This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
File:                     vx1f6v05F0clv-S--RvSfHsvb5E.mft (raw, json)
Hash identifier:          KH/Q+sij/Gt92G9TZY2Jdd3dsXnxtpPejHnmYcSpr1Y=
Subject key identifier:   88:82:B5:7F:4B:19:77:46:6E:CE:68:A2:A3:95:08:B8:2A:A0:4B:AA
Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Certificate issuer:       /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Certificate serial:       019B3BD8F19EE758A69D64FD445085A867B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
Manifest number:          17B6
Signing time:             Sat 20 Dec 2025 13:00:31 +0000
Manifest this update:     Sat 20 Dec 2025 13:00:31 +0000
Manifest next update:     Sun 21 Dec 2025 13:00:31 +0000
Files and hashes:         1: DFPMPjVgEXra9Yi746ueyHfFEfE.roa (hash: egcn+8V+rmTodHY7QllvkOnDLWLB5ryJAjHfdzE4gEE=)
                          2: FBtv0zQKgpSJGVwmOiWrJgdZXTQ.roa (hash: jZyVvy/AnilHzUcrfJcn+M+uqzeksVwB5ieR7HcmZ3o=)
                          3: JLZHp3zugUr0BJKEkPLt_peuCWY.roa (hash: xqh8b79ZtGYi3X/2gVjxCLbm1mPbREjzpn3t3zp8STc=)
                          4: QBbKMrewUV5LysqmZYBRCD2P-aU.roa (hash: pyCMXVW0aDhN3pnl3u7Ja6A+yxwNB3DI3wsCXDY581k=)
                          5: WJYzgmcrcmILpqEG0aOvuAZFJSY.roa (hash: 6cn2iTDXSQqMon3jkehha+lFwjisWUfx0Tw++dlztuk=)
                          6: a2N7ZqNTTwHGwfd7829psoPCAf8.roa (hash: l07jq1tDJlSMiPUaiQ9Tqz6dDSHfIb3Fw8fa48dds2M=)
                          7: laT6cLR_CsAMLDNRuHbw-QE9_Lg.roa (hash: /As0MXu+Jd4Zfmw66mysjQFz8bFMgrz+a8Z5fFD5uCE=)
                          8: vx1f6v05F0clv-S--RvSfHsvb5E.crl (hash: +1TTrM1+gLGNWGC5Jsh1JLoVEkPoYyEZsJDUaGy3NGw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 09:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3b:d8:f1:9e:e7:58:a6:9d:64:fd:44:50:85:a8:67:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
        Validity
            Not Before: Dec 20 13:00:31 2025 GMT
            Not After : Dec 21 13:00:31 2025 GMT
        Subject: CN=8882b57f4b1977466ece68a2a39508b82aa04baa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:8a:68:49:fa:8f:48:34:59:dd:0e:30:6a:cb:
                    1a:7f:70:e0:07:75:89:c2:a9:e6:7e:da:bc:5f:55:
                    f9:6c:41:97:67:d0:05:ff:91:a8:51:50:35:ee:1e:
                    59:b6:78:fc:80:5c:df:5b:04:53:ab:cf:64:6d:19:
                    4e:3a:14:37:8e:dd:f4:9e:3b:ec:7a:c7:48:dd:6e:
                    0d:cd:e2:a6:61:2c:68:4c:05:df:d7:b6:fa:c1:8c:
                    fa:3d:4f:02:e1:52:14:0e:3e:9d:59:8e:fa:e4:0d:
                    74:ac:0c:87:ee:31:f6:8a:95:85:c8:9d:e4:e9:fd:
                    35:18:a8:bb:5d:a5:f2:69:2d:50:e2:5f:cf:8a:cf:
                    f9:a1:06:2f:b4:87:af:b1:bc:99:0e:78:e7:cd:c6:
                    e0:d1:ce:72:f0:16:a7:80:78:bf:00:02:34:e8:e5:
                    56:6e:e3:55:26:17:b5:a2:c8:aa:87:e9:24:1b:fc:
                    5d:ae:19:cc:14:d0:4a:e5:29:39:08:e8:3a:b4:3c:
                    db:9c:6b:d1:4c:91:ed:7a:73:ca:5c:0d:c8:dc:52:
                    a0:ee:cb:56:9d:8b:b2:62:f2:31:b1:8a:ae:f5:83:
                    ce:3e:72:00:1f:39:6c:fd:5c:b3:06:41:1d:f4:ba:
                    d7:e1:22:a8:c8:b7:37:ec:53:f5:0b:3d:85:97:f4:
                    6b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:82:B5:7F:4B:19:77:46:6E:CE:68:A2:A3:95:08:B8:2A:A0:4B:AA
            X509v3 Authority Key Identifier:
                keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:f1:69:77:8a:ad:49:fa:e6:26:0e:c9:2a:62:75:8e:df:ce:
         ee:7a:61:09:41:d0:e5:8c:16:01:65:46:62:01:a8:63:d1:83:
         98:24:67:39:70:58:cb:22:4a:da:cc:94:c2:1e:1f:c5:1d:da:
         7e:8a:da:89:e3:8e:1f:c2:f4:9f:d3:49:de:7d:8c:41:56:81:
         0b:49:6b:b7:b3:80:cd:54:a0:a0:24:c0:03:67:97:65:22:f6:
         0c:8a:07:7c:07:46:47:a9:0e:92:4a:e0:32:9b:54:be:61:c4:
         c0:94:bf:57:ef:c4:5c:42:6a:bf:ca:50:b6:1b:13:6d:63:62:
         de:4f:43:59:69:3c:d3:98:53:f4:67:7d:c4:25:e8:00:ed:17:
         90:08:f1:43:33:04:ac:e3:bc:a1:33:68:2d:17:43:64:24:e7:
         bc:6f:6b:be:3e:4c:d5:c0:ab:91:79:d4:f6:21:09:fe:94:cd:
         2d:19:9d:99:c5:bc:f1:40:31:59:89:ca:99:68:47:a0:df:50:
         70:c4:42:73:3d:c4:b2:ec:9c:78:21:e8:e2:a3:bf:d4:6e:3f:
         b3:52:20:60:d1:dd:8e:c1:32:aa:75:11:78:d7:f3:91:23:45:
         41:8f:0c:74:f4:bd:62:89:78:6c:ef:32:37:48:3a:29:48:9f:
         bd:ab:01:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:37:48 2025 by rpki-client