This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
File:                     VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft (raw, json)
Hash identifier:          SchBUR8ITIJv7ubUmLu+HmIiboyR6PGl8vriu7RFJY8=
Subject key identifier:   6D:D9:67:AE:1C:D1:D4:20:03:59:16:5E:CB:69:90:68:59:DA:DB:CA
Authority key identifier: 56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6
Certificate issuer:       /CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
Certificate serial:       019B4437856EB6FEEEF3DCA94CFD0664F40E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
Manifest number:          0E95
Signing time:             Mon 22 Dec 2025 04:00:47 +0000
Manifest this update:     Mon 22 Dec 2025 04:00:47 +0000
Manifest next update:     Tue 23 Dec 2025 04:00:47 +0000
Files and hashes:         1: 1evcMDo7pi-aA6SWjQJ5C1thyaU.roa (hash: xYDgN0KV8Q5QXfbFX/hw20fHK9cnWhX/isL2BXocmSw=)
                          2: BFOQ1xipYhPtnW3G70pfAnmzwzg.roa (hash: /+UHFdHIIgWbmriMU+n5ynXyWKvmniC4nJpXONs4/qY=)
                          3: ISS1nVoFj6vql40oL7xs039XkbE.roa (hash: Uj1JIR2yGWgQKTO1hh05hzaRctOY0c3hfi9SPLtZHjc=)
                          4: VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl (hash: mlBsqM42SqwsqCutVwTgEFl6cuiLlPpAXAqpBD8ZG8g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:44:37:85:6e:b6:fe:ee:f3:dc:a9:4c:fd:06:64:f4:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
        Validity
            Not Before: Dec 22 04:00:47 2025 GMT
            Not After : Dec 23 04:00:47 2025 GMT
        Subject: CN=6dd967ae1cd1d4200359165ecb69906859dadbca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e3:11:aa:db:4a:e8:14:c4:78:0e:5d:8a:f7:
                    44:84:e5:ae:d7:bc:98:80:c2:fa:a8:53:c3:16:60:
                    f5:f3:c9:ba:fc:90:5c:a8:60:09:47:69:20:3c:a1:
                    2d:1b:48:07:b4:1a:45:82:00:7e:49:d3:30:6f:6b:
                    e9:c6:75:57:05:6a:21:e5:01:18:56:72:5a:22:e5:
                    ba:78:23:54:23:f1:b4:a3:fd:47:8e:05:63:6e:e7:
                    1f:a9:be:fd:80:83:30:3f:5a:e1:37:6c:b3:77:9a:
                    68:f4:43:4b:9c:b9:01:06:e2:fd:2f:88:ac:cc:1b:
                    8b:6d:15:3b:76:ff:e5:3e:b7:d2:cb:f5:f1:ef:a7:
                    cf:fa:7a:6d:85:5f:35:5a:84:4c:2b:b7:b0:a9:6f:
                    b6:e2:3f:96:b2:b0:99:fe:db:53:69:9d:6c:61:f4:
                    a4:2f:0f:6e:c3:5e:4c:f3:cc:32:52:a9:ac:44:9c:
                    ae:d8:53:58:28:89:4e:e6:be:24:57:a9:98:4b:67:
                    e7:55:b2:83:9b:34:1d:fb:12:32:66:0f:fc:c4:56:
                    e0:11:cd:1a:4d:b2:ac:06:b2:e6:d9:bc:1d:44:df:
                    2d:e3:34:7c:0e:69:36:91:be:02:47:e9:93:39:37:
                    34:d7:a4:71:bf:1a:f0:43:30:aa:d9:6e:8e:af:dd:
                    9f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D9:67:AE:1C:D1:D4:20:03:59:16:5E:CB:69:90:68:59:DA:DB:CA
            X509v3 Authority Key Identifier:
                keyid:56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:bc:aa:e0:c7:f6:0b:7b:3a:7d:d9:1a:06:6e:84:55:d7:77:
         bc:ed:cc:11:7a:a1:28:bc:06:ee:ae:a8:d5:eb:d7:91:56:1a:
         3a:ce:24:a9:cb:ee:d2:94:c5:b0:e1:aa:33:bf:74:19:02:47:
         03:76:a4:f7:46:52:08:e5:bb:67:b3:7a:76:8b:66:87:d8:03:
         08:f5:f0:19:e0:98:3c:13:91:33:fd:65:3f:d7:ec:cb:bd:a4:
         03:c6:26:d2:7c:4e:9f:54:40:cc:92:be:0b:83:ea:a6:ce:43:
         f8:b8:a0:bc:8c:e4:f1:c3:ae:94:53:fc:be:d7:c5:bf:48:09:
         c5:03:bb:3d:df:67:92:64:01:dd:61:86:d2:c3:51:ca:1d:76:
         7b:da:67:08:e4:2e:87:5d:5f:b9:0f:62:11:11:44:f7:26:ff:
         a2:30:eb:bb:d6:b3:2e:15:db:87:69:93:83:ad:21:58:8b:e8:
         b7:6b:0a:4e:13:11:02:7c:3b:4d:73:86:ab:db:2a:57:79:b9:
         24:8b:3d:d6:16:c6:ee:e5:1c:eb:13:f4:31:a1:a7:65:81:de:
         79:70:73:3f:98:0f:2d:29:62:7a:04:1c:0e:c6:3f:33:15:41:
         93:a0:d9:f7:1f:59:60:78:dd:1c:08:e2:06:61:ae:5c:3e:c7:
         fa:2a:e5:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtEN4Vutv7u89ypTP0GZPQOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ZDBlM2IyOGYyYmUzM2VjNWE5ZDJjYTAwYWM2NDE1NTUz
NmNiYzYwHhcNMjUxMjIyMDQwMDQ3WhcNMjUxMjIzMDQwMDQ3WjAzMTEwLwYDVQQD
Eyg2ZGQ5NjdhZTFjZDFkNDIwMDM1OTE2NWVjYjY5OTA2ODU5ZGFkYmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuMRqttK6BTEeA5divdEhOWu17yY
gML6qFPDFmD188m6/JBcqGAJR2kgPKEtG0gHtBpFggB+SdMwb2vpxnVXBWoh5QEY
VnJaIuW6eCNUI/G0o/1HjgVjbucfqb79gIMwP1rhN2yzd5po9ENLnLkBBuL9L4is
zBuLbRU7dv/lPrfSy/Xx76fP+npthV81WoRMK7ewqW+24j+WsrCZ/ttTaZ1sYfSk
Lw9uw15M88wyUqmsRJyu2FNYKIlO5r4kV6mYS2fnVbKDmzQd+xIyZg/8xFbgEc0a
TbKsBrLm2bwdRN8t4zR8Dmk2kb4CR+mTOTc016RxvxrwQzCq2W6Or92fAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3ZZ64c0dQgA1kWXstpkGhZ2tvKMB8GA1UdIwQY
MBaAFFbQ47KPK+M+xanSygCsZBVVNsvGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnREanNvOHI0ejdGcWRMS0FLeGtGVlUyeThZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9mZmJmNmEtNzJmMC00MDFmLWIyYzMt
OGI4ZDcyMTcyMDkwLzEvVnREanNvOHI0ejdGcWRMS0FLeGtGVlUyeThZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9mZmJmNmEtNzJmMC00MDFmLWIyYzMtOGI4ZDcyMTcyMDkw
LzEvVnREanNvOHI0ejdGcWRMS0FLeGtGVlUyeThZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApryq4Mf2
C3s6fdkaBm6EVdd3vO3MEXqhKLwG7q6o1evXkVYaOs4kqcvu0pTFsOGqM790GQJH
A3ak90ZSCOW7Z7N6dotmh9gDCPXwGeCYPBORM/1lP9fsy72kA8Ym0nxOn1RAzJK+
C4Pqps5D+LigvIzk8cOulFP8vtfFv0gJxQO7Pd9nkmQB3WGG0sNRyh12e9pnCOQu
h11fuQ9iERFE9yb/ojDru9azLhXbh2mTg60hWIvot2sKThMRAnw7TXOGq9sqV3m5
JIs91hbG7uUc6xP0MaGnZYHeeXBzP5gPLSliegQcDsY/MxVBk6DZ9x9ZYHjdHAji
BmGuXD7H+irl3A==
-----END CERTIFICATE-----
Generated at Mon Dec 22 08:07:58 2025 by rpki-client