This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
File:                     Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft (raw, json)
Hash identifier:          0cwZxQ8ldK9a5iDYsiWkiF/WXUDUK+1AsCtv/e8uFiE=
Subject key identifier:   23:3E:97:BA:5E:46:0A:B4:D3:E7:29:FE:8F:14:C5:B5:29:1A:DA:BE
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Certificate issuer:       /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial:       019AF61CE6EF08FA4D5A31078AF0ED2EDD26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
Manifest number:          1797
Signing time:             Sun 07 Dec 2025 00:01:20 +0000
Manifest this update:     Sun 07 Dec 2025 00:01:20 +0000
Manifest next update:     Mon 08 Dec 2025 00:01:20 +0000
Files and hashes:         1: 1-ezSRolehonzd7m4Tnnd0luM6m8.roa (hash: On/fPJ39Z5Xcbn6zLcHyJUdx0s6S7SIPAdEzMQoJ3XQ=)
                          2: 108BiaBt5OdPpJMqalaqOeNV69I.roa (hash: cjOLOxh24OsIAnTQULMJay2aUelwjlre1sYAhylQyv4=)
                          3: 7Qe59yEW7U7chp45wrlrOOBrcpk.roa (hash: Md3Sf2aP3zQKSv1JAQBFfYI5IElvnInpSGp9RK9f30s=)
                          4: 9nLBkii6i9kqzksN6JMZwCrzYV4.roa (hash: qHoR8g3sPS0H1p08Rknlh5VjMVgipRCKDg0svuFgx6s=)
                          5: BhZvXc2lnsh5uqYjh3zsVqW7yLs.roa (hash: mydo0BfsTsL08Otk+t8zOQ+cbdabxk/K36L8MDg8etE=)
                          6: FXwS1usM9Gw8btRI8PnsNDkj9_4.roa (hash: FQ76n5rBG3AqlfwNPRTLnoowtLaTPVNfG35bOGyU4Fo=)
                          7: OzRFfGtYydKtloUFGibUfBCyMDw.roa (hash: cWKDKlEnWPEyIjxNhIulWdfjuX7dn5MJ4+8rywovQak=)
                          8: PQXaxHl_x5hCLUsVIoHDCNRTgCQ.roa (hash: 92Bl42I20RnqTYIC6hXMCEhevLacaiZKxk7OT2RhVWs=)
                          9: V9BWXIygnOhJHYu8bdQZRzbbGqg.roa (hash: re8sSZ6coeyXhQek/2jPbAPj3KlkVxVW/0zknsrcySY=)
                          10: VYwvZ9OHIlRbhHXyXxBLwaXS8K8.roa (hash: dnJzWIPR+2RTl2ECqdSA76Gag1tIQoNuzSSgRCHhVCA=)
                          11: Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl (hash: /K+iK56ENFmRQBB1xrlRMhxUqVgumJQowi4Kup1ZdWo=)
                          12: YfK2aOb88mXpBxncnyZwMMazaP0.roa (hash: hVpx7JF9g3hoT3mWsCzEbNroYXChIrskLkYxhbCkK+c=)
                          13: gWHF_rALnCC6aWL25OOLXmaYWd4.roa (hash: MNZsV6aY4RN1u/cCPIru0uGzTZOf4K/o0suBsxP2p4c=)
                          14: k5Aqa-da4KH0XLB24n43hX_ycfY.roa (hash: W7GIeml4QidNLEYcrSPcEhMsiifqshzVO/aRAhmqOJQ=)
                          15: nyEYNc_PtO4QoUwC3iOyBCPk0wQ.roa (hash: hp68ljnGn6WBzjjiaJx9jN9FM7xYYm0YWSh0AzIw1fY=)
                          16: o0SifTx2NU1sEhX0Vll10hyck8c.roa (hash: CTAgGKzxE8Fx3onDLMa7P2lInOfEaEKTgjP3A/rkyEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f6:1c:e6:ef:08:fa:4d:5a:31:07:8a:f0:ed:2e:dd:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
