This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
File:                     vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft (raw, json)
Hash identifier:          IEi+rs9vH4JdiI6CpIrEW/ImxUwB/ybw6v7s9Ky7i+E=
Subject key identifier:   0A:C0:B1:D1:19:9E:A6:1D:DB:19:C5:B7:C8:A6:EF:B0:42:04:1B:47
Authority key identifier: BE:6C:49:7F:F4:D4:A8:BB:5A:24:BD:D2:05:15:75:B4:9A:08:3C:75
Certificate issuer:       /CN=be6c497ff4d4a8bb5a24bdd2051575b49a083c75
Certificate serial:       019B6CC6AA02BEA509BE2AE35B30A5ACB517
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
Manifest number:          17A1
Signing time:             Tue 30 Dec 2025 01:01:57 +0000
Manifest this update:     Tue 30 Dec 2025 01:01:57 +0000
Manifest next update:     Wed 31 Dec 2025 01:01:57 +0000
Files and hashes:         1: 04aeLB2DOt1K2QS3FV3HPiOFTOY.roa (hash: A0BDulMr2mADVn63DP1McJaXG3hUV8E5IfZVNPfU4eA=)
                          2: bO2ZdwM21enGaKwe_1iSEPBIIts.roa (hash: uBMm/tJP0uLUJeJM+1YEtRm4BQYL1PFKNrER1Hr5ksk=)
                          3: vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl (hash: znklbU/h+pNDpRwf2KTgFd1rQzuiB12N2FJLdgtu/SY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 31 Dec 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:6c:c6:aa:02:be:a5:09:be:2a:e3:5b:30:a5:ac:b5:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be6c497ff4d4a8bb5a24bdd2051575b49a083c75
        Validity
            Not Before: Dec 30 01:01:57 2025 GMT
            Not After : Dec 31 01:01:57 2025 GMT
        Subject: CN=0ac0b1d1199ea61ddb19c5b7c8a6efb042041b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f1:ac:1f:88:87:45:44:1b:27:3f:06:eb:88:
                    cf:62:19:21:cd:b1:be:d3:89:2c:2c:28:ae:9c:fd:
                    ba:68:45:62:9d:7c:87:c1:9a:ac:5b:cd:e1:e8:9d:
                    4a:7e:55:59:ea:c7:62:31:31:74:39:f6:c6:12:45:
                    7b:45:50:0c:3e:61:d6:57:23:c2:46:ea:b4:69:60:
                    1b:b6:59:ed:ee:d9:84:3d:ae:97:73:fa:a8:12:c6:
                    65:22:bc:b5:04:d9:10:18:52:2c:b4:5b:5f:37:5b:
                    3a:7c:97:58:18:bf:da:c3:6e:6b:f7:5e:35:3b:a3:
                    76:95:1c:4a:91:dc:55:9a:94:67:ad:93:2c:a4:fc:
                    83:86:fb:08:dc:4e:e8:0c:35:ff:5b:fe:29:8a:4b:
                    b8:56:ea:e5:53:54:fc:92:69:4f:59:09:9a:d2:0c:
                    b5:5d:a9:d9:18:c5:09:f7:94:7b:ae:6b:56:58:35:
                    96:6b:e0:ed:51:73:21:3f:d2:dc:f6:ac:9e:93:52:
                    a9:6e:61:8b:8a:8c:86:7e:ea:f1:cc:70:43:e0:8c:
                    9d:78:ea:37:2a:29:61:e2:b1:d0:b4:86:41:a2:67:
                    ee:9d:ef:32:1b:e8:51:a4:8c:bb:ee:7d:2c:fd:cc:
                    82:2e:b5:35:b7:d5:a9:cf:38:69:31:12:cb:fc:87:
                    d9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C0:B1:D1:19:9E:A6:1D:DB:19:C5:B7:C8:A6:EF:B0:42:04:1B:47
