This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
File:                     VMvaeLHRthPfVl_5lwC2rulA3j8.mft (raw, json)
Hash identifier:          vwgcK9Bn1zXfgpxuRr8Ta9xVZxz4Eq/vK5oGsKg8uLg=
Subject key identifier:   DA:09:56:01:09:C1:47:3A:9A:55:60:C4:DE:A4:BC:08:08:59:30:73
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Certificate issuer:       /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial:       019AF6C0F4521B1E6064DC3FE6B414685FE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
Manifest number:          1794
Signing time:             Sun 07 Dec 2025 03:00:31 +0000
Manifest this update:     Sun 07 Dec 2025 03:00:31 +0000
Manifest next update:     Mon 08 Dec 2025 03:00:31 +0000
Files and hashes:         1: 0BP0KGJkFndJVhg4iJyuEpAUh2Q.roa (hash: +xARcNUOy44/0IUgRyFkDdCWb9Bmo8nmFLSiePQUm68=)
                          2: 0cO4ncofuOOavd4WKDZZp3uCU2A.roa (hash: xLawauZ1tEe7YyvT9w+7DlBDWVL0vSX2Y3B7u+HqboM=)
                          3: 1-Ic1C_JQ8WFUDRbQVM_sqmSHG0I.roa (hash: o/km+tRaUdqzFsCA8CD11A4YOHN5+bCH+yPZnxaNKw4=)
                          4: 1-LkhLBKkcj54UocdAxlIInyFc8w.roa (hash: nBYN95YGAJSbiE6yyJzIhCMy20uciRwVyVUw4AqhZCw=)
                          5: 1-Qbe7ItKLmTD3ZT6I_tfhnKA1F0.roa (hash: 35+u2TcewFG5MPcgu5/CWUo29LHqw3M3ErLqVomO6t4=)
                          6: 2SHzeEjAqvcLgdp5WwX1vUVg_b4.roa (hash: Hzy7kWjWavQFtlwLS0CVQpm6M+pMHdbRv3cNRgmcINA=)
                          7: 2ujhB6VtG1wsMePDSGyrLHuqsz4.roa (hash: dhHK2KxyQ/AB3/IoaSgau9aQ0lHwQqIE9ZsDmZIVap8=)
                          8: 6FrDuCY1vKJvYiNSjUCWvFLPFVQ.roa (hash: GnbdXxClu5QJNyR80vuHFcpVcehYzwyRhjEjW9CIyZY=)
                          9: 8mMS3HIomrHZlr0tSi4nJre_iQ0.roa (hash: wtOrmgukYQjypE1HeG89vBeioWsg00xvgoLaY2Mxgzk=)
                          10: AexxvHfZyLr0cw61OjpBts2b0GQ.roa (hash: QoCYA+e6SeTGoP5GL2LflAJnXWlHIBqT4FaJWKFAKhA=)
                          11: CPKskOAtzA-egJ2CR-qs28FaTns.roa (hash: 7WyLrVE2Z+tn0PjSAarRuKoKdxJR60QxJCCY+0bTg+0=)
                          12: Gr71KmVq4Fpo3C-WiVN0x-J5iIs.roa (hash: IZ3fisAoqz1jDgEKtaHhs6iOQRRtsE2MhCoBcG5PSvQ=)
                          13: LCgkZwmbKkdjXPlAXVdt7CYkbQ0.roa (hash: erTzc9OKk7rHqCvgZhdmqWwLIgx/iZXuiMkBNi83xQ0=)
                          14: NX7DD1CV1Fm-vrBgY_U3AzFTBx4.roa (hash: 45fMWvWbQyGgbggvJSHlk9SqOTeUewhUmU7EOLYsR9A=)
                          15: Rx0GsudNXa3NlGsO3A-jTHYF3kc.roa (hash: CAOEV8Hvnr7hXFP4sBSOfWBU2brqmyY3T+FnKR9MbjA=)
                          16: S_GqD0SxmtRzhF8ypadzBGAiS7A.roa (hash: Dg2rDfJPUZ6kGhaJNzjZPCtWt9Kc0Jc5sYdqgfiK2HQ=)
