This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
File:                     vBWSH1umvRR_9AAReqlzhjPxWH0.mft (raw, json)
Hash identifier:          KpbrJYEpTWsNVfvZy+AbVVqjMv4YaSYxtO7gguuYgT0=
Subject key identifier:   6E:32:96:3C:8E:E9:19:89:30:F2:67:8C:22:86:CB:D2:51:7A:36:45
Authority key identifier: BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D
Certificate issuer:       /CN=bc15921f5ba6bd147ff400117aa9738633f1587d
Certificate serial:       019B3C0FE108B0DAFE8129F129014E3B5E1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
Manifest number:          1790
Signing time:             Sat 20 Dec 2025 14:00:32 +0000
Manifest this update:     Sat 20 Dec 2025 14:00:32 +0000
Manifest next update:     Sun 21 Dec 2025 14:00:32 +0000
Files and hashes:         1: U77ECX22fJUQ9Szp6lrBtYkTrQY.roa (hash: jYSTL2r9IXnyVhPYQjdEYfmkmSawy+babAO2lCpGCAs=)
                          2: VJMTsLB0DoA7dIhG-PlGlwqEhfg.roa (hash: zqcr9YUGQTYEQLg2JeQTvIegn0/uHC3qCTzqhOaEtjE=)
                          3: fyx1ny3-_FInDq0dmTByBfBn0j8.roa (hash: oB7Zx3DOWzJhigoLM671xc6bT3MSHf/pGnlfM7WSuvs=)
                          4: vBWSH1umvRR_9AAReqlzhjPxWH0.crl (hash: J2/tSMtCJ8QW7Sk85gsDr3AMwRDSWnhhLku4VCBH/uU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 09:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:0f:e1:08:b0:da:fe:81:29:f1:29:01:4e:3b:5e:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc15921f5ba6bd147ff400117aa9738633f1587d
        Validity
            Not Before: Dec 20 14:00:32 2025 GMT
            Not After : Dec 21 14:00:32 2025 GMT
        Subject: CN=6e32963c8ee9198930f2678c2286cbd2517a3645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:72:e6:89:e7:49:b5:29:21:2e:d0:75:97:7b:
                    05:eb:75:38:5e:02:e1:03:85:1a:9f:16:b7:eb:2e:
                    99:32:d8:c6:ee:95:61:e2:86:2e:25:a9:d0:8b:9d:
                    f1:4e:66:26:de:f0:62:ec:fd:6c:c2:d5:b8:eb:60:
                    da:41:f6:54:46:ff:70:83:b8:b0:66:d3:f6:07:3b:
                    90:01:0a:3b:27:a2:cf:84:7b:cd:60:5a:77:34:b3:
                    5a:c6:6f:69:a2:ec:7d:82:50:da:bd:27:27:fd:a0:
                    b7:6b:e5:ba:eb:85:28:aa:10:da:67:c1:86:a1:3e:
                    ce:7b:89:e2:b9:18:db:85:11:0d:5a:e5:0d:df:6b:
                    b8:e0:51:13:c9:4d:b0:de:1e:f1:ea:80:b5:1a:dc:
                    ee:e5:e3:a1:78:35:8e:17:ad:aa:bf:94:f8:3a:07:
                    fb:0b:fc:c3:00:25:1c:86:be:6f:4a:cb:27:94:49:
                    09:fd:ec:58:2b:43:b7:5d:f1:9a:f1:c3:57:cf:75:
                    54:d1:9a:90:19:72:11:c5:22:6e:7c:29:2d:3c:35:
                    01:05:a1:86:5d:2a:8b:4f:47:c1:0b:be:bd:9a:dc:
                    1d:4a:34:6a:56:28:aa:5b:cb:d4:fd:e0:0e:a6:56:
                    f1:aa:ae:51:eb:b7:75:d4:b1:67:fc:b5:c1:e1:c6:
                    08:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:32:96:3C:8E:E9:19:89:30:F2:67:8C:22:86:CB:D2:51:7A:36:45
            X509v3 Authority Key Identifier:
                keyid:BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:d5:18:61:68:3c:02:68:6e:9e:75:f6:9c:64:a3:52:a4:57:
         5b:d0:f7:b5:a0:6c:7c:7d:0a:7f:3a:18:7a:8f:af:46:39:48:
         d6:f6:cd:76:e8:e2:56:ca:aa:7f:2c:21:da:bb:c1:5a:f7:79:
         f0:07:83:ce:69:35:61:65:37:d1:13:e0:9c:c0:15:02:e4:b0:
         6f:a1:1a:c0:ed:d6:91:a3:b8:07:eb:e7:b7:ff:b5:40:21:e7:
         9d:f0:7d:6c:bf:3a:c5:53:c0:c3:ef:89:7b:1b:35:77:f7:e2:
         b8:5a:0d:a0:4e:a2:ff:76:b5:fa:9f:37:a1:a6:2b:45:17:39:
         bf:0a:06:81:c2:2c:80:04:c3:ae:c4:b3:fe:4f:ec:49:ed:76:
         12:15:3c:8a:69:78:8b:10:d8:15:04:9c:2f:70:e4:cb:08:de:
         fd:3e:72:c5:66:53:92:3f:7c:6f:37:d7:b3:c3:b2:b5:16:ce:
         02:d3:ed:6c:de:10:4a:61:03:ff:14:d8:42:77:59:dd:9f:1a:
         77:04:8f:6c:72:c9:55:15:9a:ef:4a:a9:9b:57:aa:2a:cd:5a:
         c1:3a:2c:d2:fd:6d:97:14:f1:77:7b:ba:11:62:62:e0:05:f9:
         da:92:04:1e:80:63:46:5f:d4:6f:05:ba:c2:cf:5c:14:06:5f:
         8e:6f:8b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 17:17:57 2025 by rpki-client