This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
File:                     vddoJJ1zZYBx-TRWA5OaudYgw1s.mft (raw, json)
Hash identifier:          saX+2bHOYvOYXs6fcBeTVrEejuru1aVoXkkxR8pRNso=
Subject key identifier:   E4:76:F5:73:C2:31:20:8A:48:A2:91:7A:D0:44:15:66:8C:E1:58:33
Authority key identifier: BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B
Certificate issuer:       /CN=bdd768249d73658071f9345603939ab9d620c35b
Certificate serial:       019B3C7EA7F8438C8F6F02D858EB4350904C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
Manifest number:          62
Signing time:             Sat 20 Dec 2025 16:01:32 +0000
Manifest this update:     Sat 20 Dec 2025 16:01:32 +0000
Manifest next update:     Sun 21 Dec 2025 16:01:32 +0000
Files and hashes:         1: 4_S-VpcaJ-dsPDdYImdSZM32e8U.roa (hash: 1hjmdXa5Q0sUuajrWvcZ3QxX+b+38dKLCgIK//YJGng=)
                          2: vddoJJ1zZYBx-TRWA5OaudYgw1s.crl (hash: iNF9Vume+VRAeyU7vqC8BNolT4OECjCXG1KT1kxpPTM=)
                          3: vliKZaSIov7ra7oMtOXo3pmSa_0.roa (hash: AlmCVWWv9Xl539mX2jpyekktTbSaEDqWKWKYo9HGa3I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:7e:a7:f8:43:8c:8f:6f:02:d8:58:eb:43:50:90:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd768249d73658071f9345603939ab9d620c35b
        Validity
            Not Before: Dec 20 16:01:32 2025 GMT
            Not After : Dec 21 16:01:32 2025 GMT
        Subject: CN=e476f573c231208a48a2917ad04415668ce15833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b8:2d:b3:aa:2c:7a:01:6a:99:16:64:22:da:
                    6c:e2:7e:4a:e9:97:c6:17:c7:93:b0:2d:70:f7:dd:
                    ce:3c:86:5d:09:bd:66:e3:f8:4f:26:18:7e:07:4e:
                    01:f0:28:77:b9:db:0e:ab:f7:e7:15:ec:98:6b:eb:
                    9c:a7:b6:4c:05:c3:68:74:59:4e:54:e4:89:a0:fd:
                    d1:cd:d1:ee:fd:29:85:25:0d:7a:34:10:1f:7b:19:
                    d7:79:b9:3f:6b:5b:b0:27:6c:c4:b6:0b:00:e6:ee:
                    0e:ea:2f:4c:6b:2f:d0:a0:c5:47:d5:e3:e6:84:ff:
                    1c:89:19:82:0b:d5:9c:f9:aa:96:53:09:bb:ae:25:
                    f9:2c:7f:59:57:a5:6b:e4:88:71:1f:63:9e:13:fd:
                    25:03:14:a0:a2:eb:f1:e4:cb:5f:19:e8:f4:fc:f0:
                    2b:37:b7:13:3e:e1:8c:db:cb:6e:b6:ea:32:8a:1f:
                    c4:dc:6e:96:1b:a9:c3:b0:d9:d9:24:d4:dc:93:06:
                    13:b6:47:84:c0:a3:ad:87:f8:6e:b4:c1:a3:40:7b:
                    b6:74:43:38:7e:56:c9:90:77:80:5d:42:c1:bb:dd:
                    57:5c:b0:56:2b:d3:bc:b0:05:3d:89:b1:d7:1a:1f:
                    ec:e9:ce:89:08:fd:6f:9e:d5:01:84:1c:44:26:70:
                    79:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:76:F5:73:C2:31:20:8A:48:A2:91:7A:D0:44:15:66:8C:E1:58:33
            X509v3 Authority Key Identifier:
                keyid:BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:6c:5c:40:a2:41:28:a8:4b:fb:25:24:74:e7:eb:9a:e5:8e:
         51:d0:4c:3e:f6:06:01:fc:a0:35:1a:16:8d:8f:77:51:83:34:
         a2:0f:9a:b2:e5:4b:59:2c:c5:e6:3d:9d:ac:07:2d:51:59:60:
         61:72:19:a0:fa:39:0e:45:c6:14:f5:c2:01:8b:25:a1:42:7c:
         c4:ae:dc:0d:c0:2d:47:ba:49:ec:3a:a2:9b:43:34:32:93:79:
         dc:f1:5c:cd:a0:6e:08:c0:12:a5:35:8d:1e:a5:89:68:fa:5c:
         b3:21:2c:12:c4:75:52:0b:61:39:71:ec:40:a2:0f:9d:88:e5:
         89:fc:d8:71:81:29:20:21:44:7b:4b:a1:26:0d:18:b9:64:f8:
         a8:8c:48:17:b9:2c:c0:c0:a2:aa:3e:80:df:59:15:b0:90:8b:
         0f:4c:a0:1f:2a:c0:35:1d:0e:5d:5c:9e:48:0f:de:bb:51:68:
         ee:ea:91:56:aa:e7:42:f2:d3:f4:ad:6d:09:61:9d:81:26:91:
         84:66:ab:9c:c7:bf:8b:0e:61:19:c7:02:6f:0c:a8:45:65:36:
         93:60:12:7e:3a:ff:58:ac:da:e5:fe:e5:da:6a:9b:91:db:08:
         84:80:86:25:7c:cf:e3:41:d1:6c:78:9b:f1:41:a6:a5:e3:50:
         d6:7d:21:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:18:02 2025 by rpki-client