This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
File:                     VTynsubB4X9fPtvjdeGezjlTORA.mft (raw, json)
Hash identifier:          mGAAWwbsNMzH6GiUKTRkU7TkLbKkb3DHdk/zdl1mmOY=
Subject key identifier:   31:EC:A1:A8:AE:72:B9:7A:53:A8:9E:94:CA:F7:9C:C0:30:50:C3:80
Authority key identifier: 55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
Certificate issuer:       /CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Certificate serial:       019B631E79A68716078F551C104384496275
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
Manifest number:          126F
Signing time:             Sun 28 Dec 2025 04:01:40 +0000
Manifest this update:     Sun 28 Dec 2025 04:01:40 +0000
Manifest next update:     Mon 29 Dec 2025 04:01:40 +0000
Files and hashes:         1: 6k2hBM4XUhd6DA-vs8SUHNOo6k4.roa (hash: j24u1fw+wKi+GN73WExbNJpjYxAE0mjUB2p9siHDzsY=)
                          2: VTynsubB4X9fPtvjdeGezjlTORA.crl (hash: sfqm4Ae59WkScStbqSy+QAv3At76uEzEjSg4U6WA8Ew=)
                          3: sxJKQqy--ePZJKy-z6ZXKspnoCU.roa (hash: viGZT8F9x3/CHDhQJKfJwFzfO7LR9KesSjHrb2YKNNs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:63:1e:79:a6:87:16:07:8f:55:1c:10:43:84:49:62:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
        Validity
            Not Before: Dec 28 04:01:40 2025 GMT
            Not After : Dec 29 04:01:40 2025 GMT
        Subject: CN=31eca1a8ae72b97a53a89e94caf79cc03050c380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:eb:06:ac:18:0b:99:cb:7c:3b:6b:cd:de:bb:
                    43:dc:38:ac:81:e9:e1:9a:42:4f:3d:4f:36:b9:3a:
                    f6:4c:67:82:1c:90:4d:1b:03:10:06:be:ab:78:4b:
                    dc:53:86:c5:2e:bd:80:6f:c5:49:b5:49:fb:56:a3:
                    f7:74:63:7e:83:a0:48:ee:d8:3f:9f:5b:cc:db:eb:
                    74:04:1c:fa:d9:34:79:04:33:83:77:fb:e4:58:8a:
                    92:e3:2f:79:04:a1:90:80:3e:72:fe:63:c5:4a:90:
                    10:ef:87:73:30:4b:8a:4f:71:dc:30:ae:74:78:4f:
                    d6:d5:5d:b8:20:5a:88:06:46:81:30:3d:72:7e:72:
                    92:d6:6a:ba:a2:c3:9f:ff:19:32:9d:ff:bc:b3:0d:
                    10:a1:b3:1a:4b:b4:42:17:5e:22:64:18:73:af:5a:
                    96:b3:fa:2f:03:fa:82:b9:8a:52:ef:01:db:c9:fd:
                    af:66:de:cc:e5:17:05:e3:94:bf:db:d6:89:d5:45:
                    0f:45:17:b0:ec:c5:35:cf:a3:e6:5f:26:f8:d6:8f:
                    9c:b4:a3:a1:4d:f1:a1:bf:23:98:b5:e7:ad:3f:e8:
                    68:38:c7:79:07:8e:bf:07:8c:58:dd:23:c1:9b:3e:
                    20:08:9b:2d:75:43:41:a3:57:11:62:b8:e7:1b:c0:
                    e9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:EC:A1:A8:AE:72:B9:7A:53:A8:9E:94:CA:F7:9C:C0:30:50:C3:80
            X509v3 Authority Key Identifier:
                keyid:55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:54:0e:1f:22:d9:33:44:b7:22:d3:56:63:7d:fe:70:ed:ec:
         ac:fb:0b:84:fd:41:09:92:91:70:57:cd:53:d2:f9:8a:4a:c0:
         6a:4d:ef:14:27:ce:13:1d:6f:2e:37:a1:5b:10:12:62:f0:0b:
         51:39:36:16:92:07:73:93:30:5d:0e:f1:6c:5d:0e:4d:45:06:
         ed:a5:6f:98:fa:c2:65:7e:74:8d:f7:86:d6:cf:1b:42:93:4e:
         26:96:6f:a9:f6:b9:32:c6:f3:45:46:13:4e:f1:f7:19:12:d0:
         f9:6d:fd:6c:04:0a:95:3d:4d:74:dc:b9:d3:51:83:78:3a:8f:
         3e:28:d8:7b:9f:c7:07:06:7c:26:f2:d9:95:93:d6:05:8b:31:
         00:34:3e:eb:25:5d:ec:10:1a:8e:40:81:78:df:65:a5:ac:09:
         09:7b:24:0b:8e:1f:14:36:57:b1:2c:4a:47:79:f3:a1:13:5c:
         90:46:79:55:b4:21:d1:ef:21:cf:e4:05:ad:15:d6:fa:f5:73:
         0e:32:95:0c:8e:d7:43:d2:fe:65:b3:eb:94:c2:84:f9:7d:b9:
         24:11:4c:cf:86:9d:7d:3a:7f:dd:d4:63:31:c6:8a:20:b6:b5:
         b9:f9:ef:5a:55:af:00:69:3c:9a:9e:18:45:51:b9:5f:09:41:
         e3:a3:a5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 05:50:26 2025 by rpki-client