This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft
File:                     VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft (raw, json)
Hash identifier:          ehsH+jzPEyUqz8GpMBbVgZNnazUlFann+hYaAIH+rqQ=
Subject key identifier:   2C:E9:2B:43:4A:2D:EA:D0:6E:D8:FE:02:1E:83:33:B5:8A:43:E1:90
Authority key identifier: 56:88:B1:1C:5F:24:F2:E9:38:C8:8A:51:CB:49:CE:B1:35:36:43:89
Certificate issuer:       /CN=5688b11c5f24f2e938c88a51cb49ceb135364389
Certificate serial:       019AF12D51DF1064E34ECED86726EBED3F00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VoixHF8k8uk4yIpRy0nOsTU2Q4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft
Manifest number:          0F72
Signing time:             Sat 06 Dec 2025 01:01:10 +0000
Manifest this update:     Sat 06 Dec 2025 01:01:10 +0000
Manifest next update:     Sun 07 Dec 2025 01:01:10 +0000
Files and hashes:         1: VoixHF8k8uk4yIpRy0nOsTU2Q4k.crl (hash: KeimH5/U5M9J8DKCq9r6UnsY5BysoJKtrpw+ss32nmE=)
                          2: cJ5glVz4GHRzOf6IyvRRck-9UEU.roa (hash: 58bsNe/joAKOWYDPmFBrEXcY+rLRfxv60aTTZ4/yvVI=)
                          3: gDx_EkaHuEb4LxSm5qDhRH-UdZM.roa (hash: XHmtxgaP2vmqWx5qZWaBQh+bglRBX5m7TvdpxAwnTCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VoixHF8k8uk4yIpRy0nOsTU2Q4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2d:51:df:10:64:e3:4e:ce:d8:67:26:eb:ed:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5688b11c5f24f2e938c88a51cb49ceb135364389
        Validity
            Not Before: Dec  6 01:01:10 2025 GMT
            Not After : Dec  7 01:01:10 2025 GMT
        Subject: CN=2ce92b434a2dead06ed8fe021e8333b58a43e190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cc:3c:7e:93:e5:98:51:56:33:c5:54:0c:a7:
                    48:30:cb:2e:56:1a:ed:70:69:2c:09:0c:18:d3:b1:
                    62:7e:e4:fa:c9:c3:14:1e:b9:f8:a4:a2:2b:53:46:
                    6d:c3:4b:f2:3f:0b:be:0b:70:df:ef:1c:1a:35:a1:
                    8c:c4:fd:af:03:c1:7f:12:d9:74:1e:ee:83:7d:92:
                    90:a3:85:46:de:6d:53:48:aa:19:cc:38:5f:32:eb:
                    fe:49:e1:ef:1d:1b:b4:cf:db:32:35:92:d9:78:df:
                    18:42:2a:18:fe:bf:c5:36:eb:8d:3d:2c:f4:3d:d6:
                    e5:f8:de:1b:1f:7a:1b:51:27:2c:92:99:d5:19:5d:
                    6c:b2:59:8b:3a:e2:e3:5a:11:d0:46:16:67:86:99:
                    45:08:f2:9a:ad:8f:0d:e4:77:b9:f1:ba:48:2a:8a:
                    39:1a:97:c4:6e:11:c0:22:33:7a:9b:f9:45:a9:c3:
                    a2:d3:1a:ca:8a:78:dc:3f:e9:d2:fb:d8:08:dc:4a:
                    91:ec:f2:7f:78:db:dc:16:98:ac:e0:03:bb:1d:ff:
                    fb:dc:39:b2:f0:d4:e0:aa:90:27:ed:3e:5c:c7:b0:
                    c4:4c:58:f1:02:1e:ee:fb:63:c3:be:53:eb:75:93:
                    f3:d9:c3:f4:b7:ea:eb:6f:35:64:0e:1b:ec:c7:a9:
                    6c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E9:2B:43:4A:2D:EA:D0:6E:D8:FE:02:1E:83:33:B5:8A:43:E1:90
