This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
File:                     vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft (raw, json)
Hash identifier:          LqfDJWMrEjJ0sxcDpECvPNhsuJBFv5pqhz9nS4eFgPE=
Subject key identifier:   A8:D0:0D:FB:8B:BC:E8:53:52:3F:F3:CA:21:DA:55:06:17:6A:82:B2
Authority key identifier: BE:6C:49:7F:F4:D4:A8:BB:5A:24:BD:D2:05:15:75:B4:9A:08:3C:75
Certificate issuer:       /CN=be6c497ff4d4a8bb5a24bdd2051575b49a083c75
Certificate serial:       019AF31D03D6D2939129EB2D04EDE95E457A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
Manifest number:          1762
Signing time:             Sat 06 Dec 2025 10:02:36 +0000
Manifest this update:     Sat 06 Dec 2025 10:02:36 +0000
Manifest next update:     Sun 07 Dec 2025 10:02:36 +0000
Files and hashes:         1: 04aeLB2DOt1K2QS3FV3HPiOFTOY.roa (hash: A0BDulMr2mADVn63DP1McJaXG3hUV8E5IfZVNPfU4eA=)
                          2: bO2ZdwM21enGaKwe_1iSEPBIIts.roa (hash: uBMm/tJP0uLUJeJM+1YEtRm4BQYL1PFKNrER1Hr5ksk=)
                          3: vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl (hash: o8Su8DXo1b0GG1HMAQHaDJ7uFcdMNKGFL1ugFu0Oi3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1d:03:d6:d2:93:91:29:eb:2d:04:ed:e9:5e:45:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be6c497ff4d4a8bb5a24bdd2051575b49a083c75
        Validity
            Not Before: Dec  6 10:02:36 2025 GMT
            Not After : Dec  7 10:02:36 2025 GMT
        Subject: CN=a8d00dfb8bbce853523ff3ca21da5506176a82b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:11:86:9a:f1:0c:97:ba:a4:6b:0b:7e:87:3e:
                    6b:8c:23:61:f5:9c:0c:a0:42:64:14:c5:e0:95:35:
                    72:fb:a8:ad:d9:b3:7c:ec:7c:b2:18:0a:75:68:28:
                    a2:73:4c:05:c1:95:f4:f1:b1:2c:bf:f8:8f:ab:c8:
                    bb:34:05:90:7f:b4:65:92:07:a1:27:e0:4c:f9:16:
                    6e:b0:3d:66:65:0c:95:5c:38:25:cb:f6:7e:a9:a2:
                    85:0c:37:78:ce:bf:d5:5b:57:aa:a0:cd:5e:f0:fb:
                    17:39:a8:4c:99:36:d1:48:55:10:4b:0c:f9:53:1a:
                    67:92:50:a7:1c:73:d4:f0:e0:9c:b9:df:7d:7c:0e:
                    16:6a:b9:d8:84:da:fb:9a:c8:2d:bc:50:74:d3:8b:
                    9f:55:70:3e:8b:ec:5c:69:4a:a5:db:e9:f1:75:3b:
                    f0:42:7f:e1:a8:68:da:51:8e:c5:64:02:d3:61:a7:
                    5e:c5:dc:e5:7c:61:73:05:0c:a1:4c:95:5c:a3:62:
                    91:91:fe:ef:80:d5:24:43:69:85:56:4e:50:ef:44:
                    42:b3:c2:fb:89:1e:a1:bd:8a:74:bb:74:c2:9a:e8:
                    48:34:cb:09:f9:77:cf:bd:c6:a3:8f:39:00:29:0b:
                    7e:f0:26:c1:2d:18:65:3c:cb:07:dd:e0:e2:9a:7a:
                    9f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D0:0D:FB:8B:BC:E8:53:52:3F:F3:CA:21:DA:55:06:17:6A:82:B2
            X509v3 Authority Key Identifier:
                keyid:BE:6C:49:7F:F4:D4:A8:BB:5A:24:BD:D2:05:15:75:B4:9A:08:3C:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:77:d3:66:85:2c:2a:56:b4:93:06:67:58:e3:e9:90:67:df:
         28:5b:bf:db:16:9f:91:0b:cf:dc:66:bb:f6:c3:07:c7:32:2b:
         7f:b3:2d:a7:0b:81:e4:66:94:93:41:14:83:fd:60:59:6b:cd:
         bc:47:d4:12:d8:3e:74:40:b7:95:8b:91:14:46:20:a4:bb:aa:
         b5:43:d6:b5:77:4d:95:98:76:e6:20:aa:c2:c9:13:c7:0d:d9:
         34:0c:d8:88:de:ff:9b:89:fc:69:78:ec:da:f7:3b:60:5f:2f:
         2e:e3:b1:4f:58:b5:df:c5:78:86:4f:fa:67:ef:f4:98:07:c6:
         7d:1a:29:34:ff:c6:4b:76:6c:cd:f0:14:de:ff:e7:4d:a9:59:
         5f:03:56:dd:be:89:62:26:62:e4:4c:7e:39:b8:a3:10:df:75:
         7d:03:78:88:f3:0a:d1:28:9a:2c:8b:1b:0e:36:4f:be:29:a1:
         8b:3c:63:09:2f:43:87:21:7b:42:1e:16:b7:46:e9:34:37:0b:
         0f:17:38:13:d1:81:53:53:a6:70:a3:f8:3f:14:76:3d:5b:b1:
         fe:0b:a6:1f:a2:25:0a:60:d9:a8:26:7c:e5:11:5c:a1:98:93:
         eb:35:79:b1:44:af:97:9f:87:3a:d2:ad:ee:71:5a:47:f7:a6:
         94:ea:a1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:25:37 2025 by rpki-client