This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
File:                     fVexU-7RELy9FNx-M_1H8C4v4HE.mft (raw, json)
Hash identifier:          gBdsgS8+nyVRtYJHWRW8Vnl+nG1EfOolknIXJeo7MYk=
Subject key identifier:   BD:98:9A:18:18:C2:C0:6C:C8:0B:85:5E:5B:03:C6:91:E0:46:FB:2D
Authority key identifier: 7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71
Certificate issuer:       /CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
Certificate serial:       019AF6F9D0DFB809F50F21A7CF39A6320BF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
Manifest number:          1763
Signing time:             Sun 07 Dec 2025 04:02:38 +0000
Manifest this update:     Sun 07 Dec 2025 04:02:38 +0000
Manifest next update:     Mon 08 Dec 2025 04:02:38 +0000
Files and hashes:         1: 1gktZR41lM7jL9DWPWwIpWV6M78.roa (hash: HJiBs8EKqMUy6AK9Z/fItBE1opDLfro1xaIJHGboLfU=)
                          2: fVexU-7RELy9FNx-M_1H8C4v4HE.crl (hash: 97r7peNt0qRqNOyZyLX0N1rZ6GXZQPxiFb8aa0vXDH4=)
                          3: kUIltMqyJJ6z_MdFBE4UK_gpE0M.roa (hash: pWOc8zM/cAP0pnHrLKIMmGeqVgPcNsErRAC9f0Wl2a4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f6:f9:d0:df:b8:09:f5:0f:21:a7:cf:39:a6:32:0b:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
        Validity
            Not Before: Dec  7 04:02:38 2025 GMT
            Not After : Dec  8 04:02:38 2025 GMT
        Subject: CN=bd989a1818c2c06cc80b855e5b03c691e046fb2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7d:91:51:2c:e8:1a:9b:b2:1b:34:24:b8:cc:
                    74:21:99:05:b2:cb:3c:a7:53:97:65:a7:f4:e7:5d:
                    50:aa:ab:03:26:64:6d:a2:08:06:ef:f5:22:49:18:
                    e1:2c:8f:ab:d6:8a:29:27:c7:6b:26:43:b1:da:9a:
                    e1:3d:63:13:34:f5:15:73:0a:34:bf:a8:b8:d5:e0:
                    01:36:4f:ad:27:b7:c7:48:35:4e:61:b2:7d:6c:b7:
                    ad:03:c1:28:bc:29:f8:d0:46:60:88:fd:28:ab:a2:
                    19:b1:13:fb:41:32:4a:4c:1e:d0:a7:44:df:c9:f7:
                    1f:60:5a:08:d0:16:c7:9f:cb:8c:ac:09:e7:a6:87:
                    18:43:65:fd:94:46:fa:59:70:df:02:d3:97:c0:0c:
                    47:18:36:14:85:56:59:7a:fd:43:f8:7a:83:ee:20:
                    c8:8e:97:01:c9:ca:55:a3:d3:e3:5b:89:4c:e1:58:
                    f8:16:c2:17:13:49:5e:d3:ee:d0:16:be:72:ed:16:
                    19:1e:3c:8d:e8:56:3e:24:34:e7:18:3e:82:4c:53:
                    87:00:c0:6d:bf:bf:97:3b:a2:57:17:a3:ec:31:9b:
                    cd:3c:98:3a:fe:00:25:0a:f8:51:a3:f5:de:e9:70:
                    33:31:2e:16:a2:f4:d5:fd:87:46:a8:55:9f:19:82:
                    8f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:98:9A:18:18:C2:C0:6C:C8:0B:85:5E:5B:03:C6:91:E0:46:FB:2D
