This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
File:                     VMvaeLHRthPfVl_5lwC2rulA3j8.mft (raw, json)
Hash identifier:          xHiXYOkxnQpv7ml/CeIqzI6Whs+hu3majczbog4vXWc=
Subject key identifier:   C5:78:78:2A:67:23:B8:8F:37:C1:5F:7B:E0:BC:66:FD:B4:93:FA:5C
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Certificate issuer:       /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial:       019AF2FF9F77AA1EFC8189B3B0FAA9B7BAED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
Manifest number:          1792
Signing time:             Sat 06 Dec 2025 09:30:30 +0000
Manifest this update:     Sat 06 Dec 2025 09:30:30 +0000
Manifest next update:     Sun 07 Dec 2025 09:30:30 +0000
Files and hashes:         1: 0BP0KGJkFndJVhg4iJyuEpAUh2Q.roa (hash: +xARcNUOy44/0IUgRyFkDdCWb9Bmo8nmFLSiePQUm68=)
                          2: 0cO4ncofuOOavd4WKDZZp3uCU2A.roa (hash: xLawauZ1tEe7YyvT9w+7DlBDWVL0vSX2Y3B7u+HqboM=)
                          3: 1-Ic1C_JQ8WFUDRbQVM_sqmSHG0I.roa (hash: o/km+tRaUdqzFsCA8CD11A4YOHN5+bCH+yPZnxaNKw4=)
                          4: 1-LkhLBKkcj54UocdAxlIInyFc8w.roa (hash: nBYN95YGAJSbiE6yyJzIhCMy20uciRwVyVUw4AqhZCw=)
                          5: 1-Qbe7ItKLmTD3ZT6I_tfhnKA1F0.roa (hash: 35+u2TcewFG5MPcgu5/CWUo29LHqw3M3ErLqVomO6t4=)
                          6: 2SHzeEjAqvcLgdp5WwX1vUVg_b4.roa (hash: Hzy7kWjWavQFtlwLS0CVQpm6M+pMHdbRv3cNRgmcINA=)
                          7: 2ujhB6VtG1wsMePDSGyrLHuqsz4.roa (hash: dhHK2KxyQ/AB3/IoaSgau9aQ0lHwQqIE9ZsDmZIVap8=)
                          8: 6FrDuCY1vKJvYiNSjUCWvFLPFVQ.roa (hash: GnbdXxClu5QJNyR80vuHFcpVcehYzwyRhjEjW9CIyZY=)
                          9: 8mMS3HIomrHZlr0tSi4nJre_iQ0.roa (hash: wtOrmgukYQjypE1HeG89vBeioWsg00xvgoLaY2Mxgzk=)
                          10: AexxvHfZyLr0cw61OjpBts2b0GQ.roa (hash: QoCYA+e6SeTGoP5GL2LflAJnXWlHIBqT4FaJWKFAKhA=)
                          11: CPKskOAtzA-egJ2CR-qs28FaTns.roa (hash: 7WyLrVE2Z+tn0PjSAarRuKoKdxJR60QxJCCY+0bTg+0=)
                          12: Gr71KmVq4Fpo3C-WiVN0x-J5iIs.roa (hash: IZ3fisAoqz1jDgEKtaHhs6iOQRRtsE2MhCoBcG5PSvQ=)
                          13: LCgkZwmbKkdjXPlAXVdt7CYkbQ0.roa (hash: erTzc9OKk7rHqCvgZhdmqWwLIgx/iZXuiMkBNi83xQ0=)
                          14: NX7DD1CV1Fm-vrBgY_U3AzFTBx4.roa (hash: 45fMWvWbQyGgbggvJSHlk9SqOTeUewhUmU7EOLYsR9A=)
                          15: Rx0GsudNXa3NlGsO3A-jTHYF3kc.roa (hash: CAOEV8Hvnr7hXFP4sBSOfWBU2brqmyY3T+FnKR9MbjA=)
                          16: S_GqD0SxmtRzhF8ypadzBGAiS7A.roa (hash: Dg2rDfJPUZ6kGhaJNzjZPCtWt9Kc0Jc5sYdqgfiK2HQ=)
