This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
File:                     VHGK9qNvZqkZOTZKr8hkRauKbg4.mft (raw, json)
Hash identifier:          HMGDC8FYXPiNCVH4N7LEAzowvK6m1l2BnPDOYKGzsKI=
Subject key identifier:   69:44:07:D4:63:8A:73:73:20:D4:BE:B2:41:2A:31:33:07:6C:14:F7
Authority key identifier: 54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E
Certificate issuer:       /CN=54718af6a36f66a91939364aafc86445ab8a6e0e
Certificate serial:       019AF16419E47DA134FA8455B1C9AF8C878C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
Manifest number:          1761
Signing time:             Sat 06 Dec 2025 02:01:00 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:00 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:00 +0000
Files and hashes:         1: E6amiYi53XMdG38KpjAggGoL-xU.roa (hash: Z2VRJf48TJk3kvh/qYBt+PTaI/amPskBYdQSciVu6xk=)
                          2: VHGK9qNvZqkZOTZKr8hkRauKbg4.crl (hash: T9WAdpdfrX1hXSDBjv5oGH71eeqmA2UW5WhZ3WTJt44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:19:e4:7d:a1:34:fa:84:55:b1:c9:af:8c:87:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54718af6a36f66a91939364aafc86445ab8a6e0e
        Validity
            Not Before: Dec  6 02:01:00 2025 GMT
            Not After : Dec  7 02:01:00 2025 GMT
        Subject: CN=694407d4638a737320d4beb2412a3133076c14f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8f:c2:94:44:55:0e:a4:92:ac:e2:67:86:4a:
                    e1:5d:c0:d5:c9:3f:45:73:e5:53:56:f5:9e:41:95:
                    bd:97:64:21:88:e3:bd:7c:c2:df:a1:eb:b6:e6:83:
                    cf:44:0f:c5:2c:87:ab:6f:f9:ad:61:3d:e1:50:69:
                    be:5e:9e:79:21:a0:45:7a:5a:1b:59:9c:24:7e:40:
                    a4:7f:0b:89:33:b3:d2:bc:46:af:ed:e4:e5:96:c3:
                    81:1f:37:35:66:3c:21:a2:66:48:1c:0b:51:f6:c0:
                    4b:41:31:b9:12:9e:1f:61:aa:eb:3b:56:d3:34:1b:
                    09:d0:c2:d5:93:39:e0:4c:58:d0:86:aa:b4:3f:50:
                    d5:20:62:4f:0c:8b:ad:55:61:67:1d:fa:10:dc:ae:
                    b2:49:a8:88:a9:f8:6f:06:1a:da:04:01:5d:33:1e:
                    81:8d:fa:af:01:7e:fb:2f:ed:ec:ab:3b:33:98:c1:
                    70:74:04:ee:3d:d9:8a:86:30:2c:07:a6:03:82:1b:
                    b2:e8:61:2b:93:8d:a4:68:11:51:a4:07:a0:ad:ac:
                    5b:64:8a:6c:80:49:7a:dd:49:0a:a8:74:c3:f8:b6:
                    df:08:8c:ce:f0:4f:eb:85:43:a6:14:60:fb:f5:c1:
                    41:31:4b:94:a8:eb:67:83:cb:76:1d:7b:75:85:3d:
                    9a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:44:07:D4:63:8A:73:73:20:D4:BE:B2:41:2A:31:33:07:6C:14:F7
            X509v3 Authority Key Identifier:
                keyid:54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:cc:e4:57:45:b6:80:02:5e:c4:0b:3c:2b:cc:29:db:bb:e5:
         41:53:ff:9d:33:38:26:e4:31:84:0f:0d:af:76:e2:b6:eb:d0:
         8f:83:41:6e:b9:23:e0:56:ae:cc:78:2c:14:48:10:9d:3d:f9:
         c2:f2:4a:fa:4d:9b:eb:73:19:2c:4c:23:e2:f3:65:92:85:b6:
         04:9b:51:a8:94:57:67:07:48:51:94:39:d2:a7:74:46:f1:df:
         81:5b:4d:e2:f8:70:88:77:74:25:be:db:f7:15:08:5f:97:77:
         0c:ad:17:29:e4:ac:81:18:17:41:d3:4a:0d:69:e7:65:07:a9:
         5c:15:6d:5e:33:6a:97:1b:51:57:44:b1:78:d9:e6:ee:7a:65:
         e4:3a:2c:66:9b:8b:78:d9:9c:63:45:13:63:de:67:47:6f:bf:
         d9:81:65:b9:57:ae:53:96:67:de:ba:24:e0:83:10:c6:06:4f:
         a2:16:b0:ec:b1:70:bc:c8:8d:88:39:1a:79:12:ad:b2:36:22:
         cb:03:a1:c0:97:4f:46:74:0d:02:af:a3:a9:5f:12:5c:97:57:
         14:8f:35:d3:9a:b3:6f:11:52:74:93:b2:30:c1:4b:fd:c1:14:
         fb:d4:a5:59:26:7a:b5:05:31:db:6e:89:bd:8f:39:77:ba:65:
         e2:d0:d3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:11:41 2025 by rpki-client