This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
File:                     VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft (raw, json)
Hash identifier:          Cp8ZvTy00qVTjr8pNKG3pYT40QRt60JzqgQkdNcgdU4=
Subject key identifier:   EF:16:11:66:88:1F:47:05:C2:8D:B8:61:57:87:52:2A:B5:27:F8:E2
Authority key identifier: 56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24
Certificate issuer:       /CN=5643415c22e141972c0d7e76c24e88b22427b024
Certificate serial:       019AF19ACAE80548B1B72D0C2036C956C1FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
Manifest number:          1761
Signing time:             Sat 06 Dec 2025 03:00:44 +0000
Manifest this update:     Sat 06 Dec 2025 03:00:44 +0000
Manifest next update:     Sun 07 Dec 2025 03:00:44 +0000
Files and hashes:         1: 6qanCjcucoDvogEjoEibMas1xCw.roa (hash: iHrFUYTwZPBriNgyEwpJfBAHJGESvwJ6/vI6y1aBDEY=)
                          2: OJH-3bY7Jey_mmpYXzYEewikSRw.roa (hash: QWW0B/GAEpshetNaEGEwKmz4qiBbm/sCm0lolDcM+Gk=)
                          3: VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl (hash: t4HLwUFD08Ct+ZIaOlqrei9JqPhvpd3Fr4fWfpUtrWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 03:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9a:ca:e8:05:48:b1:b7:2d:0c:20:36:c9:56:c1:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5643415c22e141972c0d7e76c24e88b22427b024
        Validity
            Not Before: Dec  6 03:00:44 2025 GMT
            Not After : Dec  7 03:00:44 2025 GMT
        Subject: CN=ef161166881f4705c28db8615787522ab527f8e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f9:13:c2:5a:73:79:db:2d:63:fe:a6:ae:ad:
                    13:35:12:f1:07:72:66:7c:86:93:20:81:1a:21:d8:
                    59:e9:46:f1:46:2e:3e:03:37:9e:fd:bf:ac:b2:29:
                    a7:69:a7:8f:d7:72:16:e0:46:80:1e:cb:7c:f6:3a:
                    97:9a:2d:b4:88:10:97:e2:2f:8d:6b:9e:1e:ed:dc:
                    4a:f9:63:7f:6c:77:72:32:17:a8:a1:d5:4b:ea:37:
                    9d:30:9c:30:2d:94:a1:36:ed:9f:6d:f1:b2:ab:3c:
                    4d:d3:d6:2f:52:55:f5:bd:44:6f:46:59:64:fd:ee:
                    cd:4c:c5:40:23:47:af:36:7e:58:e1:8d:d1:03:88:
                    4d:34:fd:c4:64:f2:67:38:ab:df:76:ff:4e:47:b2:
                    33:16:c8:74:f8:f8:0e:e6:ce:be:3b:12:c4:33:df:
                    4f:d1:33:9c:89:f5:48:64:ec:ca:1b:1a:3b:15:d6:
                    1d:52:d5:8e:f3:c0:7e:70:45:af:86:59:05:89:09:
                    8d:bb:12:21:af:cb:5d:bf:66:f5:77:b3:a2:65:26:
                    b5:4f:9d:dc:6f:56:14:c0:d3:67:14:30:4f:a0:8d:
                    23:c6:73:5d:cb:92:ad:44:5b:5e:b5:5b:e4:3f:c3:
                    ff:52:e1:40:8d:bd:76:b4:14:3d:f2:70:e6:49:62:
                    c8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:16:11:66:88:1F:47:05:C2:8D:B8:61:57:87:52:2A:B5:27:F8:E2
            X509v3 Authority Key Identifier:
                keyid:56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:7f:1f:24:1c:a8:b1:ec:74:b5:ec:ce:ab:3b:0b:7e:62:ea:
         4a:ab:3e:e4:d5:88:ea:2b:68:4e:22:4f:91:3e:57:bf:13:36:
         eb:5c:6c:4d:54:82:fa:72:0a:97:9f:de:09:84:4d:17:fd:d3:
         9a:6e:92:cb:36:05:71:06:bf:79:24:62:8e:97:54:d1:4b:c0:
         c7:5f:90:68:8a:55:4c:4f:5b:95:f5:50:03:eb:d8:cb:74:9b:
         3d:9a:0c:07:28:e0:d2:7e:a5:12:73:33:40:4a:42:12:4f:8a:
         d1:8b:60:f2:0e:37:8b:01:0f:bb:dd:66:5b:72:ec:60:32:0f:
         b7:11:b5:bb:35:92:f6:43:02:3d:88:2a:a7:0a:4c:df:c6:a2:
         44:97:39:1e:d3:cb:47:a7:1d:25:9e:9c:b6:f9:c2:22:3e:91:
         f2:5c:80:9e:38:49:26:e0:25:4e:50:c7:8c:b4:08:13:0e:be:
         f1:62:f3:8d:4a:44:fc:57:e3:a8:86:dc:f4:0c:6c:a7:81:fa:
         5f:b4:8c:5b:16:62:87:45:0c:56:64:bc:96:16:55:d3:82:60:
         66:40:b7:23:f1:18:b1:bd:08:01:c4:8c:1b:33:b4:2e:a8:86:
         6d:1e:7a:bd:21:15:b6:ec:74:f5:d0:b0:e0:04:d8:db:f7:fa:
         ee:1a:25:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:54:06 2025 by rpki-client