This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
File:                     VMvaeLHRthPfVl_5lwC2rulA3j8.mft (raw, json)
Hash identifier:          DFCg5hlH0eBPD7L35mSNKb/0FKyiGGEtjxOvEtL5aqI=
Subject key identifier:   D8:54:D6:40:37:45:EF:E6:9B:07:88:56:BA:79:A0:72:7B:76:EE:E3
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Certificate issuer:       /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial:       019B3A5877FD32FE2A9FE6214CE274937D7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
Manifest number:          17B8
Signing time:             Sat 20 Dec 2025 06:00:34 +0000
Manifest this update:     Sat 20 Dec 2025 06:00:34 +0000
Manifest next update:     Sun 21 Dec 2025 06:00:34 +0000
Files and hashes:         1: 0BP0KGJkFndJVhg4iJyuEpAUh2Q.roa (hash: +xARcNUOy44/0IUgRyFkDdCWb9Bmo8nmFLSiePQUm68=)
                          2: 0cO4ncofuOOavd4WKDZZp3uCU2A.roa (hash: xLawauZ1tEe7YyvT9w+7DlBDWVL0vSX2Y3B7u+HqboM=)
                          3: 1-Ic1C_JQ8WFUDRbQVM_sqmSHG0I.roa (hash: o/km+tRaUdqzFsCA8CD11A4YOHN5+bCH+yPZnxaNKw4=)
                          4: 1-LkhLBKkcj54UocdAxlIInyFc8w.roa (hash: nBYN95YGAJSbiE6yyJzIhCMy20uciRwVyVUw4AqhZCw=)
                          5: 1-Qbe7ItKLmTD3ZT6I_tfhnKA1F0.roa (hash: 35+u2TcewFG5MPcgu5/CWUo29LHqw3M3ErLqVomO6t4=)
                          6: 2SHzeEjAqvcLgdp5WwX1vUVg_b4.roa (hash: Hzy7kWjWavQFtlwLS0CVQpm6M+pMHdbRv3cNRgmcINA=)
                          7: 2ujhB6VtG1wsMePDSGyrLHuqsz4.roa (hash: dhHK2KxyQ/AB3/IoaSgau9aQ0lHwQqIE9ZsDmZIVap8=)
                          8: 6FrDuCY1vKJvYiNSjUCWvFLPFVQ.roa (hash: GnbdXxClu5QJNyR80vuHFcpVcehYzwyRhjEjW9CIyZY=)
                          9: 8mMS3HIomrHZlr0tSi4nJre_iQ0.roa (hash: wtOrmgukYQjypE1HeG89vBeioWsg00xvgoLaY2Mxgzk=)
                          10: AexxvHfZyLr0cw61OjpBts2b0GQ.roa (hash: QoCYA+e6SeTGoP5GL2LflAJnXWlHIBqT4FaJWKFAKhA=)
                          11: CPKskOAtzA-egJ2CR-qs28FaTns.roa (hash: 7WyLrVE2Z+tn0PjSAarRuKoKdxJR60QxJCCY+0bTg+0=)
                          12: Gr71KmVq4Fpo3C-WiVN0x-J5iIs.roa (hash: IZ3fisAoqz1jDgEKtaHhs6iOQRRtsE2MhCoBcG5PSvQ=)
                          13: LCgkZwmbKkdjXPlAXVdt7CYkbQ0.roa (hash: erTzc9OKk7rHqCvgZhdmqWwLIgx/iZXuiMkBNi83xQ0=)
                          14: NX7DD1CV1Fm-vrBgY_U3AzFTBx4.roa (hash: 45fMWvWbQyGgbggvJSHlk9SqOTeUewhUmU7EOLYsR9A=)
                          15: Rx0GsudNXa3NlGsO3A-jTHYF3kc.roa (hash: CAOEV8Hvnr7hXFP4sBSOfWBU2brqmyY3T+FnKR9MbjA=)
                          16: S_GqD0SxmtRzhF8ypadzBGAiS7A.roa (hash: Dg2rDfJPUZ6kGhaJNzjZPCtWt9Kc0Jc5sYdqgfiK2HQ=)