            X509v3 Authority Key Identifier:
                keyid:7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:51:e0:66:14:df:87:78:7d:49:43:81:98:57:ed:aa:b0:7c:
         94:ae:02:6b:b3:80:f5:b8:c8:38:7b:5e:c0:43:40:6c:ac:75:
         c0:63:53:d2:76:eb:05:c6:64:83:32:4c:09:7f:57:25:4f:9c:
         a4:fd:22:5f:90:72:d4:13:aa:c0:7e:73:47:d0:95:a2:ea:85:
         7c:65:8b:de:6d:0a:a9:5c:47:4c:43:2b:11:fb:a1:aa:36:64:
         74:d7:5f:8f:ba:a4:1c:41:e7:11:a3:41:ae:09:cc:58:20:57:
         40:7c:12:6f:fb:88:c5:7e:00:ed:fb:cd:db:20:2c:b0:fa:0f:
         54:8d:c0:c7:09:b9:ae:75:92:7c:13:13:80:6f:c5:57:2a:32:
         b6:3e:cd:05:30:f8:8e:e7:d8:ad:03:19:04:63:89:a0:b1:6b:
         70:a5:70:69:ee:9a:b5:ec:3e:76:42:3d:1d:d0:d7:4c:64:db:
         b3:42:51:98:c2:d9:86:63:6a:ff:ce:11:29:70:4e:c3:dd:78:
         4e:00:c5:75:20:92:1f:be:70:02:a3:85:bb:41:a6:7b:64:9f:
         ef:6c:51:6a:18:06:8a:c5:bf:01:54:38:ab:e5:7a:34:fc:09:
         de:a4:51:96:52:78:37:a2:b6:53:36:8d:73:00:59:ce:46:ed:
         b7:bf:44:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr2+dDfuAn1DyGnzzmmMgv5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTdiMTUzZWVkMTEwYmNiZDE0ZGM3ZTMzZmQ0N2YwMmUy
ZmUwNzEwHhcNMjUxMjA3MDQwMjM4WhcNMjUxMjA4MDQwMjM4WjAzMTEwLwYDVQQD
EyhiZDk4OWExODE4YzJjMDZjYzgwYjg1NWU1YjAzYzY5MWUwNDZmYjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX2RUSzoGpuyGzQkuMx0IZkFsss8
p1OXZaf0511QqqsDJmRtoggG7/UiSRjhLI+r1oopJ8drJkOx2prhPWMTNPUVcwo0
v6i41eABNk+tJ7fHSDVOYbJ9bLetA8EovCn40EZgiP0oq6IZsRP7QTJKTB7Qp0Tf
yfcfYFoI0BbHn8uMrAnnpocYQ2X9lEb6WXDfAtOXwAxHGDYUhVZZev1D+HqD7iDI
jpcBycpVo9PjW4lM4Vj4FsIXE0le0+7QFr5y7RYZHjyN6FY+JDTnGD6CTFOHAMBt
v7+XO6JXF6PsMZvNPJg6/gAlCvhRo/Xe6XAzMS4WovTV/YdGqFWfGYKPrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2YmhgYwsBsyAuFXlsDxpHgRvstMB8GA1UdIwQY
MBaAFH1XsVPu0RC8vRTcfjP9R/AuL+BxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZleFUtN1JFTHk5Rk54LU1fMUg4QzR2NEhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hOGQ2ZDgtZDJhNS00YWYyLWJiNDQt
MDgwNzA5MWFhNzdkLzEvZlZleFUtN1JFTHk5Rk54LU1fMUg4QzR2NEhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9hOGQ2ZDgtZDJhNS00YWYyLWJiNDQtMDgwNzA5MWFhNzdk
LzEvZlZleFUtN1JFTHk5Rk54LU1fMUg4QzR2NEhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmFHgZhTf
h3h9SUOBmFftqrB8lK4Ca7OA9bjIOHtewENAbKx1wGNT0nbrBcZkgzJMCX9XJU+c
pP0iX5By1BOqwH5zR9CVouqFfGWL3m0KqVxHTEMrEfuhqjZkdNdfj7qkHEHnEaNB
rgnMWCBXQHwSb/uIxX4A7fvN2yAssPoPVI3Axwm5rnWSfBMTgG/FVyoytj7NBTD4
jufYrQMZBGOJoLFrcKVwae6atew+dkI9HdDXTGTbs0JRmMLZhmNq/84RKXBOw914
TgDFdSCSH75wAqOFu0Gme2Sf72xRahgGisW/AVQ4q+V6NPwJ3qRRllJ4N6K2UzaN
cwBZzkbtt79ErA==
-----END CERTIFICATE-----
Generated at Sun Dec 7 07:44:24 2025 by rpki-client