This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.mft
File:                     V3GDYWiNFi_4AjwSJ81kTa45ocA.mft (raw, json)
Hash identifier:          f3LzfUL9AItLCNbqXH3f16RMrLtBMADLSkTP+1UHroQ=
Subject key identifier:   74:CD:BC:4E:83:D2:FE:D9:05:D2:83:64:92:6B:BE:81:52:26:8A:47
Authority key identifier: 57:71:83:61:68:8D:16:2F:F8:02:3C:12:27:CD:64:4D:AE:39:A1:C0
Certificate issuer:       /CN=57718361688d162ff8023c1227cd644dae39a1c0
Certificate serial:       019AF209888D769DE8E3587309E426EC0559
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3GDYWiNFi_4AjwSJ81kTa45ocA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.mft
Manifest number:          16F0
Signing time:             Sat 06 Dec 2025 05:01:42 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:42 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:42 +0000
Files and hashes:         1: V3GDYWiNFi_4AjwSJ81kTa45ocA.crl (hash: kUROIr2JePZnE+cVxv6onRf4IgQeLIZ/9CaHfrI4ULs=)
                          2: lgeLoySacO5n6-jqTWkewt--0AI.roa (hash: cHeeK4JCsJJNj8Pz7DQjcNm/axVPSQ0h4TJyF4NqSFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3GDYWiNFi_4AjwSJ81kTa45ocA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:88:8d:76:9d:e8:e3:58:73:09:e4:26:ec:05:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57718361688d162ff8023c1227cd644dae39a1c0
        Validity
            Not Before: Dec  6 05:01:42 2025 GMT
            Not After : Dec  7 05:01:42 2025 GMT
        Subject: CN=74cdbc4e83d2fed905d28364926bbe8152268a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c8:27:3d:6f:2d:75:9b:bc:db:bd:8a:c2:b1:
                    64:21:bf:e1:dd:ce:fa:07:24:55:eb:90:c2:57:c2:
                    ce:55:d5:e1:60:9f:31:fe:af:81:01:49:58:89:cf:
                    e6:9d:89:49:81:e8:a3:fa:6e:38:49:d3:19:d2:eb:
                    57:e3:59:99:39:69:69:2c:a9:60:aa:d4:c6:35:8a:
                    21:69:87:85:e1:ff:25:3d:72:92:ed:77:59:88:c6:
                    d1:8e:de:97:31:07:26:64:69:13:83:b3:cd:2b:68:
                    62:1b:de:75:8c:3c:61:ce:12:99:be:32:c9:f4:8c:
                    00:5e:71:c7:39:a4:11:e6:67:42:0b:7e:6d:e7:91:
                    4a:b1:25:67:ac:47:7b:58:20:1a:e9:10:df:69:d5:
                    52:ad:f1:3b:f2:03:18:bc:49:46:b5:62:8b:51:97:
                    11:6a:4f:d8:23:06:76:9b:93:7e:68:18:26:08:3f:
                    3f:7c:fe:7b:fb:c8:74:72:80:ad:55:60:75:2c:d5:
                    95:3e:ad:af:de:15:33:b0:61:1a:76:eb:9e:77:01:
                    55:4f:e5:d9:13:c3:dc:9b:90:c2:d2:94:4c:d5:11:
                    cd:8b:12:59:3c:06:2d:5b:0f:d8:b6:5b:6d:e5:62:
                    1d:05:cb:54:fe:8f:e2:1e:b8:ff:9b:f2:e2:c3:37:
                    1d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CD:BC:4E:83:D2:FE:D9:05:D2:83:64:92:6B:BE:81:52:26:8A:47
            X509v3 Authority Key Identifier:
                keyid:57:71:83:61:68:8D:16:2F:F8:02:3C:12:27:CD:64:4D:AE:39:A1:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3GDYWiNFi_4AjwSJ81kTa45ocA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:39:f8:e9:18:84:46:18:5d:76:a2:67:8a:62:2f:19:a4:40:
         cf:44:9a:c8:4b:b2:48:3f:65:9b:0c:05:1a:18:10:0a:af:4f:
         36:9e:1d:e9:76:4e:1e:bd:87:0e:aa:86:f7:06:54:2c:67:fc:
         12:51:be:3a:89:3f:c4:49:29:75:b2:e5:ee:57:a3:f3:f5:35:
         6c:0d:e1:ae:8d:e5:59:1f:91:34:92:bb:bd:27:3e:3f:53:be:
         97:35:32:95:ac:c4:67:a2:74:31:16:45:10:dc:23:f6:10:86:
         90:a0:d4:2e:cd:ad:5f:7a:74:20:ef:4e:77:1a:a3:a6:be:9a:
         67:6b:9e:ff:0b:9d:ca:33:87:96:62:35:05:f1:a3:af:c9:e8:
         5b:85:ef:d4:31:df:9a:e0:37:09:21:c7:a3:a6:eb:72:61:5a:
         31:4c:14:c4:fb:b0:64:a7:e7:88:78:86:ba:4e:e6:7a:1e:71:
         a4:94:d4:c7:25:c6:b7:38:46:48:4b:89:d9:8d:11:90:05:9f:
         e0:7a:45:cb:db:e8:d5:ac:ec:e2:cc:87:aa:39:55:ed:3d:1a:
         c7:32:2f:a1:e6:bc:ea:85:be:ad:a5:37:36:5c:53:60:12:a8:
         84:89:2f:10:66:f7:5c:c3:29:40:1b:80:76:2d:95:50:12:a7:
         2e:68:87:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:02:46 2025 by rpki-client