This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft
File:                     vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft (raw, json)
Hash identifier:          7tw0qaf8L4kebXUenir+nCCz8Vly4pMPOXBkRSYnO3g=
Subject key identifier:   9D:12:06:A5:33:CB:BC:E9:A9:1D:92:56:26:31:BD:23:B3:2E:54:D7
Authority key identifier: BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F
Certificate issuer:       /CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
Certificate serial:       019B330CF686EBF7E8BEE3A069385C10FD4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft
Manifest number:          1782
Signing time:             Thu 18 Dec 2025 20:00:46 +0000
Manifest this update:     Thu 18 Dec 2025 20:00:46 +0000
Manifest next update:     Fri 19 Dec 2025 20:00:46 +0000
Files and hashes:         1: 9VNbjYPZNCWhcZlYCO8YbXFUdTs.roa (hash: DW1s4poaFcxeoMfxfTTf75NS52EQcgEZYuwjPKvajE0=)
                          2: TbgjMEdQ0rbdH1wsIeqh_-bYUgk.roa (hash: GE4J211d6K3inNZ5KwcVMOOJlKd9Y0lNHq1APwdB4fA=)
                          3: g1mm45j_OkLlur_SqI7WDyJYFdM.roa (hash: RaLkgB3O9bQ5zciuBh3cX5AYs1JmNx5tm4PsA2iWmaQ=)
                          4: vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl (hash: dbnHH9vFI7ZfmPxiI6Xbt2bbhQgjUZkocpFIydX7g2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 20:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:33:0c:f6:86:eb:f7:e8:be:e3:a0:69:38:5c:10:fd:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
        Validity
            Not Before: Dec 18 20:00:46 2025 GMT
            Not After : Dec 19 20:00:46 2025 GMT
        Subject: CN=9d1206a533cbbce9a91d92562631bd23b32e54d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f3:20:0a:52:6a:ff:65:32:72:f8:a7:4e:c3:
                    0d:a8:3c:4d:5b:49:a0:9c:64:50:f9:6e:97:f1:05:
                    6f:5a:c6:60:29:7e:d4:2a:38:a3:95:8c:e3:f9:1f:
                    a7:0f:f6:14:6b:fc:85:22:c3:ca:e8:90:eb:77:f5:
                    74:fb:af:91:fc:7f:59:01:f5:ef:ca:0d:2e:bc:fa:
                    0b:77:67:fc:96:5f:5f:f1:5d:cc:73:8b:1e:1d:18:
                    38:a7:02:63:45:44:06:f9:56:f0:6f:d6:d5:7a:b1:
                    6f:6d:5f:a7:12:99:b2:a8:b3:9a:e8:61:f1:aa:4c:
                    e0:aa:9f:ca:dd:52:12:b1:9a:04:9b:2b:0b:63:3f:
                    90:23:db:e8:01:e9:19:07:1f:e3:92:22:05:55:26:
                    d8:fa:a1:24:be:72:5e:81:34:fc:b9:01:b2:bd:93:
                    90:81:ab:b2:df:5e:c7:62:bb:39:be:91:3e:65:87:
                    52:46:d8:0c:cb:b5:6e:dc:a6:ac:9f:da:1e:0f:f9:
                    ce:e0:2d:1f:21:78:fe:ef:cb:ac:6a:92:34:46:1d:
                    a6:ad:f3:d0:3a:b0:54:53:12:66:72:75:ae:ba:12:
                    1d:ba:83:50:a5:42:2e:42:19:12:4f:19:b1:7b:7c:
                    89:a3:49:6c:ce:88:5c:51:86:68:de:93:50:41:06:
                    7f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:12:06:A5:33:CB:BC:E9:A9:1D:92:56:26:31:BD:23:B3:2E:54:D7
            X509v3 Authority Key Identifier:
                keyid:BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:3f:b8:4b:28:59:d8:0c:02:62:f1:22:5f:68:6f:82:1a:83:
         99:29:18:63:8d:0d:64:93:8a:e0:3c:77:6a:91:42:8e:df:9d:
         50:2f:83:d5:e5:4f:aa:9e:5e:c3:18:3c:54:3e:04:1c:1e:e3:
         58:15:b1:c0:63:d2:f3:14:0d:d6:ef:50:44:e0:a7:cd:b5:47:
         33:ab:13:51:31:c1:2c:8e:5f:37:78:35:f6:d0:4a:7a:bc:17:
         c1:34:af:95:64:df:62:10:77:aa:b2:83:a6:89:db:02:e4:b4:
         a2:52:9d:5e:b3:1f:82:2f:3f:b6:28:d8:04:8c:16:6d:0f:f5:
         e1:ec:e8:a5:22:e0:91:ce:f0:6e:6e:8f:71:23:26:a9:a4:cc:
         74:6a:89:f2:7e:27:4c:8b:6a:5a:fe:8e:60:23:da:b9:fd:a5:
         ae:5a:29:50:a8:32:cf:f4:5a:f7:4d:e0:37:0f:40:ea:51:b0:
         43:da:37:5b:38:81:ca:55:47:38:78:86:48:9d:cc:89:bc:3b:
         7d:ee:8c:7d:60:19:af:cc:f8:a3:4a:c9:66:72:8c:15:c1:8c:
         aa:8e:69:9a:82:5e:44:c9:ac:12:55:30:ab:95:07:90:18:0b:
         41:be:92:29:eb:8f:85:7b:bd:c3:d4:7a:3e:fc:81:4e:4c:d8:
         72:50:5e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 04:54:38 2025 by rpki-client