This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
File:                     92vpnovixUANAQVCvyBYvbuIUC0.mft (raw, json)
Hash identifier:          P6KAR4S8uMQrobHcKqvfQExHylhgUfSGRk/xA7LJijY=
Subject key identifier:   A4:46:16:00:08:E7:44:99:93:87:A1:53:3F:8E:C7:6B:5A:7B:14:D0
Authority key identifier: F7:6B:E9:9E:8B:E2:C5:40:0D:01:05:42:BF:20:58:BD:BB:88:50:2D
Certificate issuer:       /CN=f76be99e8be2c5400d010542bf2058bdbb88502d
Certificate serial:       019B30E8EBBF8788C6297C6EC8F969463ADD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/92vpnovixUANAQVCvyBYvbuIUC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
Manifest number:          0F99
Signing time:             Thu 18 Dec 2025 10:02:09 +0000
Manifest this update:     Thu 18 Dec 2025 10:02:09 +0000
Manifest next update:     Fri 19 Dec 2025 10:02:09 +0000
Files and hashes:         1: 92vpnovixUANAQVCvyBYvbuIUC0.crl (hash: C6dacyx5d40eMVTazPMKuJXv3LVuCgiDaTeyGVVypUQ=)
                          2: Bgx4v1LhphfEVxiPgOOZhtKcYxk.roa (hash: PMSZWU3KeqqHp7dEdYFCinejkuywjWErsotBlVqvg44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/92vpnovixUANAQVCvyBYvbuIUC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 10:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:30:e8:eb:bf:87:88:c6:29:7c:6e:c8:f9:69:46:3a:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f76be99e8be2c5400d010542bf2058bdbb88502d
        Validity
            Not Before: Dec 18 10:02:09 2025 GMT
            Not After : Dec 19 10:02:09 2025 GMT
        Subject: CN=a446160008e744999387a1533f8ec76b5a7b14d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2e:c6:86:26:dd:eb:2e:c9:fb:51:e3:e5:97:
                    78:d3:7d:5c:5c:c5:8d:8c:b5:fd:6b:b8:e3:41:1a:
                    bf:54:a0:40:df:fa:90:0b:d9:e4:38:04:c3:4b:8b:
                    5a:a9:df:b8:1f:d1:9d:e1:3d:a1:f4:e2:39:62:73:
                    42:cf:13:8a:e5:e8:5b:73:16:80:6c:09:e5:df:ab:
                    07:04:da:d2:78:6c:d0:64:d1:d8:bf:ba:8a:10:3d:
                    88:a1:3e:ed:78:28:ac:c9:34:4d:41:13:05:ab:69:
                    f8:3a:43:54:1e:69:d3:e3:c0:6b:06:2a:67:99:86:
                    61:20:1e:c7:33:af:48:50:d3:7e:06:25:d0:fc:88:
                    6e:97:af:7b:6d:83:c8:2a:56:34:0b:87:c5:3c:03:
                    b8:c1:10:3b:9f:66:ba:e2:f3:c7:a9:b1:50:a7:a2:
                    49:0e:41:50:bc:41:a3:67:59:6d:4a:67:d9:df:96:
                    a9:64:21:90:d2:ea:9c:e8:8a:08:b5:70:c1:ea:79:
                    43:dc:e5:50:3f:fb:bb:e0:29:c4:d1:d4:da:99:5c:
                    04:c9:28:46:2a:c8:d6:13:90:7e:97:8e:ff:fd:4c:
                    6c:2d:de:1f:66:25:f3:c8:fb:d0:9c:a6:e7:df:78:
                    ec:50:30:79:01:4e:90:85:12:b9:ba:c4:9d:1c:f6:
                    a7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:46:16:00:08:E7:44:99:93:87:A1:53:3F:8E:C7:6B:5A:7B:14:D0
            X509v3 Authority Key Identifier:
                keyid:F7:6B:E9:9E:8B:E2:C5:40:0D:01:05:42:BF:20:58:BD:BB:88:50:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92vpnovixUANAQVCvyBYvbuIUC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:82:2a:e6:02:7a:8b:e7:6f:57:7e:e9:6b:d1:db:d5:58:e0:
         28:14:65:f8:ce:02:69:35:cb:55:04:dd:c6:c6:74:3d:31:1e:
         48:5b:e0:cc:cf:35:14:26:33:00:f8:3b:99:24:af:c2:fa:9f:
         5f:92:72:6a:2c:4d:53:7c:e5:9c:95:cb:8a:64:e0:a2:03:9d:
         1a:21:89:f8:b6:cc:56:64:e4:72:55:e9:52:44:35:b6:00:fb:
         a8:63:90:0d:55:75:01:41:f3:75:8a:10:42:e4:af:74:71:45:
         4d:5d:97:b8:26:ec:cb:b0:5a:64:a0:d7:e7:e1:e9:3a:ce:ab:
         b0:3a:aa:ad:6e:7e:ed:af:d1:ca:87:17:98:d2:28:6d:89:b1:
         2a:cf:22:97:6c:75:bc:c1:4c:12:be:30:4d:83:65:ec:4a:a4:
         85:8e:6d:1d:cb:70:5f:a7:be:0f:cc:7d:2c:2f:34:85:bf:5d:
         3a:c8:bd:5f:16:0a:90:8a:ac:1f:b6:f8:08:a7:e9:75:68:93:
         52:3a:ac:70:d0:96:ed:f6:c7:0b:20:a2:93:1b:6b:54:75:4a:
         e6:95:30:da:45:5c:64:a1:9f:86:d4:06:e1:e6:19:4e:6b:25:
         c4:e2:40:2a:fd:3f:16:34:05:f4:d4:26:6b:21:d1:72:1d:21:
         8f:91:fa:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 16:12:40 2025 by rpki-client