This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
File:                     VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft (raw, json)
Hash identifier:          1AfRBMtO94KGPAoOUbURqRSg//Vs0OuidwzDr3QXgAc=
Subject key identifier:   84:F6:D2:91:DC:55:9B:83:FC:E0:10:78:1A:1D:8A:7D:78:80:4F:BE
Authority key identifier: 55:C9:62:05:93:CC:4F:CA:85:67:C2:44:25:78:61:A5:22:F7:35:9D
Certificate issuer:       /CN=55c9620593cc4fca8567c244257861a522f7359d
Certificate serial:       019B454A8808BA74B02F5D684CC10CAD2515
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
Manifest number:          05C4
Signing time:             Mon 22 Dec 2025 09:01:10 +0000
Manifest this update:     Mon 22 Dec 2025 09:01:10 +0000
Manifest next update:     Tue 23 Dec 2025 09:01:10 +0000
Files and hashes:         1: 91CTdDNsjs_qam4yfYvkxhDQgJs.roa (hash: Wj9O/301kCWg3Va3W0E92TWsePIQ3Kx5Wa2obkc5IyE=)
                          2: VcliBZPMT8qFZ8JEJXhhpSL3NZ0.crl (hash: PW0z3rfgdXcptylazHcg51oaHNYYjyr8ws7rfW0stHE=)
                          3: tKEsqsadjWPvO1jPaZy5I3A_ye4.roa (hash: kHfnj4N6pUDMw3ADpNh+ksVOg0Sz2BCb0u9pD00mP2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 07:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:45:4a:88:08:ba:74:b0:2f:5d:68:4c:c1:0c:ad:25:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9620593cc4fca8567c244257861a522f7359d
        Validity
            Not Before: Dec 22 09:01:10 2025 GMT
            Not After : Dec 23 09:01:10 2025 GMT
        Subject: CN=84f6d291dc559b83fce010781a1d8a7d78804fbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:92:89:68:4b:3b:ab:6e:10:0e:31:89:8a:23:
                    92:1a:14:78:d5:10:bc:b0:6e:09:00:ad:21:1f:a6:
                    7c:9b:d0:c9:ee:e9:42:8b:77:f7:6d:41:44:5a:7e:
                    99:2a:a8:b5:0b:7a:2c:d3:cc:2a:e1:3c:2f:a5:f3:
                    7b:74:b6:b7:b5:ad:9f:d4:1e:d5:11:fe:5c:c3:9b:
                    24:02:2e:f4:78:9e:fd:83:e1:3c:f4:f8:23:15:9a:
                    d1:6e:00:45:7b:0e:dd:37:7f:6b:a7:69:62:ea:58:
                    ab:98:5d:91:56:c9:7d:ca:e0:a2:a4:99:43:84:7a:
                    c8:1d:06:83:88:10:6b:67:83:e0:22:a4:61:b8:5e:
                    e6:e9:35:eb:42:fb:a3:3c:2c:2b:6c:23:3a:74:d2:
                    f0:05:ca:7b:ed:73:7b:24:c6:b2:5e:23:a3:dc:70:
                    57:3d:38:96:3e:95:9d:0b:d0:fa:64:30:d0:26:d9:
                    ab:39:7a:43:1b:88:3d:af:2e:9c:4d:55:0a:b5:d8:
                    24:9d:42:3e:9a:09:88:a8:2b:db:fb:56:21:f7:0c:
                    34:64:09:5b:7c:bc:a1:27:6c:ec:f1:ad:0b:28:70:
                    99:37:d9:63:ca:3a:f0:09:8a:92:32:00:72:94:b4:
                    30:e9:ee:30:07:ee:f8:88:65:bd:85:6a:7a:8a:2c:
                    40:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F6:D2:91:DC:55:9B:83:FC:E0:10:78:1A:1D:8A:7D:78:80:4F:BE
            X509v3 Authority Key Identifier:
                keyid:55:C9:62:05:93:CC:4F:CA:85:67:C2:44:25:78:61:A5:22:F7:35:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:51:b0:62:d8:9d:aa:45:cb:3b:f9:49:14:56:d6:9c:d1:6e:
         a8:66:c9:ab:04:93:8c:05:f8:ce:b4:ad:6b:eb:f5:63:94:81:
         28:bb:56:41:a3:1f:9c:ed:3e:b7:23:de:d4:af:e0:55:da:d2:
         d9:c3:f8:42:a2:64:fb:82:91:2b:1e:3b:68:54:01:6d:12:2f:
         6b:a1:54:07:a9:27:79:ef:f3:e0:25:13:23:83:d3:96:c2:77:
         3a:87:53:fb:5a:59:bb:e9:f7:bd:d2:99:7a:38:0e:09:6c:e8:
         dd:e1:a9:db:ed:e9:eb:22:19:41:bb:e7:6a:fb:59:b2:d3:7c:
         39:11:3b:b5:80:60:98:a8:96:64:cc:46:f3:e4:32:72:f7:66:
         0f:06:ab:7c:bd:d7:1a:8e:66:7e:fd:f1:e7:77:2a:8e:69:8f:
         ba:e3:42:fc:fa:96:4d:a4:34:47:28:d2:d4:23:95:f3:ab:ff:
         77:43:0c:f4:7b:57:23:eb:a2:07:02:73:91:cb:c9:b6:fd:9f:
         65:58:d1:b7:00:bb:59:3b:c3:9c:03:72:b5:27:57:a0:e7:a0:
         fd:3e:69:39:de:68:9a:f9:92:8a:c9:8f:11:ec:a1:8a:00:ef:
         30:87:51:3a:a0:91:fc:99:84:8c:05:05:e1:d0:f8:9a:eb:c8:
         5c:a6:8d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 11:05:40 2025 by rpki-client