This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.mft
File:                     Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.mft (raw, json)
Hash identifier:          ZeEl5MIE0l0mEksXYaW3M7qbzYC31HydU1wB5HwnVnY=
Subject key identifier:   44:9D:45:3E:AC:AA:6B:69:63:BF:D8:50:85:CC:A0:B4:3C:4A:EB:50
Authority key identifier: 56:AF:CD:8F:B4:0A:AE:1D:24:3C:2A:8C:E2:54:1A:69:98:7E:ED:13
Certificate issuer:       /CN=56afcd8fb40aae1d243c2a8ce2541a69987eed13
Certificate serial:       019B3A8FEB2F1345D4E369CF48BA17B819E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.mft
Manifest number:          1120
Signing time:             Sat 20 Dec 2025 07:01:08 +0000
Manifest this update:     Sat 20 Dec 2025 07:01:08 +0000
Manifest next update:     Sun 21 Dec 2025 07:01:08 +0000
Files and hashes:         1: 1-546Kti0lJhdCgM2BGLPJH8tB7A.roa (hash: DZKGU1PUOmodvcooBnReEnL3w/IZk9xJ+ihgar9xlKQ=)
                          2: DAWuOXIzShKngVeAXIk14zxR1_o.roa (hash: BRexZQjukSfkz0NX2Zg92MIjIVuvAgUDzsMd3Qrzxp0=)
                          3: Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.crl (hash: LZgkamICvC8CWzsY51n/lG6zWQO5VfIxwmuI0vZ6RQ0=)
                          4: kc4z2zzYiTW0GaLmTuuhDE91d5o.roa (hash: g/g6twuj787QLJVbdboV8m3Ts06Is1fDi161w4I+b/0=)
                          5: zB4VR8eQ-BQowrZBeMtlvY4zfQ8.roa (hash: /Tu77k3GY/MF6l/555p9Pg+IHa6U4tx0rpsWT2I4Xao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3a:8f:eb:2f:13:45:d4:e3:69:cf:48:ba:17:b8:19:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56afcd8fb40aae1d243c2a8ce2541a69987eed13
        Validity
            Not Before: Dec 20 07:01:08 2025 GMT
            Not After : Dec 21 07:01:08 2025 GMT
        Subject: CN=449d453eacaa6b6963bfd85085cca0b43c4aeb50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ad:65:81:49:ea:a8:22:56:f5:f3:04:53:6b:
                    76:f6:6e:15:cc:c9:6e:c2:f7:89:22:8a:ea:9e:80:
                    1d:6e:9e:d3:91:e0:e2:23:9c:2d:bd:5f:f4:aa:44:
                    11:26:72:87:f0:e1:3e:b2:e6:08:e9:7d:42:3a:46:
                    52:a0:c9:b7:a4:1e:02:8a:fb:78:ef:71:d4:55:22:
                    ed:17:12:78:5f:77:a8:ad:e8:e0:b5:90:5f:8e:67:
                    e0:fc:aa:9b:2d:e8:b3:02:5f:d4:19:fa:70:7d:53:
                    cb:1e:58:9b:e7:83:a3:3c:d3:33:a8:15:e7:7c:9f:
                    05:31:6a:15:2b:dd:1f:6c:69:01:c8:6d:7a:3f:45:
                    e5:ac:a7:5b:1e:c6:45:71:98:a7:8b:72:aa:63:40:
                    47:89:c1:91:a4:29:7c:40:09:a8:be:81:4a:72:2b:
                    f3:98:e1:92:e4:5f:4b:42:ab:dc:24:5c:3b:90:26:
                    f4:a9:fb:fc:15:19:bd:64:95:47:36:4d:27:35:51:
                    9c:bb:86:d9:69:fc:83:42:07:94:4e:11:45:fa:a0:
                    bf:fa:c1:44:54:47:f5:f9:39:11:57:c6:20:e2:22:
                    89:0d:99:15:89:9e:b0:52:f4:83:7b:fd:38:66:3d:
                    89:12:f3:4d:bc:70:26:2a:55:84:d4:ce:17:e2:e0:
                    1f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:9D:45:3E:AC:AA:6B:69:63:BF:D8:50:85:CC:A0:B4:3C:4A:EB:50
            X509v3 Authority Key Identifier:
                keyid:56:AF:CD:8F:B4:0A:AE:1D:24:3C:2A:8C:E2:54:1A:69:98:7E:ED:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:a9:e3:5c:e1:ae:c9:e0:96:43:63:81:99:d1:84:51:9e:87:
         ed:f8:84:2e:62:42:fc:7b:e6:8b:95:59:50:7a:81:fe:ef:4c:
         79:ca:01:cc:c8:3e:97:eb:f2:cb:15:42:1e:87:99:8d:5d:08:
         fe:00:2d:68:08:ce:9a:68:53:45:7b:79:b6:e7:07:4f:fd:2c:
         5b:96:24:cb:59:69:21:ea:41:74:05:20:3f:d8:e7:2f:3e:b5:
         00:7b:af:47:18:fb:da:a8:80:4c:75:d7:e1:14:3e:af:23:5d:
         54:fd:9f:94:db:55:b6:d5:22:d1:62:36:e1:a0:23:60:ad:83:
         d8:30:25:79:03:06:b9:2e:49:a5:e4:b7:e0:cf:22:79:e3:5f:
         93:58:d6:67:f2:a7:a7:a6:5c:46:43:73:1d:de:c1:e0:f8:90:
         52:ce:50:3d:0c:a9:a7:c2:bb:e9:70:88:f9:eb:d6:03:81:84:
         54:74:31:4e:37:88:b9:30:0c:a6:d4:3b:6d:c5:33:31:a4:75:
         29:aa:10:46:63:b7:d3:49:9c:80:65:d3:6b:a8:72:10:97:43:
         1f:c7:4e:92:26:40:66:89:ed:18:eb:c9:81:c9:51:cc:6a:11:
         5d:da:c0:47:d0:2b:24:e4:90:e5:af:cb:27:f7:7a:5c:93:6a:
         52:df:f1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 08:52:40 2025 by rpki-client