This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
File:                     vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft (raw, json)
Hash identifier:          oQ3yx4Msu98NgUNYf0Lr1aP7WkIdxBIrBr/qxhxdTKc=
Subject key identifier:   57:74:FF:F8:33:17:2F:6A:F8:90:B9:F0:DC:CF:96:2B:6B:B6:B4:33
Authority key identifier: BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01
Certificate issuer:       /CN=bccd52a6a7f957171b15f7be5e20916428369401
Certificate serial:       019B3B34667E911F7CA9D26369A2E93BDCAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
Manifest number:          0D96
Signing time:             Sat 20 Dec 2025 10:00:48 +0000
Manifest this update:     Sat 20 Dec 2025 10:00:48 +0000
Manifest next update:     Sun 21 Dec 2025 10:00:48 +0000
Files and hashes:         1: MlrZXY467hcKkUIRGGimefuysqw.roa (hash: 8xTFNLaI9ZUN0WOAqjHb1HCh8TndFu6MdTiusUYVPKk=)
                          2: PH8esjlGPr5XZMLNZBxjvSMMmns.roa (hash: SLv7cyYvUTE3oyGowfNA00S/oJCYt4i19Q1cbVhOESM=)
                          3: Yg6DTQFOxUODDTv6-H6dvQEVbTM.roa (hash: PJ7rQ8sF0YgySYec9mOacXXxzI2i0BkcNGpRRCBKL7I=)
                          4: vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl (hash: g1RaHpV+nC1w+PZyEhCbFeCq4j92N6RF820+7Pjg9a8=)
                          5: vy4QEQmpfFko8qvKIrvH3kTRn8Q.roa (hash: JR6T1NXgPEvUk1k6IDW5N+7/dwOJQQ0UovxQWbtVdiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 10:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3b:34:66:7e:91:1f:7c:a9:d2:63:69:a2:e9:3b:dc:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bccd52a6a7f957171b15f7be5e20916428369401
        Validity
            Not Before: Dec 20 10:00:48 2025 GMT
            Not After : Dec 21 10:00:48 2025 GMT
        Subject: CN=5774fff833172f6af890b9f0dccf962b6bb6b433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:91:6a:cf:c6:5f:a6:fe:63:ff:ce:56:3e:32:
                    11:48:78:5a:dc:62:43:bd:76:38:96:98:13:55:ae:
                    df:44:e3:59:1b:8c:ad:7e:00:3d:95:30:63:85:93:
                    8d:6a:57:bd:98:37:a6:aa:c5:03:ff:d3:2c:50:02:
                    8d:31:de:d7:b9:88:b1:5e:35:fd:46:99:c1:b5:2d:
                    3b:64:b5:b4:20:ba:ac:85:c4:9a:86:2f:2e:22:be:
                    c2:17:49:11:87:0e:5b:d8:54:12:c4:77:f7:3c:d0:
                    dc:3e:87:e4:bf:db:a8:f6:2e:a8:e4:67:c9:2d:aa:
                    7c:b2:40:11:80:c3:3e:25:6a:68:49:1e:71:1b:b9:
                    65:5d:45:87:14:4b:42:12:f2:ea:9e:8d:eb:a6:27:
                    88:2d:bb:aa:7e:3f:c3:7d:55:6a:c3:bd:9f:dd:15:
                    17:12:50:f8:98:42:79:d2:44:dd:b7:99:3d:de:38:
                    3f:fe:af:ba:8b:9b:0a:43:ae:b1:99:eb:43:a6:da:
                    0f:a7:d5:f6:1c:d2:35:1e:77:4b:9d:9d:a9:0f:35:
                    20:5e:23:5e:cb:6c:e4:8b:5f:05:af:b5:a8:69:e1:
                    ed:49:e2:1e:c4:93:9d:82:87:d4:29:c7:d3:66:cf:
                    f2:ce:fd:00:5e:e4:8a:2d:5f:00:f8:8c:ae:6f:e4:
                    fa:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:74:FF:F8:33:17:2F:6A:F8:90:B9:F0:DC:CF:96:2B:6B:B6:B4:33
            X509v3 Authority Key Identifier:
                keyid:BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:84:b3:53:cf:a0:47:71:89:1c:f9:4a:86:c4:ff:09:21:90:
         97:e5:8c:88:aa:ab:ae:b0:5a:50:b2:80:b4:d3:e8:18:6e:38:
         61:bd:3a:d5:7c:c0:c1:05:bb:81:8d:7a:70:8d:bb:31:bb:e2:
         b4:20:2e:b3:25:93:ac:34:81:5e:10:82:7f:1a:ef:22:19:25:
         5f:2e:4c:39:c3:a8:ec:c7:ba:07:6f:f2:14:00:a1:89:02:d9:
         bd:f2:32:27:b5:23:cb:a1:17:ac:7c:0a:3a:09:34:bc:a7:05:
         9a:f5:a7:c5:6a:b8:59:ad:39:93:00:c6:d2:5b:a2:cb:2c:fd:
         64:de:33:5a:dc:ee:ba:76:34:3d:e5:28:2d:48:33:ab:f0:1f:
         28:a9:2e:70:01:4e:1e:1e:10:8f:ec:94:c9:49:65:78:f5:20:
         e2:46:c0:95:16:19:88:71:00:32:a1:f2:92:b2:8b:1f:18:a9:
         b8:63:db:54:db:2c:43:eb:36:24:ec:c6:24:0f:6b:d2:7d:85:
         61:8d:7a:31:98:78:80:97:d8:18:04:24:e1:6a:0a:5d:da:d9:
         60:2c:57:62:16:6d:b3:0b:88:db:15:ff:29:5c:a5:b9:31:88:
         08:ae:61:51:97:c8:fc:45:62:52:73:95:a9:41:0b:31:ba:03:
         03:8c:9b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:52:27 2025 by rpki-client