This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
File:                     VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft (raw, json)
Hash identifier:          XX3lq+pi9J1hCK+rgOxNZh894tOjQhKqEWQakk1H2iQ=
Subject key identifier:   FF:25:7B:5F:CA:BF:C5:FA:F2:40:F1:67:38:DA:15:57:AE:C8:38:D5
Authority key identifier: 55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42
Certificate issuer:       /CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
Certificate serial:       019B1C18133688CC0D35CA36E886CBAA0775
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
Manifest number:          0C73
Signing time:             Sun 14 Dec 2025 09:01:38 +0000
Manifest this update:     Sun 14 Dec 2025 09:01:38 +0000
Manifest next update:     Mon 15 Dec 2025 09:01:38 +0000
Files and hashes:         1: Hgi_WtigQe-4a9mBK4OJ2dE5DEg.roa (hash: glvgmho6qzikqxgDEl6Npj+ieTiLH+pi39kY0pjWHaY=)
                          2: VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl (hash: 0rhCKV7LsDVdk1B4M2A99SxOjGPm5P/1gSG8HlW6ukk=)
                          3: YHJMwPpMbGI_zFjgbXnZP4EWLRA.roa (hash: PbBfFMHu68bzOncJDtOs1K4e5CV47wx0OGKsJihA0w8=)
                          4: zQrSyIjUHwJboP1xxZbE_ExqSB4.roa (hash: BdysfnABpVK+6w8shMYkAFX35eeb6edXdvxWPmnVvoY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 09:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1c:18:13:36:88:cc:0d:35:ca:36:e8:86:cb:aa:07:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
        Validity
            Not Before: Dec 14 09:01:38 2025 GMT
            Not After : Dec 15 09:01:38 2025 GMT
        Subject: CN=ff257b5fcabfc5faf240f16738da1557aec838d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2d:b7:c5:68:46:b1:4f:e5:a6:f2:f9:ed:02:
                    01:c2:ae:da:f7:7d:fc:c8:59:0e:4a:4c:fd:0c:26:
                    79:78:dd:77:df:c1:98:2d:53:aa:18:cc:0e:b7:20:
                    3f:47:fe:c0:5b:68:c1:d6:11:5b:28:71:c1:c8:7e:
                    bc:08:d8:89:f0:99:a7:56:f7:d2:df:b5:a9:49:ef:
                    c8:56:47:0f:eb:44:d4:4b:f9:65:5f:87:25:16:63:
                    c5:f8:84:3c:7f:4a:55:8f:0d:e4:2a:f9:85:98:ab:
                    d1:15:52:76:ef:ec:32:63:2d:a4:1c:4f:b5:57:f3:
                    fb:25:e3:ed:c2:75:8b:08:e9:13:80:c9:6e:ba:86:
                    a3:45:e2:e4:54:03:24:90:3f:7b:7c:da:12:d9:f5:
                    ee:e6:95:c2:47:a9:fc:ea:35:3f:b3:9f:98:95:5c:
                    2a:5b:f7:67:62:52:79:78:77:5a:21:d4:06:92:1f:
                    ac:c2:e4:75:23:eb:f9:06:a1:07:d2:31:5f:8b:e8:
                    2f:82:ba:65:7d:d7:99:5d:6f:4b:5f:f4:bc:50:c4:
                    d2:96:27:a1:5f:af:e9:99:57:d3:b3:1b:f5:a0:b7:
                    59:21:67:c5:02:96:71:66:1b:7f:74:16:ef:f1:15:
                    a5:87:75:97:cf:4a:0a:c5:3d:9a:7b:f1:0d:97:36:
                    49:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:25:7B:5F:CA:BF:C5:FA:F2:40:F1:67:38:DA:15:57:AE:C8:38:D5
            X509v3 Authority Key Identifier:
                keyid:55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:95:d4:f0:4d:3e:ee:47:b1:5f:b8:dc:c8:ae:7d:e7:a1:15:
         9d:9b:b0:4b:26:ef:76:4f:a3:a7:55:23:c2:c2:9a:52:57:9d:
         d5:d6:1c:81:9c:33:c5:a7:6f:e4:53:86:93:93:c8:ef:b0:cf:
         7f:47:ff:45:3b:a1:8f:70:bf:34:11:e6:c3:d1:cd:16:4b:a5:
         7a:0e:e5:aa:d9:fb:4d:8c:57:68:1f:c9:da:25:4e:8f:d7:75:
         ba:e6:93:e8:e8:dd:c1:72:aa:99:2b:c2:46:0b:77:1c:af:45:
         05:1d:2a:0c:ce:7b:37:d0:c5:87:24:dd:a0:57:dc:6d:3e:27:
         a1:5f:09:68:02:53:ff:db:35:67:52:b3:ee:12:0a:15:3d:18:
         63:43:5e:d6:90:79:15:9e:78:08:c5:71:c0:24:ea:43:93:5e:
         26:ab:85:dd:b5:f2:24:03:11:81:e0:58:41:77:62:0e:49:7f:
         a8:b2:b9:c7:6f:9a:8c:8e:05:72:f3:f3:ab:8e:12:07:78:39:
         7a:5d:ae:af:7e:59:51:7f:23:0e:0b:67:71:9e:ba:ae:70:d6:
         38:1a:20:a4:e9:d0:c3:ba:83:cb:cf:82:de:1c:64:89:90:4e:
         5b:9a:04:65:81:31:32:e6:35:1d:dc:28:df:0a:0a:d0:43:b7:
         60:6e:36:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 19:15:32 2025 by rpki-client