This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft
File:                     v-nxLJa6IGg6_1yVi_rY5MV39_4.mft (raw, json)
Hash identifier:          /ooRPXf8NroJtPHulqkhJ4GqWzRfk5ZYmKHtk88LGvY=
Subject key identifier:   5B:0A:FF:6A:22:72:9C:CF:4B:4D:11:3F:E6:02:B1:0B:AC:08:EE:33
Authority key identifier: BF:E9:F1:2C:96:BA:20:68:3A:FF:5C:95:8B:FA:D8:E4:C5:77:F7:FE
Certificate issuer:       /CN=bfe9f12c96ba20683aff5c958bfad8e4c577f7fe
Certificate serial:       019B3C46EF08881738BD0D17E30D16B3E45A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft
Manifest number:          17C7
Signing time:             Sat 20 Dec 2025 15:00:40 +0000
Manifest this update:     Sat 20 Dec 2025 15:00:40 +0000
Manifest next update:     Sun 21 Dec 2025 15:00:40 +0000
Files and hashes:         1: BxktpTM0O4l-7Qywr4XGaTh7fCQ.roa (hash: Dp10pRUrJQYwQwB7pFjXetXyeK3jB7q+R/i/kEK18qU=)
                          2: DnIZzoqhty_tg2bYNrh_vDtOBCw.roa (hash: UOVHlVipqtCkCU4NWu9RPIeuEbJNMZ2hNXSGsc+R+F8=)
                          3: NbAa7vVuxBOczxUdgmV7yv_ihIM.roa (hash: FlSF6xU/X8MrL4smxRaqnNW5wgIas1ZABWQxPw3TwRw=)
                          4: ZTvZSbWIWloIdqV37DbtQi07aIY.roa (hash: lQEka4orv2/BKmCxU3FSbBYnm+siKkoc02AVPM16hvk=)
                          5: v-nxLJa6IGg6_1yVi_rY5MV39_4.crl (hash: sdBwqDYhglpiDTB0h/Y7i/upuaDnhfEKPFoXDtNGXpU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 10:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:46:ef:08:88:17:38:bd:0d:17:e3:0d:16:b3:e4:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfe9f12c96ba20683aff5c958bfad8e4c577f7fe
        Validity
            Not Before: Dec 20 15:00:40 2025 GMT
            Not After : Dec 21 15:00:40 2025 GMT
        Subject: CN=5b0aff6a22729ccf4b4d113fe602b10bac08ee33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:67:d9:66:f3:a0:93:e4:4e:4b:42:33:48:5c:
                    fb:ab:48:30:e4:9e:57:56:30:21:f5:b8:4c:bc:24:
                    b4:4f:80:f4:2f:36:83:4d:69:fe:c0:b1:0d:45:5f:
                    0d:03:a3:b3:5d:a1:82:e6:f0:02:9c:43:28:5d:2e:
                    25:33:2c:6b:50:1f:aa:1b:3b:1d:92:f9:fb:3b:a7:
                    46:0c:65:e2:17:77:db:62:fc:cb:50:4d:8f:e2:df:
                    45:b7:91:bf:e1:6e:b2:20:d8:19:5c:30:66:77:68:
                    b8:5e:b1:4d:37:87:47:a0:67:f9:31:22:41:41:05:
                    0c:46:6f:45:49:37:34:01:1e:f4:45:5c:5b:6b:1f:
                    bd:38:57:6e:9f:ed:b6:62:3d:14:b2:c8:9a:b5:88:
                    53:ac:8f:0e:15:dd:10:dd:46:82:d9:a7:62:ab:f8:
                    69:7d:18:a3:ff:58:73:a6:a5:c2:f6:ca:80:ae:63:
                    c8:ba:93:f0:38:df:02:c4:69:26:0d:c0:1e:9d:ec:
                    b1:9d:78:0f:d5:c4:44:c8:f8:89:3d:af:34:27:13:
                    1a:8a:c2:af:a1:f1:75:8a:9d:21:2f:9d:ae:cf:23:
                    c2:f3:19:55:00:82:82:df:7f:ef:93:48:6b:3e:70:
                    6c:ae:c1:54:a0:de:75:1b:14:2e:3b:6c:64:bd:b1:
                    c3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0A:FF:6A:22:72:9C:CF:4B:4D:11:3F:E6:02:B1:0B:AC:08:EE:33
            X509v3 Authority Key Identifier:
                keyid:BF:E9:F1:2C:96:BA:20:68:3A:FF:5C:95:8B:FA:D8:E4:C5:77:F7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:44:d1:66:d5:d2:43:16:63:63:52:5b:5b:b9:dc:bf:3d:f8:
         17:96:3f:8e:c9:20:0e:6a:16:f0:8f:c8:2b:1b:65:4c:2e:3a:
         fc:1f:cd:27:82:86:b6:75:86:93:6c:5f:0a:78:cb:84:e0:83:
         2c:9a:1f:7d:44:34:9e:1f:ac:65:8e:1d:fd:94:e6:40:46:4c:
         42:8f:43:fe:53:0c:50:8d:e8:d9:60:3a:36:e3:bd:e3:f0:86:
         9d:1e:98:64:09:b8:91:96:f4:e8:2c:cd:6e:da:9e:7a:f1:7f:
         d1:a9:07:e2:c7:1e:e0:fe:c2:b0:e3:8c:35:b7:a1:96:82:1b:
         8e:ee:0a:eb:cb:f8:c3:41:cf:27:5f:26:b8:0b:d3:34:7b:27:
         d2:cc:5e:50:f1:06:28:58:6c:74:93:a4:e7:f6:9c:80:65:2a:
         47:93:24:ad:2c:05:43:e5:56:ea:23:0a:32:42:91:4c:91:15:
         07:9f:99:0a:09:18:04:df:a2:44:40:8c:6f:23:06:27:e9:25:
         f4:8a:cf:04:62:91:e8:e9:b1:a5:23:a1:c3:34:7a:80:ef:34:
         1b:45:36:92:b4:77:1f:35:a3:5b:b2:d3:53:fe:51:ce:62:d8:
         26:e2:e5:5d:fb:08:3c:1e:1d:a0:89:39:49:4c:aa:87:bf:0c:
         72:94:37:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:08:35 2025 by rpki-client