This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft
File:                     bvqMD-YuxUrMveNcYL2K1LkBT_c.mft (raw, json)
Hash identifier:          bG74tCSCs3jKgN34XgQ55UYB32t67pC2DvgVNs6G7a4=
Subject key identifier:   17:38:28:A8:54:14:1C:5E:72:7C:40:45:27:FE:23:44:3D:28:21:03
Authority key identifier: 6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7
Certificate issuer:       /CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7
Certificate serial:       019B4BF184A50BC8E28846F6CE5EC4325D58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft
Manifest number:          162D
Signing time:             Tue 23 Dec 2025 16:01:17 +0000
Manifest this update:     Tue 23 Dec 2025 16:01:17 +0000
Manifest next update:     Wed 24 Dec 2025 16:01:17 +0000
Files and hashes:         1: bvqMD-YuxUrMveNcYL2K1LkBT_c.crl (hash: nUpkDjih6JAYXyiR6fMayVC/gs88iWH6RYkrb+wJkBU=)
                          2: uBSOOeaOOAPA_AKPY15x-quda9A.roa (hash: Dt69/ItO+3jelx7+KElGDpHbyUEQGmbIcaxvgmv3LtA=)
                          3: xV8gMpC2ZlpVgs9mctOG60i8N9M.roa (hash: 4+rPE2A2/Gm76JYESuCkyPm8V8bnBXJ1IGMnwsuV4qk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Dec 2025 15:46:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4b:f1:84:a5:0b:c8:e2:88:46:f6:ce:5e:c4:32:5d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7
        Validity
            Not Before: Dec 23 16:01:17 2025 GMT
            Not After : Dec 24 16:01:17 2025 GMT
        Subject: CN=173828a854141c5e727c404527fe23443d282103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e3:98:81:9d:fb:8f:94:b7:94:7f:5f:76:e2:
                    5e:a2:4e:fa:3f:9d:c2:1e:f9:6e:6c:90:4a:0a:b8:
                    48:1b:49:1d:fd:f0:ae:ca:23:d9:51:c9:4c:90:53:
                    c3:ea:b4:ba:e7:74:ec:a3:2e:cc:5b:bf:f5:20:f7:
                    3d:b8:7c:97:40:33:ab:34:7a:98:fa:2a:e3:72:bd:
                    e6:09:90:e6:c0:d3:6e:07:40:44:c4:dd:8b:f5:5e:
                    5d:1f:8c:e6:31:b3:25:93:e5:86:08:82:f7:d3:16:
                    46:c8:fb:be:79:2e:8a:63:66:90:9f:45:35:ea:17:
                    8c:41:4f:23:68:68:5c:aa:7b:91:08:29:2a:47:b5:
                    15:76:9d:d8:c5:81:5c:e0:50:bf:c3:59:3f:f0:c4:
                    4b:e1:6c:ff:64:ee:fa:e8:aa:86:6f:f9:77:b1:05:
                    43:d6:08:3a:25:e5:e8:5e:4e:02:9b:19:ac:98:bd:
                    bd:b1:ae:52:e0:8f:7c:67:74:3d:cf:98:32:35:09:
                    33:51:37:bc:44:52:cf:20:a0:b1:75:25:7f:de:cb:
                    8c:14:8b:90:e3:88:4a:82:de:d8:55:03:6d:92:65:
                    53:a9:c7:5b:a6:c6:38:99:93:7a:69:4d:ad:8f:52:
                    32:b3:e0:ff:81:7e:5a:3a:93:52:65:ab:5b:e4:cb:
                    9f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:38:28:A8:54:14:1C:5E:72:7C:40:45:27:FE:23:44:3D:28:21:03
