This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
File:                     VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft (raw, json)
Hash identifier:          wwqD8MdIuuemlhUo3uEo9KyMVXd/uL/emu9+zkBFwec=
Subject key identifier:   B9:23:C3:80:77:4D:E9:95:24:79:AF:BA:10:66:19:24:38:23:00:E9
Authority key identifier: 55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
Certificate issuer:       /CN=5503251db69693362a927e2b130467945c54f0fc
Certificate serial:       019AF19B2FFBF8FB10CF604F9515226AC60D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
Manifest number:          04A6
Signing time:             Sat 06 Dec 2025 03:01:10 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:10 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:10 +0000
Files and hashes:         1: N1Onrv7nhAaOvq7SUfOQEHI1u0Q.roa (hash: XfPvZiSzA2jPJQaFVfWcm0/MZ4kiyCO7Rw1NAz93uXo=)
                          2: VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl (hash: ereCmhmv8+vNVQQiXVNUmj0K9foOtIq5pYOOiA2Q5CE=)
                          3: xkUeW_PwUlUASvf--c5chXoaFus.roa (hash: /Oa4g8Q6DrNk3m323+ds3bthVQQSIsVnBGQZ3q3zNQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:2f:fb:f8:fb:10:cf:60:4f:95:15:22:6a:c6:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5503251db69693362a927e2b130467945c54f0fc
        Validity
            Not Before: Dec  6 03:01:10 2025 GMT
            Not After : Dec  7 03:01:10 2025 GMT
        Subject: CN=b923c380774de9952479afba10661924382300e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ae:86:2f:7f:60:94:24:27:b6:f6:32:c0:d6:
                    07:c2:f2:4e:1e:05:c5:be:bb:a0:01:e1:89:aa:02:
                    d7:6f:dd:ca:a6:91:e2:07:4a:ad:c8:d2:57:e0:14:
                    7f:80:e6:8d:32:d4:02:39:31:ac:9f:b8:75:1a:fe:
                    cd:b4:5b:09:90:b9:db:4a:22:df:39:65:34:de:26:
                    32:d5:88:0b:3c:89:ab:d5:0d:3f:25:c9:af:23:51:
                    fd:e2:4a:de:fd:14:77:da:f2:84:0f:4f:bd:10:22:
                    8b:c0:85:e5:0b:98:00:00:6d:30:17:ef:d3:c1:55:
                    6e:a4:7d:6f:25:63:e9:cc:9d:ad:bf:d0:fc:fa:f1:
                    89:38:49:22:e8:2b:09:6d:97:c8:62:00:1c:53:a8:
                    18:06:81:c7:d4:ce:9f:27:5d:09:4f:cd:e9:a2:ac:
                    2a:3d:81:70:18:aa:46:95:d4:9a:7c:96:7b:c5:ba:
                    ab:aa:a0:ed:64:70:65:02:2a:00:00:54:31:0c:76:
                    50:49:52:8c:3b:26:9a:0f:eb:60:67:15:ae:1f:7a:
                    d8:87:d9:64:cd:7a:83:3b:5e:ae:22:47:22:c9:6e:
                    10:ee:c5:b0:38:63:63:2a:67:50:f2:73:f5:6a:7d:
                    1d:19:51:ea:87:ff:81:44:ba:89:d9:e0:af:18:80:
                    c0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:23:C3:80:77:4D:E9:95:24:79:AF:BA:10:66:19:24:38:23:00:E9
            X509v3 Authority Key Identifier:
                keyid:55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:5c:4a:97:1f:2b:9b:70:a8:ae:73:04:ba:af:10:32:e9:9a:
         ff:49:ef:84:8e:e7:18:22:ec:af:4c:31:ef:55:7e:57:1e:d5:
         60:ad:94:5c:32:8c:bf:99:e0:3e:2f:3b:92:7e:38:e5:3c:52:
         34:03:76:4b:e7:21:2a:66:56:98:90:e4:6e:6a:a6:cd:fb:af:
         b4:69:75:ef:e6:50:0e:55:c0:51:09:a4:31:c3:22:5b:d3:3b:
         88:e7:6a:99:1f:09:13:2e:7a:7a:e1:70:cd:ad:12:e0:40:c3:
         b3:c5:20:05:c6:f1:91:a5:b7:47:6b:3b:f3:93:c6:27:47:56:
         34:d7:00:52:7d:e6:c0:fa:f6:f9:27:d0:c5:12:59:a4:a8:5f:
         47:b1:87:4b:31:a1:9e:d6:c0:95:34:8f:e8:55:c3:20:23:7d:
         13:bc:63:66:4e:aa:23:14:e8:a3:5a:a0:aa:5b:d3:42:73:6c:
         ee:b8:55:e3:93:c2:c5:b7:a3:e7:46:10:8c:81:38:7a:68:04:
         d4:f6:67:85:d4:83:0e:54:d1:85:dd:5b:66:dd:0d:00:a1:b1:
         65:cb:f9:51:e6:3c:b7:7f:1e:30:b0:50:d4:be:db:ae:5d:0f:
         9d:be:ab:72:99:f8:39:55:83:5e:d8:5e:e4:60:31:2a:cd:07:
         d5:fc:70:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:51:38 2025 by rpki-client