This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
File:                     VbryaWdRCzxS5G0dxZOWfN8p-ck.mft (raw, json)
Hash identifier:          rMZctSvYWyRNx33sx76GhwrKGw+OmwXD4JF1AXjVbIg=
Subject key identifier:   9F:EA:61:5B:0B:7D:E4:A4:D4:FF:E2:74:D2:75:93:20:46:2F:DC:BB
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Certificate issuer:       /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial:       019B37C5C29BE0054AE0B158DE697390C8EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
Manifest number:          0379
Signing time:             Fri 19 Dec 2025 18:01:05 +0000
Manifest this update:     Fri 19 Dec 2025 18:01:05 +0000
Manifest next update:     Sat 20 Dec 2025 18:01:05 +0000
Files and hashes:         1: 5f-dp7zmm1xpqS35G4SxPyQsKzU.roa (hash: /VV17LXXYckmyZ3LkMVCcWjEWZ1t6Ui72lZHti3idJI=)
                          2: 6Kmf8SLIDhtvY0o72b-e_ez1gvA.roa (hash: j3CAl37tBzlpnx387FdZVM64alBCKbR8QlCCeFxtnL8=)
                          3: B60QCMfe5Idbi40lnblDmIBmfXQ.roa (hash: c70cVejEHLSQPqTbkI8TzzIj/J+95+pPANgvJ2wbZJo=)
                          4: BmRc3vRXaWW56t-nNSSPweNCiMs.roa (hash: 2GH6+StvR4rGLXfNXO4fC1fEOLCOQlhsSaL6sBf6AhI=)
                          5: Bx92QWIrUlfVS_-E4_xE9XTPr7Y.roa (hash: XpukQ9fApEr6z3FCcGftNMPrOQrUNSip3OXRdRJdiT4=)
                          6: FM5BR3fy8jLa_aS_duxaLPD1zS0.roa (hash: E3RNJGjOtbojon2Sppjcze5zlMUeT+F/SdNiHT4AD/A=)
                          7: IBOCMLtB9SlMS-tohbmgCBrthAM.roa (hash: +UtnxSEyg9bxUTqT8YASdLBvopMgQOQk8XviZQHhIXQ=)
                          8: IJZ8naEGV7SdTGmdWR7BmWH0DgQ.roa (hash: OZaicQVaHJASypQwDKkjNaBMS0R4zrdxc4MziKO9rQw=)
                          9: IjQyedIfG0qbrKkwd6OwgKQX6j0.roa (hash: eVmAlFJQx8o9ET5d9SW4N0YDtTfv3MnRawKOVITr4tU=)
                          10: KXOgKF9ToP-QnSRqqqDvDca4CRs.roa (hash: 3ID517A5cdHZzJ1LOc50CxGLwqSACg6grnxMrHtB8i8=)
                          11: N1nl601Hr6wJILJL_hgwD9Q0g2I.roa (hash: pIuSTy4n0CatQtYZ3CMUWwjxxWlZD8T/OaYfEUfURDo=)
                          12: RG1czkXWXGLP-4EdUs0izSShVbo.roa (hash: NPiGyzK9BI6kcQM474jIgxhIQuYRLPRxN2Rv0crLLb0=)
                          13: Ref7JhLjzI48B1WSq7MyNA31Yw4.roa (hash: YdImwgd72YksA2fMhTdPfW38xSn7w/QnIu7MrYbR78A=)
                          14: UpdorckKAviPtXnc3P5_vHsstcQ.roa (hash: ooJMnGz+B+dPJaGV/iALnmX71ASJ7bqGcQilmTah56E=)
                          15: VbryaWdRCzxS5G0dxZOWfN8p-ck.crl (hash: h0xs+InFQXEYC29gBa2OKrEMbNHdN3UDHIueV/TsDnM=)
                          16: ZuDOaLlmvBS_T6ACbcDR9tJINLg.roa (hash: D+CShXZKLL9oHIWJLvakbCmqAweC612+uWibYooQqPQ=)
                          17: _H0SXPGsnP8Mcli9NZFDZjfY1Zo.roa (hash: hcZN9Y/WVs+Jvfj2h19TEJ5/Vmx92kJ//R7/XLVV1AM=)
                          18: _abBv2Z4ueQE7wSnfYxgydB_BM0.roa (hash: 3IOCdjYObJ5KJJCmqqgmbhfx51pvGE0eK742ZYfwGCI=)
                          19: doYvufKMi4jm03VH6RLq3eZewAA.roa (hash: EhJBbYf1isS2uAf8HQUnHDQB/+isJncCcXILIMluQQ4=)
                          20: eJAfN54IVDM9zxmQ8ilO1hvAK9Y.roa (hash: vXrGP/zoPi072poUBvOCivcX7v6J3n6jY3oSSpibSQ0=)
                          21: hMEBC1zS1c8sAl6dLsAg_HiWCbk.roa (hash: d5aE0237PObi3lQ9lHWVJ8Zp5KEO+pn/hpTA26Y4sSI=)