                          17: VMvaeLHRthPfVl_5lwC2rulA3j8.crl (hash: pftgubS3mKaINlvuySKImNAPhrZDfz73EWdXh94VxY0=)
                          18: Vtfd1hM6TwLVIwuBpWAC2ArBtVs.roa (hash: v9qk0RO6muLVg9IyiMy1kdFG1e9XdhyvAHBpmi1n9aE=)
                          19: VxzvbbNUAObmMU0IpKcdnXZ1BxE.roa (hash: O0rL/Xrm85XOk/qFl3MooUNeHPMNMB+5ehqcO2RLcWI=)
                          20: WoVaijlh7MVqQV4JpMFA6Zv1lP8.roa (hash: 93LhitKZk/dhVJfftIZflc4ldcyFRpIg6pCX+BpkdaU=)
                          21: X1FkyHdlJ2lKyFx0O-FyBfUYZ8s.roa (hash: xR4PGLqAg+mGtPWKDhZKuoyTeYFeaF4MEFWpcGPlh5E=)
                          22: aTyGHkd8L6xF1SuLySccXunrA14.roa (hash: 8AYIzW3md+dTPySlsQWwzNX5dISOdYU4A3Ie+qx0kR4=)
                          23: bJs1FoASoLTX-56punkdrjgk07c.roa (hash: 5XyZvlKUhwMZMJ1oB3lmUtuNgNKemPK/RQ02Zbhe2Ms=)
                          24: bb-Qgt64DIFzbq8j4XbnCr7ZXgU.roa (hash: xz9XLPoWhll2io7c8D81Bp9ZhnbsvdfV3miuDw9HOHQ=)
                          25: cYwwzAgaXEBJvEPe2tv_6hgv2Tw.roa (hash: CRrt42i3+A6BQui4Tr26+gGEI2j+qfNbfZYM48UONZ4=)
                          26: dJPP-PkBi33AJe9GjVGArq6S2Qk.roa (hash: 133fliltidDXZK3M/DsnNTOIe10JxO4p3F5kuAt/Mes=)
                          27: eQ-tpFbE-mG9mGrDlNWU1oCquvI.roa (hash: Zt2Vk5h5dO9kYMTWAEIEMaZQ+tgV3DRBAIFwRe9QmoA=)
                          28: knIR7TiOanL5_UuiRkjg6PExYPA.roa (hash: ERYy0uVVdjAIjaG9rMyUI8jUIPoDAHs5rghe95okyd0=)
                          29: kqJKsrZASQy9xjB7FaA-KoQudY8.roa (hash: vQnCRMgGVhLMtPMLsspsTBbi23N1aa399srxA6NSARk=)
                          30: ljD_gVu1qs2Kl-0qKDp3UUaMANQ.roa (hash: YcPEsfq9GWzefDfl1aj8X/VvzCJxb2lIQMIp+xhIHmg=)
                          31: m-V1kiaksKavIZgS1xPF2dZqoHs.roa (hash: HcrfgfAGDi+sUTt8LJbJ88dGJyfIH4VygN2JiXexWI8=)
                          32: m-w-pPX-GIsFJGbFqTvk5xT9ShI.roa (hash: jmwgZACI5VikW6OLBks2wyMBOSwl5hT2QqdEebOMYEU=)
                          33: nHeF5wKOyjhxyKKHp_2iztg8Svo.roa (hash: kd9/vAT6su/4Ux9JkoU5RsRNOjaaYL2ILIdnRJ4W0+w=)
                          34: sKgxdVIxf_7aOcgI7uaLjKzXJaE.roa (hash: b/4TyNfL8tc0RdYYjm6a6HPdIzANJIlY5JKGTcbxZLk=)
                          35: vF_oOv9r76q0FdPzPzMSZ_Qg32Q.roa (hash: e1pIcFPEPVHgPSZ/4xAXLRUAcbxV8wPmoubi9BuN51c=)
                          36: xM1iFGS6QuBSv90t-4LAaHnC5SQ.roa (hash: GrtU+4+6ynaLDRxKv11eYK+Mg2EvgzvT4avZIVJ491s=)
                          37: zSzl34L5RETNDTSuPWiH6TL51X4.roa (hash: FEK4ufmfWlN5aNgSIE6cz0/2QdmOZQ5aNRL/DGy69S4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3a:58:77:fd:32:fe:2a:9f:e6:21:4c:e2:74:93:7d:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
