This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.mft
File:                     VWpfoNz7NEM_m4YNleLEQlR8X5w.mft (raw, json)
Hash identifier:          x2NbLpNaifFJ24ChU7qQ8w1WD9LSS72fQ94vKzsfvY0=
Subject key identifier:   D7:A6:04:4F:87:40:F9:F2:C4:A9:20:F8:47:2B:90:AC:C2:4E:38:17
Authority key identifier: 55:6A:5F:A0:DC:FB:34:43:3F:9B:86:0D:95:E2:C4:42:54:7C:5F:9C
Certificate issuer:       /CN=556a5fa0dcfb34433f9b860d95e2c442547c5f9c
Certificate serial:       019B3B34C4829830ECB4C34EC12A1E1B0181
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.mft
Manifest number:          0F2E
Signing time:             Sat 20 Dec 2025 10:01:12 +0000
Manifest this update:     Sat 20 Dec 2025 10:01:12 +0000
Manifest next update:     Sun 21 Dec 2025 10:01:12 +0000
Files and hashes:         1: 4n8bN6gHQ-7gt2_UKypfQrHDnhE.roa (hash: t6dpamgt2/zryHABiVBySA6efg8g99Jt9uTQJoGynjc=)
                          2: 8JQcsysiOnri0kQHCtlxZWtskIc.roa (hash: 8uXbEXZddA7mrG0hLFGoh/Y7FsDHWEPfJhu2xn7axAU=)
                          3: Ux9674M8NjPfocnrYudKeCUjMbo.roa (hash: FHnDbBZXh+K5rsgYdlcJ2kPhhFwRgdi5MK2KNTvvH+c=)
                          4: VWpfoNz7NEM_m4YNleLEQlR8X5w.crl (hash: Qe0iVEplV1E/qBnKkKWzzddkKBRu9jEfYCQq68PaEHI=)
                          5: pmob96zXbDAhKR7Wz6RPvLXoY-A.roa (hash: npv/p9WYQ1OGSln1/kh4OSRLRABeIWxzh68X8dIu6Hs=)
                          6: zCMQvVyUHIhgqGjnqqS6hG87t8I.roa (hash: tlgi6dRpTD9+AZIQcf0rkaPRaq7iQdTH9FHfASRSnUA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 09:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3b:34:c4:82:98:30:ec:b4:c3:4e:c1:2a:1e:1b:01:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=556a5fa0dcfb34433f9b860d95e2c442547c5f9c
        Validity
            Not Before: Dec 20 10:01:12 2025 GMT
            Not After : Dec 21 10:01:12 2025 GMT
        Subject: CN=d7a6044f8740f9f2c4a920f8472b90acc24e3817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:23:35:2d:3f:0f:a1:02:24:f5:02:53:cf:a4:
                    d6:fd:c5:fe:d6:ed:a3:9e:29:53:b4:e4:f0:5e:91:
                    76:8d:70:e5:67:72:37:fc:80:f1:ec:9b:5d:06:8f:
                    bd:db:11:e9:31:dd:94:5c:dd:e5:b1:c1:d0:49:38:
                    3b:e6:0e:f8:27:41:72:27:27:ef:a3:8c:84:00:20:
                    8d:a6:4e:45:3e:51:82:cb:16:f3:fb:fc:3d:f6:0b:
                    8f:0a:6d:0e:d9:cc:b3:aa:c1:36:a8:4a:b7:97:1d:
                    7e:ed:cf:1a:39:6a:d7:f1:fc:5c:81:4c:09:94:ec:
                    b3:22:a1:27:49:b1:32:5e:76:15:19:cb:6a:c4:bf:
                    5e:dc:7c:d7:b9:79:86:33:c0:d5:ed:94:18:85:ba:
                    ac:0e:47:11:64:37:02:37:ae:b8:73:07:e0:28:c8:
                    2f:f8:50:1c:af:0c:4b:43:4e:28:71:09:37:cb:2d:
                    4c:8e:2f:02:ff:37:e2:20:c2:74:61:f2:b6:a4:ee:
                    90:2f:f0:62:3f:31:b2:5e:c0:7a:db:0b:4d:8f:73:
                    f7:ef:34:4b:fd:d6:6b:29:b6:e0:29:8a:a1:4d:f5:
                    3a:ef:34:f9:1e:11:10:36:78:31:ea:cb:0e:9f:7a:
                    32:58:2d:cc:fe:1f:f1:22:43:55:62:ba:c1:c8:3f:
                    a9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A6:04:4F:87:40:F9:F2:C4:A9:20:F8:47:2B:90:AC:C2:4E:38:17
            X509v3 Authority Key Identifier:
                keyid:55:6A:5F:A0:DC:FB:34:43:3F:9B:86:0D:95:E2:C4:42:54:7C:5F:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:19:4a:a1:b8:38:cc:4d:32:4b:08:74:c8:b6:70:d0:88:4e:
         ef:48:4b:be:50:ec:8c:ec:20:d5:d5:54:64:6a:3f:91:c0:d7:
         90:ac:0c:41:7f:c8:ae:7c:14:5d:1a:f7:e8:a3:dc:3b:28:38:
         3e:9c:b7:c6:ae:5b:69:0a:d6:6a:58:10:d2:3c:b6:f3:2a:35:
         1e:85:2b:72:4c:d3:b7:31:49:d8:d9:22:ea:21:87:e2:8d:7d:
         ef:61:a1:7a:f5:dd:2a:a7:a2:5d:55:4a:67:63:c5:49:44:50:
         b5:a4:b1:82:07:e4:c4:26:64:6d:cc:5f:ab:04:0b:71:fd:4b:
         ba:47:1f:5e:c0:95:2a:13:c4:d7:41:9b:f4:8c:87:3f:63:8a:
         4a:69:3f:01:fd:3c:3b:cc:e5:7d:99:80:60:7b:30:6b:28:7b:
         8f:d1:4e:66:cb:32:a3:e2:fe:53:67:9c:39:a8:31:38:dc:ef:
         31:d1:3e:6a:fa:05:30:88:d8:45:f6:09:68:9c:de:c2:7d:8c:
         c0:5c:16:07:1c:56:86:2f:26:2e:a2:c4:5f:d2:62:d1:07:ba:
         0f:f2:1d:9e:d7:35:ac:09:02:a7:32:b7:11:d5:cf:7f:8e:b4:
         f8:38:7e:05:42:9f:6a:87:dd:f5:11:5c:6b:59:10:15:06:2b:
         86:a9:0e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:17:41 2025 by rpki-client