This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
File:                     v_9Blln1TfN4eStgLACSw1OYjsg.mft (raw, json)
Hash identifier:          vtqTC3vIX9s2b+/OT/LA9zamWv4bvxHonKAk0iP5oqU=
Subject key identifier:   85:E1:AF:80:4A:07:AB:D3:D4:89:31:AD:56:BF:C5:DA:53:36:E2:21
Authority key identifier: BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8
Certificate issuer:       /CN=bfff419659f54df378792b602c0092c353988ec8
Certificate serial:       019B1E3C5FEBF99E49C49E29FD4E4CB9507A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
Manifest number:          0BBD
Signing time:             Sun 14 Dec 2025 19:00:31 +0000
Manifest this update:     Sun 14 Dec 2025 19:00:31 +0000
Manifest next update:     Mon 15 Dec 2025 19:00:31 +0000
Files and hashes:         1: Pbu77IMqgBIggCHuoPCgPeA-JYI.roa (hash: MfbYLWDGe0vBfVw8/15weNnWm0f+1AXVR3Lu2ooMJ2Q=)
                          2: SJ31osOZq8GAkUzTcgDMle6L-Ko.roa (hash: OpBd6e9+J397K48R0gJPVRSyhgNBftdRPHKKbxpf8EI=)
                          3: TLegbcgI8kzdZX0LyaY_jBKsLjM.roa (hash: jfnT8EG89ibu6lVDZPQfuHKOWHv4n9hSUWRGapOkR0I=)
                          4: v_9Blln1TfN4eStgLACSw1OYjsg.crl (hash: 8IyLM1GxSoxDAoT4iVx5ozfII7iMMiQ9hsVdlGRgoK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1e:3c:5f:eb:f9:9e:49:c4:9e:29:fd:4e:4c:b9:50:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfff419659f54df378792b602c0092c353988ec8
        Validity
            Not Before: Dec 14 19:00:31 2025 GMT
            Not After : Dec 15 19:00:31 2025 GMT
        Subject: CN=85e1af804a07abd3d48931ad56bfc5da5336e221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:60:91:93:cb:26:86:aa:db:cb:1c:f5:8c:23:
                    75:b7:10:29:a9:12:49:54:46:e4:16:18:e0:b4:59:
                    b5:87:db:11:1c:6d:c0:25:47:ee:b5:db:d7:2a:18:
                    67:e9:6e:b8:a9:7c:01:18:64:e2:32:e1:65:38:a8:
                    24:a6:a0:82:47:31:a8:7d:1a:c4:fb:89:46:d9:09:
                    14:51:a2:74:19:97:ee:e4:44:89:2a:a5:20:5f:d4:
                    6d:ec:54:ee:45:bd:82:86:51:81:08:58:38:28:b4:
                    2c:e8:4e:51:f4:a6:36:ee:ac:cc:6e:19:89:a0:3a:
                    f0:b2:b5:21:83:34:4e:a9:71:92:8d:01:80:aa:6a:
                    f2:e6:f7:fa:b9:5e:2d:61:b9:fc:1f:a7:d3:ba:5a:
                    b3:14:59:7d:23:c5:1d:64:81:1a:25:bd:dd:e0:c2:
                    f4:73:76:56:83:1e:98:06:5c:66:6f:ac:e4:14:96:
                    f3:63:0f:02:f3:e5:06:45:a1:d8:fb:b0:27:08:86:
                    e8:20:55:d3:8b:a3:da:bb:5d:d8:a8:7f:af:aa:d0:
                    61:40:f2:6f:de:e9:72:c9:8d:01:6d:c5:e9:88:1b:
                    32:cb:44:bf:07:4d:98:fa:8f:99:b9:a0:77:1a:be:
                    db:64:f2:b0:66:c6:6a:1c:6e:cd:c6:63:10:74:40:
                    82:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E1:AF:80:4A:07:AB:D3:D4:89:31:AD:56:BF:C5:DA:53:36:E2:21
            X509v3 Authority Key Identifier:
                keyid:BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:a7:f7:62:04:a6:10:3d:a0:7a:30:b0:e8:f9:ad:6d:ad:6a:
         13:80:c2:f3:3e:60:fe:a5:7d:81:23:44:a4:59:69:84:96:f5:
         20:d6:d8:0c:65:d0:9c:a9:a4:0d:c3:d7:a8:75:f5:5f:e3:ee:
         cf:2d:6f:5e:79:88:c4:e3:87:f3:09:33:2a:b3:a2:fd:64:87:
         5b:a6:b3:20:35:67:82:32:f6:97:04:d0:ef:29:ad:24:e7:e7:
         0f:cc:b3:fa:de:99:fa:7f:18:5c:2b:d7:57:02:08:2f:41:99:
         9d:31:68:b0:9f:b7:77:09:cf:54:88:26:ee:09:8b:1e:06:ac:
         7d:d9:ef:ee:9d:dd:f5:dc:3a:90:e4:4e:e2:a0:62:cc:b3:da:
         0a:b0:53:f4:c3:23:c6:b8:6f:47:f4:21:c7:f2:79:22:3c:ef:
         b6:e6:c2:19:9a:dd:59:70:53:cc:7d:0f:8d:d2:fb:75:d3:66:
         66:b0:42:08:70:9d:55:a0:3e:bb:fc:0a:d4:c2:66:7e:4c:e9:
         46:c0:b1:04:7b:cd:d9:51:9b:af:13:82:63:d8:3e:99:35:74:
         f9:5c:8e:ca:f4:d1:4a:99:da:f4:3c:10:f5:5d:e5:f0:06:6d:
         ab:f1:5a:8d:72:9e:dd:f7:02:05:4d:a9:13:1e:c5:97:ad:54:
         d0:5c:0c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 22:06:06 2025 by rpki-client