            X509v3 Authority Key Identifier:
                keyid:BE:6C:49:7F:F4:D4:A8:BB:5A:24:BD:D2:05:15:75:B4:9A:08:3C:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:f6:58:e9:0b:1e:e0:5d:22:b1:0f:e6:aa:c7:8e:22:29:98:
         98:da:e1:f5:6c:3c:af:db:3f:83:00:78:e9:06:f0:35:63:f6:
         d0:dc:18:89:a9:c2:ce:97:17:5a:8f:6a:0e:28:ae:99:4a:97:
         7a:03:4f:9a:4f:53:05:33:5b:21:70:0a:1c:18:85:57:5a:52:
         8e:5e:f8:98:18:f3:fc:66:ac:52:7b:98:e5:e1:5f:19:3a:57:
         2d:77:49:66:d6:a3:b4:e9:fd:b5:03:90:ad:e8:01:cc:6b:7f:
         40:5b:93:8c:68:6e:e2:c6:e2:80:d8:0e:09:47:db:3a:d1:46:
         bc:24:44:95:93:31:4c:ff:31:d1:51:39:30:ac:58:6d:34:7e:
         e4:46:ec:8a:3c:f2:59:5b:9f:cb:de:c3:d8:d9:81:6c:e7:6f:
         c6:48:36:19:9e:ba:70:35:a7:5f:94:36:ce:39:34:2c:37:38:
         80:3a:af:0f:06:66:d0:f9:74:f3:45:b0:2c:f5:af:e7:10:c5:
         1f:a7:e4:af:22:ed:d6:33:e9:20:63:2c:a1:4e:72:bc:1b:9b:
         71:9c:14:d6:c2:d0:61:12:24:06:39:48:22:33:9c:97:dd:b3:
         fc:48:8c:11:36:d4:32:72:9d:8c:1f:89:df:dc:91:8c:a6:7f:
         6d:9a:37:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtsxqoCvqUJvirjWzClrLUXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNmM0OTdmZjRkNGE4YmI1YTI0YmRkMjA1MTU3NWI0OWEw
ODNjNzUwHhcNMjUxMjMwMDEwMTU3WhcNMjUxMjMxMDEwMTU3WjAzMTEwLwYDVQQD
EygwYWMwYjFkMTE5OWVhNjFkZGIxOWM1YjdjOGE2ZWZiMDQyMDQxYjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPGsH4iHRUQbJz8G64jPYhkhzbG+
04ksLCiunP26aEVinXyHwZqsW83h6J1KflVZ6sdiMTF0OfbGEkV7RVAMPmHWVyPC
Ruq0aWAbtlnt7tmEPa6Xc/qoEsZlIry1BNkQGFIstFtfN1s6fJdYGL/aw25r9141
O6N2lRxKkdxVmpRnrZMspPyDhvsI3E7oDDX/W/4piku4VurlU1T8kmlPWQma0gy1
XanZGMUJ95R7rmtWWDWWa+DtUXMhP9Lc9qyek1KpbmGLioyGfurxzHBD4IydeOo3
Kilh4rHQtIZBomfune8yG+hRpIy77n0s/cyCLrU1t9WpzzhpMRLL/IfZMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFArAsdEZnqYd2xnFt8im77BCBBtHMB8GA1UdIwQY
MBaAFL5sSX/01Ki7WiS90gUVdbSaCDx1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdm14SmZfVFVxTHRhSkwzU0JSVjF0Sm9JUEhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi81ZGI4ZWItY2NjYy00OThhLTgxY2It
NjVhZTU4YTliZWU4LzEvdm14SmZfVFVxTHRhSkwzU0JSVjF0Sm9JUEhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi81ZGI4ZWItY2NjYy00OThhLTgxY2ItNjVhZTU4YTliZWU4
LzEvdm14SmZfVFVxTHRhSkwzU0JSVjF0Sm9JUEhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKfZY6Qse
4F0isQ/mqseOIimYmNrh9Ww8r9s/gwB46QbwNWP20NwYianCzpcXWo9qDiiumUqX
egNPmk9TBTNbIXAKHBiFV1pSjl74mBjz/GasUnuY5eFfGTpXLXdJZtajtOn9tQOQ
regBzGt/QFuTjGhu4sbigNgOCUfbOtFGvCRElZMxTP8x0VE5MKxYbTR+5Ebsijzy
WVufy97D2NmBbOdvxkg2GZ66cDWnX5Q2zjk0LDc4gDqvDwZm0Pl080WwLPWv5xDF
H6fkryLt1jPpIGMsoU5yvBubcZwU1sLQYRIkBjlIIjOcl92z/EiMETbUMnKdjB+J
39yRjKZ/bZo3MQ==
-----END CERTIFICATE-----
Generated at Tue Dec 30 08:51:07 2025 by rpki-client