This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
File:                     VTynsubB4X9fPtvjdeGezjlTORA.mft (raw, json)
Hash identifier:          0bXnRcokvBdRiWvkGRYTSTS8fYV3XVo17rHKjmuYVmM=
Subject key identifier:   7D:5A:27:E9:22:72:5E:5B:01:5A:BD:DE:4D:B9:5C:4D:47:7E:66:12
Authority key identifier: 55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
Certificate issuer:       /CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Certificate serial:       019B38A20B70159BB8DE3021597CD82DD680
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
Manifest number:          1259
Signing time:             Fri 19 Dec 2025 22:01:42 +0000
Manifest this update:     Fri 19 Dec 2025 22:01:42 +0000
Manifest next update:     Sat 20 Dec 2025 22:01:42 +0000
Files and hashes:         1: 6k2hBM4XUhd6DA-vs8SUHNOo6k4.roa (hash: j24u1fw+wKi+GN73WExbNJpjYxAE0mjUB2p9siHDzsY=)
                          2: VTynsubB4X9fPtvjdeGezjlTORA.crl (hash: uahAexQOROAvRD9GGmToX4RQ8gXjqMCF0sxQEmYQzTE=)
                          3: sxJKQqy--ePZJKy-z6ZXKspnoCU.roa (hash: viGZT8F9x3/CHDhQJKfJwFzfO7LR9KesSjHrb2YKNNs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:38:a2:0b:70:15:9b:b8:de:30:21:59:7c:d8:2d:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
        Validity
            Not Before: Dec 19 22:01:42 2025 GMT
            Not After : Dec 20 22:01:42 2025 GMT
        Subject: CN=7d5a27e922725e5b015abdde4db95c4d477e6612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b2:f0:81:3f:e0:e6:79:25:cd:c5:f4:fd:6c:
                    f4:98:e9:ce:68:1f:86:1e:2a:17:3c:43:20:26:5a:
                    5f:ed:e7:72:e8:26:f1:d6:e6:b8:6d:42:09:37:1c:
                    19:3f:1b:a7:99:54:1b:12:9d:0c:23:48:c7:5b:99:
                    80:db:e3:59:6c:1e:b8:6a:84:0d:6c:b5:bd:33:62:
                    45:5b:69:87:df:ba:cc:53:bb:9d:39:c9:fd:90:49:
                    e1:41:41:7f:e6:46:e0:77:63:fe:b0:a8:78:78:92:
                    ea:c6:a8:c2:4c:79:7c:c3:e8:e4:0f:25:52:c0:0f:
                    9f:25:9f:5e:b9:93:23:53:42:c7:6e:e5:33:e0:14:
                    db:b8:53:55:39:1b:07:80:a1:9c:4f:03:b8:14:58:
                    0c:58:42:61:14:ab:7a:85:e5:e3:0a:3c:4f:84:8d:
                    4f:7b:cb:04:f9:3d:1a:32:f0:86:11:08:88:51:ab:
                    98:e2:97:02:2a:8d:59:8e:5b:43:92:50:a7:49:56:
                    6c:02:6d:6d:96:8d:17:37:42:16:b3:d7:9b:21:67:
                    db:27:60:b1:e0:9e:3b:6e:94:70:24:27:36:c3:0e:
                    3d:b7:59:a3:01:bd:71:46:26:a9:de:5e:bf:41:15:
                    fc:4a:4f:0f:93:d1:64:e9:84:07:de:ea:7c:67:e2:
                    c2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5A:27:E9:22:72:5E:5B:01:5A:BD:DE:4D:B9:5C:4D:47:7E:66:12
