This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft
File:                     vxB-B5UsBpNYzT-CquzrTGlIPKk.mft (raw, json)
Hash identifier:          bJ3XLG14bRvxb1xTMOcYV6iy8NOsh1SzUr66lT0yNhA=
Subject key identifier:   2B:73:96:36:BB:CB:E7:97:F1:10:16:28:D7:F1:0B:07:20:8E:72:56
Authority key identifier: BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9
Certificate issuer:       /CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
Certificate serial:       019B2287485F4A88ADDDB7944771383C2127
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft
Manifest number:          1313
Signing time:             Mon 15 Dec 2025 15:00:49 +0000
Manifest this update:     Mon 15 Dec 2025 15:00:49 +0000
Manifest next update:     Tue 16 Dec 2025 15:00:49 +0000
Files and hashes:         1: REbpmX58oqeUZQ6O9h9Ej7Ziq0A.roa (hash: DwffhGWcmj3CapWvX5irvXpLi8JOrT+VtfUj215L5/g=)
                          2: mY0BBoyvYX1zorx6Y5fLdEd0tCk.roa (hash: 9FO5ETPVAJGxL50DKTbOEEcsQnQAs0IphL/Zj67O7Wg=)
                          3: s9a8ENLs5q1seNY6ASHD0pzkMco.roa (hash: kb8YLjZxqXQKy5ezUGhWndlkKF9j+8NuWi1FYUi/Mz4=)
                          4: vxB-B5UsBpNYzT-CquzrTGlIPKk.crl (hash: 32QFBxWcyRvwI5ayi3WsF9tSIghqk3oe3xxABJkVUKU=)
                          5: ytBPPn31Mvouzht94_-1MzPeRlc.roa (hash: g/RoKeMhShlj3ifkf1JZfkpGbYRq1G/ecz/JNNRxoKs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 14:30:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:22:87:48:5f:4a:88:ad:dd:b7:94:47:71:38:3c:21:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
        Validity
            Not Before: Dec 15 15:00:49 2025 GMT
            Not After : Dec 16 15:00:49 2025 GMT
        Subject: CN=2b739636bbcbe797f1101628d7f10b07208e7256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d0:43:90:3c:5a:9e:ab:06:22:f0:20:a6:7d:
                    53:5a:46:f2:9e:23:75:bc:cc:10:b7:09:75:53:78:
                    95:39:49:02:ee:44:8e:08:17:6e:6e:a8:1f:af:c5:
                    b1:96:f9:e6:e9:e5:be:6f:a4:bb:2a:ee:e4:62:f4:
                    5e:04:19:68:e4:8d:1e:df:57:36:48:5e:97:87:14:
                    9c:7d:89:f3:4c:64:bb:b4:df:fc:e9:a6:3d:3b:05:
                    89:29:1f:d3:85:88:ab:cb:0d:3b:1a:fe:b5:3b:19:
                    3e:da:ec:24:68:60:52:4a:b9:f6:4d:30:91:6f:dc:
                    48:92:1d:bc:cd:a6:28:75:49:cb:88:a4:2c:07:ec:
                    a9:13:67:55:ac:18:18:80:69:a5:95:97:1a:80:d9:
                    d3:d8:bc:ab:a7:5b:32:52:fb:13:96:08:6a:17:98:
                    a1:20:d3:6f:f3:0a:5c:d3:48:58:f3:d4:09:38:b3:
                    eb:75:a9:d4:f4:db:8d:a8:f1:08:29:81:29:4c:d3:
                    08:20:f7:36:52:47:9d:b1:47:7f:ba:89:15:ac:d6:
                    de:39:5c:98:a7:21:b0:65:d5:7e:60:f3:9d:ad:cb:
                    3f:0a:c0:d2:4e:0f:a2:c4:fa:52:c7:22:11:b7:bd:
                    e2:38:b2:54:f4:ab:82:18:72:c5:0a:0d:ee:68:89:
                    a2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:73:96:36:BB:CB:E7:97:F1:10:16:28:D7:F1:0B:07:20:8E:72:56
            X509v3 Authority Key Identifier:
                keyid:BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:97:cb:4f:04:98:be:71:c9:21:52:39:50:f6:2b:08:99:cc:
         71:59:d5:22:17:6d:71:b4:e5:ac:33:d4:c3:42:f2:23:66:6f:
         11:b3:1a:e3:2f:8d:ed:9e:ad:f5:b5:c8:24:f0:d8:0f:d3:2e:
         84:ab:ec:0b:2c:36:65:cf:cf:ca:2b:c3:1a:02:6e:f6:c5:da:
         d3:15:a2:dd:34:5a:7c:15:cc:c0:59:4a:b3:7b:87:49:f8:93:
         9e:87:4f:fb:c0:55:3d:c2:8a:33:0c:62:d9:62:b2:71:f3:76:
         8d:6b:df:16:9e:9f:a9:11:40:03:81:7f:59:a2:b3:d9:6d:e4:
         b3:01:52:e8:e8:17:0f:dc:4b:90:32:b0:2b:98:b1:6e:53:4e:
         14:9e:b0:8d:5b:c2:be:bc:97:76:05:15:f4:68:e9:21:a1:22:
         65:51:47:9f:2e:dc:67:e5:3d:5d:d0:8d:7f:14:7c:d3:f3:93:
         36:13:2a:66:13:fd:58:33:9b:43:9c:15:6b:15:60:1d:3c:70:
         39:7a:40:a8:bd:fe:c6:ee:51:79:47:6e:89:25:1f:d6:d6:a2:
         80:7a:9c:00:ab:8b:fd:3b:1b:51:3f:7b:65:be:08:86:43:e1:
         06:49:03:71:2b:6c:ff:8e:1d:73:7d:d2:fb:fc:69:de:e8:76:
         6f:35:bf:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 16:54:43 2025 by rpki-client