This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
File:                     vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft (raw, json)
Hash identifier:          VQPAHVpi3g1VgDLzhcIFGdfHS82U+TaR/7TCrZgMLeY=
Subject key identifier:   A2:92:D7:1C:F9:F9:F0:D4:2A:57:2B:34:B4:EB:C1:6C:46:12:2C:A6
Authority key identifier: BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01
Certificate issuer:       /CN=bccd52a6a7f957171b15f7be5e20916428369401
Certificate serial:       019B37579A63609472F405B99B1FD72EC19E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
Manifest number:          0D94
Signing time:             Fri 19 Dec 2025 16:00:46 +0000
Manifest this update:     Fri 19 Dec 2025 16:00:46 +0000
Manifest next update:     Sat 20 Dec 2025 16:00:46 +0000
Files and hashes:         1: MlrZXY467hcKkUIRGGimefuysqw.roa (hash: 8xTFNLaI9ZUN0WOAqjHb1HCh8TndFu6MdTiusUYVPKk=)
                          2: PH8esjlGPr5XZMLNZBxjvSMMmns.roa (hash: SLv7cyYvUTE3oyGowfNA00S/oJCYt4i19Q1cbVhOESM=)
                          3: Yg6DTQFOxUODDTv6-H6dvQEVbTM.roa (hash: PJ7rQ8sF0YgySYec9mOacXXxzI2i0BkcNGpRRCBKL7I=)
                          4: vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl (hash: b4yreSHxGYYEOXjZmwMgf1KDmMRubb/qp3iK+0osPUM=)
                          5: vy4QEQmpfFko8qvKIrvH3kTRn8Q.roa (hash: JR6T1NXgPEvUk1k6IDW5N+7/dwOJQQ0UovxQWbtVdiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:57:9a:63:60:94:72:f4:05:b9:9b:1f:d7:2e:c1:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bccd52a6a7f957171b15f7be5e20916428369401
        Validity
            Not Before: Dec 19 16:00:46 2025 GMT
            Not After : Dec 20 16:00:46 2025 GMT
        Subject: CN=a292d71cf9f9f0d42a572b34b4ebc16c46122ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:39:bb:b9:45:de:52:c4:28:5c:90:2a:14:db:
                    ea:31:89:5c:6b:7f:c1:44:f1:18:ab:61:fc:71:8a:
                    f3:8b:8a:47:81:ae:e8:07:27:d4:80:49:63:b7:a3:
                    a4:57:cd:15:1d:ce:8b:9c:c8:31:0d:79:ca:c4:51:
                    19:03:a5:ef:e3:a8:7f:f9:21:59:d9:5d:46:f1:f0:
                    2b:f4:da:b1:13:43:5a:85:3c:6f:a4:c3:cc:93:2c:
                    c9:1b:0e:e1:36:97:e4:67:91:17:f4:90:c4:55:91:
                    ec:d3:99:ee:38:b6:97:29:75:42:8f:1a:85:6d:80:
                    d1:dd:fa:d9:f5:29:fd:2c:23:01:ee:cc:63:35:d8:
                    28:72:5c:d9:e3:c3:a1:10:b4:66:25:97:3d:1d:fb:
                    23:2c:fb:eb:e7:23:d6:44:00:b7:10:57:95:7d:66:
                    c9:05:18:4f:c4:87:bd:0b:54:e6:b7:a1:3d:1b:89:
                    35:d4:50:2f:1f:ef:a9:a8:d4:df:21:9e:0a:00:85:
                    e3:d1:f8:6c:7f:06:21:31:57:da:44:3a:ab:77:11:
                    07:9c:93:92:70:7e:9b:59:07:94:0f:fe:c3:62:a8:
                    14:4c:f9:e3:17:33:47:3f:66:c9:79:17:e6:ed:7c:
                    e3:ad:17:fa:36:36:8a:5f:8f:18:99:f6:35:1b:9a:
                    30:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:92:D7:1C:F9:F9:F0:D4:2A:57:2B:34:B4:EB:C1:6C:46:12:2C:A6
            X509v3 Authority Key Identifier:
                keyid:BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:85:09:91:5a:7f:f4:2f:13:66:38:bf:03:be:46:7c:f5:fa:
         30:f2:fa:c4:5c:4a:38:bb:6b:08:00:52:5a:d8:7c:aa:65:4a:
         22:e8:67:2f:35:89:49:05:9f:35:99:c8:73:e3:6b:17:e4:fb:
         b9:a4:17:c3:39:04:a5:e4:75:30:82:1f:e2:85:e4:93:99:a3:
         0b:b3:b9:d2:c4:f5:d0:e9:33:59:0a:19:18:1a:ea:d0:c9:7a:
         59:5a:2e:99:3f:48:ea:41:17:ec:77:53:ba:2d:d1:54:cb:51:
         25:0f:05:61:30:57:db:59:b8:4f:fc:04:cf:9c:fc:52:ec:ab:
         67:bb:2c:12:03:c5:12:ec:21:d2:7a:fb:33:a2:cc:50:49:30:
         d2:c3:ff:96:2e:9d:b9:61:54:69:0e:c7:62:02:98:db:a4:83:
         a3:ee:2c:48:87:66:12:27:bd:85:97:05:6b:4b:f2:5c:e2:62:
         8d:2b:17:27:96:c6:e5:03:0e:bb:da:83:84:2c:c1:87:b7:a3:
         69:e5:a7:9b:93:e1:51:a1:57:5f:68:ed:0a:9f:d3:93:57:60:
         aa:c4:3a:a5:a2:3e:8d:63:f4:66:4c:92:ca:d7:fa:d6:25:21:
         58:f4:58:39:a3:6f:c7:e8:4b:ec:0d:0d:96:f5:aa:a7:92:9c:
         bd:0f:6b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:25:00 2025 by rpki-client