            X509v3 Authority Key Identifier:
                keyid:55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:42:af:7a:6c:2b:d8:04:14:18:4d:ad:57:b3:70:d5:1b:b8:
         de:e6:9c:c9:72:60:22:39:31:99:93:fc:dd:ff:b3:9e:82:a8:
         02:df:92:6d:27:ee:de:eb:bc:26:e1:08:8c:21:cc:cb:14:04:
         80:06:04:7a:c1:f1:e7:34:9f:2e:5e:63:7c:c7:a0:1e:9b:ce:
         23:fe:02:c9:21:89:b5:07:95:65:75:a1:91:48:f1:96:25:d3:
         20:48:4d:2e:f5:b6:85:ee:19:b8:77:85:41:f0:a7:4e:e8:7f:
         41:de:68:af:a6:07:66:09:d1:ce:23:7d:bf:d6:5e:79:4d:cc:
         76:a3:64:3c:ec:b6:b7:da:05:53:2d:e2:ba:5d:d3:a4:30:d2:
         4c:a5:60:83:c1:4d:6e:5e:7e:b4:7a:a3:9e:33:6e:14:4a:b1:
         46:2b:21:bd:3a:7b:22:be:77:65:1b:bd:1b:14:03:c5:18:04:
         84:d9:9e:87:c7:37:d6:51:51:0f:50:94:eb:aa:ad:d1:e4:dd:
         3b:2f:bc:3a:18:d5:34:21:9e:84:a5:7d:85:47:25:45:ea:ab:
         13:be:7c:83:ab:88:d4:cc:67:ee:58:a3:3e:cd:f1:0c:3f:70:
         16:eb:5f:b9:f3:a5:48:85:0a:b1:84:e1:b3:3d:6f:36:2d:8e:
         68:b3:61:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs4ogtwFZu43jAhWXzYLdaAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1M2NhN2IyZTZjMWUxN2Y1ZjNlZGJlMzc1ZTE5ZWNlMzk1
MzM5MTAwHhcNMjUxMjE5MjIwMTQyWhcNMjUxMjIwMjIwMTQyWjAzMTEwLwYDVQQD
Eyg3ZDVhMjdlOTIyNzI1ZTViMDE1YWJkZGU0ZGI5NWM0ZDQ3N2U2NjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrLwgT/g5nklzcX0/Wz0mOnOaB+G
HioXPEMgJlpf7edy6Cbx1ua4bUIJNxwZPxunmVQbEp0MI0jHW5mA2+NZbB64aoQN
bLW9M2JFW2mH37rMU7udOcn9kEnhQUF/5kbgd2P+sKh4eJLqxqjCTHl8w+jkDyVS
wA+fJZ9euZMjU0LHbuUz4BTbuFNVORsHgKGcTwO4FFgMWEJhFKt6heXjCjxPhI1P
e8sE+T0aMvCGEQiIUauY4pcCKo1ZjltDklCnSVZsAm1tlo0XN0IWs9ebIWfbJ2Cx
4J47bpRwJCc2ww49t1mjAb1xRiap3l6/QRX8Sk8Pk9Fk6YQH3up8Z+LCIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1aJ+kicl5bAVq93k25XE1HfmYSMB8GA1UdIwQY
MBaAFFU8p7LmweF/Xz7b43Xhns45UzkQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlR5bnN1YkI0WDlmUHR2amRlR2V6amxUT1JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kNTcyYzMtMzUwZi00NzliLWE3YjMt
MTUzZTkxODJhZjQxLzEvVlR5bnN1YkI0WDlmUHR2amRlR2V6amxUT1JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kNTcyYzMtMzUwZi00NzliLWE3YjMtMTUzZTkxODJhZjQx
LzEvVlR5bnN1YkI0WDlmUHR2amRlR2V6amxUT1JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVUKvemwr
2AQUGE2tV7Nw1Ru43uacyXJgIjkxmZP83f+znoKoAt+SbSfu3uu8JuEIjCHMyxQE
gAYEesHx5zSfLl5jfMegHpvOI/4CySGJtQeVZXWhkUjxliXTIEhNLvW2he4ZuHeF
QfCnTuh/Qd5or6YHZgnRziN9v9ZeeU3MdqNkPOy2t9oFUy3iul3TpDDSTKVgg8FN
bl5+tHqjnjNuFEqxRishvTp7Ir53ZRu9GxQDxRgEhNmeh8c31lFRD1CU66qt0eTd
Oy+8OhjVNCGehKV9hUclReqrE758g6uI1Mxn7lijPs3xDD9wFutfufOlSIUKsYTh
sz1vNi2OaLNhHg==
-----END CERTIFICATE-----
Generated at Fri Dec 19 23:47:22 2025 by rpki-client