        Validity
            Not Before: Dec  7 00:01:20 2025 GMT
            Not After : Dec  8 00:01:20 2025 GMT
        Subject: CN=233e97ba5e460ab4d3e729fe8f14c5b5291adabe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:68:d0:d6:5a:c6:c4:63:4e:40:3c:13:0a:76:
                    31:0b:8a:b0:fe:59:de:d0:f3:86:c3:c8:d6:d5:59:
                    82:fd:2c:40:e3:2a:89:6d:b3:df:9e:b0:00:28:fc:
                    77:ff:8f:6a:2a:43:b3:18:14:b9:b6:48:de:10:9f:
                    18:5b:1d:b1:92:ba:4b:87:9c:e6:18:e3:c4:5b:e3:
                    08:5d:79:c3:0c:a8:bc:49:0c:2c:f1:6a:fb:b4:20:
                    19:41:a9:52:a0:47:61:c8:ae:c8:45:d5:51:0c:d6:
                    cb:92:86:7b:ab:89:e2:bd:39:f9:62:27:86:8b:a8:
                    cf:b7:7a:4b:c3:0b:3f:af:cc:37:f8:f9:98:80:9d:
                    4c:2e:24:ce:4d:58:53:ac:7b:65:47:cd:83:cb:bd:
                    00:35:a4:08:5f:61:f4:54:54:59:6e:66:ac:a9:3a:
                    d5:ff:7b:94:3a:5c:88:c8:7f:99:e0:3f:00:e3:57:
                    53:c0:cc:e8:45:16:ee:a8:d9:78:fe:52:b8:0e:1b:
                    d6:17:5c:30:a7:50:9f:e1:f6:18:0b:9a:08:10:42:
                    23:90:a6:e2:0c:30:f7:e4:5d:ac:58:0e:de:ea:8b:
                    ad:20:bd:6b:4f:82:0f:4e:0b:6f:1c:f5:0e:88:6b:
                    76:97:35:80:0a:a6:77:9b:c7:d3:4d:6c:31:0c:b6:
                    46:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:3E:97:BA:5E:46:0A:B4:D3:E7:29:FE:8F:14:C5:B5:29:1A:DA:BE
            X509v3 Authority Key Identifier:
                keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:4a:4f:c5:7f:f8:76:54:58:eb:44:f9:a8:c8:94:88:d5:54:
         80:72:6e:cb:a4:ec:99:4f:dd:a3:01:c3:91:47:91:26:b6:64:
         21:98:fb:70:0f:8c:00:9c:cf:e2:d8:ff:f9:71:af:02:74:00:
         1a:e7:1b:74:1c:a8:e5:0d:ac:cc:e9:1b:f4:3a:cb:45:3e:59:
         e9:14:2e:7d:b7:74:f6:ee:28:61:63:a0:69:62:80:62:d3:4e:
         88:f1:71:21:9d:fa:7a:1f:10:3b:92:e3:04:08:e8:e1:b5:b8:
         95:0e:93:ea:24:bc:ac:d9:eb:9b:21:b7:68:cd:49:18:a8:c1:
         c0:ae:44:96:bd:f8:42:8d:4a:50:3e:4a:4e:b8:17:dd:b3:8b:
         c3:df:29:28:b5:b2:f1:91:cd:f1:25:04:1b:b9:23:c5:5e:dc:
         82:88:10:67:04:57:32:f9:d1:ab:67:67:d9:86:a7:62:21:15:
         e5:7e:46:e1:8f:66:51:e3:00:7b:8c:77:00:9e:93:02:77:f6:
         ab:33:d7:5d:0c:aa:54:4e:86:2d:bb:64:b4:a6:ce:d7:43:6f:
         54:e4:b0:7f:24:ad:a7:08:4d:b1:69:be:14:0b:3e:24:e9:64:
         13:02:ce:25:fe:05:46:19:2e:33:b5:07:b9:db:b2:36:69:0d:
         96:71:67:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:03:06 2025 by rpki-client