        Validity
            Not Before: Dec 20 06:00:34 2025 GMT
            Not After : Dec 21 06:00:34 2025 GMT
        Subject: CN=d854d6403745efe69b078856ba79a0727b76eee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:96:3d:89:af:e6:4f:3e:7d:9c:12:e0:ba:14:
                    5d:0f:35:e1:b8:b1:ac:e5:46:17:e9:9c:44:76:2c:
                    98:d9:e2:d0:fd:fe:65:89:30:63:5b:ef:2d:f7:2b:
                    de:b5:32:3a:f9:57:c7:94:d9:3f:a8:cb:3b:22:35:
                    23:aa:3c:1e:ba:f5:d2:4b:c1:8d:6a:f2:3e:bd:68:
                    bd:8d:46:e6:44:0e:f8:68:fc:fa:fe:71:57:d0:8a:
                    5a:4c:af:0b:19:8a:2f:af:e7:9d:3c:f3:4e:1e:9b:
                    1d:44:2c:2b:0c:f1:93:8e:67:64:90:9b:db:8d:c6:
                    fe:77:32:52:a4:b7:d6:be:77:9b:9d:0a:4f:74:ea:
                    6a:ae:b4:cc:c9:7c:0a:80:97:31:52:fc:e1:a6:78:
                    89:09:c1:1a:e8:d2:b7:39:70:a8:4d:e6:58:50:c9:
                    99:cc:08:5b:ee:9a:1e:7f:54:28:2a:19:71:4d:fa:
                    e8:6c:60:1a:94:2d:a5:1a:98:b7:58:a6:c6:98:74:
                    33:aa:b3:a6:99:bf:43:75:dd:1a:82:10:eb:6f:5c:
                    96:d5:6d:b2:ab:73:99:8c:65:f4:b6:ff:1b:e1:e5:
                    1a:48:c4:56:a4:b9:d1:d5:72:53:58:52:50:9a:16:
                    47:54:71:63:66:54:fe:2a:26:46:ec:b2:a7:69:e0:
                    ec:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:54:D6:40:37:45:EF:E6:9B:07:88:56:BA:79:A0:72:7B:76:EE:E3
            X509v3 Authority Key Identifier:
                keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:c4:2a:13:ae:5c:b9:54:56:19:18:3c:08:a9:88:0a:21:12:
         7d:71:d2:31:ce:6d:6b:1d:86:53:2e:9a:65:f0:05:6f:c2:c4:
         e7:21:75:e5:7e:da:10:2d:d0:89:98:71:3e:04:79:3b:94:0f:
         98:a7:b8:ee:d0:35:82:50:a3:a6:06:94:c9:6f:5c:1c:72:55:
         fc:00:b6:80:35:6a:7b:53:76:77:61:a3:28:8b:8d:b3:06:c0:
         46:e6:bb:1c:28:ef:d8:3e:a8:76:0a:47:4d:56:34:5c:c7:c6:
         29:d0:32:41:28:4e:60:35:26:57:11:9c:ab:08:f4:25:72:d9:
         d6:80:6f:4f:9d:3c:8b:eb:b5:21:9a:2f:9b:d5:dc:f1:4f:03:
         28:7d:fa:21:2c:51:82:32:de:f4:db:13:b5:f2:19:95:79:6c:
         2d:5e:5f:49:fb:77:c8:94:b3:12:56:2e:ce:f0:a9:1a:83:16:
         7e:06:bc:40:5a:51:3a:d3:53:6a:d3:e4:e1:e5:3c:12:4a:7d:
         2f:15:c0:b9:25:ac:6f:1f:e5:57:ce:fc:01:b8:b7:a7:0f:55:
         3e:bb:22:c4:d5:61:04:e5:8f:2c:8e:08:77:99:47:7a:0a:be:
         7b:60:8e:87:1b:3f:ff:fa:49:43:95:59:9b:a6:0b:f3:5a:1b:
         71:75:08:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:08:04 2025 by rpki-client