This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
File:                     vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft (raw, json)
Hash identifier:          lfYByR0TB5Snkk/c0JhCzYIFLLf0tY1gOM5nGgaZxjY=
Subject key identifier:   26:36:EB:A5:CF:52:8B:1A:50:6E:DF:75:6F:FA:CB:C4:06:C7:9C:7E
Authority key identifier: BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B
Certificate issuer:       /CN=beb12ce6a91030e27d5abad146df27bc2880652b
Certificate serial:       019B6A692A66619816146C3F16A9ED9DD8B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
Manifest number:          17A7
Signing time:             Mon 29 Dec 2025 14:00:35 +0000
Manifest this update:     Mon 29 Dec 2025 14:00:35 +0000
Manifest next update:     Tue 30 Dec 2025 14:00:35 +0000
Files and hashes:         1: 68bf9tdtZQgGYg3-0B5PInDhCfY.roa (hash: f8IkiTce5GYVcsogjzR0QdHaU5oLadDEov52ZX8Qu0s=)
                          2: IRSQE14-Tz7sBccAsgZYt7JbvIs.roa (hash: HHWOf34cKB/cnxnIC3HjVQrTDRzDkhRKh2V00sDdnHA=)
                          3: ZTuZG35aq-_FRZAbaGaaD5vcMwI.roa (hash: ulXglv5m+ng8W6iFQKnfH2V7n7R22IWQlAJ1C+Bod0g=)
                          4: e7SUl4mSjdeGsAW__A2CvddXoNY.roa (hash: CZDiVjjgs0Krs+aiXIc/FeDFsKFYjTe8hPduuFN8E2k=)
                          5: vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl (hash: vxNT373i5/EORqqmuSD0asoBUgVeyxOvEMZ3PBee4mE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Dec 2025 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:6a:69:2a:66:61:98:16:14:6c:3f:16:a9:ed:9d:d8:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beb12ce6a91030e27d5abad146df27bc2880652b
        Validity
            Not Before: Dec 29 14:00:35 2025 GMT
            Not After : Dec 30 14:00:35 2025 GMT
        Subject: CN=2636eba5cf528b1a506edf756ffacbc406c79c7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:11:04:0f:94:f3:1b:e8:6a:01:08:c1:93:f6:
                    a9:1d:e0:a6:28:16:68:7f:74:86:3c:35:6c:f8:98:
                    20:4d:65:fd:d8:39:22:f5:1d:7a:5d:5a:21:76:ad:
                    00:f9:e2:be:2c:36:77:0d:c6:c8:90:1d:01:9a:06:
                    61:41:37:4b:0f:59:2f:dd:35:fc:cb:f2:1d:9a:b6:
                    28:22:7b:d0:aa:db:aa:79:3e:b1:1e:19:69:37:8b:
                    6a:0e:b4:ee:c2:9a:22:38:2a:af:a0:43:bd:71:74:
                    c2:63:5e:19:86:5c:21:4e:6b:32:bf:a2:b9:fd:6d:
                    61:f5:8a:45:1f:42:ac:29:8b:c1:4c:ec:ae:8e:d0:
                    24:c8:24:2c:63:3e:dc:6e:b6:3a:cb:96:34:07:6d:
                    2c:69:d5:ac:38:d5:87:30:6c:42:05:fd:6d:c4:0b:
                    5b:f8:f0:de:1a:e9:50:eb:c7:ae:2e:64:43:09:f5:
                    7f:f8:da:2f:83:1c:2a:b3:9d:cc:a5:c8:a6:b7:27:
                    cd:e4:db:2e:8d:f1:92:89:61:a2:1d:73:54:72:b6:
                    16:62:b9:73:09:e5:0b:e9:89:60:77:d4:86:b3:ab:
                    55:0c:f3:f8:d0:c8:2c:28:72:c5:1f:ba:37:32:2e:
                    51:6b:5e:39:69:4e:3b:f3:00:71:ec:9a:ac:b0:72:
                    ef:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:36:EB:A5:CF:52:8B:1A:50:6E:DF:75:6F:FA:CB:C4:06:C7:9C:7E
            X509v3 Authority Key Identifier:
                keyid:BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:24:cf:db:87:bc:de:77:0b:d7:35:fd:a0:46:18:d7:57:76:
         d9:e6:33:c0:46:6f:9a:f0:ed:54:ee:a1:3c:8c:9f:be:71:1b:
         57:22:86:c2:d3:83:dd:6c:f9:c9:f9:93:46:0a:66:16:d2:72:
         19:9a:60:83:55:e1:5d:df:e8:6f:47:21:93:3b:f0:bb:52:8d:
         79:94:d8:d2:35:4f:b9:db:75:13:5f:58:39:83:f6:5d:a4:9b:
         0a:76:90:d9:32:3b:9b:74:96:c8:0b:57:e8:11:24:98:08:d2:
         4a:f0:42:9a:4b:18:9b:b5:2c:53:8a:f1:16:59:0c:75:da:34:
         70:31:63:2c:5d:4e:73:1e:0a:e5:e0:3a:ce:6e:6f:3c:cb:f1:
         47:93:a1:2a:07:68:cd:2b:7b:a3:22:a3:55:a1:e8:2b:bd:c2:
         cb:f8:a8:cc:fd:dc:f1:4c:d6:d8:c7:8f:26:75:3d:dc:51:31:
         9f:1c:3c:41:7e:a9:68:ef:a0:b0:2d:73:02:39:c5:6d:90:c5:
         37:5b:b4:55:1f:a2:f0:68:96:18:46:37:9e:11:f9:33:a0:f5:
         93:91:4c:5b:d3:97:d4:68:e3:4c:c7:a7:2e:7d:4a:fd:a4:61:
         95:42:40:e6:20:fd:a7:8d:b4:ca:54:9b:a3:3b:ab:b7:5f:62:
         fb:df:52:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtqaSpmYZgWFGw/Fqntndi1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYjEyY2U2YTkxMDMwZTI3ZDVhYmFkMTQ2ZGYyN2JjMjg4
MDY1MmIwHhcNMjUxMjI5MTQwMDM1WhcNMjUxMjMwMTQwMDM1WjAzMTEwLwYDVQQD
EygyNjM2ZWJhNWNmNTI4YjFhNTA2ZWRmNzU2ZmZhY2JjNDA2Yzc5YzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBEED5TzG+hqAQjBk/apHeCmKBZo
f3SGPDVs+JggTWX92Dki9R16XVohdq0A+eK+LDZ3DcbIkB0BmgZhQTdLD1kv3TX8
y/IdmrYoInvQqtuqeT6xHhlpN4tqDrTuwpoiOCqvoEO9cXTCY14ZhlwhTmsyv6K5
/W1h9YpFH0KsKYvBTOyujtAkyCQsYz7cbrY6y5Y0B20sadWsONWHMGxCBf1txAtb
+PDeGulQ68euLmRDCfV/+Novgxwqs53MpcimtyfN5NsujfGSiWGiHXNUcrYWYrlz
CeUL6Ylgd9SGs6tVDPP40MgsKHLFH7o3Mi5Ra145aU478wBx7JqssHLv9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCY266XPUosaUG7fdW/6y8QGx5x+MB8GA1UdIwQY
MBaAFL6xLOapEDDifVq60UbfJ7wogGUrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnJFczVxa1FNT0o5V3JyUlJ0OG52Q2lBWlNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC83NDk0MGEtZDlmYS00NTUyLWJlNWMt
YTdhZGU0MzRkNDUxLzEvdnJFczVxa1FNT0o5V3JyUlJ0OG52Q2lBWlNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC83NDk0MGEtZDlmYS00NTUyLWJlNWMtYTdhZGU0MzRkNDUx
LzEvdnJFczVxa1FNT0o5V3JyUlJ0OG52Q2lBWlNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHiTP24e8
3ncL1zX9oEYY11d22eYzwEZvmvDtVO6hPIyfvnEbVyKGwtOD3Wz5yfmTRgpmFtJy
GZpgg1XhXd/ob0chkzvwu1KNeZTY0jVPudt1E19YOYP2XaSbCnaQ2TI7m3SWyAtX
6BEkmAjSSvBCmksYm7UsU4rxFlkMddo0cDFjLF1Ocx4K5eA6zm5vPMvxR5OhKgdo
zSt7oyKjVaHoK73Cy/iozP3c8UzW2MePJnU93FExnxw8QX6paO+gsC1zAjnFbZDF
N1u0VR+i8GiWGEY3nhH5M6D1k5FMW9OX1GjjTMenLn1K/aRhlUJA5iD9p420ylSb
ozurt19i+99SaA==
-----END CERTIFICATE-----
Generated at Mon Dec 29 22:41:49 2025 by rpki-client