This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft
File:                     VVDgbuAsWjLlTciYU7SqN4-GBPc.mft (raw, json)
Hash identifier:          +83aSbPN+UP2b9333Cf+5qFpdng0LWOvxGZ5h57L+OM=
Subject key identifier:   4C:48:BC:C3:E1:E9:7D:7E:B0:0E:CE:07:ED:9D:0E:55:68:F3:F8:FB
Authority key identifier: 55:50:E0:6E:E0:2C:5A:32:E5:4D:C8:98:53:B4:AA:37:8F:86:04:F7
Certificate issuer:       /CN=5550e06ee02c5a32e54dc89853b4aa378f8604f7
Certificate serial:       019AF35282156D3C0BFF0CC4A670EB77B3B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft
Manifest number:          0CA8
Signing time:             Sat 06 Dec 2025 11:01:01 +0000
Manifest this update:     Sat 06 Dec 2025 11:01:01 +0000
Manifest next update:     Sun 07 Dec 2025 11:01:01 +0000
Files and hashes:         1: 5SQUdjWeY9PdQ3b1GR4L3yx_VJ4.roa (hash: VQXaoCtg+0JbslSnqFe7W7gX+zMPO93yVdM1v7U3tJ8=)
                          2: MPnVMUDELwRT1_LHbrcJgd4NmwE.roa (hash: +uiYqzvO4MwwXvvIKhlCHsQt5+OwmIQB9Ijy/fYg7A8=)
                          3: VVDgbuAsWjLlTciYU7SqN4-GBPc.crl (hash: ynspbzloxYALoHVKfrM7Go6Qf76Auf5rZCN012T65Hc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 11:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:52:82:15:6d:3c:0b:ff:0c:c4:a6:70:eb:77:b3:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5550e06ee02c5a32e54dc89853b4aa378f8604f7
        Validity
            Not Before: Dec  6 11:01:01 2025 GMT
            Not After : Dec  7 11:01:01 2025 GMT
        Subject: CN=4c48bcc3e1e97d7eb00ece07ed9d0e5568f3f8fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3c:7e:97:22:59:77:7b:11:c7:3a:30:19:5e:
                    eb:cf:5d:5e:6c:cf:f8:e6:09:cc:49:72:51:b7:4d:
                    b9:65:d7:26:16:89:53:ec:e8:b3:15:2c:8d:d9:05:
                    41:47:38:86:e6:75:6a:5d:5e:c5:9b:ae:35:41:46:
                    9b:6b:6f:81:09:39:49:48:07:b2:bc:3f:95:9c:6e:
                    5a:c3:02:7d:7e:9a:bb:88:de:3d:ba:62:c4:16:06:
                    5e:2f:34:f3:f4:b6:40:c7:b8:1f:05:1f:48:eb:ec:
                    38:1f:ba:25:6b:7f:50:61:ec:91:07:40:f1:9f:1d:
                    d5:cb:29:c2:c8:3c:e7:c9:b1:31:07:0c:8d:bb:1a:
                    51:47:d9:e6:6f:9c:d9:0d:77:78:2e:2d:b5:28:e8:
                    01:3f:45:09:df:b0:9e:c7:db:72:a8:96:da:c0:57:
                    b2:5a:c7:7c:2a:6e:ea:a9:29:f5:b6:cb:f8:8d:86:
                    d6:43:eb:98:4b:6d:df:4f:d6:3c:69:4c:d4:a3:d5:
                    f4:ff:b4:03:93:77:cf:57:77:f1:db:cb:72:f9:d4:
                    5a:fd:73:b7:58:e2:c3:65:e7:d8:4d:98:80:4d:ea:
                    a8:11:db:d4:bd:28:19:63:f6:49:ee:56:0d:f5:14:
                    3e:2d:d4:7b:ca:e1:cb:67:b7:0c:50:22:aa:44:a8:
                    8b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:48:BC:C3:E1:E9:7D:7E:B0:0E:CE:07:ED:9D:0E:55:68:F3:F8:FB
            X509v3 Authority Key Identifier:
                keyid:55:50:E0:6E:E0:2C:5A:32:E5:4D:C8:98:53:B4:AA:37:8F:86:04:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:90:7f:a9:51:02:57:00:6b:d4:3f:9f:98:36:a8:38:10:7d:
         b3:74:11:ae:9e:90:a7:95:24:48:89:b4:c8:53:cf:df:58:6c:
         a2:9d:26:f8:50:8e:27:10:c2:42:35:83:4d:82:56:ac:d6:47:
         98:87:e6:c6:37:fb:d7:6e:75:16:5c:27:dd:43:b9:5b:f8:74:
         f8:08:cb:5e:23:4c:bb:45:4d:f0:48:8e:8c:86:6e:20:bd:95:
         ba:f3:d8:04:cf:3f:91:75:73:6a:c9:20:f6:c9:e7:e8:e3:43:
         20:03:f3:15:09:b2:f3:73:34:53:17:b9:7f:b6:6c:f7:00:95:
         6b:ed:20:c8:0a:8a:d8:3f:77:1b:26:31:d6:63:cb:1c:db:88:
         3f:b5:e4:2e:2f:dc:fa:7b:ec:a8:71:71:f5:16:aa:ac:64:88:
         0d:97:14:b7:54:89:17:ae:6b:d3:58:4c:f1:87:09:4b:14:29:
         e1:6a:3a:aa:83:c2:87:16:d6:90:5b:f2:b5:46:61:d5:e3:43:
         5f:3d:d0:75:0e:95:71:1c:de:af:88:55:7e:f6:9e:a0:d1:67:
         9b:fa:80:c4:1e:43:42:24:1b:4f:d7:fa:68:0b:f4:1e:2a:d4:
         23:fc:32:5b:2d:9d:62:5f:ab:48:e7:d6:00:61:09:8f:4f:56:
         b4:37:9c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:27:02 2025 by rpki-client