                          17: VMvaeLHRthPfVl_5lwC2rulA3j8.crl (hash: GOxGWbLSpSJaH5AUIoqgEoMczzAOPJUWHcjYKpcaxkk=)
                          18: Vtfd1hM6TwLVIwuBpWAC2ArBtVs.roa (hash: v9qk0RO6muLVg9IyiMy1kdFG1e9XdhyvAHBpmi1n9aE=)
                          19: VxzvbbNUAObmMU0IpKcdnXZ1BxE.roa (hash: O0rL/Xrm85XOk/qFl3MooUNeHPMNMB+5ehqcO2RLcWI=)
                          20: WoVaijlh7MVqQV4JpMFA6Zv1lP8.roa (hash: 93LhitKZk/dhVJfftIZflc4ldcyFRpIg6pCX+BpkdaU=)
                          21: X1FkyHdlJ2lKyFx0O-FyBfUYZ8s.roa (hash: xR4PGLqAg+mGtPWKDhZKuoyTeYFeaF4MEFWpcGPlh5E=)
                          22: aTyGHkd8L6xF1SuLySccXunrA14.roa (hash: 8AYIzW3md+dTPySlsQWwzNX5dISOdYU4A3Ie+qx0kR4=)
                          23: bb-Qgt64DIFzbq8j4XbnCr7ZXgU.roa (hash: xz9XLPoWhll2io7c8D81Bp9ZhnbsvdfV3miuDw9HOHQ=)
                          24: cYwwzAgaXEBJvEPe2tv_6hgv2Tw.roa (hash: CRrt42i3+A6BQui4Tr26+gGEI2j+qfNbfZYM48UONZ4=)
                          25: dJPP-PkBi33AJe9GjVGArq6S2Qk.roa (hash: 133fliltidDXZK3M/DsnNTOIe10JxO4p3F5kuAt/Mes=)
                          26: eQ-tpFbE-mG9mGrDlNWU1oCquvI.roa (hash: Zt2Vk5h5dO9kYMTWAEIEMaZQ+tgV3DRBAIFwRe9QmoA=)
                          27: knIR7TiOanL5_UuiRkjg6PExYPA.roa (hash: ERYy0uVVdjAIjaG9rMyUI8jUIPoDAHs5rghe95okyd0=)
                          28: kqJKsrZASQy9xjB7FaA-KoQudY8.roa (hash: vQnCRMgGVhLMtPMLsspsTBbi23N1aa399srxA6NSARk=)
                          29: ljD_gVu1qs2Kl-0qKDp3UUaMANQ.roa (hash: YcPEsfq9GWzefDfl1aj8X/VvzCJxb2lIQMIp+xhIHmg=)
                          30: m-V1kiaksKavIZgS1xPF2dZqoHs.roa (hash: HcrfgfAGDi+sUTt8LJbJ88dGJyfIH4VygN2JiXexWI8=)
                          31: m-w-pPX-GIsFJGbFqTvk5xT9ShI.roa (hash: jmwgZACI5VikW6OLBks2wyMBOSwl5hT2QqdEebOMYEU=)
                          32: nHeF5wKOyjhxyKKHp_2iztg8Svo.roa (hash: kd9/vAT6su/4Ux9JkoU5RsRNOjaaYL2ILIdnRJ4W0+w=)
                          33: sKgxdVIxf_7aOcgI7uaLjKzXJaE.roa (hash: b/4TyNfL8tc0RdYYjm6a6HPdIzANJIlY5JKGTcbxZLk=)
                          34: vF_oOv9r76q0FdPzPzMSZ_Qg32Q.roa (hash: e1pIcFPEPVHgPSZ/4xAXLRUAcbxV8wPmoubi9BuN51c=)
                          35: xM1iFGS6QuBSv90t-4LAaHnC5SQ.roa (hash: GrtU+4+6ynaLDRxKv11eYK+Mg2EvgzvT4avZIVJ491s=)
                          36: zSzl34L5RETNDTSuPWiH6TL51X4.roa (hash: FEK4ufmfWlN5aNgSIE6cz0/2QdmOZQ5aNRL/DGy69S4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Dec 2025 03:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f6:c0:f4:52:1b:1e:60:64:dc:3f:e6:b4:14:68:5f:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
        Validity
