This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.mft
File:                     Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.mft (raw, json)
Hash identifier:          BXn4YNUT9qoEy8cU87zubZ95MS6AGO6cTSsI8zCLDdY=
Subject key identifier:   96:A8:2D:A7:FF:98:6D:27:55:7F:16:60:9A:10:1F:F2:97:7F:E8:29
Authority key identifier: 56:AF:CD:8F:B4:0A:AE:1D:24:3C:2A:8C:E2:54:1A:69:98:7E:ED:13
Certificate issuer:       /CN=56afcd8fb40aae1d243c2a8ce2541a69987eed13
Certificate serial:       019AF12CC4588D936057A75773AFE89F4D64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.mft
Manifest number:          10FA
Signing time:             Sat 06 Dec 2025 01:00:34 +0000
Manifest this update:     Sat 06 Dec 2025 01:00:34 +0000
Manifest next update:     Sun 07 Dec 2025 01:00:34 +0000
Files and hashes:         1: 1-546Kti0lJhdCgM2BGLPJH8tB7A.roa (hash: DZKGU1PUOmodvcooBnReEnL3w/IZk9xJ+ihgar9xlKQ=)
                          2: DAWuOXIzShKngVeAXIk14zxR1_o.roa (hash: BRexZQjukSfkz0NX2Zg92MIjIVuvAgUDzsMd3Qrzxp0=)
                          3: Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.crl (hash: oxAXJdZJDfHntuVql9RSs2+hBasSZPanlCD39sqBiu0=)
                          4: kc4z2zzYiTW0GaLmTuuhDE91d5o.roa (hash: g/g6twuj787QLJVbdboV8m3Ts06Is1fDi161w4I+b/0=)
                          5: zB4VR8eQ-BQowrZBeMtlvY4zfQ8.roa (hash: /Tu77k3GY/MF6l/555p9Pg+IHa6U4tx0rpsWT2I4Xao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2c:c4:58:8d:93:60:57:a7:57:73:af:e8:9f:4d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56afcd8fb40aae1d243c2a8ce2541a69987eed13
        Validity
            Not Before: Dec  6 01:00:34 2025 GMT
            Not After : Dec  7 01:00:34 2025 GMT
        Subject: CN=96a82da7ff986d27557f16609a101ff2977fe829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9f:05:a9:29:6f:fe:df:60:f8:51:a5:d0:e5:
                    e0:b2:4c:63:2d:c7:55:88:c4:01:03:d3:18:79:46:
                    59:37:96:3a:eb:17:19:06:da:29:2c:b3:4b:29:73:
                    3a:84:5e:f6:62:57:21:cd:cb:95:83:7b:31:11:5b:
                    89:93:81:4c:50:ce:11:c8:57:c6:75:c2:5e:c2:a0:
                    58:3a:79:9a:5d:60:3b:78:7e:d1:37:f1:ac:a4:1c:
                    0b:1f:de:da:cc:c4:eb:fa:4a:03:73:41:6b:8c:f6:
                    68:24:fb:47:01:41:93:01:f8:8a:18:bc:dd:90:8c:
                    47:85:0b:cb:95:4d:42:79:ad:45:c4:70:4f:c4:68:
                    89:1b:81:4a:c8:58:cf:3f:74:2f:c4:d4:a5:96:23:
                    a4:71:18:a1:b3:de:56:ec:95:bf:ee:31:fb:44:a7:
                    26:c7:19:80:ed:e3:eb:d8:10:67:a9:7c:2b:10:df:
                    22:06:da:84:e7:cb:35:91:4a:6b:11:ca:f5:08:91:
                    d2:a3:d4:5d:f3:b8:58:5e:b0:a0:72:86:2d:02:70:
                    b6:e9:96:9e:60:98:61:e8:6e:3f:05:27:c1:62:72:
                    60:f0:c9:2d:e1:de:b6:bf:bb:da:a6:7b:50:ac:fb:
                    e9:11:11:1c:ab:01:77:ad:45:03:9e:6c:01:df:ac:
