This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.mft
File:                     VB_cei8RpXZtOte99iXOXhGaj98.mft (raw, json)
Hash identifier:          bviQd0sAg09J0mS3wHeRCv0FGFqrEMrDSgKfDEViGq0=
Subject key identifier:   36:38:84:14:00:4F:83:EF:32:AB:73:AA:A5:2F:D0:47:5C:0E:F0:B9
Authority key identifier: 54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
Certificate issuer:       /CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Certificate serial:       019AF0F5E81C8867C2CB1450B35B56C16A1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.mft
Manifest number:          155D
Signing time:             Sat 06 Dec 2025 00:00:38 +0000
Manifest this update:     Sat 06 Dec 2025 00:00:38 +0000
Manifest next update:     Sun 07 Dec 2025 00:00:38 +0000
Files and hashes:         1: RpRK_j5n7yjqTReYLx6JjLzhSB8.roa (hash: 7v0e6lCpAjSML4qRoW95hJfvj3fJQjpnRY2hXicjkYU=)
                          2: VB_cei8RpXZtOte99iXOXhGaj98.crl (hash: lpdj0r1yCYNlkrhh5UjnEuLBmnAuwDZtDNDZ/t6F0u8=)
                          3: _O08NAMTRYiI66s3j5CAN1Tnfbs.roa (hash: tT0fH123IaRd9D3zuV26RbVwu75ai0sfSAd21oMJcLM=)
                          4: zZPuHWJDy83KhJHPetdS190Sc9A.roa (hash: p0Sn4R1w3W9WwTjzDtRCal/zanta/wz6d1ex1M+TJKQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:f5:e8:1c:88:67:c2:cb:14:50:b3:5b:56:c1:6a:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
        Validity
            Not Before: Dec  6 00:00:38 2025 GMT
            Not After : Dec  7 00:00:38 2025 GMT
        Subject: CN=36388414004f83ef32ab73aaa52fd0475c0ef0b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:63:d4:95:4a:6c:1d:23:7f:22:96:85:db:8e:
                    10:02:c2:27:48:2a:bc:12:1e:9b:a4:99:c5:62:8b:
                    15:06:f5:86:51:ee:f7:83:b2:5a:d1:26:f3:07:63:
                    36:05:40:33:6d:7d:06:f9:d2:56:56:fa:6e:f3:bf:
                    d4:60:69:d3:8f:39:b9:5b:14:01:b1:1b:3f:24:9a:
                    b2:3a:66:b2:06:2b:86:4b:e4:27:59:57:85:fc:3d:
                    5c:71:32:3a:c3:23:d8:a7:1e:f9:8d:d5:4c:08:96:
                    3e:a6:9d:79:10:53:95:50:e7:18:fb:3a:9f:70:ec:
                    6a:3e:db:e8:67:c4:60:80:03:33:02:81:36:51:1f:
                    67:2f:0f:35:83:b1:e8:24:9f:0c:49:94:d1:6e:03:
                    8c:29:f0:19:ac:6d:c1:fd:a1:43:2b:24:ec:c8:f4:
                    33:7c:29:bd:5e:e0:1f:fd:68:68:f9:4d:b0:2c:f4:
                    34:4e:ea:c7:42:73:98:8d:50:56:a0:44:96:5a:f1:
                    1a:f0:cc:62:8e:58:3f:c2:47:9e:25:1f:ee:21:38:
                    8e:0a:25:8d:73:d3:17:17:6c:82:3e:fc:3c:c9:ad:
                    72:cb:c5:5e:ad:fb:51:f0:d6:4c:9a:0e:98:50:f4:
                    58:f7:f1:22:28:6f:3a:2e:53:db:41:ce:0e:58:49:
                    b7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:38:84:14:00:4F:83:EF:32:AB:73:AA:A5:2F:D0:47:5C:0E:F0:B9
            X509v3 Authority Key Identifier:
                keyid:54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:70:72:a2:b3:5e:19:c3:24:59:0c:71:46:32:f6:ca:22:59:
         07:d1:fc:b6:59:a1:91:97:dc:c9:77:d8:12:e6:d8:39:7a:84:
         bf:b2:bf:1f:41:fc:67:62:89:fb:bf:bc:81:38:18:f4:33:66:
         a0:25:01:b7:a6:0a:ab:45:ae:31:92:47:3d:b3:18:58:b3:3d:
         ee:89:6d:60:f4:b6:82:7a:45:e2:06:e8:89:00:71:dd:63:c3:
         52:84:a6:66:65:31:c1:12:ce:50:eb:3e:44:14:24:c7:fc:6c:
         2f:b1:43:da:07:b5:44:4c:9b:16:9d:8c:5a:0f:17:bc:74:ee:
         8e:64:28:5e:7f:c1:9d:bd:38:3a:5d:76:61:c4:43:13:17:4f:
         d4:e3:50:3f:b7:0a:83:57:36:55:2a:f6:57:bc:d8:f4:e2:71:
         54:62:16:75:27:62:c5:8f:94:c6:e7:ac:4b:8a:ac:92:8f:c4:
         16:e3:fe:d9:e4:b1:42:48:84:a7:86:4a:71:f9:33:10:ae:e7:
         34:e4:58:0d:54:21:88:b4:d2:3c:4b:88:0d:1c:11:e3:95:d1:
         04:4d:25:6a:73:22:f6:35:74:d4:36:43:15:6e:75:0f:ed:d5:
         52:6d:d8:c9:6a:32:9a:11:1d:bb:87:02:00:3b:52:31:b0:62:
         20:24:4d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:10:42 2025 by rpki-client