This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
File:                     VLjgSw4aTU46KN8V61hJPnY3frA.mft (raw, json)
Hash identifier:          ph6jbs7I1rpEquzvWz58iI4F5TlDxv2KvrF2a9RtfZU=
Subject key identifier:   3F:BB:A5:D7:A6:5C:0B:C1:AC:DE:0A:2F:15:B1:26:BA:E2:3B:21:2C
Authority key identifier: 54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0
Certificate issuer:       /CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0
Certificate serial:       019AF49B9D2D8FB28C7948284136C2EB0886
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
Manifest number:          1762
Signing time:             Sat 06 Dec 2025 17:00:30 +0000
Manifest this update:     Sat 06 Dec 2025 17:00:30 +0000
Manifest next update:     Sun 07 Dec 2025 17:00:30 +0000
Files and hashes:         1: UwlL4l1LRiE3vykISfbzsy5TSkQ.roa (hash: ENtIGGU96W9e4YjxZ7Qzg80Ai/cpSTda8jT8DyJC8KM=)
                          2: VLjgSw4aTU46KN8V61hJPnY3frA.crl (hash: t+SIKwEdkCMDv62yY4Ov1lGc9e4FS+LOpbLHDE9/9wU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:9b:9d:2d:8f:b2:8c:79:48:28:41:36:c2:eb:08:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0
        Validity
            Not Before: Dec  6 17:00:30 2025 GMT
            Not After : Dec  7 17:00:30 2025 GMT
        Subject: CN=3fbba5d7a65c0bc1acde0a2f15b126bae23b212c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:80:d3:3a:b0:13:33:71:3a:af:c0:86:cc:56:
                    d1:77:0c:da:21:5e:51:ea:83:57:7b:ea:e3:18:9d:
                    fa:74:57:f8:0a:9a:a1:ae:a6:26:79:9b:ff:4f:66:
                    77:9c:36:c9:b3:62:96:58:e4:77:e5:a1:6c:85:16:
                    26:63:b5:2d:d4:39:53:29:67:85:d4:90:7b:45:60:
                    a6:bf:66:b2:f9:48:3c:bf:fc:f8:7d:68:30:cc:ed:
                    06:cb:6a:e9:d6:04:f1:b6:a5:2e:4b:77:02:17:b4:
                    04:88:de:dd:87:fc:78:b5:f2:3a:f5:98:e4:4b:22:
                    53:31:7c:7e:af:a6:ca:62:cf:5b:d0:20:5f:f4:5f:
                    bd:20:ba:4c:49:26:f9:d5:1c:48:c0:62:03:53:e6:
                    87:28:97:ac:ee:f0:3e:16:01:7d:49:99:9a:42:03:
                    d9:96:c5:42:b1:19:ae:6e:36:65:19:bf:99:aa:ec:
                    aa:7b:ad:56:55:2e:db:31:5c:de:75:60:07:6a:df:
                    e2:1f:8a:24:cb:30:57:c0:75:46:1e:ea:e4:00:a8:
                    9a:3c:16:72:93:48:05:69:b8:89:e1:e2:16:80:95:
                    98:94:02:cd:c4:13:f3:1f:8b:ba:e1:65:32:66:fe:
                    e1:e9:5d:b5:bf:4d:23:b2:95:c2:e3:b9:9e:38:f4:
                    89:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:BB:A5:D7:A6:5C:0B:C1:AC:DE:0A:2F:15:B1:26:BA:E2:3B:21:2C
            X509v3 Authority Key Identifier:
                keyid:54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:60:91:94:e7:6f:8d:9e:c5:86:45:6b:97:7a:58:7d:7e:6d:
         21:55:49:6d:ad:08:70:b5:d0:8f:89:f6:5f:9b:f5:2f:6a:e7:
         14:76:1d:31:0f:fc:f0:6a:52:75:62:31:57:ff:e4:85:72:ff:
         aa:4b:89:99:23:f4:17:7d:5d:78:b6:3b:c0:f7:ff:36:27:ff:
         af:3f:00:7f:af:a6:d1:3b:d8:bd:ed:94:8e:03:69:69:8b:9c:
         0d:9c:a4:99:2a:be:00:2e:0e:ac:35:17:52:10:d1:c3:d8:7f:
         63:b4:9b:ad:3b:85:36:02:3d:b9:ec:af:fa:29:d3:6d:29:d3:
         3e:af:4c:1b:7a:b3:07:25:ca:5e:12:bf:e7:d5:59:b0:b0:ac:
         12:10:f2:fd:c9:7c:9c:06:33:ef:52:71:77:0a:66:43:06:7e:
         a2:5a:a5:55:d6:88:c4:5c:09:62:34:fc:c5:7b:15:65:a3:62:
         d6:e7:f1:c2:1f:45:9e:b0:44:24:07:53:c7:66:a5:f4:fa:c4:
         0f:d2:dc:0f:05:47:6b:9e:42:84:72:77:1d:8d:ee:46:99:fa:
         8b:e0:13:9c:68:a6:23:b9:b0:79:08:62:2b:d4:f5:9a:2f:d0:
         57:32:44:27:8d:94:be:c3:e5:f7:ee:30:64:c9:5e:7f:c8:8e:
         f8:9e:09:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:34:58 2025 by rpki-client