This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.mft
File:                     M_vbsgwtlwc8Dei3yqdewe6xkbg.mft (raw, json)
Hash identifier:          P+dldHAL50ijA3AvUizTDOvbEHn5rOf8YMt5zJOnX18=
Subject key identifier:   B0:B0:B4:CF:D4:F7:9B:B3:14:93:E2:3F:17:97:7E:60:AB:3D:0A:8F
Authority key identifier: 33:FB:DB:B2:0C:2D:97:07:3C:0D:E8:B7:CA:A7:5E:C1:EE:B1:91:B8
Certificate issuer:       /CN=33fbdbb20c2d97073c0de8b7caa75ec1eeb191b8
Certificate serial:       019B4C5EEABE9C37F0393CF67DFBE9118B17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M_vbsgwtlwc8Dei3yqdewe6xkbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.mft
Manifest number:          1791
Signing time:             Tue 23 Dec 2025 18:00:47 +0000
Manifest this update:     Tue 23 Dec 2025 18:00:47 +0000
Manifest next update:     Wed 24 Dec 2025 18:00:47 +0000
Files and hashes:         1: M_vbsgwtlwc8Dei3yqdewe6xkbg.crl (hash: 8OSmJQpoPU/KPVb/2SSL4QeCtdWt7AXSMl+269AAMiA=)
                          2: W_kf1ISiCNVsK5ZTz_suRTiHZI4.roa (hash: R9gK3O1iHUJDOb79VekQFRepgZVb1egRuMNJ3bXVKic=)
                          3: goHkMT0UZjAn0-oG9vnwxIPy3B8.roa (hash: oOZSw2jleYYt4PyokB/Y56hj/CGhsBwU1Pm5JWkidxc=)
                          4: xFa_0d92IrO8m7csJzay_dvaZmU.roa (hash: xAfvHq52NGCMs4kvhFfhegyEhswRxRHnoX0SPcrz5zY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M_vbsgwtlwc8Dei3yqdewe6xkbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Dec 2025 18:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4c:5e:ea:be:9c:37:f0:39:3c:f6:7d:fb:e9:11:8b:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33fbdbb20c2d97073c0de8b7caa75ec1eeb191b8
        Validity
            Not Before: Dec 23 18:00:47 2025 GMT
            Not After : Dec 24 18:00:47 2025 GMT
        Subject: CN=b0b0b4cfd4f79bb31493e23f17977e60ab3d0a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ca:92:41:f7:dd:82:ce:b1:b5:29:98:15:87:
                    01:88:48:1d:18:40:4c:c9:cf:a4:52:e0:3a:63:e9:
                    c1:c1:ec:89:ce:22:36:8a:60:dc:e6:c9:65:87:27:
                    cf:18:a3:17:63:2a:1f:f7:82:bb:74:66:d1:77:4f:
                    f7:63:60:19:9f:7c:12:9d:ed:c0:bb:8d:b6:7c:ed:
                    81:eb:05:58:c3:4c:77:d1:2c:d1:01:ee:35:6f:c0:
                    05:61:6f:05:21:ed:4e:7d:fe:58:ea:fd:03:65:de:
                    0c:c3:05:4a:35:bf:64:6d:22:e3:44:4c:bf:f8:24:
                    2f:e7:1a:ab:89:5b:98:a7:99:dd:20:51:22:5c:b1:
                    da:3a:b5:a1:a3:9a:bc:c8:24:bb:e4:de:bd:d1:cb:
                    a6:41:e5:1f:97:c1:d1:f6:86:5c:46:8a:cf:f7:2d:
                    a1:67:94:10:68:0a:ab:6a:7f:a8:5c:e8:65:fc:1e:
                    d7:5b:54:c4:7c:4e:03:0b:0f:79:74:46:e6:4e:a1:
                    41:a5:4b:77:2e:ee:31:87:f5:63:3f:36:4c:de:6c:
                    8f:2d:39:50:38:5f:6c:7e:b5:28:d2:0e:fc:58:9c:
                    d5:43:90:9d:f3:ef:2d:0e:ce:11:03:86:01:bc:fa:
                    ca:1d:ab:1c:45:dd:89:5a:2f:b8:6e:72:2c:0b:98:
                    3a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B0:B4:CF:D4:F7:9B:B3:14:93:E2:3F:17:97:7E:60:AB:3D:0A:8F
            X509v3 Authority Key Identifier:
                keyid:33:FB:DB:B2:0C:2D:97:07:3C:0D:E8:B7:CA:A7:5E:C1:EE:B1:91:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_vbsgwtlwc8Dei3yqdewe6xkbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:50:0e:18:3c:b7:40:0d:b8:fa:bf:a8:11:30:13:89:54:dc:
         84:d9:1f:8f:75:a0:dd:56:e8:1e:4d:62:a1:18:c1:c6:70:bb:
         bd:a3:a3:4a:d5:6c:b2:29:73:84:c7:8f:3f:71:37:f6:77:37:
         18:e2:c8:11:28:1c:82:68:10:ea:62:fe:2a:0b:39:cf:ff:d4:
         35:d3:a6:09:43:22:3c:83:d1:bd:44:be:91:52:98:76:81:90:
         db:d0:7e:01:be:f0:45:96:f9:61:dd:5b:24:a1:eb:07:42:01:
         1b:f3:e5:d4:05:47:5e:6b:fc:f3:76:cd:ad:e8:ac:d2:99:b8:
         8c:e4:9d:8e:2f:5b:dc:84:11:b1:46:32:1d:68:d4:71:65:2a:
         52:8c:96:7d:0e:74:7f:2c:bc:54:8d:a4:57:85:20:9c:5c:c9:
         44:62:ba:8c:88:a8:ed:75:d0:6e:a1:94:fa:34:ad:2e:d5:cb:
         cc:ff:95:5d:f4:5d:08:43:50:aa:d6:58:4c:47:f3:a3:0a:5f:
         f2:c4:f7:54:a4:d4:6e:6c:ad:8b:02:86:46:e0:78:44:c6:9c:
         a8:7d:60:79:15:a2:db:a6:82:0b:96:bb:2b:f0:c2:22:9d:88:
         eb:f9:4e:80:97:06:66:36:4f:21:5f:dc:26:dc:d4:48:88:9b:
         34:93:5f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 02:56:41 2025 by rpki-client