                          22: jrgMSskhT0megkHs6B0DtWXkMyw.roa (hash: KC6QUuGpGxoExz21SCbzEH1LAyNK0e/ekmIFKAWbsMk=)
                          23: l7z9gRq1cnQs_wN6y_k94oBYE1w.roa (hash: cA4fD7YFoUALJX+r2CwONaKqktMmrC06jt+qqYXcbRM=)
                          24: pHZpiMb5Vq0up-6CeO0nMIW4Mwo.roa (hash: ErsQAE7yFJ1utzq5R5esTRBd9mERh0Hyf1eb2KuKw/U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:c5:c2:9b:e0:05:4a:e0:b1:58:de:69:73:90:c8:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
        Validity
            Not Before: Dec 19 18:01:05 2025 GMT
            Not After : Dec 20 18:01:05 2025 GMT
        Subject: CN=9fea615b0b7de4a4d4ffe274d2759320462fdcbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f6:83:57:ac:ff:e9:ed:4b:49:22:6f:d6:0f:
                    d6:3f:b5:f1:29:7f:71:8e:e9:b8:9d:13:65:78:76:
                    e1:a8:bc:56:8b:6f:1c:62:24:1c:a7:64:98:ed:57:
                    76:3b:24:a3:ab:17:15:16:02:90:d1:b1:85:cc:54:
                    a5:9a:a0:a7:e5:47:c6:16:be:8b:c8:d6:52:03:12:
                    27:f9:d6:35:6d:33:c8:92:92:45:38:62:9c:27:2c:
                    50:7e:72:78:fd:21:fa:13:6d:5f:96:27:26:2a:d8:
                    32:86:20:68:10:ac:f5:d8:ca:1c:84:3e:be:99:a1:
                    39:fc:24:f0:59:0f:40:f9:fc:76:7c:4f:78:ab:e9:
                    66:cb:b3:c2:7b:95:28:89:10:f1:3e:80:d5:ea:e1:
                    04:94:90:c5:a9:a9:85:79:68:66:62:ab:00:01:f2:
                    57:c4:46:f1:34:7e:36:44:b5:af:60:27:96:88:e0:
                    b0:93:6d:55:34:88:4a:0b:32:49:29:c1:30:6f:82:
                    59:9b:d7:f2:b4:f5:73:44:36:5e:5c:45:d6:fd:d8:
                    6b:5d:ae:c7:3e:fb:f7:d0:61:3b:9c:d4:1a:37:5b:
                    77:f7:67:83:08:f0:3e:69:d6:12:e1:6f:91:6e:cf:
                    67:ed:b1:be:7b:48:ec:86:ff:1c:34:48:b8:19:b3:
                    90:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:EA:61:5B:0B:7D:E4:A4:D4:FF:E2:74:D2:75:93:20:46:2F:DC:BB
            X509v3 Authority Key Identifier:
                keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:b3:a7:6d:de:a6:f1:8b:c0:26:b8:74:f4:e0:4e:2f:91:5c:
         81:ef:93:93:f8:ee:da:84:15:1f:c5:50:8b:69:37:f9:72:6c:
         f1:e9:22:1f:b3:cc:ad:93:3a:1b:f6:f2:ed:8b:f7:ac:45:4e:
         ca:6c:b4:1c:1a:65:eb:5e:fd:d0:42:9b:93:5c:69:b6:f6:70:
         17:c4:1e:39:e1:ad:5c:3b:fc:9d:14:31:0c:5b:a4:e2:f6:2a:
         e5:f7:84:2b:30:c5:ee:1c:58:05:c9:9f:85:f0:57:38:86:ba:
         6d:73:51:5b:72:4f:9d:84:ad:3d:9d:ff:2f:ec:1d:3c:bc:d0:
         09:b5:ac:8e:18:9f:f7:ce:1f:b5:d8:73:9e:5c:ef:54:56:79:
         b9:26:22:74:c1:8a:83:30:38:44:c3:1a:8a:21:85:4b:ee:8f:
         7a:52:97:42:08:5c:da:ea:36:94:3b:b9:00:a3:d6:3b:10:c2:
         26:f5:40:0d:0f:eb:aa:36:1c:cb:45:f5:22:f7:1e:93:c0:c0:
         51:86:39:13:b9:49:42:6d:d3:4f:c7:28:00:9c:12:30:bf:59:
         08:f0:9d:80:9f:f8:cb:13:64:91:eb:88:fb:73:13:88:87:8a:
         7b:bc:dd:54:4d:36:b2:21:59:d2:e3:92:90:03:03:d1:e2:62:
         60:5f:c0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:35:35 2025 by rpki-client