This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
File:                     vTZoYo8N950EfsoNmtz8C2aT4wk.mft (raw, json)
Hash identifier:          Qcn9Vo6Xp3Ips4s+lc4rgJKk8u7ngTxdcW+NMstWht0=
Subject key identifier:   34:DE:FC:BE:FA:44:FF:C7:7C:30:A4:0F:31:2E:A3:09:C8:1B:A0:04
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Certificate issuer:       /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial:       019B39B3AE6FAEFE470C1A913E2D717F1C79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
Manifest number:          12FB
Signing time:             Sat 20 Dec 2025 03:00:35 +0000
Manifest this update:     Sat 20 Dec 2025 03:00:35 +0000
Manifest next update:     Sun 21 Dec 2025 03:00:35 +0000
Files and hashes:         1: 0Om0y2WJnxnezCkTIkUnB1aduws.roa (hash: /h/ZFV7Tyfw4gvX/rM0qUi+sUrGWiAq4SLLKFNedki0=)
                          2: 1-AkEgtFYAeYpvfsAvZdlJuyuVF4.roa (hash: bj7r1qBjXXo6AEdGvTw884ILliGHjEYqfvi7PxgbBxU=)
                          3: 18s6iv28JzN23ACcxvidnV4O018.roa (hash: E520J/m/9e2VHqsrljvZsuWV/dovmSdu9Qn56B7khEk=)
                          4: 7HaXNFSYGxOw3R9L6I0z6V-mXb4.roa (hash: iLQ9KNTQ4u3M1tfa+YEpVxilam6XMDqybBUGCnTqiss=)
                          5: 8GAUp0koq7cLyKDBljD12_gS9fU.roa (hash: TLK0INhWOPZtOAAlZEJ0okbttAxXwilC0/Fin663h4o=)
                          6: 8ezldgsZjdYUFJex6k0Ut1HMEC4.roa (hash: bDkmxhsgqaahY46AsODPGEATa+7WHhbve+WtDMm08R4=)
                          7: EDQ-Yk7isf9sH4FXPQShWflCgog.roa (hash: SaxlXz/G0eyL2HVakqjpN328ugQ4obe8PUCDuMchTeo=)
                          8: N9DT59un9kPPAqydx65unLzNI5M.roa (hash: DR7WQ6lKKlByvf06hUpXgwGsB6j3cg+izla7y1IjfTk=)
                          9: PDqkVJ40PrFe4suGg4WOJqzMUow.roa (hash: RXbO3f8rMaUmCLGNqlV1Dn/DyLMq2vMWOPh4GbDgazk=)
                          10: Quc7mdnkYNwrbQhv4ZNnMA-i26Q.roa (hash: qyyVqEo1X6QuUJgPIcFasQ0Ni+mghhtNAyF4nptRM7w=)
                          11: b7dBieR_P9kmLnGcxW0fyaZjeow.roa (hash: 7CjlHKhuVQvksqqfXKK92KNHJPTf/pbKa2kMAV8YPNg=)
                          12: c-Wnlh-kFjP6q7EkrDX-duWttJc.roa (hash: 6Prgxqh9/nVNm4A4c9/ay2pcayT5Dd+P1lar2QOL0DQ=)
                          13: hVFH86LVYnyePIbmaCqfpS5vJKM.roa (hash: Jp2Ho2sVrxwbPVnhT98cuAw+l3HPTfx4q1sSUogMvrs=)
                          14: iL4hRCpLyAzkS7iRbK0kB-K-W-4.roa (hash: ZPL3tMdQLbuvPkq9q+UlEUarVrYcyMhTXlq7N8fBMNw=)
                          15: kPQEqnQ2tyC7d6-aTILssWet_yM.roa (hash: 1lTdkFvpUx4+IWByR4mFr+hq9dYheTg8typs5YnbW5g=)
                          16: lbSLNi1jkFFBTvD9DRpVUVDxKU4.roa (hash: FYaKqxecYgMTbSZpwvOmlyri4oxlPadKxms2T+56wVY=)
                          17: pVgxUhCc7dPqvhiu0OhGRnn06X4.roa (hash: H5Zdm7znexs+7FCW+NTfkFJPDw3F/Gamb5QXizhY9Tk=)
                          18: tBvdEHK96-8IqXDimpyAd6-FvfI.roa (hash: kV3wVJLyHXbFkaWXeqnUNYEgcOQg7ySmIasAR3i9gU0=)
                          19: vTZoYo8N950EfsoNmtz8C2aT4wk.crl (hash: yBSLKGc+2k261NVs64vh2UJwMYnIr6aKdssHFWRsFbQ=)
