This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
File:                     v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft (raw, json)
Hash identifier:          eDKim6R3BIS9CpmYd9PIpEjzs49DKE3ga8CX/SHVJB0=
Subject key identifier:   1A:97:12:AE:02:FD:76:4A:27:1E:37:9C:23:B0:0F:88:E4:C6:4F:E1
Authority key identifier: BF:F7:6A:06:EA:A2:A0:3C:79:91:34:75:09:B8:60:8F:4A:71:07:1F
Certificate issuer:       /CN=bff76a06eaa2a03c7991347509b8608f4a71071f
Certificate serial:       019AF0880DD115F416CAE732D8F4CEE71772
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v_dqBuqioDx5kTR1Cbhgj0pxBx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
Manifest number:          63
Signing time:             Fri 05 Dec 2025 22:00:39 +0000
Manifest this update:     Fri 05 Dec 2025 22:00:39 +0000
Manifest next update:     Sat 06 Dec 2025 22:00:39 +0000
Files and hashes:         1: YK5nFZTFgBEwXmaFB6vIIRqOTD0.roa (hash: jOXBRmwr3D9a+H6ywOkdI9zIP2sM0Nf1YNNjnaSWmfo=)
                          2: v_dqBuqioDx5kTR1Cbhgj0pxBx8.crl (hash: AcA/Sr6TLM0s601I6IRSVxe7ZKwsAJAb30Bfhd7HiBY=)
                          3: xXaP2eDNgG4DZ5MWiMVfRW19g2s.roa (hash: NRx5nwi4HBO5MYl0mHSa1UutEw1DMYe/lbcn2V85lZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v_dqBuqioDx5kTR1Cbhgj0pxBx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 22:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:88:0d:d1:15:f4:16:ca:e7:32:d8:f4:ce:e7:17:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bff76a06eaa2a03c7991347509b8608f4a71071f
        Validity
            Not Before: Dec  5 22:00:39 2025 GMT
            Not After : Dec  6 22:00:39 2025 GMT
        Subject: CN=1a9712ae02fd764a271e379c23b00f88e4c64fe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:42:02:19:40:d9:dc:cc:08:fa:58:86:bd:23:
                    a9:24:d4:7c:ee:e4:0e:5c:c8:61:76:7c:68:e5:b5:
                    ff:ff:f2:0d:aa:39:ab:c9:bd:ac:ed:d9:ea:71:8f:
                    5a:c2:fd:05:a7:5d:2a:31:51:3b:40:7a:7c:f0:4e:
                    f0:33:bd:bb:b9:39:64:51:15:57:15:93:53:07:69:
                    94:5a:d8:cb:42:2a:40:00:d0:0c:5b:af:52:7e:79:
                    48:59:39:1c:5e:32:30:60:88:47:b4:fa:8c:96:72:
                    9e:22:47:e7:7e:a7:70:fa:af:8c:c2:ec:fc:08:51:
                    ce:7e:06:10:dd:40:0d:7e:ef:42:ef:d8:93:9c:02:
                    64:e4:e9:74:1b:9d:9e:c6:1f:40:6f:85:e1:97:32:
                    a7:e6:5a:dd:c2:05:f4:52:00:bc:04:07:85:39:18:
                    cc:d8:c4:a8:5e:1c:9d:28:66:dc:f2:b1:7a:53:25:
                    fb:f7:f4:8c:9c:2b:70:f8:51:52:db:0c:5f:4d:2b:
                    77:8f:d7:8f:ed:a8:2e:3d:37:05:cf:b8:a9:85:62:
                    d4:fe:33:35:cf:ad:0d:4b:0b:a8:4f:ef:82:30:d4:
                    98:19:bf:82:9e:c6:34:e7:1e:ce:c2:b5:af:48:27:
                    18:50:6b:e7:0a:4f:56:3d:3a:8e:f5:88:a2:15:2e:
                    79:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:97:12:AE:02:FD:76:4A:27:1E:37:9C:23:B0:0F:88:E4:C6:4F:E1
            X509v3 Authority Key Identifier:
                keyid:BF:F7:6A:06:EA:A2:A0:3C:79:91:34:75:09:B8:60:8F:4A:71:07:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_dqBuqioDx5kTR1Cbhgj0pxBx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:1f:5c:65:0b:85:f5:50:44:6e:c1:6a:e7:e1:c6:de:04:e4:
         93:18:52:76:b2:bf:06:cb:a6:ce:22:04:e4:43:69:e1:e1:78:
         75:f1:3b:11:c9:17:2d:6c:97:11:14:93:8f:68:8c:fe:7b:2e:
         02:34:ea:87:e6:81:d9:37:28:1d:b2:09:b5:4a:a6:2d:08:ed:
         49:c6:0a:df:77:25:e4:94:f6:56:5d:bf:60:ca:28:7c:4a:eb:
         87:f6:75:80:0c:fa:05:0a:e2:db:e6:9f:ec:8e:65:32:c7:eb:
         7b:f5:17:38:f5:0d:01:f4:0a:89:f1:40:2f:5f:bf:11:f6:21:
         99:ac:b4:25:2b:6c:12:de:3f:b1:1a:36:3e:dc:d7:ae:c9:66:
         b7:e3:6a:be:d5:e2:ce:57:06:1d:08:99:e2:14:79:27:c6:31:
         d8:f8:d8:48:8f:3d:19:26:e4:d6:f7:c3:91:fc:d1:04:c3:bb:
         84:64:d7:57:b2:e5:34:b7:1c:82:90:0a:b0:ca:20:22:1f:bb:
         8c:36:43:2b:97:9a:59:82:90:14:8d:ed:c4:0c:ff:1c:9e:53:
         1b:8c:52:18:d4:84:7e:2d:1a:92:e7:7c:50:ac:76:e2:ab:96:
         bb:d6:89:63:12:3a:6f:30:41:b2:c5:63:39:90:4c:5a:31:f4:
         84:92:1a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:42:16 2025 by rpki-client