This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft
File:                     vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft (raw, json)
Hash identifier:          9qRUiEckrCCFTSf5MQIPS20ac4V+hdGTIqq8cxY4BV4=
Subject key identifier:   C6:31:5C:62:EC:D5:2C:18:AF:2F:4C:D7:A4:F7:66:9B:8E:BA:3D:05
Authority key identifier: BC:10:6E:4D:82:FB:AE:34:C1:52:A3:5D:43:D0:FD:F4:9D:54:BE:9E
Certificate issuer:       /CN=bc106e4d82fbae34c152a35d43d0fdf49d54be9e
Certificate serial:       019B4701D1D520ECB1D9EBA9037169F6B848
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft
Manifest number:          178B
Signing time:             Mon 22 Dec 2025 17:01:00 +0000
Manifest this update:     Mon 22 Dec 2025 17:01:00 +0000
Manifest next update:     Tue 23 Dec 2025 17:01:00 +0000
Files and hashes:         1: vBBuTYL7rjTBUqNdQ9D99J1Uvp4.crl (hash: qlIL58dfmzkwE6lVWPAzm4vGwA34O0+2fIugmEDvtZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 15:30:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:47:01:d1:d5:20:ec:b1:d9:eb:a9:03:71:69:f6:b8:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc106e4d82fbae34c152a35d43d0fdf49d54be9e
        Validity
            Not Before: Dec 22 17:01:00 2025 GMT
            Not After : Dec 23 17:01:00 2025 GMT
        Subject: CN=c6315c62ecd52c18af2f4cd7a4f7669b8eba3d05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:04:c1:42:03:3d:08:de:89:70:9a:d0:df:b0:
                    42:d4:73:7e:e2:ac:56:73:5a:3f:2e:86:8b:7b:83:
                    a5:55:4d:09:f2:c4:be:c1:07:d3:b7:8f:95:d2:3d:
                    03:a6:8a:a7:4a:64:0d:f7:41:d3:17:5a:be:39:ed:
                    17:55:81:32:10:a3:ed:0f:97:e9:09:dc:70:d8:ae:
                    70:87:5e:e0:17:dc:e4:b9:27:65:fc:7c:36:09:e0:
                    94:15:e6:b5:2a:47:5d:65:08:03:ee:ec:4a:4e:b9:
                    8e:40:13:81:8d:f8:47:11:7e:31:bd:59:ff:e9:60:
                    ba:e0:8f:22:82:ef:76:c5:bf:ce:f6:04:05:ea:a5:
                    93:f4:18:88:a4:44:d3:80:6f:93:10:40:34:12:b2:
                    e4:99:66:84:e9:bc:01:61:36:8d:46:41:b0:c5:ab:
                    08:33:c2:e4:47:f6:aa:e1:68:dd:84:bd:29:09:63:
                    3d:3f:19:b0:d7:32:a7:19:2e:15:06:39:80:74:8b:
                    3f:35:4c:37:8c:42:7f:2c:cf:60:76:8d:19:b0:a3:
                    4e:eb:b1:7c:17:90:8a:85:d7:41:a8:97:01:a7:b0:
                    77:23:6c:15:e9:b2:6b:dd:56:6d:69:12:96:08:4a:
                    22:cf:fe:bb:4f:da:37:6a:cb:e1:fa:1c:b7:92:1b:
                    1b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:31:5C:62:EC:D5:2C:18:AF:2F:4C:D7:A4:F7:66:9B:8E:BA:3D:05
            X509v3 Authority Key Identifier:
                keyid:BC:10:6E:4D:82:FB:AE:34:C1:52:A3:5D:43:D0:FD:F4:9D:54:BE:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:3c:03:85:ca:b9:9a:f1:20:ea:30:a1:8d:b7:24:7f:7d:c2:
         fa:19:8a:a4:00:af:d2:e6:bf:77:93:d4:48:59:33:09:df:96:
         4d:5b:9e:fc:14:42:47:a4:fb:aa:0f:7c:4c:09:42:2c:30:1a:
         fb:bb:99:49:c5:1d:60:9a:eb:32:48:06:c1:0e:66:b9:a5:ca:
         e3:16:d1:d8:d6:e2:e8:3e:1d:39:8b:8e:19:de:e1:9b:9c:54:
         e2:6c:cd:b3:c3:10:7e:82:ac:1e:91:92:96:53:1d:63:0f:db:
         25:d7:b1:22:89:3a:15:dd:09:78:21:2d:a4:29:a1:a3:60:a5:
         38:59:26:29:19:38:fc:31:ac:7a:02:29:9b:89:3d:0f:49:2e:
         35:d7:87:1c:ee:bd:ef:a6:2c:80:d5:ce:17:b8:1c:13:2f:e2:
         c2:30:04:b0:97:5d:50:52:76:23:91:0e:4d:ea:6c:09:e2:03:
         2d:ba:21:1d:79:40:c6:fe:7e:76:99:c2:98:0f:7f:fa:c5:d2:
         56:67:cd:b6:07:8e:90:6a:84:46:97:4c:3e:8f:32:e2:0d:14:
         6c:0c:ee:f4:7f:ce:2e:df:9f:6d:c8:c8:07:5d:ef:36:7f:cf:
         60:b0:8a:4e:42:55:24:48:15:2c:c9:76:c8:6a:d9:ee:0d:ca:
         d8:79:b7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 20:31:43 2025 by rpki-client