This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.mft
File:                     V7gOYLWt9FrrpcDIq8zGOZeg8ds.mft (raw, json)
Hash identifier:          q4aBCaGMge93oONCOTdm9DXjylJ1MOoEgqjoS7s9Szc=
Subject key identifier:   0D:5B:8D:0F:F4:78:20:3C:AB:F0:FC:26:23:78:65:E5:59:72:F0:1F
Authority key identifier: 57:B8:0E:60:B5:AD:F4:5A:EB:A5:C0:C8:AB:CC:C6:39:97:A0:F1:DB
Certificate issuer:       /CN=57b80e60b5adf45aeba5c0c8abccc63997a0f1db
Certificate serial:       019B5C400D34EA92B7191247EBE4D0A6213B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.mft
Manifest number:          17A1
Signing time:             Fri 26 Dec 2025 20:00:59 +0000
Manifest this update:     Fri 26 Dec 2025 20:00:59 +0000
Manifest next update:     Sat 27 Dec 2025 20:00:59 +0000
Files and hashes:         1: 0HQu8Zx0bqoT8VblZx7T-KABTMs.roa (hash: PMmgS2CzSt2RGIZOxQkouUiRA5CO+OAI06wmRBvm14c=)
                          2: HAFTWYZhRl2JhSvJ17kRi_EORRw.roa (hash: 19em40Igf72cORttMpVzO/f9hKOd+3zplkZkJTc0zOw=)
                          3: V7gOYLWt9FrrpcDIq8zGOZeg8ds.crl (hash: qEuOMvF1MRjJY3i6lT7VJdxzs7112w4l5GPruyhgWYI=)
                          4: XzHbUO4u5QutpWYtZyqfUUIrRTI.roa (hash: dO0CtFUpXZ4k5F0vBkaTPTnFApdf6AbyjKu5COO/Zms=)
                          5: yQx5YUSfcqcgx3IA4ICMejwqPbs.roa (hash: cBatkYbqWez1EI7dU65y7uQSmyGeXkq58ToIkxccLCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5c:40:0d:34:ea:92:b7:19:12:47:eb:e4:d0:a6:21:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57b80e60b5adf45aeba5c0c8abccc63997a0f1db
        Validity
            Not Before: Dec 26 20:00:59 2025 GMT
            Not After : Dec 27 20:00:59 2025 GMT
        Subject: CN=0d5b8d0ff478203cabf0fc26237865e55972f01f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8b:d8:d9:0c:1e:a4:f3:d0:d4:4e:3d:16:27:
                    0c:09:4f:17:dc:ca:de:49:be:7a:71:27:25:de:9b:
                    47:64:3a:75:43:e9:b1:ee:63:2a:ed:c9:4c:0c:06:
                    33:03:72:ba:fd:aa:26:00:a9:0c:f7:d5:88:b8:c7:
                    50:32:a5:98:97:dc:a7:04:81:64:cb:b5:54:15:5b:
                    2f:48:f6:a3:8d:6f:99:d3:2f:f9:e8:9a:2e:de:f3:
                    4e:42:48:18:42:a7:ce:e1:22:9f:10:bc:54:ee:47:
                    be:f4:1d:07:63:d6:ae:99:92:ff:13:ee:07:f8:02:
                    2b:14:be:05:2e:a3:38:37:1f:70:50:ad:a8:4e:a8:
                    98:c9:35:31:1e:48:bc:49:25:3a:c1:4c:7b:97:dc:
                    a8:01:9f:00:7a:a1:17:47:9d:65:52:33:48:4d:8b:
                    d0:bc:1d:e5:0c:1b:52:b1:1a:6d:95:0c:c4:84:74:
                    30:6f:f7:31:90:fb:e8:d6:37:74:45:d5:a4:3d:4b:
                    3e:03:96:85:3a:89:f7:c7:53:8f:af:36:c3:a9:9b:
                    76:49:a4:ea:b4:f1:14:d0:be:1a:c4:aa:9a:89:68:
                    24:74:27:65:f5:1d:00:40:e4:49:d7:38:4f:5c:c3:
                    8f:59:58:54:71:69:2d:aa:47:a2:0f:a8:bf:19:2d:
                    a9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5B:8D:0F:F4:78:20:3C:AB:F0:FC:26:23:78:65:E5:59:72:F0:1F
            X509v3 Authority Key Identifier:
                keyid:57:B8:0E:60:B5:AD:F4:5A:EB:A5:C0:C8:AB:CC:C6:39:97:A0:F1:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:56:65:c5:aa:fd:c8:b9:18:a7:6d:cc:01:4c:fe:00:f1:32:
         99:44:79:37:c4:3f:bf:fc:11:31:b8:06:f5:78:d2:07:7e:5a:
         32:f1:76:5d:02:63:7a:02:70:70:8e:3f:a7:8b:11:9d:9f:80:
         40:fb:c4:8f:5a:11:f2:b5:de:0a:e4:a5:55:40:93:e1:30:18:
         39:48:6f:83:a7:6c:80:08:9d:11:19:c9:c9:fa:50:b0:5a:e0:
         43:93:5b:97:e8:b5:91:ed:85:a8:c5:c6:83:fa:33:f8:d6:49:
         8a:62:04:f4:b0:2c:00:e2:17:af:ca:41:01:d8:d6:a6:7d:83:
         ae:ef:0f:b1:f6:d8:79:de:2f:f7:b8:0d:86:5c:81:90:fe:37:
         b5:c1:84:52:1f:c8:38:39:78:61:2b:d5:5e:ff:17:e6:69:a5:
         e3:43:bb:59:62:8b:ca:5c:ca:6f:a2:eb:4c:26:7e:21:52:a1:
         36:b3:6c:17:45:a1:81:d9:a2:87:be:f0:97:18:7f:09:1f:d0:
         ff:9f:2b:a7:d0:8a:cc:af:26:c1:f2:81:45:bb:d3:73:c4:ee:
         63:c5:ea:02:d7:cb:da:13:e1:b5:df:ec:75:83:e4:c2:40:91:
         72:af:5c:b7:b4:2a:42:f0:4c:fc:40:e1:96:d7:03:69:cf:13:
         dc:22:8c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 04:46:19 2025 by rpki-client