                    cd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A8:2D:A7:FF:98:6D:27:55:7F:16:60:9A:10:1F:F2:97:7F:E8:29
            X509v3 Authority Key Identifier:
                keyid:56:AF:CD:8F:B4:0A:AE:1D:24:3C:2A:8C:E2:54:1A:69:98:7E:ED:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:0a:68:e0:c9:2b:66:33:70:bd:91:89:19:86:83:0f:5e:39:
         cc:c5:07:cd:44:5f:a2:ae:80:b0:56:da:f0:ff:1d:77:ac:ac:
         e4:85:40:d0:53:46:89:ff:b1:57:59:8f:af:94:2d:d7:e5:33:
         c5:41:e8:a4:01:f4:34:5f:58:44:bd:dc:34:19:27:19:75:4b:
         13:fd:52:74:e3:c4:49:61:11:23:98:5b:37:b3:77:44:48:fd:
         c3:69:4b:70:61:76:e3:d5:c6:ba:af:20:ae:ba:e0:87:de:ac:
         7d:af:91:a8:b2:7b:95:58:3a:78:53:9a:56:da:7a:22:ff:4d:
         e5:e5:56:0d:a3:f2:a7:5d:8b:3a:9b:3e:69:be:aa:d5:76:62:
         d7:87:6a:d3:11:1d:b1:67:84:32:fe:af:6e:b1:b3:1f:17:5f:
         79:9c:8a:88:40:d3:43:15:ee:68:14:94:96:bc:25:da:19:c7:
         e2:6e:b7:f4:75:5b:3d:38:d0:ec:73:29:72:6e:c2:8a:5a:47:
         72:4f:3e:81:9a:72:ac:82:3e:1e:0e:de:7a:17:72:a2:39:d4:
         32:af:38:74:3b:1e:92:cb:97:e0:1e:c9:bc:a6:88:7f:a1:74:
         81:01:e2:f0:32:9b:d3:3d:dd:3d:59:c0:ba:f4:3d:5c:f7:20:
         07:d9:e7:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxLMRYjZNgV6dXc6/on01kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2YWZjZDhmYjQwYWFlMWQyNDNjMmE4Y2UyNTQxYTY5OTg3
ZWVkMTMwHhcNMjUxMjA2MDEwMDM0WhcNMjUxMjA3MDEwMDM0WjAzMTEwLwYDVQQD
Eyg5NmE4MmRhN2ZmOTg2ZDI3NTU3ZjE2NjA5YTEwMWZmMjk3N2ZlODI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZ8FqSlv/t9g+FGl0OXgskxjLcdV
iMQBA9MYeUZZN5Y66xcZBtopLLNLKXM6hF72YlchzcuVg3sxEVuJk4FMUM4RyFfG
dcJewqBYOnmaXWA7eH7RN/GspBwLH97azMTr+koDc0FrjPZoJPtHAUGTAfiKGLzd
kIxHhQvLlU1Cea1FxHBPxGiJG4FKyFjPP3QvxNSlliOkcRihs95W7JW/7jH7RKcm
xxmA7ePr2BBnqXwrEN8iBtqE58s1kUprEcr1CJHSo9Rd87hYXrCgcoYtAnC26Zae
YJhh6G4/BSfBYnJg8Mkt4d62v7vapntQrPvpEREcqwF3rUUDnmwB36zNXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJaoLaf/mG0nVX8WYJoQH/KXf+gpMB8GA1UdIwQY
MBaAFFavzY+0Cq4dJDwqjOJUGmmYfu0TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnFfTmo3UUtyaDBrUENxTTRsUWFhWmgtN1JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS80YzI2MzctM2JiYi00YTUzLWEyMTYt
MjM3YmU3NzMwMDdhLzEvVnFfTmo3UUtyaDBrUENxTTRsUWFhWmgtN1JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS80YzI2MzctM2JiYi00YTUzLWEyMTYtMjM3YmU3NzMwMDdh
LzEvVnFfTmo3UUtyaDBrUENxTTRsUWFhWmgtN1JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXApo4Mkr
ZjNwvZGJGYaDD145zMUHzURfoq6AsFba8P8dd6ys5IVA0FNGif+xV1mPr5Qt1+Uz
xUHopAH0NF9YRL3cNBknGXVLE/1SdOPESWERI5hbN7N3REj9w2lLcGF249XGuq8g
rrrgh96sfa+RqLJ7lVg6eFOaVtp6Iv9N5eVWDaPyp12LOps+ab6q1XZi14dq0xEd
sWeEMv6vbrGzHxdfeZyKiEDTQxXuaBSUlrwl2hnH4m639HVbPTjQ7HMpcm7CilpH
ck8+gZpyrII+Hg7eehdyojnUMq84dDseksuX4B7JvKaIf6F0gQHi8DKb0z3dPVnA
uvQ9XPcgB9nnoA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:18:24 2025 by rpki-client