This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
File:                     vgeJVzbtkoYPMTUAioWBP5i718E.mft (raw, json)
Hash identifier:          W05OHgSWJRj1PTNV7t5kiw55L58HjAmhf0F3PDt3xdg=
Subject key identifier:   1B:77:A1:E6:BC:CF:65:8C:18:72:34:A0:0A:B5:2E:B6:FD:E4:79:6C
Authority key identifier: BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1
Certificate issuer:       /CN=be07895736ed92860f3135008a85813f98bbd7c1
Certificate serial:       019B4B4C8B6359A3347FD0CF1BDCF3336F94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
Manifest number:          178F
Signing time:             Tue 23 Dec 2025 13:01:06 +0000
Manifest this update:     Tue 23 Dec 2025 13:01:06 +0000
Manifest next update:     Wed 24 Dec 2025 13:01:06 +0000
Files and hashes:         1: vgeJVzbtkoYPMTUAioWBP5i718E.crl (hash: 740rYmkjdtHt4RxB/aZV+vMZUPg9CmlBWyriNIjXODQ=)
                          2: z0Q3v_uWGQRHW3DWSvSjjl8qG2A.roa (hash: K7V12/jav6q6nJdIsu+PPDA7RxS4tktOMqpojP9r5X8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Dec 2025 13:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4b:4c:8b:63:59:a3:34:7f:d0:cf:1b:dc:f3:33:6f:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be07895736ed92860f3135008a85813f98bbd7c1
        Validity
            Not Before: Dec 23 13:01:06 2025 GMT
            Not After : Dec 24 13:01:06 2025 GMT
        Subject: CN=1b77a1e6bccf658c187234a00ab52eb6fde4796c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:46:cc:b4:2a:a8:5c:46:27:8d:27:80:27:30:
                    19:73:69:55:8f:b3:fa:0e:f5:b0:23:13:24:25:76:
                    dc:9a:bc:c5:e6:44:95:7e:ac:a1:99:c6:42:cc:07:
                    75:11:3e:3a:22:f0:43:2e:ad:52:97:9b:be:67:8c:
                    3b:3f:8a:05:b9:47:32:0c:5a:38:75:10:b2:6e:fd:
                    6b:88:1f:ee:10:06:fc:47:df:17:ff:ce:23:2a:96:
                    4e:17:60:9a:0f:23:5c:c9:9b:8e:96:e6:1c:26:61:
                    a8:c5:e9:85:4f:fc:22:f0:8a:82:22:b9:a2:7a:16:
                    53:b8:35:d4:ed:04:85:03:1e:70:4c:5d:ec:b5:2b:
                    96:82:f8:42:ff:e6:b8:61:9f:07:11:5c:fc:c0:3a:
                    77:e5:3b:55:fe:4f:5e:76:97:c7:38:48:7b:f8:6b:
                    6f:de:46:3c:58:9a:3b:b6:f3:45:c9:7f:0d:6a:f5:
                    c5:ff:88:58:9b:3c:01:ca:e9:5b:ec:f1:a3:f2:33:
                    45:b5:27:fb:79:6a:09:58:15:19:c2:90:fe:99:da:
                    ae:b7:a9:53:83:c3:95:3a:4a:2a:ad:e2:05:29:99:
                    97:de:7b:a9:eb:95:8b:85:e9:cb:cf:1a:71:1a:be:
                    aa:bd:0c:ab:30:40:1c:98:39:9d:32:b3:08:8b:77:
                    f8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:77:A1:E6:BC:CF:65:8C:18:72:34:A0:0A:B5:2E:B6:FD:E4:79:6C
            X509v3 Authority Key Identifier:
                keyid:BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:1d:34:8f:03:57:6e:5e:9a:19:19:57:a9:b3:09:b7:98:ee:
         8e:d3:05:14:6b:48:f5:34:51:83:10:3d:01:2c:9d:00:01:4f:
         9d:3f:13:b2:d6:07:26:41:69:1f:63:a3:ee:a6:e6:06:3b:8a:
         56:fc:12:ed:82:f6:a9:7b:d7:f4:0a:a4:d9:66:62:82:6a:f3:
         ea:25:96:da:d7:d9:b2:4b:33:0b:63:b3:6e:a3:90:1c:4e:f9:
         f6:0b:6d:e8:11:1c:52:5f:f3:e9:f5:85:85:aa:94:59:e8:4b:
         d9:86:82:16:8e:3e:c4:3f:d5:b8:e3:dc:45:1a:4d:37:9f:d6:
         5d:4e:57:df:4a:73:1a:ca:53:03:2b:6e:3e:87:b8:2e:6c:d7:
         d5:6f:a4:d1:ea:1f:37:bc:81:95:bc:d3:73:35:8b:d9:82:b0:
         41:cd:0e:ea:3f:50:e3:0d:66:50:fd:ed:3f:35:72:a0:01:18:
         1e:74:8d:82:dc:c9:2e:8a:12:ae:15:db:ad:b4:dc:8f:e6:70:
         60:3a:08:28:58:b4:49:4c:fc:40:41:17:5b:12:ae:fc:73:05:
         da:e5:83:e3:79:4d:9e:be:cb:45:5b:48:fe:cc:67:d5:16:f2:
         4f:c1:7e:cb:3f:fd:13:ac:6c:73:89:e3:b3:9c:25:48:ac:8f:
         4f:eb:9e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 16:43:12 2025 by rpki-client