This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
File:                     vlULjv-QzM7p-NMTS2Q4mWt9J80.mft (raw, json)
Hash identifier:          CfrHVYxZcy45datSMfAtEaZ3J5+CSGxm9REyHu6Ckrg=
Subject key identifier:   DE:52:04:E9:B2:AB:57:90:68:A8:A6:02:37:12:DC:7F:47:52:ED:D7
Authority key identifier: BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
Certificate issuer:       /CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Certificate serial:       019AF23FB2694CE70CB566F583F43176DBE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
Manifest number:          14A7
Signing time:             Sat 06 Dec 2025 06:00:51 +0000
Manifest this update:     Sat 06 Dec 2025 06:00:51 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:51 +0000
Files and hashes:         1: ATQyeIdV9fi3WPbx9o-TPnaV-Cs.roa (hash: jBc2qvPiWiousJ3+W046TnnjJzmUqrlIXiofaB4Dj6M=)
                          2: vlULjv-QzM7p-NMTS2Q4mWt9J80.crl (hash: BKD10mkv81oGe/yhA8HQ23DRjqaqH8HjX8BoPWPdkDE=)
                          3: zP5R8a3op0AinKANwtJJCIKO-GU.roa (hash: sqncdyyLwGH/z3iOAF+o4ESAH5+bPPTw9cDS/1fHdJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:b2:69:4c:e7:0c:b5:66:f5:83:f4:31:76:db:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
        Validity
            Not Before: Dec  6 06:00:51 2025 GMT
            Not After : Dec  7 06:00:51 2025 GMT
        Subject: CN=de5204e9b2ab579068a8a6023712dc7f4752edd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4e:9f:7d:b8:2a:e0:c4:a2:87:39:b4:0e:db:
                    f5:d1:8a:6b:b2:8d:ca:b2:62:32:48:d0:29:b7:80:
                    30:a6:9e:17:e2:9f:c6:3b:7c:c5:4e:3e:f8:17:2e:
                    23:df:33:02:76:d0:dc:47:cb:c0:a9:b6:54:12:e2:
                    e8:a5:62:ad:53:d4:bc:31:9b:26:51:7f:7a:e4:49:
                    a1:59:67:dc:66:8e:20:14:2a:c1:60:f5:13:25:08:
                    0d:3e:31:1d:26:8c:19:7c:84:e9:d5:45:00:fa:9e:
                    eb:d6:08:52:23:84:e0:1f:d4:6e:6f:5c:6d:89:97:
                    d2:43:1b:d0:70:79:0a:6f:3a:ed:79:a0:65:bb:d6:
                    a2:60:d8:80:cb:1e:dc:b0:53:d5:9b:b7:8b:76:29:
                    36:3f:05:d4:81:6d:89:5d:90:6d:87:1a:0d:4b:fc:
                    fb:d8:f8:4a:c5:f0:56:d9:f6:52:1f:f8:ec:48:03:
                    a8:b9:7d:4e:2b:f1:88:a3:36:84:70:6f:d2:c8:56:
                    0d:c1:0b:bf:d4:bd:53:2b:a2:17:50:4c:51:ac:36:
                    9b:38:f8:19:09:d6:6b:ad:25:d3:42:86:8e:51:a3:
                    21:9c:5f:b3:d7:5a:2b:71:01:d6:d4:6b:82:93:51:
                    71:a2:29:c7:f2:85:6f:9e:33:42:eb:13:36:27:14:
                    a3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:52:04:E9:B2:AB:57:90:68:A8:A6:02:37:12:DC:7F:47:52:ED:D7
            X509v3 Authority Key Identifier:
                keyid:BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:71:ca:1c:c8:8d:5f:14:fd:85:f3:fe:7f:a4:93:e5:23:9d:
         ac:d3:29:c3:8e:87:7d:c5:04:03:57:8b:1d:aa:49:34:a1:51:
         9a:34:e4:1c:5b:89:b1:84:16:fb:aa:49:fc:2b:70:11:da:17:
         27:b7:81:e7:fe:39:0c:64:dd:cc:b1:73:ba:11:00:1f:7a:54:
         b8:a0:ca:fc:f5:d2:5e:a8:e5:64:87:80:d6:9f:4a:a5:b3:48:
         c2:75:af:8e:d5:9c:ca:84:96:f6:cd:5e:f2:92:51:b2:0b:50:
         57:f1:e4:6b:71:b0:77:47:58:ae:97:30:68:e4:e8:ac:f0:7d:
         2b:0d:14:94:0b:40:e4:a7:de:85:52:99:29:6f:7e:0a:93:e6:
         a5:b8:87:7f:8a:86:18:c3:e8:b5:fc:93:80:12:a1:b2:24:45:
         cc:79:e8:13:55:81:73:f9:1c:b4:a8:43:6e:9b:1a:94:56:c4:
         6f:34:db:ea:61:6d:62:10:31:89:51:a4:1e:e9:b7:92:1e:9e:
         7e:a6:76:78:1d:b5:b3:94:0a:47:b1:fe:42:e2:9e:f4:05:e3:
         28:b1:69:8d:28:79:fc:aa:bb:a1:61:60:81:75:e7:64:39:a9:
         dd:ac:23:ef:41:f3:eb:67:dd:27:0a:d1:0e:fd:68:14:db:73:
         e7:7d:47:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:27:29 2025 by rpki-client