This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
File:                     vygFmS5lMdPaMe4a9rzVwG0Ctso.mft (raw, json)
Hash identifier:          mynSpJp/aVl9INNvph51reExk50CEVlm28gsRbCjoZ0=
Subject key identifier:   66:68:3A:94:01:EA:F6:6B:44:F4:4D:0B:A7:5E:F5:E3:69:86:FE:83
Authority key identifier: BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
Certificate issuer:       /CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Certificate serial:       019AF240103D935E95E6EDBAC50FA88238A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
Manifest number:          1761
Signing time:             Sat 06 Dec 2025 06:01:15 +0000
Manifest this update:     Sat 06 Dec 2025 06:01:15 +0000
Manifest next update:     Sun 07 Dec 2025 06:01:15 +0000
Files and hashes:         1: ZA2eo4PhOO6YarPBjFuZYerlXM8.roa (hash: OaUR9ntwZSMTqF4rae/f45ntDF7DCdGD74N9a3x5n8s=)
                          2: iU6o8UX2fMqdnVT4GPBZLMHQUVk.roa (hash: L7qS2Pktcg+3MFOhFw0UCguQbXdIgIfJZ4PXXKIQFAI=)
                          3: vygFmS5lMdPaMe4a9rzVwG0Ctso.crl (hash: uSsgBj09r8vXKNAPJK37TfihDvQrezK/unaowmgALL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:40:10:3d:93:5e:95:e6:ed:ba:c5:0f:a8:82:38:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
        Validity
            Not Before: Dec  6 06:01:15 2025 GMT
            Not After : Dec  7 06:01:15 2025 GMT
        Subject: CN=66683a9401eaf66b44f44d0ba75ef5e36986fe83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:13:a2:64:52:6f:72:ba:10:5d:47:d3:bb:62:
                    41:27:60:72:df:4d:33:34:f4:5e:71:8d:f3:2c:c4:
                    1a:28:6c:e1:db:74:08:74:26:84:68:7b:da:7e:32:
                    cc:a5:ed:fb:5c:47:2f:9d:6e:e8:d6:bc:a9:df:51:
                    97:7d:70:3d:bd:26:5b:a0:19:b5:d1:b5:86:5f:11:
                    5c:c1:c6:2b:29:5c:5b:4a:cf:5b:fc:3a:4d:88:c6:
                    ca:c6:97:a4:73:9e:01:82:3b:9d:dd:de:37:0e:49:
                    b1:88:3e:b9:f3:24:97:b8:b1:d0:49:1b:b3:83:6a:
                    43:eb:6d:eb:ab:ca:42:09:6c:d0:bc:e8:02:7d:f2:
                    1e:d3:56:c4:08:b2:61:65:4a:18:8a:ec:59:29:eb:
                    e0:47:59:96:81:fe:67:a8:7a:d0:f3:e6:a5:16:df:
                    4f:5f:e9:c9:69:68:2a:dd:a1:bd:02:f6:db:5d:5c:
                    94:a2:46:a1:96:8c:3c:f9:b1:e7:55:3b:d7:c3:6f:
                    f0:93:93:6d:87:c3:8b:1c:23:9c:05:65:2b:d6:de:
                    1d:3d:d2:8f:aa:8e:2c:47:d9:09:e6:03:12:a4:32:
                    69:d1:05:16:b2:4d:a0:df:ce:1c:dc:91:06:fa:46:
                    ef:47:ba:d7:43:4a:de:c9:68:d1:29:3e:a8:54:66:
                    63:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:68:3A:94:01:EA:F6:6B:44:F4:4D:0B:A7:5E:F5:E3:69:86:FE:83
            X509v3 Authority Key Identifier:
                keyid:BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:52:c8:bf:28:cd:ce:77:88:c6:e4:be:0a:8c:0d:df:5d:10:
         ad:3c:48:d8:d1:b2:1a:4e:2b:36:ba:4f:f3:d0:85:2d:ef:9a:
         2b:21:52:42:a8:fa:8a:69:de:70:9b:d0:44:d3:0a:0f:3f:ca:
         d0:e4:b8:27:8e:c7:fa:d2:50:ad:bf:16:d1:13:c5:06:6e:1b:
         74:0e:64:b0:2f:04:4c:21:e2:35:c6:bd:02:02:14:32:e7:ab:
         c0:e2:93:68:08:c4:c6:48:01:95:0c:4d:b1:61:aa:b5:09:c7:
         ed:be:b9:28:62:91:f5:7b:2f:b0:1d:8e:8f:ad:23:b1:33:03:
         d6:9e:f0:88:3f:6a:c6:1a:c9:a8:4c:27:26:41:f8:d9:41:99:
         7c:71:01:40:47:8c:11:c2:b2:19:0b:d2:d2:4e:ad:03:a2:b2:
         8f:d6:99:e0:3d:02:31:f5:21:a2:a4:e2:42:14:f6:f6:e0:e3:
         13:af:b4:cf:d3:cb:42:99:62:54:44:b1:22:4b:44:22:55:1b:
         ab:65:ce:8d:62:3a:53:86:73:a8:e7:94:ec:b3:ce:f6:d8:36:
         19:5b:8b:19:05:48:ee:f8:6c:c4:2e:04:96:24:25:a5:39:f1:
         ba:e8:30:73:14:6c:99:f0:9e:35:aa:99:c7:ce:8e:54:f8:a4:
         d8:60:ad:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:11:25 2025 by rpki-client