This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
File:                     VLSHMeKfJ9aHV21oY629oIBwm_4.mft (raw, json)
Hash identifier:          7U0jYK/XbhmsYYLffIyG0/i1BcNXmNadN7p+5/w026o=
Subject key identifier:   70:64:73:CD:A4:A1:3F:49:1D:C4:67:01:A6:1A:F3:AA:1D:B3:96:1C
Authority key identifier: 54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
Certificate issuer:       /CN=54b48731e29f27d687576d6863adbda080709bfe
Certificate serial:       019AF5AE927F318039E4E9E89510E9AB8D0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
Manifest number:          0BE2
Signing time:             Sat 06 Dec 2025 22:00:49 +0000
Manifest this update:     Sat 06 Dec 2025 22:00:49 +0000
Manifest next update:     Sun 07 Dec 2025 22:00:49 +0000
Files and hashes:         1: 2GddVKlLqDHz3jGINuxAaNndgi4.roa (hash: NX+DTGci6J0ZuUfn1NcxftSpxOGbzEMso8wgVo2GWr0=)
                          2: BP3U6kFnmdq-Ooz7okVHVreJwX4.roa (hash: 8ZRH6f2/mVLLc0PYuU8YNWUcegB85lCqTXWXtLUxfLM=)
                          3: SHaKbFPNsLxfj0s-D5n21WdMWXU.roa (hash: WwVmn3+VNOBpT8pGoSZiYks1QQTfhs67OIXLYD1YY2w=)
                          4: VLSHMeKfJ9aHV21oY629oIBwm_4.crl (hash: rJh9C3n2IDW8FcISdg8GoP/Yv+f9nAryQy55TKM9agk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:ae:92:7f:31:80:39:e4:e9:e8:95:10:e9:ab:8d:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54b48731e29f27d687576d6863adbda080709bfe
        Validity
            Not Before: Dec  6 22:00:49 2025 GMT
            Not After : Dec  7 22:00:49 2025 GMT
        Subject: CN=706473cda4a13f491dc46701a61af3aa1db3961c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f0:05:15:1b:61:85:46:26:fd:ee:d9:84:92:
                    6e:93:6c:78:e4:2b:bf:88:16:e1:33:da:e1:04:69:
                    b6:7a:28:24:4c:ae:43:05:2c:f5:b4:b6:c4:bb:6d:
                    aa:5d:82:55:1f:d9:50:62:3a:50:e9:cd:19:14:c0:
                    f9:f4:13:5d:80:93:49:78:c8:73:2f:45:8c:76:49:
                    e1:21:88:75:ac:4c:26:f4:e7:ac:51:4d:b5:dc:70:
                    8d:7a:8e:40:bf:97:e3:d3:cc:7a:af:a5:e8:3f:75:
                    95:3a:d0:4b:e2:0e:a1:0f:7b:b0:19:07:c9:0b:2c:
                    5a:a9:c8:c4:de:9c:c7:1c:58:1f:f3:90:3f:73:72:
                    2e:f6:77:09:e2:5e:3f:83:a8:7a:9b:db:b5:73:f6:
                    1b:b6:2d:41:74:41:78:78:4b:7c:d4:92:f4:1c:3a:
                    fd:94:cb:9f:cb:92:5a:bf:27:9f:45:1f:05:bb:3d:
                    40:d2:83:5e:96:79:da:8f:a4:03:74:0d:a8:c2:39:
                    a5:32:05:76:0c:15:e5:ae:f2:20:ca:7c:9b:e7:60:
                    c8:be:03:de:68:98:ee:26:20:4d:4c:ec:2d:bf:cf:
                    ce:5a:4b:8c:a8:7e:5f:bc:76:83:54:0a:53:f8:b3:
                    49:a4:5e:b6:cb:4d:65:ad:56:ec:73:98:e7:74:12:
                    f0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:64:73:CD:A4:A1:3F:49:1D:C4:67:01:A6:1A:F3:AA:1D:B3:96:1C
            X509v3 Authority Key Identifier:
                keyid:54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:e8:62:a5:58:15:8e:92:0c:7e:27:dc:56:5d:39:b1:df:9b:
         fd:2d:65:79:6f:67:c6:cf:0b:a0:46:4e:e7:3a:dd:60:d9:b9:
         ba:a9:b6:56:88:52:d3:67:3a:83:e4:84:20:97:99:47:39:15:
         9e:09:1c:b5:84:fd:94:2e:b1:92:2e:8a:eb:e9:20:50:9d:a1:
         3f:b5:37:3f:be:42:13:cd:f9:3e:7b:79:3b:60:74:e8:de:e0:
         5b:bc:dd:e1:4b:02:67:8b:af:4b:24:bd:1a:65:7a:52:3d:d2:
         0c:32:f9:a9:6c:d2:ee:1f:6e:27:44:6b:0e:b0:89:be:8f:d1:
         f3:20:c7:18:58:f7:8d:3e:d4:61:54:82:6f:a4:6b:14:af:0b:
         79:8e:a9:6f:b2:21:ae:fd:13:1b:dc:c0:b9:63:77:b5:65:e3:
         ca:aa:3d:69:67:86:5d:13:3c:eb:47:f7:a3:9b:04:65:6e:f5:
         53:06:af:26:b4:12:14:56:72:3c:56:df:4e:3d:1a:27:b7:b0:
         20:4d:45:2a:41:6d:59:c8:df:06:c4:61:93:65:b0:b5:81:cb:
         e4:7f:4b:d6:c9:16:df:d6:c6:db:ac:e5:14:6f:cc:bd:a6:c0:
         04:df:7f:47:45:6f:96:7b:31:a6:00:32:67:35:77:97:62:89:
         99:21:37:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:54:09 2025 by rpki-client