This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
File:                     VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft (raw, json)
Hash identifier:          wXImmFV1yT8jyJcl0DBQkSpgyjz4fcI47bsj8ojwO7M=
Subject key identifier:   27:C7:A6:D2:A3:11:CE:E5:60:B7:6D:42:64:6D:CE:AF:E8:10:C0:86
Authority key identifier: 54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89
Certificate issuer:       /CN=543c54067385a765b1d5617c43331956fb208e89
Certificate serial:       019B5004D69182FBE87DB33D9CFBB2C3BF98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
Manifest number:          1794
Signing time:             Wed 24 Dec 2025 11:00:52 +0000
Manifest this update:     Wed 24 Dec 2025 11:00:52 +0000
Manifest next update:     Thu 25 Dec 2025 11:00:52 +0000
Files and hashes:         1: VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl (hash: n7c/RmZ76UP1VGDrbPEGglDgsyrhPziFgkttwzUH100=)
                          2: z735G_UD7XSfWpNDTnzeaf_tL4w.roa (hash: DkYxS6x4qA1lOII9eThmWP47P9TbdKeyTU6VofiN3dI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Dec 2025 09:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:50:04:d6:91:82:fb:e8:7d:b3:3d:9c:fb:b2:c3:bf:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=543c54067385a765b1d5617c43331956fb208e89
        Validity
            Not Before: Dec 24 11:00:52 2025 GMT
            Not After : Dec 25 11:00:52 2025 GMT
        Subject: CN=27c7a6d2a311cee560b76d42646dceafe810c086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c6:c5:f1:77:16:1d:10:e9:52:cb:92:a1:7f:
                    2b:1d:36:a2:f9:96:66:18:00:6e:e2:d1:5b:95:bd:
                    9a:3f:a8:e4:e3:31:f0:27:cc:28:00:fa:be:e0:58:
                    eb:1c:70:f2:9d:cc:64:93:b6:52:1b:b3:3c:a4:91:
                    59:7d:85:7c:c1:1f:e2:15:c6:60:89:89:3d:6e:c6:
                    10:48:ee:8f:09:0a:29:22:ea:a6:1b:84:3f:b4:fe:
                    5c:ef:29:08:45:d9:d7:4d:ec:92:86:22:e8:4a:88:
                    b4:72:2c:45:06:63:a4:8a:f1:a2:c9:ea:ef:07:ef:
                    27:91:b4:5f:aa:61:09:63:cf:45:21:df:d3:fc:ac:
                    11:6b:28:20:d9:54:c8:f9:c0:20:2c:d2:d8:f1:aa:
                    3a:ca:d8:5d:09:d4:28:eb:2b:cc:04:ff:70:4f:a4:
                    8f:53:de:54:ba:f3:41:42:d7:86:9f:60:be:67:5c:
                    92:37:d8:56:94:a1:43:82:5c:ae:0c:97:14:45:ad:
                    c8:6d:8a:a9:43:ce:af:2a:89:04:dd:b7:5d:8e:cc:
                    2b:d8:bf:cd:eb:b5:21:f2:05:db:2d:a1:ee:66:3b:
                    4a:6a:f7:60:51:d0:32:bb:3a:1d:5f:b1:69:30:26:
                    48:9e:65:be:ec:38:f0:12:00:50:e1:09:26:d8:63:
                    9d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C7:A6:D2:A3:11:CE:E5:60:B7:6D:42:64:6D:CE:AF:E8:10:C0:86
            X509v3 Authority Key Identifier:
                keyid:54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:fe:e9:98:d1:92:0f:28:05:67:82:49:0f:da:af:1e:a8:b4:
         09:bf:00:c1:d8:b6:33:a0:23:c5:67:c3:7b:da:07:4c:dd:0a:
         24:80:84:db:bf:99:90:80:59:d4:f9:73:2b:ca:e3:52:3e:7a:
         4e:ef:63:08:97:1b:d3:2c:52:fc:52:5d:9a:40:e8:ff:80:92:
         f8:91:ee:9b:b5:d3:11:2e:26:b3:38:23:08:96:30:cf:d0:9c:
         10:e7:ab:d2:4e:af:9b:20:bd:f9:2c:69:ca:e1:46:69:f7:2f:
         ca:4e:8a:1d:31:22:08:b2:22:82:78:a4:d7:a0:1e:58:df:ca:
         e2:00:3d:cf:53:60:36:3d:f6:65:ef:8d:ce:f4:c2:1d:3b:55:
         fe:ae:8b:85:f3:1c:de:83:19:71:14:e2:c3:86:2d:50:18:2f:
         2f:2a:f3:18:df:90:3a:9a:83:75:33:27:f0:ad:37:22:95:81:
         bb:59:57:28:41:82:98:b6:0e:19:94:54:5a:2a:95:f1:0d:59:
         d2:c4:8f:92:4b:ab:be:50:90:87:e5:1c:2d:03:b4:37:c9:ab:
         ae:b7:2a:ee:3b:23:c0:6a:e8:a2:6a:a7:de:b7:4a:f7:ff:b1:
         bf:74:c2:a2:c4:7a:48:2a:40:0a:11:9a:61:99:2c:69:92:a7:
         88:da:be:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:47:30 2025 by rpki-client