            X509v3 Authority Key Identifier:
                keyid:56:88:B1:1C:5F:24:F2:E9:38:C8:8A:51:CB:49:CE:B1:35:36:43:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoixHF8k8uk4yIpRy0nOsTU2Q4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:3d:59:60:6b:2d:a2:32:f8:e3:45:45:27:a8:96:a3:8e:10:
         d3:d4:52:da:51:7d:47:f5:61:44:ef:db:b1:ce:20:92:92:9e:
         78:18:0b:97:d9:b9:3b:0e:bc:6a:43:ab:13:06:3e:e8:66:8d:
         d9:7f:83:68:88:41:1d:24:03:b2:1a:27:62:96:cc:b0:db:3b:
         39:de:5d:1b:06:a3:80:2c:93:c3:30:31:22:bc:62:69:7c:75:
         f8:6b:af:c7:a7:ce:4d:13:e9:84:49:64:c4:09:3e:71:0a:39:
         27:bd:e2:3d:40:5a:e8:24:59:17:26:89:4c:ad:6b:85:d6:0e:
         ae:30:c5:f0:63:90:4e:e5:6d:57:15:f5:e7:ed:8f:90:7d:ef:
         89:8f:0d:e2:0b:21:66:8f:6b:c4:51:1d:8f:e6:4e:dc:bd:f9:
         bf:52:39:38:1c:11:e3:6f:46:f0:60:27:91:ee:44:a8:68:f8:
         bf:24:3e:d7:dd:81:a3:61:4a:4d:28:bf:b0:5f:70:ef:de:ce:
         e3:5e:69:57:ad:0d:15:e2:d8:a4:4f:5c:e6:91:13:5e:13:45:
         b2:7d:9d:09:e2:32:e8:36:be:05:10:bb:92:61:4b:44:40:f2:
         2a:ee:b7:40:24:15:50:b5:a4:8f:72:93:2c:dd:fc:b5:14:0f:
         6a:c7:74:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxLVHfEGTjTs7YZybr7T8AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ODhiMTFjNWYyNGYyZTkzOGM4OGE1MWNiNDljZWIxMzUz
NjQzODkwHhcNMjUxMjA2MDEwMTEwWhcNMjUxMjA3MDEwMTEwWjAzMTEwLwYDVQQD
EygyY2U5MmI0MzRhMmRlYWQwNmVkOGZlMDIxZTgzMzNiNThhNDNlMTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8w8fpPlmFFWM8VUDKdIMMsuVhrt
cGksCQwY07FifuT6ycMUHrn4pKIrU0Ztw0vyPwu+C3Df7xwaNaGMxP2vA8F/Etl0
Hu6DfZKQo4VG3m1TSKoZzDhfMuv+SeHvHRu0z9syNZLZeN8YQioY/r/FNuuNPSz0
Pdbl+N4bH3obUScskpnVGV1sslmLOuLjWhHQRhZnhplFCPKarY8N5He58bpIKoo5
GpfEbhHAIjN6m/lFqcOi0xrKinjcP+nS+9gI3EqR7PJ/eNvcFpis4AO7Hf/73Dmy
8NTgqpAn7T5cx7DETFjxAh7u+2PDvlPrdZPz2cP0t+rrbzVkDhvsx6lsqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCzpK0NKLerQbtj+Ah6DM7WKQ+GQMB8GA1UdIwQY
MBaAFFaIsRxfJPLpOMiKUctJzrE1NkOJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm9peEhGOGs4dWs0eUlwUnkwbk9zVFUyUTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8zYjE2NTctNzg5MS00MWEyLThiMWQt
Yzg0MjFjM2I2NTU0LzEvVm9peEhGOGs4dWs0eUlwUnkwbk9zVFUyUTRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8zYjE2NTctNzg5MS00MWEyLThiMWQtYzg0MjFjM2I2NTU0
LzEvVm9peEhGOGs4dWs0eUlwUnkwbk9zVFUyUTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApj1ZYGst
ojL440VFJ6iWo44Q09RS2lF9R/VhRO/bsc4gkpKeeBgLl9m5Ow68akOrEwY+6GaN
2X+DaIhBHSQDshonYpbMsNs7Od5dGwajgCyTwzAxIrxiaXx1+Guvx6fOTRPphElk
xAk+cQo5J73iPUBa6CRZFyaJTK1rhdYOrjDF8GOQTuVtVxX15+2PkH3viY8N4gsh
Zo9rxFEdj+ZO3L35v1I5OBwR429G8GAnke5EqGj4vyQ+192Bo2FKTSi/sF9w797O
415pV60NFeLYpE9c5pETXhNFsn2dCeIy6Da+BRC7kmFLREDyKu63QCQVULWkj3KT
LN38tRQPasd0Ww==
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:02:43 2025 by rpki-client