This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/36c386-2f53-4a0e-920d-628765eb1d59/1/vue3VIWfbTyHDSKveE8jRPy6pjA.mft
File:                     vue3VIWfbTyHDSKveE8jRPy6pjA.mft (raw, json)
Hash identifier:          UGopRXE+fcZ+zNYlpOITY3Dv4gMvPCW4rCY/Dwn84rM=
Subject key identifier:   BB:96:41:12:2B:11:1A:BD:D2:D4:A6:32:8B:48:76:3A:CE:D5:E7:79
Authority key identifier: BE:E7:B7:54:85:9F:6D:3C:87:0D:22:AF:78:4F:23:44:FC:BA:A6:30
Certificate issuer:       /CN=bee7b754859f6d3c870d22af784f2344fcbaa630
Certificate serial:       019B3DFEE0D7D5A7F4540A299344C97B36FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vue3VIWfbTyHDSKveE8jRPy6pjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/36c386-2f53-4a0e-920d-628765eb1d59/1/vue3VIWfbTyHDSKveE8jRPy6pjA.mft
Manifest number:          20
Signing time:             Sat 20 Dec 2025 23:01:12 +0000
Manifest this update:     Sat 20 Dec 2025 23:01:12 +0000
Manifest next update:     Sun 21 Dec 2025 23:01:12 +0000
Files and hashes:         1: 1-MLQDt3tC5RMoHq_-0vxvd-inFA.roa (hash: 7iHR/c8Xw9tNua31qJ50mcBHoKABG5iHq5JqVIAcm44=)
                          2: vue3VIWfbTyHDSKveE8jRPy6pjA.crl (hash: PoiuO2TQMo0YuqViHZiAVJ1oaOPogtzLiKxbUwLl2+U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/36c386-2f53-4a0e-920d-628765eb1d59/1/vue3VIWfbTyHDSKveE8jRPy6pjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/36c386-2f53-4a0e-920d-628765eb1d59/1/vue3VIWfbTyHDSKveE8jRPy6pjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vue3VIWfbTyHDSKveE8jRPy6pjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3d:fe:e0:d7:d5:a7:f4:54:0a:29:93:44:c9:7b:36:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bee7b754859f6d3c870d22af784f2344fcbaa630
        Validity
            Not Before: Dec 20 23:01:12 2025 GMT
            Not After : Dec 21 23:01:12 2025 GMT
        Subject: CN=bb9641122b111abdd2d4a6328b48763aced5e779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0f:bd:59:9e:0f:33:8a:de:13:a2:ca:9d:f2:
                    23:97:c7:b0:2b:32:cd:d6:8b:52:68:0f:b3:17:47:
                    f0:62:00:18:41:43:6c:fb:e2:99:c2:47:da:55:5d:
                    a7:f9:76:70:19:7d:6a:66:7f:36:e7:7d:9d:1d:d3:
                    1a:67:74:99:a4:7d:f4:08:8c:5a:90:35:08:65:6c:
                    ad:db:6e:26:1d:04:82:58:45:24:78:91:2f:53:1c:
                    5a:b1:d3:70:cb:fc:a7:89:b6:26:0a:cc:94:3b:98:
                    78:ed:ad:52:9d:25:71:31:cc:6b:8d:3d:30:4e:43:
                    43:2f:c8:11:a3:b8:40:0e:1f:fd:83:9e:0b:7d:0c:
                    fe:07:f5:dd:0e:da:68:bb:65:43:fb:21:49:11:4f:
                    58:45:f2:c8:1a:67:d5:17:95:d8:e5:75:45:10:34:
                    b9:43:68:a1:d9:6d:0d:69:57:c2:59:bc:07:f8:45:
                    f0:ee:77:ab:b4:20:5f:8a:5e:a5:ae:a9:ec:e0:49:
                    1b:5b:6b:6e:56:c7:c4:0e:4c:43:04:b7:45:80:e2:
                    78:bd:94:cb:7c:f1:8c:fc:21:30:df:6e:33:2e:94:
                    64:9e:60:ab:7f:b1:c2:c6:30:31:2a:d4:ad:f7:c2:
                    1d:aa:3d:81:38:e0:14:7f:de:df:88:c3:c8:73:35:
                    e4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:96:41:12:2B:11:1A:BD:D2:D4:A6:32:8B:48:76:3A:CE:D5:E7:79
