This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
File:                     VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft (raw, json)
Hash identifier:          knL+CXIKtI3GEcuov40tpc0bIgXDYKXyimjs/7xESek=
Subject key identifier:   AF:8D:05:96:71:10:BC:1F:05:9D:04:5A:69:79:BD:62:82:03:F4:C7
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Certificate issuer:       /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial:       019B3BD98171D6205513B57360D2B7C6ABF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
Manifest number:          178F
Signing time:             Sat 20 Dec 2025 13:01:08 +0000
Manifest this update:     Sat 20 Dec 2025 13:01:08 +0000
Manifest next update:     Sun 21 Dec 2025 13:01:08 +0000
Files and hashes:         1: 3FxSbQNJYQgzhy1DLels_XrO1cU.roa (hash: UQB7F2ZYH+kcV/qXkBrQTc0Ry4hoRMUXYEZvpQAfsoM=)
                          2: A7fNepQEE5hriEH1MxVs7I9LEVc.roa (hash: bDqpKiV3wQKeG7s6LzFFi0Idj9cti+sB7X+a5H5psVQ=)
                          3: LaeMmliZsWY4K4LpiPm1IByzCIQ.roa (hash: XWrRgKgmyBqRbAmBeJXkydMYUgvYCHe6m/cckwuOv8I=)
                          4: RCzpYu2NXv9IhVJof3I0g4oUP6Y.roa (hash: ZlYAjV5mwmp0CDH9cOOcXTeCf66IbQigcgB22yHMGgo=)
                          5: VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl (hash: wnrppUHndeTyqXF7F/zU/sM3VYYsMRCuWPkLQfSO7d4=)
                          6: blGi3GYyv_U9inYqiK-N0m923Z0.roa (hash: Z89HHYOxFhBtIBu3aG0Up37f1r6W0/XcvKOpTLGjbD0=)
                          7: jOYswe4qhStabsuqsnSP3SZqcrs.roa (hash: BMGec4hMG/rYQr+01Ths87WyLIFcZ15QkJmgYOd/Vd8=)
                          8: kYXzTp4ydXYEubY6Zs2tRMwj1lA.asa (hash: lFVvdazmR0artN3g09nvxHrr2wgy8qv5IQaGXJwF9OU=)
                          9: or3MtyCWwwRniPQO0t7adUDYHwM.roa (hash: KAXtPOwDsCLtFdabZOYLs9SwVKgF5nRupM4RcQhCH2s=)
                          10: qDPjAzV1MESCMl_59kmxdlu5OwU.asa (hash: WPDQk2nWLa5ctCuNbhzwZYV7qaWfg4mN27IKtW1ZNiY=)
                          11: ubRmnJz_S2C6nk7pAMO3lsADuL8.roa (hash: coOwoKpqCk+u4O9lNGnwA4pS3Z4weSS8oqVFJQmf0lA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 13:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3b:d9:81:71:d6:20:55:13:b5:73:60:d2:b7:c6:ab:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
        Validity
            Not Before: Dec 20 13:01:08 2025 GMT
            Not After : Dec 21 13:01:08 2025 GMT
        Subject: CN=af8d05967110bc1f059d045a6979bd628203f4c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:72:ca:d1:3e:77:c9:f0:03:63:6d:37:c5:6e:
                    69:63:c3:df:74:0c:ae:a0:3e:a9:14:c1:7b:e2:57:
                    c8:ed:5a:0e:51:58:9e:a3:be:c0:c6:2f:09:33:63:
                    83:c0:d8:db:a5:49:64:81:c6:18:7a:0f:cf:7b:c4:
                    48:6e:ac:e1:cb:e3:ad:73:c0:7c:cc:63:1c:d1:49:
                    b8:e0:2d:96:a7:9f:60:36:a4:09:b9:6a:01:75:6b:
                    39:f7:17:2d:ce:59:ac:3b:0c:a3:4c:7d:7b:87:3d:
                    a7:07:b7:19:79:49:1b:ed:e8:c3:34:f0:51:e9:31:
                    6f:d5:84:f5:c2:34:cb:35:c8:8c:6d:51:b7:65:18:
                    5d:5a:9d:c8:83:57:d0:6a:af:02:28:72:c0:22:5a:
                    8b:be:56:5e:63:c7:a1:3b:65:89:40:fc:ce:6b:46:
                    5b:a6:20:92:49:1a:c4:2d:95:04:12:e1:4e:d0:bb:
                    ae:b5:c2:32:ec:23:b1:33:97:b9:69:b5:56:71:f7:
                    98:3b:01:6b:79:e9:98:37:ea:9f:ac:55:0d:92:b6:
                    b6:d3:ab:7f:ae:70:70:3d:1a:a5:0c:ef:28:4b:45:
                    5c:94:9c:8d:5e:50:a6:d5:c4:42:97:fc:2b:77:33:
                    26:bf:2d:43:e5:82:1d:fe:57:7f:27:8a:1b:f8:ec:
                    37:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8D:05:96:71:10:BC:1F:05:9D:04:5A:69:79:BD:62:82:03:F4:C7
            X509v3 Authority Key Identifier:
                keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:0b:ee:cb:4c:1e:80:7a:aa:a8:dd:b1:b5:49:32:b2:79:3b:
         79:98:9d:de:5b:87:83:70:db:8a:9a:41:86:bb:c6:ab:17:49:
         55:d5:8a:0f:13:5a:f8:bb:01:25:12:ec:2d:ca:22:32:20:03:
         cb:25:b0:3a:22:d5:65:1a:41:70:80:ef:ba:02:7d:89:81:e4:
         95:6a:5e:0c:e3:4d:e5:89:f6:b2:20:82:49:9a:23:83:81:37:
         12:34:22:d1:3a:ce:7f:2a:b9:8b:e2:a5:35:06:22:7a:3f:13:
         3e:95:9c:c8:da:5e:38:42:d8:37:5c:12:cf:0d:49:ca:91:2b:
         7e:11:07:18:ac:5b:6b:9f:a8:cd:e9:56:a8:7c:fb:12:23:cb:
         98:c0:55:74:95:7a:d9:6a:e9:cf:11:a1:ff:7b:04:b0:dd:2d:
         6c:4d:9c:39:df:2b:14:6f:21:14:54:47:0c:bc:ac:09:b1:e2:
         bb:64:b7:c6:f1:7b:34:7a:7f:98:2b:0f:25:6e:e6:d6:1f:1a:
         23:0b:70:ed:4a:33:c4:61:dd:c3:4a:48:4e:0d:9a:e6:c7:a1:
         f0:1d:81:67:0d:a4:b0:85:65:7b:93:11:df:54:bf:83:8c:86:
         31:cb:03:90:93:03:cc:d2:4d:c7:65:9e:03:c1:e7:6f:25:69:
         52:49:85:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:52:42 2025 by rpki-client