                          17: VMvaeLHRthPfVl_5lwC2rulA3j8.crl (hash: gJSDxwiz2GWRyWZKCGW7luhPYaHqtLdhockVY/dwBkE=)
                          18: Vtfd1hM6TwLVIwuBpWAC2ArBtVs.roa (hash: v9qk0RO6muLVg9IyiMy1kdFG1e9XdhyvAHBpmi1n9aE=)
                          19: VxzvbbNUAObmMU0IpKcdnXZ1BxE.roa (hash: O0rL/Xrm85XOk/qFl3MooUNeHPMNMB+5ehqcO2RLcWI=)
                          20: WoVaijlh7MVqQV4JpMFA6Zv1lP8.roa (hash: 93LhitKZk/dhVJfftIZflc4ldcyFRpIg6pCX+BpkdaU=)
                          21: X1FkyHdlJ2lKyFx0O-FyBfUYZ8s.roa (hash: xR4PGLqAg+mGtPWKDhZKuoyTeYFeaF4MEFWpcGPlh5E=)
                          22: aTyGHkd8L6xF1SuLySccXunrA14.roa (hash: 8AYIzW3md+dTPySlsQWwzNX5dISOdYU4A3Ie+qx0kR4=)
                          23: bb-Qgt64DIFzbq8j4XbnCr7ZXgU.roa (hash: xz9XLPoWhll2io7c8D81Bp9ZhnbsvdfV3miuDw9HOHQ=)
                          24: cYwwzAgaXEBJvEPe2tv_6hgv2Tw.roa (hash: CRrt42i3+A6BQui4Tr26+gGEI2j+qfNbfZYM48UONZ4=)
                          25: dJPP-PkBi33AJe9GjVGArq6S2Qk.roa (hash: 133fliltidDXZK3M/DsnNTOIe10JxO4p3F5kuAt/Mes=)
                          26: eQ-tpFbE-mG9mGrDlNWU1oCquvI.roa (hash: Zt2Vk5h5dO9kYMTWAEIEMaZQ+tgV3DRBAIFwRe9QmoA=)
                          27: knIR7TiOanL5_UuiRkjg6PExYPA.roa (hash: ERYy0uVVdjAIjaG9rMyUI8jUIPoDAHs5rghe95okyd0=)
                          28: kqJKsrZASQy9xjB7FaA-KoQudY8.roa (hash: vQnCRMgGVhLMtPMLsspsTBbi23N1aa399srxA6NSARk=)
                          29: ljD_gVu1qs2Kl-0qKDp3UUaMANQ.roa (hash: YcPEsfq9GWzefDfl1aj8X/VvzCJxb2lIQMIp+xhIHmg=)
                          30: m-V1kiaksKavIZgS1xPF2dZqoHs.roa (hash: HcrfgfAGDi+sUTt8LJbJ88dGJyfIH4VygN2JiXexWI8=)
                          31: m-w-pPX-GIsFJGbFqTvk5xT9ShI.roa (hash: jmwgZACI5VikW6OLBks2wyMBOSwl5hT2QqdEebOMYEU=)
                          32: nHeF5wKOyjhxyKKHp_2iztg8Svo.roa (hash: kd9/vAT6su/4Ux9JkoU5RsRNOjaaYL2ILIdnRJ4W0+w=)
                          33: sKgxdVIxf_7aOcgI7uaLjKzXJaE.roa (hash: b/4TyNfL8tc0RdYYjm6a6HPdIzANJIlY5JKGTcbxZLk=)
                          34: vF_oOv9r76q0FdPzPzMSZ_Qg32Q.roa (hash: e1pIcFPEPVHgPSZ/4xAXLRUAcbxV8wPmoubi9BuN51c=)
                          35: xM1iFGS6QuBSv90t-4LAaHnC5SQ.roa (hash: GrtU+4+6ynaLDRxKv11eYK+Mg2EvgzvT4avZIVJ491s=)
                          36: zSzl34L5RETNDTSuPWiH6TL51X4.roa (hash: FEK4ufmfWlN5aNgSIE6cz0/2QdmOZQ5aNRL/DGy69S4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ff:9f:77:aa:1e:fc:81:89:b3:b0:fa:a9:b7:ba:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
        Validity
