This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft
File:                     V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft (raw, json)
Hash identifier:          CJaxf/X/FhHI/7peaYV6PKEivSSfNxIuI0kC6psnhfU=
Subject key identifier:   9C:D9:3C:6D:C3:A1:DC:E8:A0:36:55:D1:AB:4B:20:96:E7:23:C1:65
Authority key identifier: 57:C5:A7:6F:28:B7:1E:A8:DB:F9:99:AB:AA:B7:A6:59:83:9A:C1:82
Certificate issuer:       /CN=57c5a76f28b71ea8dbf999abaab7a659839ac182
Certificate serial:       019B2FD5C99E5477D47D1D56E1554C22628F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft
Manifest number:          1113
Signing time:             Thu 18 Dec 2025 05:01:38 +0000
Manifest this update:     Thu 18 Dec 2025 05:01:38 +0000
Manifest next update:     Fri 19 Dec 2025 05:01:38 +0000
Files and hashes:         1: 7mW3WjVVw9eGN8jbjHf3-to5ckg.roa (hash: mgTvCDtWlsTF65gNfXMneOYsagkRwGQqVAdRKNVR7wE=)
                          2: V8Wnbyi3Hqjb-ZmrqremWYOawYI.crl (hash: WJK6wUn+C4c/T+bL3u+Bg3riAITrPMMGI2fUc0fREhs=)
                          3: opZuDmDWQL5ca_7w2GLyUTRdL5E.roa (hash: icGuPqMDdyClVp/nHf/m0TN12+gflYp9hAwPQL0ezMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2f:d5:c9:9e:54:77:d4:7d:1d:56:e1:55:4c:22:62:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57c5a76f28b71ea8dbf999abaab7a659839ac182
        Validity
            Not Before: Dec 18 05:01:38 2025 GMT
            Not After : Dec 19 05:01:38 2025 GMT
        Subject: CN=9cd93c6dc3a1dce8a03655d1ab4b2096e723c165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:50:34:ef:06:4e:67:1a:eb:1e:58:ef:08:5a:
                    f1:17:de:5d:08:26:68:9c:aa:69:4b:e2:b3:43:29:
                    33:d7:97:32:6f:9b:2e:28:4f:c9:1a:fd:97:74:46:
                    44:b5:b6:41:bb:bf:86:35:a7:85:25:a4:f7:fa:0c:
                    21:ce:47:0d:7d:c7:08:60:a8:78:c7:0d:a8:bd:6a:
                    c8:eb:d7:c9:e2:3a:18:10:33:9f:c6:9a:37:a7:b6:
                    53:2f:dd:5c:9b:43:c1:01:4a:ad:a3:0c:37:81:83:
                    a6:dc:6d:77:0d:7c:42:9c:0e:25:2c:da:9d:55:20:
                    ab:ef:6a:f1:cc:87:67:da:a0:18:39:af:a4:25:cd:
                    96:5c:69:b7:40:6e:8c:77:e4:ba:05:64:c8:fb:63:
                    42:da:ea:3c:0d:ae:6d:50:aa:12:45:aa:bb:64:53:
                    f7:e8:42:65:a2:5e:fb:35:9f:9e:e4:c2:3a:69:96:
                    fa:b9:98:2f:ae:66:33:7d:45:14:3b:4c:ce:6c:7a:
                    27:82:43:64:1f:9e:46:4c:3f:b9:42:13:6c:93:a9:
                    89:e7:d8:f1:b9:06:63:c1:ee:70:3d:ee:20:b3:8f:
                    c5:c6:36:d1:10:10:33:db:0c:b3:94:a0:3b:7d:ec:
                    f9:de:c3:83:75:e0:52:76:33:af:83:d3:68:17:6d:
                    38:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D9:3C:6D:C3:A1:DC:E8:A0:36:55:D1:AB:4B:20:96:E7:23:C1:65
            X509v3 Authority Key Identifier:
                keyid:57:C5:A7:6F:28:B7:1E:A8:DB:F9:99:AB:AA:B7:A6:59:83:9A:C1:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:02:4b:bd:a4:62:42:66:2c:87:8c:e0:44:4c:44:34:16:94:
         60:4f:f8:0b:62:04:68:d0:60:90:61:f8:00:f7:70:12:fa:8d:
         a3:de:77:51:a5:44:a0:0a:7a:24:5e:8b:1a:7b:81:fd:2e:58:
         55:51:42:23:c6:63:16:7c:c3:06:db:cd:c3:28:fb:31:6e:6f:
         d6:9b:42:44:20:7b:16:bd:08:66:ba:b3:5e:13:ba:21:0e:5e:
         a7:a5:a6:1e:f3:77:6b:8e:2e:3b:be:84:be:a0:10:97:fb:8f:
         ac:9d:8a:a1:ab:94:82:42:f2:92:5b:4b:a4:1a:18:b9:78:bd:
         0f:d6:1b:b6:3a:6e:fc:28:42:0b:08:bf:2e:b2:d7:38:16:ff:
         16:b0:44:9b:77:ae:cd:09:c1:9f:e7:4d:10:3e:f9:70:58:8e:
         9b:ae:87:3b:62:47:93:a5:20:d7:08:e5:eb:c9:3b:27:6e:9f:
         68:8b:1c:a5:be:c3:17:f5:dd:8f:e8:0d:2b:9c:12:b5:de:24:
         65:c3:7f:b1:c6:2f:4c:8b:e4:90:dc:35:ab:00:8d:03:18:14:
         d3:ef:21:10:09:20:b8:9c:c5:cb:cb:85:bb:b7:39:f9:39:d2:
         a6:f6:f0:3a:b2:c3:b9:7a:20:4e:23:6c:8b:1b:94:cd:f2:18:
         d2:5b:f8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 08:03:30 2025 by rpki-client