This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
File:                     VVzAtghVz-FakevLDuWExhcRb7c.mft (raw, json)
Hash identifier:          NqejNzOsmpJnxwU04ILnM6bQQ0x10mB6Pr4pe24L5mU=
Subject key identifier:   67:C3:7F:7B:DC:C1:84:09:D8:F4:6C:A0:B5:E9:19:1C:E6:85:A8:2E
Authority key identifier: 55:5C:C0:B6:08:55:CF:E1:5A:91:EB:CB:0E:E5:84:C6:17:11:6F:B7
Certificate issuer:       /CN=555cc0b60855cfe15a91ebcb0ee584c617116fb7
Certificate serial:       019B281B4CA0F8773AC9E9DA3B7FBAF08A55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
Manifest number:          0543
Signing time:             Tue 16 Dec 2025 17:00:36 +0000
Manifest this update:     Tue 16 Dec 2025 17:00:36 +0000
Manifest next update:     Wed 17 Dec 2025 17:00:36 +0000
Files and hashes:         1: VVzAtghVz-FakevLDuWExhcRb7c.crl (hash: sAU8ACIXRZALzzwedsJbUDAwm4ifIkNJVXdoGFWj5OE=)
                          2: WrVC9jX5kklKg1NrTkuGqJhi9ss.roa (hash: 1/eKwFnStb8NeVxzyi/3E+1woNkVGNqWnUzMqa1RbTs=)
                          3: zOxwHP9C2XU1qxc9gfabChAW270.roa (hash: pIK3P+kNzEGWKFk3LxEQ0gUxs9HATfITXq/XpRc4TCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 14:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:28:1b:4c:a0:f8:77:3a:c9:e9:da:3b:7f:ba:f0:8a:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=555cc0b60855cfe15a91ebcb0ee584c617116fb7
        Validity
            Not Before: Dec 16 17:00:36 2025 GMT
            Not After : Dec 17 17:00:36 2025 GMT
        Subject: CN=67c37f7bdcc18409d8f46ca0b5e9191ce685a82e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b9:25:45:03:d4:f6:70:83:5e:e5:fe:ba:f7:
                    ff:89:5f:a6:27:02:71:e4:c0:8e:bd:43:71:62:49:
                    fa:98:5c:c6:82:3a:67:54:ec:2f:da:53:dc:50:2d:
                    6e:74:c8:00:74:b2:a5:38:ef:5e:90:25:f4:d7:49:
                    64:5e:94:74:11:8d:42:69:8b:a8:19:d8:20:cb:e3:
                    5d:d3:2e:76:60:32:04:94:81:21:58:5e:4b:4a:21:
                    e0:e1:83:75:99:a4:31:a1:4d:40:ac:4d:7c:d8:97:
                    91:73:fa:b2:8f:d6:35:a5:a2:d1:2e:e3:5a:47:d7:
                    24:c7:a6:3f:59:c5:6d:4a:a5:31:31:75:f2:be:a5:
                    fb:84:6a:a1:ab:21:d4:f6:e8:cb:f1:73:2c:cc:aa:
                    1d:7f:45:27:a6:c5:09:3c:a5:c6:b6:13:98:4f:d8:
                    e1:4e:b6:ac:f5:b6:74:7c:97:0b:e3:ea:8d:93:9a:
                    57:d7:b6:46:2b:42:93:cf:92:95:0c:d5:b0:c3:f7:
                    ae:a8:fc:d1:5a:5b:ed:5b:9e:8a:9b:69:bf:a4:3f:
                    56:ba:47:d8:84:6b:6e:9d:00:b9:ed:7d:87:38:e0:
                    a0:fd:64:49:29:09:f9:47:a6:e8:58:91:cb:7c:37:
                    25:f4:0b:0f:f8:6c:77:ff:37:12:ae:7a:9e:2a:9e:
                    e9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C3:7F:7B:DC:C1:84:09:D8:F4:6C:A0:B5:E9:19:1C:E6:85:A8:2E
            X509v3 Authority Key Identifier:
                keyid:55:5C:C0:B6:08:55:CF:E1:5A:91:EB:CB:0E:E5:84:C6:17:11:6F:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:dc:27:76:1b:1f:db:f4:79:52:8f:54:53:71:fc:d4:a4:75:
         86:11:45:4d:a6:e8:b0:5e:59:06:6b:c1:8d:29:91:8e:24:7a:
         66:fd:b8:76:91:3c:af:34:65:02:10:2b:e9:91:4c:c5:5f:fa:
         a3:40:4f:f0:7b:be:ac:c3:89:42:e2:30:0f:3e:f4:3b:31:55:
         64:b8:a6:c5:70:d7:9f:5d:ef:a1:a5:05:25:ca:b0:bd:51:2f:
         58:8a:d9:54:3d:81:69:40:7e:d1:b2:65:ef:8e:2d:bc:d9:e2:
         89:99:df:54:a1:b4:7f:af:ba:34:99:b9:b3:e3:ab:19:8f:f1:
         a1:3b:44:07:1b:9e:81:31:52:73:c2:ee:46:21:c8:05:84:c7:
         81:c9:81:5f:d5:e0:86:9e:ca:c3:c6:15:b3:35:32:71:7d:60:
         78:7d:31:6a:7c:a4:a9:80:45:ec:39:9d:60:f3:27:e1:79:e4:
         21:9d:c5:1a:a9:08:46:07:ad:7c:56:10:9d:3c:10:e8:58:22:
         71:ad:77:c4:75:07:29:27:54:c4:cf:4e:2a:56:03:f8:d8:1f:
         8f:e5:42:2f:11:35:3d:18:2b:3e:65:75:e6:17:7a:8a:40:a9:
         4f:27:80:05:4c:05:8b:bd:99:b8:61:be:6c:08:4a:9f:4b:8b:
         34:f0:77:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 00:25:48 2025 by rpki-client