            Not Before: Dec  6 09:30:30 2025 GMT
            Not After : Dec  7 09:30:30 2025 GMT
        Subject: CN=c578782a6723b88f37c15f7be0bc66fdb493fa5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:11:09:67:39:e6:7d:bf:56:68:b7:3d:cb:93:
                    2d:ee:ab:1a:3f:02:13:91:41:90:ec:b3:2c:e2:fc:
                    79:cc:5e:d3:f2:39:db:38:99:c4:5f:e5:17:cf:53:
                    92:36:a3:1f:c2:77:cd:7d:f7:79:bc:9e:f9:57:d3:
                    e8:7e:98:c8:b4:5f:e2:d4:d1:e7:f7:20:41:ca:15:
                    d4:7d:81:0a:50:e7:bf:6a:b7:a1:ec:d8:e3:cd:78:
                    5d:11:03:77:67:5f:5b:cf:cc:45:27:24:07:32:e1:
                    cf:09:f5:1c:0a:bd:97:c2:0e:b0:d6:3e:34:d0:70:
                    74:60:18:cd:b5:ed:9c:33:27:77:1b:fb:d8:08:e9:
                    89:45:c9:29:40:42:3f:e5:cb:49:3a:3f:03:c2:91:
                    d8:9c:1c:ea:0c:06:0a:71:9f:c9:36:ae:8f:c5:26:
                    41:98:a4:09:a1:ba:88:20:b6:55:94:16:9c:43:ba:
                    9d:1f:63:d9:ba:b2:78:c4:20:69:8d:4f:77:2e:95:
                    db:f7:e1:57:48:ad:ef:95:ea:e4:19:47:a2:47:31:
                    dc:08:fa:70:9e:74:53:be:2f:cf:13:84:56:f1:0d:
                    94:6f:b6:4a:4c:9c:35:49:3e:49:b5:38:3f:5b:58:
                    2c:1a:69:0b:b9:57:7f:5a:8c:8f:21:7b:9c:7c:44:
                    f0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:78:78:2A:67:23:B8:8F:37:C1:5F:7B:E0:BC:66:FD:B4:93:FA:5C
            X509v3 Authority Key Identifier:
                keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:b5:15:80:9a:5d:71:9e:79:71:a0:f9:32:a7:8d:e3:a4:3a:
         9d:a5:3c:e2:b2:72:c7:57:6d:57:f6:4d:31:0e:ee:60:41:a6:
         60:49:02:e1:63:b6:9b:1e:34:f4:52:82:ed:f6:35:11:3b:c6:
         1e:ab:ed:72:28:34:d6:6b:d8:87:01:2b:a5:d3:8e:88:40:6b:
         23:29:94:4a:82:06:6d:bd:bb:fd:b1:ee:90:a1:d3:79:35:84:
         eb:00:e1:04:6c:ae:0f:b3:64:36:48:37:6b:6a:ee:ab:00:32:
         e1:a2:f2:02:86:d4:d3:1d:5a:df:32:0d:e5:3c:93:bd:73:a0:
         0e:d2:be:3c:c3:fb:d4:88:88:d1:65:01:2c:65:30:f5:2d:7b:
         ed:bb:6b:ed:84:cc:8a:e0:31:c9:39:88:8f:23:f5:6e:d5:3a:
         71:29:86:0f:d2:0f:f4:49:a3:74:a4:19:73:5d:00:86:a1:13:
         74:ad:51:01:b6:f3:f2:fd:6f:7a:23:bb:9c:81:08:6f:c7:c5:
         3a:17:93:3c:7d:f5:f1:c8:cc:70:b6:d1:a4:6f:82:b0:0b:4c:
         61:7e:61:8b:60:e5:27:c5:c9:dc:db:b4:eb:71:ca:7b:ab:69:
         15:d1:35:3b:e7:42:54:d5:e3:a0:fa:0d:6d:9e:8e:c8:10:23:
         b0:c9:d8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:47:55 2025 by rpki-client