            Not Before: Dec  7 03:00:31 2025 GMT
            Not After : Dec  8 03:00:31 2025 GMT
        Subject: CN=da09560109c1473a9a5560c4dea4bc0808593073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c2:74:a4:5f:8d:64:c8:43:13:3e:72:ae:e5:
                    11:1d:84:06:32:89:41:5c:da:82:36:bb:7c:9e:6f:
                    01:56:80:a6:8d:cf:c9:b5:2a:c2:1c:2f:ce:10:b3:
                    44:32:35:ac:99:de:56:e8:d3:c6:ad:1f:13:9f:45:
                    50:44:aa:96:91:60:5d:c7:6f:68:0c:7d:77:5a:00:
                    ef:8a:18:89:95:f6:74:99:48:8d:2f:8a:55:df:d2:
                    67:4c:86:c1:96:23:a7:fd:6e:64:b2:25:0a:f5:3f:
                    37:78:83:97:8a:8e:48:58:20:98:b5:fd:0d:fb:a7:
                    b4:93:09:5a:62:c7:5a:b6:45:04:ac:0c:0b:71:5f:
                    4f:2c:4b:9a:07:b9:50:0e:05:c2:c1:36:d2:3e:c0:
                    7e:fa:34:4e:8f:3c:4c:24:7e:9b:44:ae:3f:be:19:
                    a8:e5:19:18:55:15:36:de:c6:fd:e6:80:54:66:16:
                    b4:26:96:de:c0:c4:93:be:b9:22:13:48:f6:f6:ae:
                    05:f0:d2:95:04:8d:b3:99:56:64:20:a8:08:18:13:
                    0e:9b:e0:37:39:14:c5:87:e2:da:3d:4c:32:83:78:
                    eb:ba:48:ee:a7:8a:8b:00:49:89:21:82:d4:15:ff:
                    94:b2:57:fc:00:d1:37:a0:25:23:7a:4b:95:df:a9:
                    24:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:09:56:01:09:C1:47:3A:9A:55:60:C4:DE:A4:BC:08:08:59:30:73
            X509v3 Authority Key Identifier:
                keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ac:fb:6e:b6:e6:e4:0b:f4:f4:8b:42:a5:ea:cb:17:93:7b:
         1b:ad:8f:fc:6b:bb:d2:4e:32:17:a8:2b:57:48:77:06:5c:f1:
         80:75:68:12:77:19:5a:40:40:c6:cd:00:48:b4:93:2e:dd:bc:
         77:88:c8:69:59:e6:90:f7:b8:00:f0:48:ef:c1:bd:43:1b:59:
         82:22:84:bd:8f:3d:98:6e:cd:21:dc:8f:d5:2e:64:ac:02:26:
         17:d5:65:f8:86:aa:93:e9:c3:45:a0:4b:67:eb:1f:5a:aa:91:
         0b:e3:36:3a:ea:d1:66:84:75:49:a9:e1:29:b3:02:c6:75:4c:
         6c:a1:cf:a9:47:ac:f8:a8:2b:04:e5:1c:00:0b:c1:a8:e5:75:
         e6:9c:24:01:02:a1:7b:7c:6a:7d:f8:19:83:47:44:ab:83:59:
         ec:5d:aa:7a:74:ee:36:9f:94:da:05:c5:b9:29:31:d7:f2:13:
         f4:f0:e0:e0:ad:07:8e:e8:80:bc:98:84:2f:22:17:9f:00:4d:
         b4:a4:f4:55:75:b3:c9:d8:43:b2:d5:7f:06:3f:d8:a9:14:78:
         c8:02:04:7d:9c:4a:57:fd:44:de:d7:f4:12:99:57:72:45:b9:
         8b:69:e3:f3:cf:a9:3b:53:e4:b2:52:44:53:7c:ac:06:f1:4c:
         8e:cf:09:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 11:14:18 2025 by rpki-client