            X509v3 Authority Key Identifier:
                keyid:BE:E7:B7:54:85:9F:6D:3C:87:0D:22:AF:78:4F:23:44:FC:BA:A6:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vue3VIWfbTyHDSKveE8jRPy6pjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/36c386-2f53-4a0e-920d-628765eb1d59/1/vue3VIWfbTyHDSKveE8jRPy6pjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/36c386-2f53-4a0e-920d-628765eb1d59/1/vue3VIWfbTyHDSKveE8jRPy6pjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:f9:79:24:d6:d2:40:20:8c:ea:59:5e:09:f5:96:54:a9:9f:
         d5:8d:db:73:c4:26:1f:23:49:4a:a3:82:c2:d2:51:4c:a1:fc:
         74:b7:fa:73:de:ef:2f:45:2e:cc:e9:cd:00:f8:76:c0:2d:14:
         75:3d:df:0b:a8:12:26:04:5a:cc:8e:6a:61:45:5d:43:a2:da:
         69:76:ff:21:5a:d8:75:30:56:fb:9e:c6:3a:a9:82:4d:65:78:
         5c:4b:54:0c:aa:4c:49:f3:77:80:82:ac:7c:cf:a2:90:3b:3a:
         ac:8b:68:43:c7:09:b7:80:70:de:67:05:84:8f:92:cc:8c:fd:
         a0:3c:08:cd:3f:bd:f2:44:f4:8c:df:a6:62:27:ef:a9:ad:9b:
         5a:ee:b0:05:88:63:48:78:68:85:4c:fd:b9:ee:62:ed:4a:0d:
         2c:09:b2:1e:92:59:67:53:4e:55:d1:3f:ec:3e:de:ca:97:a8:
         61:36:c7:7f:58:f8:b1:37:ec:8d:24:ec:dd:45:60:e3:a1:69:
         44:03:3c:63:74:24:6f:74:da:8e:d0:0e:40:09:63:35:99:d9:
         52:79:c8:d6:78:de:1a:cf:34:f6:b8:2b:76:78:77:4d:4f:13:
         6a:4e:51:6b:5d:a1:d4:08:69:1f:28:d6:79:b1:4a:06:4a:d6:
         1b:5e:c3:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs9/uDX1af0VAopk0TJezb/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlZTdiNzU0ODU5ZjZkM2M4NzBkMjJhZjc4NGYyMzQ0ZmNi
YWE2MzAwHhcNMjUxMjIwMjMwMTEyWhcNMjUxMjIxMjMwMTEyWjAzMTEwLwYDVQQD
EyhiYjk2NDExMjJiMTExYWJkZDJkNGE2MzI4YjQ4NzYzYWNlZDVlNzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsw+9WZ4PM4reE6LKnfIjl8ewKzLN
1otSaA+zF0fwYgAYQUNs++KZwkfaVV2n+XZwGX1qZn82532dHdMaZ3SZpH30CIxa
kDUIZWyt224mHQSCWEUkeJEvUxxasdNwy/ynibYmCsyUO5h47a1SnSVxMcxrjT0w
TkNDL8gRo7hADh/9g54LfQz+B/XdDtpou2VD+yFJEU9YRfLIGmfVF5XY5XVFEDS5
Q2ih2W0NaVfCWbwH+EXw7nertCBfil6lrqns4EkbW2tuVsfEDkxDBLdFgOJ4vZTL
fPGM/CEw324zLpRknmCrf7HCxjAxKtSt98Idqj2BOOAUf97fiMPIczXk4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLuWQRIrERq90tSmMotIdjrO1ed5MB8GA1UdIwQY
MBaAFL7nt1SFn208hw0ir3hPI0T8uqYwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnVlM1ZJV2ZiVHlIRFNLdmVFOGpSUHk2cGpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8zNmMzODYtMmY1My00YTBlLTkyMGQt
NjI4NzY1ZWIxZDU5LzEvdnVlM1ZJV2ZiVHlIRFNLdmVFOGpSUHk2cGpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8zNmMzODYtMmY1My00YTBlLTkyMGQtNjI4NzY1ZWIxZDU5
LzEvdnVlM1ZJV2ZiVHlIRFNLdmVFOGpSUHk2cGpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPfl5JNbS
QCCM6lleCfWWVKmf1Y3bc8QmHyNJSqOCwtJRTKH8dLf6c97vL0UuzOnNAPh2wC0U
dT3fC6gSJgRazI5qYUVdQ6LaaXb/IVrYdTBW+57GOqmCTWV4XEtUDKpMSfN3gIKs
fM+ikDs6rItoQ8cJt4Bw3mcFhI+SzIz9oDwIzT+98kT0jN+mYifvqa2bWu6wBYhj
SHhohUz9ue5i7UoNLAmyHpJZZ1NOVdE/7D7eypeoYTbHf1j4sTfsjSTs3UVg46Fp
RAM8Y3Qkb3TajtAOQAljNZnZUnnI1njeGs809rgrdnh3TU8Tak5Ra12h1AhpHyjW
ebFKBkrWG17Dgw==
-----END CERTIFICATE-----
Generated at Sun Dec 21 03:20:33 2025 by rpki-client