This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
File:                     vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft (raw, json)
Hash identifier:          TS8b9qkKq3LBGVykdvSGcV782Wc0O1Hqmi3X+6QWQiA=
Subject key identifier:   60:4E:4A:35:11:D4:ED:1A:92:1A:13:1B:2A:EC:A3:C5:B9:BB:66:36
Authority key identifier: BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
Certificate issuer:       /CN=bee0a94997672a920a290ccbfd049126f7075c99
Certificate serial:       019B45B86068FEDD5B62202CCFB02DCBF3C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
Manifest number:          178E
Signing time:             Mon 22 Dec 2025 11:01:09 +0000
Manifest this update:     Mon 22 Dec 2025 11:01:09 +0000
Manifest next update:     Tue 23 Dec 2025 11:01:09 +0000
Files and hashes:         1: N_iXT6yoM0IiJyQUNbfBu971Pc8.roa (hash: N5hBaTrYl3FRJAHCB5WOt0nXtIURvZkeHKhzHTcrevA=)
                          2: TDfXhLaJicDqER43mZJ9Gt5o4NM.roa (hash: xPlhAH8Cus6o3YMGrcO3bp4+1D+Angi7zwsI6/D/vLM=)
                          3: vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl (hash: lpOIpoNaIvTRR9XndoXHqKv0zaoNCaHBMR7M0RP0cSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 11:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:45:b8:60:68:fe:dd:5b:62:20:2c:cf:b0:2d:cb:f3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bee0a94997672a920a290ccbfd049126f7075c99
        Validity
            Not Before: Dec 22 11:01:09 2025 GMT
            Not After : Dec 23 11:01:09 2025 GMT
        Subject: CN=604e4a3511d4ed1a921a131b2aeca3c5b9bb6636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d0:63:5e:4e:ec:80:db:6c:74:d6:f2:33:5a:
                    e1:ae:02:bc:a5:74:08:d7:fe:31:d3:9d:64:2c:b9:
                    1f:33:4c:91:e8:aa:27:a6:f1:cd:81:16:fe:d4:49:
                    64:7d:11:d4:fe:0f:91:ed:49:78:43:10:89:a8:64:
                    22:5c:fb:23:b7:c8:7c:61:da:ef:f8:31:77:60:20:
                    f4:d3:85:c4:fe:60:af:66:a3:1a:79:3a:6c:0b:a7:
                    31:d4:6b:55:91:c8:06:b5:e8:5f:62:b4:a3:80:54:
                    d0:b5:f2:a4:c8:16:06:4a:54:9d:96:56:43:46:7a:
                    6d:d8:d4:4e:ac:b9:36:2b:7c:98:68:a6:9f:97:22:
                    50:1b:8c:af:0d:0c:f2:c0:6f:77:4f:db:3a:d4:64:
                    45:04:92:c3:a0:31:ee:1d:f7:26:6d:06:97:4b:96:
                    d7:bc:63:84:e7:11:ae:4d:33:dd:97:db:58:34:2d:
                    f5:a6:94:34:80:65:15:c2:ee:1e:32:ec:3f:6a:09:
                    62:3f:9b:c9:3b:fb:99:b0:00:f0:b6:e5:be:77:ed:
                    c7:63:1a:16:d4:1e:25:06:54:62:92:6e:38:74:58:
                    c2:25:f0:33:14:b6:58:ad:da:3d:7a:78:47:88:30:
                    6f:83:c0:95:ab:c4:58:aa:d6:0a:64:e8:28:bf:a9:
                    35:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4E:4A:35:11:D4:ED:1A:92:1A:13:1B:2A:EC:A3:C5:B9:BB:66:36
            X509v3 Authority Key Identifier:
                keyid:BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:1b:7e:84:1f:4b:03:02:49:ae:28:59:bc:24:31:a2:39:7f:
         9c:a0:22:f1:33:6d:4f:bc:62:ae:98:c1:d9:88:b9:bf:9d:29:
         c6:b7:f1:ec:e4:04:70:bb:f3:f3:3c:5c:4b:66:35:92:f2:ec:
         b9:ef:8c:1f:40:a1:90:2d:4d:7f:bc:aa:d6:3d:04:02:1f:0e:
         93:95:2a:a5:e0:38:e0:28:f9:33:43:f3:40:a3:e9:66:3c:27:
         cd:71:63:20:1c:13:b1:8d:a5:41:03:57:5b:75:da:af:6f:87:
         f5:0c:48:7d:f3:1a:48:33:5a:e0:19:eb:57:91:08:f0:14:b4:
         60:fc:48:c9:49:08:5e:9a:ec:af:65:a8:28:f4:7a:58:34:86:
         68:bc:f8:1a:3c:1c:86:0c:9e:9f:1d:a3:8a:6c:4d:7f:02:2b:
         c6:7f:3d:d8:27:0e:d7:9d:da:5d:25:4f:92:c3:68:3e:d1:17:
         7e:33:65:6f:d3:e0:5d:94:1a:9f:0c:c6:df:29:af:6a:66:a3:
         0a:c5:98:45:54:37:c2:a1:71:1d:c0:1d:61:4c:d1:0b:c9:6d:
         01:1f:a6:1c:a3:df:ed:66:13:9e:1f:6a:bc:1d:25:20:1c:c9:
         36:0c:98:5a:88:d2:28:a1:2a:b2:5e:a4:e1:46:3b:8f:9f:ca:
         68:18:22:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 20:22:26 2025 by rpki-client