                          20: vyDPsQ1FXw7OXoebjCdEso67fJc.roa (hash: 40KxbJ4OGjtphO16wDERCKtpdBirvp5LYlDflcERj1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 03:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:b3:ae:6f:ae:fe:47:0c:1a:91:3e:2d:71:7f:1c:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
        Validity
            Not Before: Dec 20 03:00:35 2025 GMT
            Not After : Dec 21 03:00:35 2025 GMT
        Subject: CN=34defcbefa44ffc77c30a40f312ea309c81ba004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:73:58:76:34:8d:dd:ff:9a:da:09:72:43:a1:
                    f0:28:ec:cc:d6:27:d0:47:08:99:25:cc:8f:e2:75:
                    fa:65:ba:ce:c6:20:5f:27:51:cf:e1:02:36:84:cf:
                    e3:b6:10:fc:53:16:31:c1:e3:49:bc:c7:49:88:d3:
                    8d:45:8d:7b:8e:c0:ba:fb:12:77:40:a6:fb:ce:96:
                    5a:ac:85:84:ce:93:93:0f:31:58:b8:55:09:9d:53:
                    91:d1:5b:84:22:5e:38:9b:f4:c9:a4:0f:6d:c3:c0:
                    10:aa:74:21:2e:ab:36:aa:30:04:72:34:0b:78:6e:
                    59:ce:1d:05:79:fe:e1:fb:6e:96:d9:85:fa:89:21:
                    c4:13:49:d7:10:e8:36:33:5a:78:99:bd:10:17:14:
                    36:51:8a:ac:af:1c:87:7e:c9:ba:1b:4a:9d:91:a0:
                    e2:b4:8c:db:f3:6e:99:5d:6c:30:d5:47:0d:c4:ad:
                    9f:25:52:7a:e6:ec:08:13:74:d1:68:4a:b5:eb:ba:
                    1b:bd:66:a3:ae:95:54:47:be:61:f0:77:36:69:0d:
                    99:ae:c7:6d:e7:c3:bb:52:6a:f0:67:62:a6:70:8a:
                    cb:6b:22:a1:24:84:75:60:51:a9:01:16:bc:05:19:
                    30:8d:13:11:7c:77:f3:5e:1b:ff:aa:5c:0d:30:0e:
                    9c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:DE:FC:BE:FA:44:FF:C7:7C:30:A4:0F:31:2E:A3:09:C8:1B:A0:04
            X509v3 Authority Key Identifier:
                keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:53:3f:fc:55:f7:d0:72:f5:8d:44:00:e1:2b:90:a7:3b:05:
         0c:23:84:4b:ca:31:37:57:82:2f:3f:60:18:ff:0b:6b:ac:a4:
         11:6c:92:47:7b:7b:06:ed:66:39:3d:fb:b6:10:f2:33:cb:7e:
         c2:b3:03:a7:e2:5c:d6:37:71:0c:99:43:b6:18:33:51:c9:33:
         16:d5:f4:0b:eb:8f:7b:63:da:a1:71:f8:db:60:c5:8f:66:5d:
         cc:bd:17:92:18:0a:77:68:5a:0c:58:99:63:cb:72:3f:64:e9:
         9d:ed:03:69:5c:26:44:a2:f9:9d:54:91:96:e9:6d:80:91:bf:
         02:bc:e7:6a:1d:15:cd:27:6e:99:f0:af:f7:cf:ef:2c:c1:71:
         7a:ae:60:96:03:e7:0f:44:9f:b6:8c:87:db:47:56:0a:b6:7b:
         af:5b:64:63:57:6b:2f:c8:73:12:31:87:b0:d0:ef:0e:ad:22:
         87:50:92:24:62:2b:f5:44:fc:04:05:a7:4c:15:21:cf:04:6a:
         cc:af:37:ab:61:a0:f2:59:f3:eb:04:7a:c1:17:76:2d:5f:82:
         a9:2a:9b:7f:00:f0:66:aa:f0:b9:05:5c:48:1c:43:bb:ef:41:
         32:bd:4e:02:2a:ef:05:0a:78:f7:59:90:16:ff:07:bd:2d:3e:
         6d:f6:95:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:55:03 2025 by rpki-client