            X509v3 Authority Key Identifier:
                keyid:6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:79:27:92:7d:92:fe:d6:8d:fe:8a:dd:58:70:1c:e7:20:b7:
         64:20:e5:64:c3:30:c7:9a:8d:ed:31:ac:a2:dd:51:16:0e:c2:
         0b:96:95:7b:38:e4:b8:46:51:da:8c:e9:0f:ec:af:6e:5a:2d:
         48:50:dc:20:45:e4:9f:33:07:60:e4:49:b9:3e:57:99:30:62:
         67:1d:56:ed:91:24:28:80:bb:53:39:23:12:9a:d8:ee:bc:d6:
         80:ec:e4:e8:1d:03:68:61:01:5f:45:02:54:b9:e6:4a:73:e5:
         e5:da:fe:4a:fa:66:dd:9f:33:bf:2e:42:bd:0b:36:59:0d:84:
         a7:13:1d:c5:b7:97:cb:c3:0c:da:c5:f4:0a:1f:b0:cf:81:d8:
         66:15:08:6f:af:da:84:e8:22:62:de:fa:60:3e:cd:4a:c7:71:
         2d:d3:71:19:c0:9f:21:c2:a1:4c:4d:c6:fd:07:e8:ef:17:aa:
         19:17:f8:53:aa:aa:89:97:2c:8e:46:a5:0d:39:95:21:bf:37:
         67:bd:15:98:cc:74:8b:37:f2:0e:8b:10:67:06:68:04:d0:0f:
         d3:c7:81:bd:ba:1e:c2:ff:8a:fa:28:fd:bc:6e:f7:4f:70:6a:
         39:b1:0c:9c:4b:0a:27:e1:53:a3:a6:e5:62:46:1e:8a:d7:31:
         16:1e:5b:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtL8YSlC8jiiEb2zl7EMl1YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlZmE4YzBmZTYyZWM1NGFjY2JkZTM1YzYwYmQ4YWQ0Yjkw
MTRmZjcwHhcNMjUxMjIzMTYwMTE3WhcNMjUxMjI0MTYwMTE3WjAzMTEwLwYDVQQD
EygxNzM4MjhhODU0MTQxYzVlNzI3YzQwNDUyN2ZlMjM0NDNkMjgyMTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eOYgZ37j5S3lH9fduJeok76P53C
HvlubJBKCrhIG0kd/fCuyiPZUclMkFPD6rS653Tsoy7MW7/1IPc9uHyXQDOrNHqY
+irjcr3mCZDmwNNuB0BExN2L9V5dH4zmMbMlk+WGCIL30xZGyPu+eS6KY2aQn0U1
6heMQU8jaGhcqnuRCCkqR7UVdp3YxYFc4FC/w1k/8MRL4Wz/ZO766KqGb/l3sQVD
1gg6JeXoXk4CmxmsmL29sa5S4I98Z3Q9z5gyNQkzUTe8RFLPIKCxdSV/3suMFIuQ
44hKgt7YVQNtkmVTqcdbpsY4mZN6aU2tj1Iys+D/gX5aOpNSZatb5MufhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBc4KKhUFBxecnxARSf+I0Q9KCEDMB8GA1UdIwQY
MBaAFG76jA/mLsVKzL3jXGC9itS5AU/3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnZxTUQtWXV4VXJNdmVOY1lMMksxTGtCVF9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi82YzdiMjItYjY1Zi00ZjM3LWE0MGUt
YTk5MTdjYzE1ZTBhLzEvYnZxTUQtWXV4VXJNdmVOY1lMMksxTGtCVF9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi82YzdiMjItYjY1Zi00ZjM3LWE0MGUtYTk5MTdjYzE1ZTBh
LzEvYnZxTUQtWXV4VXJNdmVOY1lMMksxTGtCVF9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF3knkn2S
/taN/ordWHAc5yC3ZCDlZMMwx5qN7TGsot1RFg7CC5aVezjkuEZR2ozpD+yvblot
SFDcIEXknzMHYORJuT5XmTBiZx1W7ZEkKIC7UzkjEprY7rzWgOzk6B0DaGEBX0UC
VLnmSnPl5dr+Svpm3Z8zvy5CvQs2WQ2EpxMdxbeXy8MM2sX0Ch+wz4HYZhUIb6/a
hOgiYt76YD7NSsdxLdNxGcCfIcKhTE3G/Qfo7xeqGRf4U6qqiZcsjkalDTmVIb83
Z70VmMx0izfyDosQZwZoBNAP08eBvboewv+K+ij9vG73T3BqObEMnEsKJ+FTo6bl
YkYeitcxFh5bvw==
-----END CERTIFICATE-----
Generated at Tue Dec 23 22:06:21 2025 by rpki-client