This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
File:                     ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft (raw, json)
Hash identifier:          Ts0inOyZWuGFAguxVms99FRqimtVZog/vIsW5EH9XnA=
Subject key identifier:   6D:81:E1:D6:8D:45:67:5E:C6:7B:12:2D:D4:73:3D:83:74:DA:BE:AB
Authority key identifier: 22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
Certificate issuer:       /CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Certificate serial:       019AF509E6619F5535ED2F2CEC2AD3F0FA4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
Manifest number:          1405
Signing time:             Sat 06 Dec 2025 19:00:57 +0000
Manifest this update:     Sat 06 Dec 2025 19:00:57 +0000
Manifest next update:     Sun 07 Dec 2025 19:00:57 +0000
Files and hashes:         1: ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl (hash: gY3ZFTgRS5SRNwkZ0A1qcBXbxvwH/pMXrecRWnWZ4Is=)
                          2: nMkEmJ51wxGZCh8yEkXwS1N3iAs.roa (hash: 28RMWY33rrxPKF667SNzPxBMXl2tl3acI2LPVuAYmGg=)
                          3: zMR6QVCY7XDu7CjlFF2Zc2HvYX8.roa (hash: H+/kniid9OfMhYsVomtjxQTvfv/uf2k0o/IUWQqiT1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 19:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:09:e6:61:9f:55:35:ed:2f:2c:ec:2a:d3:f0:fa:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
        Validity
            Not Before: Dec  6 19:00:57 2025 GMT
            Not After : Dec  7 19:00:57 2025 GMT
        Subject: CN=6d81e1d68d45675ec67b122dd4733d8374dabeab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:44:42:b5:8d:9e:66:6e:78:bb:87:7c:bc:29:
                    95:99:e3:76:8a:fd:29:bf:b2:0d:f0:44:14:25:b0:
                    a0:45:6c:12:24:70:30:c0:aa:63:7d:38:ee:8a:dd:
                    97:7b:56:90:3f:2d:0e:39:41:91:59:fa:eb:f0:3c:
                    c0:cd:c2:79:3c:35:88:ec:00:1c:aa:20:82:3c:1a:
                    9f:88:cc:d1:9e:21:a8:55:1a:ab:16:9c:6e:b5:bd:
                    f5:97:28:04:a1:f4:f2:0f:5d:2b:62:bb:2b:78:ac:
                    fd:81:9a:67:8b:94:c6:87:e3:71:15:51:b7:ae:59:
                    31:d0:74:9b:ea:b1:b9:63:c2:80:cc:8b:be:b2:97:
                    bb:44:f0:44:91:8d:d6:cc:e2:ff:a6:92:5f:69:6e:
                    e0:5a:4c:fe:d7:dd:44:5a:3d:de:6d:29:8a:1f:3e:
                    dc:d1:4b:a3:48:1d:53:72:1f:8a:29:1b:d7:20:d5:
                    81:f5:f9:ff:6f:2c:21:fb:ed:a8:d8:34:6e:ef:a7:
                    02:bb:af:3d:f5:88:b5:ed:64:c6:05:53:bb:70:53:
                    7b:dd:32:d6:6b:6f:c2:92:6e:79:7a:91:84:1c:98:
                    6f:4c:59:c3:0a:1b:5a:22:4a:3e:e0:eb:10:06:a2:
                    81:1e:e7:bc:84:c7:84:a8:33:01:72:cb:50:dc:89:
                    05:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:81:E1:D6:8D:45:67:5E:C6:7B:12:2D:D4:73:3D:83:74:DA:BE:AB
            X509v3 Authority Key Identifier:
                keyid:22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:55:5a:94:ab:86:08:5b:fa:15:89:2a:78:44:30:ad:d4:6b:
         63:c2:22:ec:64:fb:41:12:b3:64:c4:c2:44:31:21:e3:62:bd:
         3e:e0:75:f4:ad:b6:d2:b9:26:16:76:d8:ca:46:bb:39:0e:a5:
         1a:e2:5f:4f:8c:06:2c:23:3a:77:23:66:39:2e:3c:a8:dc:5f:
         4c:cd:30:84:95:54:22:e9:dd:d3:7b:7a:c1:bb:4c:b1:65:74:
         1d:62:cd:2d:c9:ba:5c:2e:5e:ef:6d:45:00:3f:f7:95:de:d9:
         1e:6c:48:e8:db:d8:df:2a:76:5e:50:2c:c6:af:37:6b:8c:65:
         5c:4d:6a:ba:f3:c0:42:79:de:c6:df:7f:50:c1:44:d3:ab:cd:
         b7:75:46:b3:5e:05:a7:65:d2:29:e7:f5:48:37:88:78:a3:f4:
         9a:65:1d:f9:86:7a:91:7b:de:3b:c5:40:3c:d0:11:4f:fd:c5:
         0d:da:45:9c:98:30:43:44:3e:b2:00:5c:9a:76:25:8b:38:3d:
         cb:72:bb:7e:91:79:fd:7f:62:ec:8d:e0:21:66:31:39:cc:a4:
         72:5f:32:94:10:7f:da:c4:96:4f:ae:72:56:76:22:70:75:ae:
         85:23:94:de:7e:29:7f:c8:44:87:05:bb:54:31:57:a8:2b:6c:
         27:eb:54:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:20:33 2025 by rpki-client