This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/05690b-71d7-470a-b30b-b38dfa874464/1/vQMiKKpsoFHnP7kIxtx_fRnNF6c.mft
File:                     vQMiKKpsoFHnP7kIxtx_fRnNF6c.mft (raw, json)
Hash identifier:          QmuowEi3l6uyJfIvMTWRJ93poSZSJfrLndurdMRxQ1w=
Subject key identifier:   69:3A:28:BF:44:57:34:17:C7:A7:58:87:8A:E1:39:C1:E8:0F:20:C3
Authority key identifier: BD:03:22:28:AA:6C:A0:51:E7:3F:B9:08:C6:DC:7F:7D:19:CD:17:A7
Certificate issuer:       /CN=bd032228aa6ca051e73fb908c6dc7f7d19cd17a7
Certificate serial:       019AF08881CAE18E6A58FD9D40D51E837A38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vQMiKKpsoFHnP7kIxtx_fRnNF6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/05690b-71d7-470a-b30b-b38dfa874464/1/vQMiKKpsoFHnP7kIxtx_fRnNF6c.mft
Manifest number:          D5
Signing time:             Fri 05 Dec 2025 22:01:09 +0000
Manifest this update:     Fri 05 Dec 2025 22:01:09 +0000
Manifest next update:     Sat 06 Dec 2025 22:01:09 +0000
Files and hashes:         1: MQ0BhLhDY16aSFu-krId8FWSPd0.roa (hash: OVGXr0uOsmMmql+TGRFCUGdA5aFUyZs6gW7v3hLNnQM=)
                          2: qjbyWde1XhC4sj33T6GPhZzzpyc.roa (hash: 6PIovSMQ1HWFIw9iaFJCX/B7m4VDyHUXqOi1ioHrJZE=)
                          3: sqExp3bLbEaF_353Y8KaU_CHDaI.roa (hash: O5BoSyzsa2fu0HO2sPp/Rp4LLwQ+GTDHarF8NxmMgZQ=)
                          4: vQMiKKpsoFHnP7kIxtx_fRnNF6c.crl (hash: iEFo4+FNijKDlTEJ3LI2rGh0j11TkDgHY+S7x6/X7u0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/05690b-71d7-470a-b30b-b38dfa874464/1/vQMiKKpsoFHnP7kIxtx_fRnNF6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/05690b-71d7-470a-b30b-b38dfa874464/1/vQMiKKpsoFHnP7kIxtx_fRnNF6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vQMiKKpsoFHnP7kIxtx_fRnNF6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 22:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:88:81:ca:e1:8e:6a:58:fd:9d:40:d5:1e:83:7a:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd032228aa6ca051e73fb908c6dc7f7d19cd17a7
        Validity
            Not Before: Dec  5 22:01:09 2025 GMT
            Not After : Dec  6 22:01:09 2025 GMT
        Subject: CN=693a28bf44573417c7a758878ae139c1e80f20c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9c:37:87:e9:14:e7:15:82:e9:e4:58:60:42:
                    f5:21:5a:68:e6:9a:12:78:33:f0:34:32:bb:8e:2f:
                    2d:73:ba:01:e7:b5:f3:d7:11:8b:e0:c5:95:b0:de:
                    64:55:e8:c0:5d:2d:95:54:de:b5:b3:9c:b9:ea:ca:
                    8c:e1:c3:2e:f2:7d:bb:72:ea:af:0c:bc:91:40:fa:
                    cd:19:51:fe:27:34:09:ba:7c:16:b2:b2:5f:bd:62:
                    0d:3f:2e:d4:89:48:f9:b9:38:38:88:5b:84:73:1f:
                    54:29:61:31:29:37:fa:bf:24:d8:52:17:fe:6f:ee:
                    0d:5a:ad:1e:82:72:03:e3:5d:89:1d:bd:3f:b4:f5:
                    45:e5:d1:82:bf:89:34:d9:f4:d4:33:d7:5d:05:68:
                    74:8c:2d:bd:bd:1d:06:a1:74:45:1b:46:cd:2d:91:
                    2c:60:ba:fc:28:dd:40:69:d3:01:09:c6:c9:bb:2c:
                    ca:c1:ce:80:c0:93:8a:34:cf:61:28:78:4f:d7:0c:
                    7f:d1:cf:ee:b0:5d:79:d6:b6:53:df:dc:cc:63:f0:
                    5d:3a:ca:6b:fb:c4:98:b2:62:d7:36:30:ad:be:f6:
                    e0:d9:d3:a2:fd:9a:ac:bd:84:ff:d5:59:d6:c1:4f:
                    4e:38:f6:fc:5e:6e:75:84:22:12:9a:8e:30:75:95:
                    ba:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3A:28:BF:44:57:34:17:C7:A7:58:87:8A:E1:39:C1:E8:0F:20:C3
            X509v3 Authority Key Identifier:
                keyid:BD:03:22:28:AA:6C:A0:51:E7:3F:B9:08:C6:DC:7F:7D:19:CD:17:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQMiKKpsoFHnP7kIxtx_fRnNF6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/05690b-71d7-470a-b30b-b38dfa874464/1/vQMiKKpsoFHnP7kIxtx_fRnNF6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/05690b-71d7-470a-b30b-b38dfa874464/1/vQMiKKpsoFHnP7kIxtx_fRnNF6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:5c:53:a9:0c:83:99:36:48:d9:aa:41:5c:c4:57:09:90:9e:
         b0:7a:34:89:fc:0e:30:16:49:71:22:c6:35:11:ad:89:c0:46:
         17:32:c4:70:21:bd:03:9e:59:78:77:af:4a:97:cd:f4:d4:21:
         bd:d2:ba:c2:ed:a8:4f:26:f7:a6:34:f8:47:e9:4e:91:fa:6f:
         c2:1f:3c:85:72:94:de:e9:32:74:b7:65:0a:80:2c:97:8d:55:
         f0:ea:65:98:d7:4f:61:8f:a0:e3:78:20:9d:b6:23:a9:c6:db:
         5c:15:3a:c0:8c:f2:cf:a9:34:10:fe:41:b6:26:7a:b6:f2:d4:
         30:07:f8:75:d0:c4:20:45:d4:11:52:ef:14:e0:d4:24:17:5d:
         f3:3b:73:8b:7d:e5:22:e1:f6:c8:2c:c9:1e:b2:95:1b:34:1d:
         73:9c:be:f9:0a:0d:c0:c5:29:4f:5e:80:33:e5:57:c9:8c:7d:
         26:f5:49:43:66:86:1f:a9:be:f4:30:5f:86:3a:cc:89:6b:90:
         a0:68:fb:a2:6c:f9:6d:ef:98:10:ee:2c:3f:03:7c:59:7c:46:
         5f:c5:0d:14:49:af:32:13:c9:48:e8:8d:14:55:fe:36:4d:8c:
         73:9f:f4:be:2b:ec:46:ce:86:2d:69:09:ec:9b:64:c6:85:9e:
         fa:df:03:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:08:20 2025 by rpki-client