This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft
File:                     VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft (raw, json)
Hash identifier:          3ydDoSDIXS76s/2eBJ5+rCsfvQSXb1QzK92MJ7YFnzc=
Subject key identifier:   A0:F8:A8:C0:6C:00:6D:75:0C:1B:B7:95:1B:E8:51:4A:97:8E:73:2B
Authority key identifier: 56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
Certificate issuer:       /CN=568ae803b9ba38855401827b3eece14505a9c0f6
Certificate serial:       019AF19AEAE90D710D5055249670C6830BC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft
Manifest number:          1772
Signing time:             Sat 06 Dec 2025 03:00:52 +0000
Manifest this update:     Sat 06 Dec 2025 03:00:52 +0000
Manifest next update:     Sun 07 Dec 2025 03:00:52 +0000
Files and hashes:         1: 8gXUkKQw8arTOvKo91QrTIhhgLM.roa (hash: 3FKGGmL5ZFlUUkm/8Tty8cDyN60SEeEzpNytHf+rPGY=)
                          2: HSdlh2QFEpGM_46Ow4vGDv79v_E.roa (hash: 1ypzUErprDZDRYPQT+U1/uxj8msJvU+nPJ/mnvBhz8M=)
                          3: VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl (hash: eEVMlYbQsAA4D1/7nSvSJ64g31Vc/yPddF98GWWpbZc=)
                          4: bOWi-Km4EdNL2RWwyu6fkO8cIac.roa (hash: bBX5W0vrQkhD//eKPSX/Grh0TmEf+XdqKDRiX0ii7jA=)
                          5: elIaIJuXbpWatRWeZpRoJLAB6RM.roa (hash: QMxGtNIR9eV06fnxcnLZU8NRPRckOjRHuOBGgCXj72Q=)
                          6: k9_h63CkyTFP9dp8XuNDvCxNzms.roa (hash: Im4uKqma1iWFJ1wc2qRnkE5lMnQ4ol3CcsuFcdhwEn0=)
                          7: qmXSBo6ZQHf5SBcPKJaq60n1DpQ.roa (hash: jnR4myiAxP2Qb03Ouublrmfx01PiIWyUlSrg/eITJIY=)
                          8: y2v6-6CCLmifQ83qZdjogrFre-M.roa (hash: oYIyUisFgSWQrEZe7E7GOqu26OhZjK1CM4VjnsKMVLo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9a:ea:e9:0d:71:0d:50:55:24:96:70:c6:83:0b:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568ae803b9ba38855401827b3eece14505a9c0f6
        Validity
            Not Before: Dec  6 03:00:52 2025 GMT
            Not After : Dec  7 03:00:52 2025 GMT
        Subject: CN=a0f8a8c06c006d750c1bb7951be8514a978e732b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:17:d6:e2:51:0c:64:bf:be:74:4d:23:4f:86:
                    ea:ce:2c:c4:a7:38:38:55:10:08:82:cc:ad:fd:60:
                    db:6b:0b:70:c7:b0:4b:8f:25:58:b8:34:f6:e4:47:
                    d4:31:5b:99:21:5e:d9:96:23:10:bc:0f:88:6b:a0:
                    2f:90:06:ca:d0:e3:59:86:86:38:19:2a:02:7a:31:
                    b5:41:86:01:d9:8e:08:d4:72:af:71:18:e8:b2:d6:
                    a6:64:3b:bd:0f:a7:2f:87:5c:1f:32:b5:42:7e:f1:
                    da:24:59:86:2f:99:ba:40:5a:82:39:5b:a5:c6:fd:
                    3d:21:7e:33:2c:f6:0d:89:58:11:dc:dc:f7:d1:84:
                    32:2f:47:2b:07:f4:6d:dd:51:e6:df:18:6c:ac:6e:
                    e3:e5:39:33:31:d5:5d:b4:c9:ab:b9:45:0b:ee:cc:
                    86:04:3e:de:39:b4:a1:e7:96:03:ff:92:46:27:13:
                    64:3c:bd:c2:9d:fb:b9:e3:5c:92:03:bf:1b:eb:e1:
                    2d:a4:c3:00:43:1f:f5:35:ad:31:c2:69:19:80:fe:
                    cc:0d:46:fb:f7:b7:b2:9c:5d:2b:ec:36:51:a1:83:
                    e6:f2:76:de:ba:f8:ca:0c:c3:e5:e4:65:2f:84:48:
                    ac:e7:fa:e8:88:5f:b2:cb:6b:53:75:8d:5d:57:b5:
                    29:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F8:A8:C0:6C:00:6D:75:0C:1B:B7:95:1B:E8:51:4A:97:8E:73:2B
            X509v3 Authority Key Identifier:
                keyid:56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:09:34:07:74:f8:0d:9c:1b:65:fc:a8:7e:d0:73:9b:15:e4:
         7d:f4:c7:5f:9a:3e:53:ee:a0:91:cf:50:b7:e6:ff:5b:e7:fd:
         21:70:85:36:25:fa:67:52:26:61:6c:ec:01:2e:b5:b3:f6:43:
         be:7a:7a:7b:fe:b4:1b:2d:b8:b5:3d:e1:8b:93:7a:b4:03:ec:
         6c:8e:b7:3c:fe:e2:98:86:a7:16:c6:e3:45:64:11:cb:8b:ca:
         6c:34:fc:35:7c:d4:ef:d8:9c:32:ae:21:91:41:a5:a8:30:ec:
         58:bc:33:fc:c8:3b:e8:76:2b:fb:00:8e:2e:16:60:ee:b1:ba:
         b8:45:40:b7:12:bf:50:75:24:d2:28:8b:c1:a1:f4:71:1d:e1:
         34:02:8f:a7:a0:26:b8:5b:9a:ed:aa:73:78:de:4d:ac:40:ed:
         b6:84:81:53:ad:a4:22:4d:a2:68:7c:2e:55:fe:4d:1d:4f:00:
         36:57:09:3e:37:f9:7b:15:25:88:89:c7:d9:62:eb:18:e1:1a:
         e4:15:6d:d6:69:2a:8a:61:2a:0e:24:b4:b5:84:54:72:bc:59:
         f6:cd:61:45:9e:64:5c:6c:3f:7d:58:9c:f8:3d:a4:1c:28:42:
         90:eb:e8:34:ad:cd:31:45:26:44:f5:6a:1a:07:e7:cd:a2:4d:
         55:bb:3a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:22:22 2025 by rpki-client