This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
File:                     VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft (raw, json)
Hash identifier:          6BhG6NwPkVcT+Y3yLEeY4Nte8Ndp+hqSH7GdkVqWv+k=
Subject key identifier:   E2:9B:FF:43:C0:FC:5C:75:B6:B3:4D:02:0A:79:FF:0E:17:45:7B:19
Authority key identifier: 55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42
Certificate issuer:       /CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
Certificate serial:       019B42B6C4F8BE01727633B164F039312946
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
Manifest number:          0C87
Signing time:             Sun 21 Dec 2025 21:00:32 +0000
Manifest this update:     Sun 21 Dec 2025 21:00:32 +0000
Manifest next update:     Mon 22 Dec 2025 21:00:32 +0000
Files and hashes:         1: Hgi_WtigQe-4a9mBK4OJ2dE5DEg.roa (hash: glvgmho6qzikqxgDEl6Npj+ieTiLH+pi39kY0pjWHaY=)
                          2: VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl (hash: 5ebwieWOD2OxQZUoFu1HuL8uTy847YvTbGIumurXjUY=)
                          3: YHJMwPpMbGI_zFjgbXnZP4EWLRA.roa (hash: PbBfFMHu68bzOncJDtOs1K4e5CV47wx0OGKsJihA0w8=)
                          4: zQrSyIjUHwJboP1xxZbE_ExqSB4.roa (hash: BdysfnABpVK+6w8shMYkAFX35eeb6edXdvxWPmnVvoY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 21:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:42:b6:c4:f8:be:01:72:76:33:b1:64:f0:39:31:29:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
        Validity
            Not Before: Dec 21 21:00:32 2025 GMT
            Not After : Dec 22 21:00:32 2025 GMT
        Subject: CN=e29bff43c0fc5c75b6b34d020a79ff0e17457b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5e:f4:4c:43:2b:8e:f1:f4:10:53:fa:64:16:
                    65:e8:d0:60:02:da:fe:e8:91:03:a7:e9:ce:b4:d8:
                    32:38:2a:55:8c:f6:79:53:bd:ad:3f:dd:99:81:39:
                    12:a9:89:8f:bc:57:80:8f:57:74:db:ab:90:e1:ae:
                    73:ee:bd:d4:f5:9a:25:bd:8b:d7:7b:02:0b:d5:3d:
                    58:d6:18:2c:92:a8:13:aa:0b:4e:58:6a:d8:6f:c6:
                    24:64:d2:08:a9:1d:1c:92:af:75:93:5b:a9:bf:2a:
                    af:94:d4:74:0e:3f:86:c2:d8:5a:6a:a9:1a:79:52:
                    7b:74:eb:12:56:5a:1e:f6:eb:34:c7:41:b4:cb:08:
                    c0:98:65:ee:4a:4c:08:dd:e5:be:b2:04:40:cb:16:
                    98:bd:e8:c4:ca:93:80:53:91:7d:16:cc:b0:da:90:
                    ff:ab:11:ee:8c:20:fb:cf:b9:04:dc:17:3c:6f:69:
                    06:2f:f6:36:20:43:2d:c5:80:a2:2a:66:94:ab:00:
                    96:39:cc:73:08:d5:32:e8:c3:ab:e8:f8:4d:70:95:
                    1a:c3:30:85:96:0c:b5:8b:65:c1:8a:65:6a:7b:c4:
                    a6:b0:7f:5f:67:98:74:8d:4d:1f:26:ef:88:b9:b1:
                    ab:03:7d:e8:8b:be:08:11:c6:97:f0:dc:5c:d2:43:
                    54:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9B:FF:43:C0:FC:5C:75:B6:B3:4D:02:0A:79:FF:0E:17:45:7B:19
            X509v3 Authority Key Identifier:
                keyid:55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:38:92:e2:60:e5:3d:02:6c:16:b8:13:91:89:79:d9:5f:ea:
         15:36:3a:1b:bc:4c:7b:70:89:00:8d:31:87:4f:2e:66:44:8b:
         76:6e:a4:2b:64:60:70:4b:60:5b:8c:71:13:fc:b9:43:61:c9:
         92:bd:6f:28:68:5d:7a:0e:13:b3:fd:83:bf:57:68:3b:aa:e1:
         41:a3:45:c5:47:53:5b:57:d1:87:a8:a4:7e:00:23:00:4b:5e:
         d4:06:96:53:06:ad:cf:a4:14:bc:f7:c2:7d:8d:72:08:8d:b3:
         c9:9d:cc:64:cd:26:d3:16:5a:33:12:01:f5:fb:3b:cb:e1:8e:
         1b:5d:cc:65:85:1b:6e:4d:d5:49:25:ba:65:83:8c:6b:90:f3:
         ef:37:e8:45:dc:2e:b1:79:a2:e3:b5:e1:b1:72:31:db:aa:d8:
         04:b4:59:2e:8d:82:46:47:6f:09:25:29:c8:f0:5c:88:07:b6:
         24:15:9d:6e:8e:ad:e7:82:35:87:50:8f:0e:72:ed:02:96:49:
         bd:f9:31:19:57:b3:5b:cf:d4:f9:e8:e2:87:32:68:08:2f:e2:
         30:9b:62:f9:33:43:83:8c:b6:29:cf:21:32:01:bd:65:31:1a:
         f9:a7:80:6b:f3:a1:64:7b:97:4c:2b:35:be:84:b1:06:64:a1:
         21:a8:67:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 06:47:19 2025 by rpki-client