This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.mft
File:                     1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.mft (raw, json)
Hash identifier:          c0rCzfcuHIkgpNJu1gB/ipB8IlSf9Mn1qxCn1JWAULo=
Subject key identifier:   5C:88:54:1A:E2:E6:7E:88:71:37:F7:6E:3C:B8:86:69:CB:C7:1B:3F
Authority key identifier: F9:5A:C4:B2:47:27:48:CE:B2:7B:F8:C5:43:E1:6D:B7:BB:36:95:86
Certificate issuer:       /CN=f95ac4b2472748ceb27bf8c543e16db7bb369586
Certificate serial:       019B3E6C93477F74AEDC70F490A7BAB7E25A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.mft
Manifest number:          0763
Signing time:             Sun 21 Dec 2025 01:01:01 +0000
Manifest this update:     Sun 21 Dec 2025 01:01:01 +0000
Manifest next update:     Mon 22 Dec 2025 01:01:01 +0000
Files and hashes:         1: 0_5G3WRzshlLEZ0xV-9i-mzzvJU.roa (hash: lKrDP0bITSxhK9qROQpQt1df+rqNUNqNFLiSE61PZ7c=)
                          2: 1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.crl (hash: LVN6Co+aWIsjWueV18cfujY6HkPhKXdNv1zvxIQkWMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3e:6c:93:47:7f:74:ae:dc:70:f4:90:a7:ba:b7:e2:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f95ac4b2472748ceb27bf8c543e16db7bb369586
        Validity
            Not Before: Dec 21 01:01:01 2025 GMT
            Not After : Dec 22 01:01:01 2025 GMT
        Subject: CN=5c88541ae2e67e887137f76e3cb88669cbc71b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:25:92:ef:f8:8a:c3:63:69:fa:69:3a:bb:1c:
                    ab:bf:f2:ed:bd:3c:c8:e0:85:b5:c5:6c:95:fd:5f:
                    52:e8:09:34:d5:2b:5b:0c:58:ac:7b:01:f3:87:fe:
                    d2:a4:3c:52:6b:77:e0:1f:93:84:46:db:3d:6e:d5:
                    38:da:db:df:81:fc:59:70:99:2c:65:54:7d:77:82:
                    0e:48:59:8a:c9:f1:14:9f:6b:65:73:e8:f0:f0:65:
                    29:01:2c:dd:cc:b8:db:56:be:42:1f:b2:75:e0:9f:
                    84:53:1a:cd:d4:f3:37:ad:36:9e:e6:e8:1a:23:61:
                    11:1e:b8:af:46:70:93:b2:20:ea:ff:1d:b1:88:96:
                    73:02:50:f0:32:94:a8:08:50:d8:ba:01:9d:11:6c:
                    c1:e4:f5:62:31:50:53:84:43:e1:ee:d5:6d:e8:f2:
                    c8:2f:45:cc:aa:f9:15:57:ab:4b:13:4d:73:1a:c3:
                    cd:e1:a5:a2:5c:9a:50:12:f5:7a:f5:72:8d:30:ca:
                    fc:72:24:47:5d:39:a6:fb:6f:4e:6f:28:cd:05:bb:
                    5b:14:c1:26:44:e0:9f:f0:06:b0:6c:1e:11:31:7f:
                    c4:1d:f1:95:9b:af:90:02:35:67:c5:ef:f4:32:eb:
                    81:74:e0:35:cb:b5:12:85:98:06:96:52:08:ed:a2:
                    d8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:88:54:1A:E2:E6:7E:88:71:37:F7:6E:3C:B8:86:69:CB:C7:1B:3F
            X509v3 Authority Key Identifier:
                keyid:F9:5A:C4:B2:47:27:48:CE:B2:7B:F8:C5:43:E1:6D:B7:BB:36:95:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:78:43:0d:46:99:d5:61:b3:3e:55:f8:50:13:5d:9b:05:f1:
         74:c1:b1:52:fd:3c:f0:96:5a:8b:2b:92:92:59:f2:3d:53:05:
         4e:73:1c:4d:52:12:4a:cc:1a:a7:61:44:f4:a1:be:3e:54:47:
         60:bd:b7:19:b4:d5:67:73:ef:a2:d9:94:b0:a0:a6:50:47:f9:
         d1:05:14:b0:66:2c:5a:9e:91:8b:37:3d:6f:1c:27:b9:13:d4:
         b6:60:bf:53:d0:4c:aa:bc:ed:f3:47:0d:30:dc:65:a9:3c:ba:
         c6:55:02:5b:af:0b:94:09:aa:6b:80:77:22:7e:37:b2:d1:dd:
         ce:2b:82:33:89:d7:27:d4:31:a7:b0:ad:f8:79:8c:56:54:fc:
         ae:b0:60:b4:06:58:03:ae:ba:c7:65:4a:cb:f5:6f:83:e2:c8:
         48:6b:fe:80:28:06:4e:9a:e0:50:ba:2e:7d:4b:e4:7a:1f:36:
         e8:67:4b:04:e9:d3:bb:cf:78:f9:cc:31:84:96:ad:b2:65:65:
         0e:b2:e1:e4:76:64:7c:bc:82:07:1e:d8:da:61:af:fd:26:13:
         09:01:5a:e7:d4:d9:63:e0:9e:c6:be:ad:b6:bc:df:1d:8f:c0:
         83:f5:34:e2:45:26:1d:c1:cc:97:c9:e9:f6:d3:c0:6f:ae:0f:
         ca:0e:b5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:43:40 2025 by rpki-client