a:70:f0:06:
                    3e:b7:a3:e7:b3:9c:db:50:a9:90:5b:ad:89:ba:1b:
                    af:ea:ae:5b:59:6e:e2:d8:3a:eb:0c:9a:9c:72:22:
                    f8:6f:c9:33:c7:d2:2d:9a:47:50:73:57:7a:65:a5:
                    22:0f:49:59:3a:33:85:42:5b:ae:8c:aa:72:d8:7b:
                    eb:03:07:97:4f:c9:7a:d9:85:dc:cf:2f:a8:b0:01:
                    8d:be:ee:e4:fc:68:eb:1a:40:63:7a:7c:7d:3b:81:
                    53:69:93:7e:e8:73:34:d9:fb:80:6e:00:a3:eb:b2:
                    d1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:5D:1D:1C:3F:44:5E:7B:40:0B:83:81:D1:5E:95:45:06:28:C8:81
            X509v3 Authority Key Identifier:
                keyid:57:C5:A7:6F:28:B7:1E:A8:DB:F9:99:AB:AA:B7:A6:59:83:9A:C1:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:67:c0:f3:4e:c9:a7:fc:93:44:15:02:78:ed:da:d0:8e:66:
         4d:83:14:96:27:74:0d:b4:6c:eb:f6:a6:8c:f9:fa:d0:88:23:
         9e:34:7d:bc:e0:28:9e:ac:7e:9a:77:71:c2:2a:18:9b:e0:c6:
         4d:7b:94:23:e8:27:71:16:9e:3b:50:31:8d:15:71:63:e9:d9:
         f9:08:e2:28:02:e2:0e:ee:16:e3:8c:ef:28:4e:1b:13:d6:7f:
         ca:0b:30:c3:94:40:20:6f:a1:04:eb:be:a4:55:e2:d9:8c:37:
         11:50:01:0d:1d:79:84:75:4f:8a:06:7b:f2:df:e3:e3:9f:92:
         03:79:d4:3f:34:6d:59:b3:c8:e2:25:73:ee:70:44:5b:bb:24:
         63:f0:d7:16:36:0f:5d:5b:c0:1a:45:f8:72:a0:ab:d1:0e:29:
         9e:02:50:d1:be:7d:36:95:df:db:e5:37:1c:09:5d:fa:53:56:
         f9:3c:34:c9:e6:51:e2:c9:7e:a8:14:36:38:c9:93:30:e9:ec:
         4a:c8:8b:6d:36:0c:bb:fc:e7:08:45:74:8a:d6:a1:a5:94:cc:
         e7:89:f1:9f:a6:1b:e7:d3:8e:59:ae:8a:6b:7a:63:5c:03:5b:
         44:5b:79:b2:81:1b:fd:69:51:d7:96:5b:2b:3f:3e:aa:a5:d8:
         f5:64:51:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtDJRbUxWcCxjbjv80jluJOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YzVhNzZmMjhiNzFlYThkYmY5OTlhYmFhYjdhNjU5ODM5
YWMxODIwHhcNMjUxMjIxMjMwMTAyWhcNMjUxMjIyMjMwMTAyWjAzMTEwLwYDVQQD
Eyg5NDVkMWQxYzNmNDQ1ZTdiNDAwYjgzODFkMTVlOTU0NTA2MjhjODgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmEZZES/pCq9nf46n14EyB/8YErB
/aIp3KE7yllXoWgul9pS9xIHIqZxlshyfMn7w0DJi4f9Yv0pGitx4cA9gXzHt9PH
2FUustqJuqQtiwxftfQ+4d9XekY6UJqh8vWr5S1ERrIFY+Tm/CKLUPAcokeeK5KI
OU/MxutRue2DKyRj7dRPHWw5N+r1JmLiwmo9nEpw8AY+t6Pns5zbUKmQW62Juhuv
6q5bWW7i2DrrDJqcciL4b8kzx9ItmkdQc1d6ZaUiD0lZOjOFQluujKpy2HvrAweX
T8l62YXczy+osAGNvu7k/GjrGkBjenx9O4FTaZN+6HM02fuAbgCj67LRjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRdHRw/RF57QAuDgdFelUUGKMiBMB8GA1UdIwQY
MBaAFFfFp28otx6o2/mZq6q3plmDmsGCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjhXbmJ5aTNIcWpiLVptcnFyZW1XWU9hd1lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9jMzJiOWQtOGM3Yy00NDQxLWJkYjEt
NmE2ODI1MWYxMzg3LzEvVjhXbmJ5aTNIcWpiLVptcnFyZW1XWU9hd1lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9jMzJiOWQtOGM3Yy00NDQxLWJkYjEtNmE2ODI1MWYxMzg3
LzEvVjhXbmJ5aTNIcWpiLVptcnFyZW1XWU9hd1lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN2fA807J
p/yTRBUCeO3a0I5mTYMUlid0DbRs6/amjPn60IgjnjR9vOAonqx+mndxwioYm+DG
TXuUI+gncRaeO1AxjRVxY+nZ+QjiKALiDu4W44zvKE4bE9Z/ygsww5RAIG+hBOu+
pFXi2Yw3EVABDR15hHVPigZ78t/j45+SA3nUPzRtWbPI4iVz7nBEW7skY/DXFjYP
XVvAGkX4cqCr0Q4pngJQ0b59NpXf2+U3HAld+lNW+Tw0yeZR4sl+qBQ2OMmTMOns
SsiLbTYMu/znCEV0itahpZTM54nxn6Yb59OOWa6Ka3pjXANbRFt5soEb/WlR15Zb
Kz8+qqXY9WRRvA==
-----END CERTIFICATE-----
Generated at Mon Dec 22 02:03:37 2025 by rpki-client