This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
File:                     rVwudMbUbMc8mKTBYIeoo7Om91k.mft (raw, json)
Hash identifier:          0bBz6yUgPqHVP5xoFaJqFuqgATI1nlO9mIsUxJhGAc8=
Subject key identifier:   17:69:54:97:DD:63:7A:19:9A:6A:F1:0E:3F:AA:07:B8:DF:73:EC:ED
Authority key identifier: AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
Certificate issuer:       /CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
Certificate serial:       019B30E7B4DF3D1348B1A08BBEB73A9C3003
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
Manifest number:          1793
Signing time:             Thu 18 Dec 2025 10:00:50 +0000
Manifest this update:     Thu 18 Dec 2025 10:00:50 +0000
Manifest next update:     Fri 19 Dec 2025 10:00:50 +0000
Files and hashes:         1: 1wHz9itaaIOutvJbiLzjoh-KZtU.roa (hash: a0TL9iwZU0oRfdDEOO3AGkbTz5l5jRDjC2JWXY9aScI=)
                          2: 8O6pLoVX5MOhxRX0NAMWUCXkJ60.roa (hash: OO8XZDvw+dAnLvMz7bhHaxqvBWh2QRq24DPVyPxT+c4=)
                          3: HiQ6Lt40sq-xIz6tkUoUbBZPPes.roa (hash: ui+vLJdGvwi3l4EpB62KxNBd0L/KlnLaav/bQM8mWTA=)
                          4: KlqCgVt6MuLnVmP2np_5gob4_Bo.roa (hash: zkiiaVBv7w1FhyPvWpSRNAx73GQrEuAiaBTQXdEgjoI=)
                          5: NTKDdALBTRm2WTEgZsxcregayPI.roa (hash: sWYCO5qPeurAAE3MfSHRTq8EaqmEYvvJmtWBKYriueU=)
                          6: epQyZ0cEDixetECLXvdOgne06Nk.roa (hash: 1dyLGgbxJMKJwagRLwzFgVXDhdkxgKcN07zL1ygYTf0=)
                          7: rVwudMbUbMc8mKTBYIeoo7Om91k.crl (hash: JjkmIxI/v4xFYkRcqLyVnwpCEP8p94DJBYeyj7FnTAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 10:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:30:e7:b4:df:3d:13:48:b1:a0:8b:be:b7:3a:9c:30:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
        Validity
            Not Before: Dec 18 10:00:50 2025 GMT
            Not After : Dec 19 10:00:50 2025 GMT
        Subject: CN=17695497dd637a199a6af10e3faa07b8df73eced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:af:cd:c3:56:e3:8c:96:ae:0b:09:eb:bd:b5:
                    65:09:9c:8d:0b:36:69:4a:19:fe:d7:9f:fa:4d:28:
                    7a:d9:8e:91:4d:20:f8:a9:2c:c1:02:13:45:5f:89:
                    cd:fe:48:d6:2b:99:97:e7:a8:16:f5:75:61:c3:e7:
                    1a:53:2c:bb:25:7c:63:64:6f:29:73:16:29:b6:d8:
                    c7:4b:b2:2d:82:ba:0f:44:47:73:50:c3:66:d6:9d:
                    bc:7f:2e:46:1d:46:a6:21:b9:d6:ef:cc:e3:30:67:
                    ea:5b:94:c3:35:e2:43:2d:c1:25:a9:12:6a:39:8f:
                    46:a6:56:19:2b:af:d6:87:09:1a:00:51:e1:6e:4d:
                    9b:42:b1:e7:ef:2b:96:ba:cc:25:65:14:5a:3b:73:
                    5b:ea:1d:77:d0:c2:66:a9:47:f7:5f:1b:43:d4:3c:
                    d8:ef:e4:51:41:d0:4a:2e:4b:ed:31:0c:2c:bb:6b:
                    b6:69:d7:a5:72:14:65:66:00:1c:8a:7c:f3:3c:6e:
                    b3:02:d8:de:bf:82:d0:48:25:28:9c:d8:a3:32:dd:
                    91:58:55:fd:41:e5:ec:21:21:72:ea:b7:c7:4c:dc:
                    48:cd:7e:60:bc:5b:7b:c9:47:cc:8f:23:a0:52:d1:
                    2b:dd:c5:fd:e7:3c:18:85:8a:a8:ee:de:df:9f:44:
                    41:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:69:54:97:DD:63:7A:19:9A:6A:F1:0E:3F:AA:07:B8:DF:73:EC:ED
            X509v3 Authority Key Identifier:
                keyid:AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:31:f8:22:88:4c:57:b6:a7:93:62:7b:f7:81:f4:f8:a7:ad:
         66:9f:29:b2:56:34:4e:04:96:c5:b5:08:a4:0b:4c:11:13:38:
         8c:2d:53:af:5a:28:9f:b0:09:51:b4:79:2b:4c:81:63:94:55:
         a6:1c:85:25:ca:1a:4a:1e:98:de:87:b8:9a:bd:4e:b4:a9:d5:
         b7:4b:c9:9d:48:07:c9:f4:3d:24:95:8d:88:73:43:ac:cb:96:
         5d:ab:3c:46:46:71:4e:95:b3:3f:b3:e3:ad:bc:26:eb:1d:b3:
         9f:7a:98:82:b1:ad:20:ad:32:b5:e5:cb:b4:e7:f0:d5:29:10:
         53:c2:90:58:b7:fb:18:aa:98:be:bd:73:ee:fb:42:98:a8:8f:
         3e:a2:66:07:93:09:45:b7:f1:3f:ac:47:e8:c5:ea:2a:e6:76:
         d1:6f:07:a5:1b:8a:6f:53:d5:f8:35:e4:69:9c:73:7a:d5:e0:
         32:3a:6f:dc:ba:2d:b9:12:7d:7d:50:c7:6f:77:7f:10:f6:3b:
         be:67:32:e1:65:82:e3:64:44:a5:2e:a7:15:35:71:81:20:62:
         d5:76:ad:ec:5a:75:fc:13:0e:44:82:2b:f2:ee:22:6c:a8:cf:
         24:cf:8c:9d:76:89:50:5d:a6:30:64:cc:2d:b8:da:58:ad:2c:
         f3:95:6a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 17:54:23 2025 by rpki-client