This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.mft
File:                     V-iYv0IJJPl2ta5FEQi55qAfx9w.mft (raw, json)
Hash identifier:          HFd643BepZSx51wIyY5h6MDDkxmfMuJVLLaQ2Tw9kdQ=
Subject key identifier:   94:AB:82:47:7C:51:80:5C:FE:5D:32:2D:76:36:C0:99:BB:B3:FB:94
Authority key identifier: 57:E8:98:BF:42:09:24:F9:76:B5:AE:45:11:08:B9:E6:A0:1F:C7:DC
Certificate issuer:       /CN=57e898bf420924f976b5ae451108b9e6a01fc7dc
Certificate serial:       019B3F4831D8D5B397D6773A1E34AA297E6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.mft
Manifest number:          178E
Signing time:             Sun 21 Dec 2025 05:00:54 +0000
Manifest this update:     Sun 21 Dec 2025 05:00:54 +0000
Manifest next update:     Mon 22 Dec 2025 05:00:54 +0000
Files and hashes:         1: JBCkmkN7TLYky4Fsa2gSyDNAKkc.roa (hash: IBbS5qZGseNgJY3l7vbqALCeu4LGMN6jlDSM2xfjd/4=)
                          2: QSbfKTjwWystyhGf93AKODi43Qw.roa (hash: QLAjdgH0y5Nvk5/OywYikq5KPIqG2c6CYLG+eQyHpSY=)
                          3: QiCIMLSQ6xUKKAhEEkWOQ1HOqUU.roa (hash: gD/soiLnkRYhC4oHF9Qb432dgDe3LXE42S5jerGuD1o=)
                          4: V-iYv0IJJPl2ta5FEQi55qAfx9w.crl (hash: ry0PAdc5AaGXHTSPgSaiP7AsYkxZoNF3n1eAfptYpRk=)
                          5: VXKr5MEJE5Jp7H1GSfscnPHtPz4.roa (hash: PdyLurVslNPMuyqlzMjVbGBFXSDBDCQHqjLoCljfQWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3f:48:31:d8:d5:b3:97:d6:77:3a:1e:34:aa:29:7e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57e898bf420924f976b5ae451108b9e6a01fc7dc
        Validity
            Not Before: Dec 21 05:00:54 2025 GMT
            Not After : Dec 22 05:00:54 2025 GMT
        Subject: CN=94ab82477c51805cfe5d322d7636c099bbb3fb94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5a:f5:37:a9:72:38:40:b6:38:2b:c6:c4:b9:
                    b3:9f:5b:5b:ca:ac:68:d7:ad:b1:cd:82:87:2d:04:
                    7d:f1:2d:58:3e:ae:cf:b2:d2:fd:0d:6b:f7:cd:a3:
                    09:f4:3a:a6:67:b2:76:7f:65:d5:dd:f3:97:8d:4d:
                    6f:0f:b2:dc:3e:17:1b:fb:76:ee:70:98:18:f4:28:
                    fc:85:6a:bf:39:c9:27:98:28:83:2b:c2:54:ef:5c:
                    7b:73:c5:1f:7b:f6:e1:7f:5c:9e:ca:b4:ba:28:e5:
                    37:2e:f0:c1:ac:1d:65:57:94:66:2b:5a:2c:23:d9:
                    11:7e:57:49:b1:c2:31:7f:ab:82:a6:ac:d4:f8:50:
                    90:19:cd:54:53:47:ee:a3:2d:e4:d5:58:75:67:46:
                    07:ec:e8:96:d6:74:bc:59:5e:92:53:07:e3:72:a8:
                    2f:fb:36:97:a8:fa:e1:df:09:31:78:aa:72:e5:45:
                    ec:1e:01:6a:5e:f6:1f:c3:df:44:8c:85:71:58:e9:
                    f1:75:3d:dd:93:ea:43:c6:84:95:ea:2f:a9:78:21:
                    15:7e:99:71:f8:2a:e5:85:47:e9:31:e8:cc:2c:a5:
                    e4:ca:b0:b7:cd:24:f2:05:37:46:92:64:33:c7:56:
                    8c:0f:45:db:7c:26:fb:14:56:3e:34:b7:fa:ee:95:
                    9f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:AB:82:47:7C:51:80:5C:FE:5D:32:2D:76:36:C0:99:BB:B3:FB:94
            X509v3 Authority Key Identifier:
                keyid:57:E8:98:BF:42:09:24:F9:76:B5:AE:45:11:08:B9:E6:A0:1F:C7:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:76:ce:cd:dd:f5:0f:d3:4e:04:40:5e:ef:a4:8b:9d:59:b4:
         ea:54:e5:58:61:49:5b:5d:1e:74:5a:29:79:b7:f6:5c:14:b7:
         4b:12:50:e6:9c:69:f1:00:39:c6:07:94:b4:89:6e:1b:a4:05:
         d6:98:2d:86:94:22:c2:b5:fb:fb:7c:a9:fd:ed:19:2e:1d:0e:
         9d:f3:8b:3e:04:03:3d:9e:80:ab:a3:5d:1a:09:27:4a:2c:9d:
         e1:2f:a8:84:df:55:31:e7:77:2d:cc:86:7b:ff:a5:78:65:8c:
         f6:f2:2d:27:b6:0c:89:f7:04:a8:d0:15:ec:0e:14:97:9c:b8:
         dc:80:cc:28:d9:23:1f:ad:d9:15:de:fd:b9:89:ec:e2:2b:79:
         13:cc:24:6d:d2:f0:d3:e9:a7:14:f4:cc:9a:c1:4e:9a:30:65:
         27:0c:4e:71:a0:b6:f1:d4:94:e8:09:ca:15:8e:81:59:43:ae:
         93:11:46:97:3d:b4:df:01:20:f4:08:7a:05:8c:f8:95:18:7b:
         dd:61:84:6b:f6:1f:07:2e:0c:6f:56:38:e9:29:3f:c0:6b:41:
         db:29:9d:bf:87:72:b9:d1:a3:91:c9:7a:69:4f:11:0f:82:07:
         3d:cd:91:be:15:f3:71:b4:7d:d3:9a:a1:43:89:1c:49:b6:4d:
         10:75:ff:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 09:55:17 2025 by rpki-client