This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.mft
File:                     VuM1PV9COtQnHDJhyqVDFAUwvds.mft (raw, json)
Hash identifier:          1qXuAc6EE4qOd5DewM86c1do9gYsDAiJu8qu97tVxgg=
Subject key identifier:   52:C6:56:38:62:68:08:FB:8A:BD:FC:E6:94:19:88:9A:74:C7:38:DB
Authority key identifier: 56:E3:35:3D:5F:42:3A:D4:27:1C:32:61:CA:A5:43:14:05:30:BD:DB
Certificate issuer:       /CN=56e3353d5f423ad4271c3261caa543140530bddb
Certificate serial:       019AF0BF83ECAC18806D46465C70B0630288
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.mft
Manifest number:          1766
Signing time:             Fri 05 Dec 2025 23:01:14 +0000
Manifest this update:     Fri 05 Dec 2025 23:01:14 +0000
Manifest next update:     Sat 06 Dec 2025 23:01:14 +0000
Files and hashes:         1: 0mBk-YYEEcpS2EWe9JuL5ZU9Ozw.roa (hash: i+FX59/XtMW/8gmUH2jgeEyByOCXMI3eEtMtNI5KB4s=)
                          2: IIxDe4etQOd2xm05l7GIiAgVFRk.roa (hash: nufDyIWcCwbAJSpo3tAlQaolQXGlQowbBKacZpakYp0=)
                          3: IuLax30Qv5bBysnxO_6IznKsU-s.roa (hash: ufXvEjexbBOn5Icah6XFTBi5ev4De8imScoIa5ucSKg=)
                          4: U9LtbwPPB86BDhAy_rjEEanmBi4.roa (hash: n2f6ykIaBk67onFDxWMKqalYvlFCNkWOuJFN0Sesm0U=)
                          5: VuM1PV9COtQnHDJhyqVDFAUwvds.crl (hash: DV0NIiLqtaXtVbrVVljKfI3F10VWI/7JTeasNcqKmP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 23:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:bf:83:ec:ac:18:80:6d:46:46:5c:70:b0:63:02:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56e3353d5f423ad4271c3261caa543140530bddb
        Validity
            Not Before: Dec  5 23:01:14 2025 GMT
            Not After : Dec  6 23:01:14 2025 GMT
        Subject: CN=52c65638626808fb8abdfce69419889a74c738db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fe:6a:90:f7:4e:66:a5:99:2e:49:61:4e:b2:
                    67:c8:98:fb:56:96:7a:07:b6:f2:84:0b:e6:ac:12:
                    4d:d7:d7:d5:4b:af:35:12:69:11:11:25:31:ce:6f:
                    6d:f0:07:1e:56:cf:65:c9:8a:6a:fb:35:26:c3:35:
                    98:3c:d0:e8:1e:29:38:fa:93:f9:74:16:13:4b:b6:
                    ba:6e:ac:96:81:61:13:35:a9:b0:ba:a9:f1:a4:9d:
                    7d:a8:0d:e7:14:6a:fd:1d:66:d6:2a:7a:1b:a3:52:
                    a4:d3:ad:23:2d:7d:ce:b0:5e:83:5e:a2:b7:55:d0:
                    97:c2:2b:44:ca:c3:8a:80:2e:d0:fe:0c:e2:a8:cd:
                    5d:e0:8c:5b:cb:ea:31:5e:de:ec:f6:70:e5:16:fc:
                    33:b8:2a:58:f9:5a:21:a2:d9:46:fa:b6:6b:ca:04:
                    2f:ed:db:b3:58:8e:98:d7:4e:dd:60:34:b9:84:c5:
                    fd:46:b0:3c:c0:55:2c:2a:27:3b:bd:f9:bb:88:39:
                    97:03:26:b0:5a:d6:08:95:df:38:d7:ad:16:2b:63:
                    53:a7:51:76:cf:df:a6:ea:0a:c9:53:a6:cd:27:8d:
                    c2:33:d6:59:94:27:07:ad:e4:e9:14:00:2e:9f:44:
                    97:69:ce:c1:31:e6:71:84:37:04:02:fe:8d:b8:5c:
                    4b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C6:56:38:62:68:08:FB:8A:BD:FC:E6:94:19:88:9A:74:C7:38:DB
            X509v3 Authority Key Identifier:
                keyid:56:E3:35:3D:5F:42:3A:D4:27:1C:32:61:CA:A5:43:14:05:30:BD:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:f8:ea:fd:2a:19:86:a8:af:9f:f1:4d:90:1c:dd:de:f3:f8:
         cc:31:76:9c:61:65:17:6f:cd:08:b2:9c:f3:0f:31:e2:09:9c:
         ae:67:06:64:c9:fa:61:bc:28:2b:34:41:83:b7:19:1a:ab:e9:
         11:b0:cd:8c:e5:2b:ad:74:26:2c:09:ae:82:5a:a2:3f:a6:e7:
         28:d1:a7:f0:0d:74:59:95:23:7b:ea:5f:aa:d9:3f:b2:dd:d1:
         89:73:7d:30:96:8a:5b:a5:fe:5f:36:60:2e:6d:ac:a7:e5:de:
         76:41:9b:4e:92:d5:74:a4:b4:2b:9e:96:ce:30:5e:7f:6c:b9:
         ae:6c:a2:5d:e3:59:aa:d8:46:c6:d3:12:75:cf:ea:3b:5f:c5:
         cd:2c:bc:71:04:64:9b:b3:49:b1:d2:25:06:a0:9b:28:29:6e:
         52:d7:d1:64:c0:9b:48:d1:c7:da:3e:3b:ac:76:f4:2f:de:98:
         ff:4b:dc:55:a1:2e:ad:f7:90:4a:58:ea:69:9c:64:24:9a:03:
         f4:b9:19:99:0a:8f:c2:ed:22:57:78:4d:30:20:13:eb:b2:63:
         df:c1:f7:cd:37:a8:8b:4c:98:5e:c5:4b:c9:d5:af:30:36:ab:
         b1:4d:b3:98:7b:c5:f3:e6:1d:0d:49:e3:57:cb:90:e1:a4:fa:
         42:cb:8a:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrwv4PsrBiAbUZGXHCwYwKIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ZTMzNTNkNWY0MjNhZDQyNzFjMzI2MWNhYTU0MzE0MDUz
MGJkZGIwHhcNMjUxMjA1MjMwMTE0WhcNMjUxMjA2MjMwMTE0WjAzMTEwLwYDVQQD
Eyg1MmM2NTYzODYyNjgwOGZiOGFiZGZjZTY5NDE5ODg5YTc0YzczOGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf5qkPdOZqWZLklhTrJnyJj7VpZ6
B7byhAvmrBJN19fVS681EmkRESUxzm9t8AceVs9lyYpq+zUmwzWYPNDoHik4+pP5
dBYTS7a6bqyWgWETNamwuqnxpJ19qA3nFGr9HWbWKnobo1Kk060jLX3OsF6DXqK3
VdCXwitEysOKgC7Q/gziqM1d4Ixby+oxXt7s9nDlFvwzuCpY+VohotlG+rZrygQv
7duzWI6Y107dYDS5hMX9RrA8wFUsKic7vfm7iDmXAyawWtYIld84160WK2NTp1F2
z9+m6grJU6bNJ43CM9ZZlCcHreTpFAAun0SXac7BMeZxhDcEAv6NuFxLVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLGVjhiaAj7ir385pQZiJp0xzjbMB8GA1UdIwQY
MBaAFFbjNT1fQjrUJxwyYcqlQxQFML3bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnVNMVBWOUNPdFFuSERKaHlxVkRGQVV3dmRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82MTA5ZDYtMGE4YS00YmY2LWEwZTIt
ZTUyZGEzYjg2NzU0LzEvVnVNMVBWOUNPdFFuSERKaHlxVkRGQVV3dmRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS82MTA5ZDYtMGE4YS00YmY2LWEwZTItZTUyZGEzYjg2NzU0
LzEvVnVNMVBWOUNPdFFuSERKaHlxVkRGQVV3dmRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGfjq/SoZ
hqivn/FNkBzd3vP4zDF2nGFlF2/NCLKc8w8x4gmcrmcGZMn6YbwoKzRBg7cZGqvp
EbDNjOUrrXQmLAmuglqiP6bnKNGn8A10WZUje+pfqtk/st3RiXN9MJaKW6X+XzZg
Lm2sp+XedkGbTpLVdKS0K56WzjBef2y5rmyiXeNZqthGxtMSdc/qO1/FzSy8cQRk
m7NJsdIlBqCbKCluUtfRZMCbSNHH2j47rHb0L96Y/0vcVaEurfeQSljqaZxkJJoD
9LkZmQqPwu0iV3hNMCAT67Jj38H3zTeoi0yYXsVLydWvMDarsU2zmHvF8+YdDUnj
V8uQ4aT6QsuKDA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:24:49 2025 by rpki-client