This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft
File:                     V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft (raw, json)
Hash identifier:          B7AvAxf93g8ZJIuxGvsOPt1y/AgXJeKvfQ1TFDaCx8s=
Subject key identifier:   49:D4:6D:C2:F0:8F:F3:16:11:3E:6C:0A:B2:7A:05:CD:80:76:CC:B7
Authority key identifier: 57:FB:B6:EB:2C:EC:9A:9B:7B:B8:1A:3B:16:0C:1A:AB:99:0E:48:26
Certificate issuer:       /CN=57fbb6eb2cec9a9b7bb81a3b160c1aab990e4826
Certificate serial:       019AF276760C8B173061E6D014D082F4D84D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V_u26yzsmpt7uBo7Fgwaq5kOSCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft
Manifest number:          1134
Signing time:             Sat 06 Dec 2025 07:00:40 +0000
Manifest this update:     Sat 06 Dec 2025 07:00:40 +0000
Manifest next update:     Sun 07 Dec 2025 07:00:40 +0000
Files and hashes:         1: J61W22rNG-zDQHqba8KpMVr9eOQ.roa (hash: egaR8HryPVOatJDhc71F1yZLfEpoS66sYQjBb1aN/QU=)
                          2: V_u26yzsmpt7uBo7Fgwaq5kOSCY.crl (hash: NfNIK9J0or82P09qarc2rM7r1t7Q6tDbUXw7S8bbAj8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V_u26yzsmpt7uBo7Fgwaq5kOSCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:76:0c:8b:17:30:61:e6:d0:14:d0:82:f4:d8:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57fbb6eb2cec9a9b7bb81a3b160c1aab990e4826
        Validity
            Not Before: Dec  6 07:00:40 2025 GMT
            Not After : Dec  7 07:00:40 2025 GMT
        Subject: CN=49d46dc2f08ff316113e6c0ab27a05cd8076ccb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:60:38:84:0f:4c:48:a7:6c:81:76:b7:bc:92:
                    33:ea:94:9f:48:f7:e0:04:d0:0d:ce:f3:fd:dc:aa:
                    d5:00:95:ae:d1:5b:22:22:4a:73:23:5d:58:c3:5e:
                    06:24:06:50:e8:3a:16:dd:0e:f5:ed:59:08:3f:2c:
                    5e:3b:1c:5a:47:0f:11:0a:79:ae:f2:80:40:c3:fb:
                    db:5e:05:03:f3:9c:df:fc:95:79:11:27:f4:08:0a:
                    68:84:4d:56:47:97:c5:4c:ab:4c:a3:02:a6:76:a3:
                    09:8d:18:54:65:7e:7d:b7:77:4a:16:34:4e:7f:81:
                    75:34:fe:aa:15:6b:6b:71:b3:ca:af:3b:be:05:91:
                    ff:a8:df:3c:3a:64:81:69:8d:77:84:83:0f:40:94:
                    4d:4a:87:b1:b8:39:5a:04:6d:ef:99:d3:23:e6:42:
                    56:a6:05:1a:1b:e2:28:5f:31:ea:df:a7:c1:a1:b2:
                    31:fe:65:be:97:06:69:6f:ba:80:fd:ea:69:fb:d1:
                    9b:42:02:04:d7:a6:54:63:46:2b:6e:b9:be:32:30:
                    16:a6:ce:6b:bd:ad:60:7e:8d:d4:dc:6c:f1:42:f4:
                    f5:69:c9:1c:cd:80:75:f0:ee:ad:36:ac:01:1b:16:
                    0b:08:fc:3e:a6:18:e2:80:2f:58:08:7a:5e:5e:d8:
                    64:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D4:6D:C2:F0:8F:F3:16:11:3E:6C:0A:B2:7A:05:CD:80:76:CC:B7
            X509v3 Authority Key Identifier:
                keyid:57:FB:B6:EB:2C:EC:9A:9B:7B:B8:1A:3B:16:0C:1A:AB:99:0E:48:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V_u26yzsmpt7uBo7Fgwaq5kOSCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:6e:54:7d:ad:5b:12:88:a9:68:bd:7b:0c:d6:41:35:06:ec:
         63:b6:5d:82:3e:8a:97:06:82:1b:b3:b0:63:42:0c:40:b1:dc:
         78:24:24:39:27:6f:27:ec:b8:3a:fc:63:52:35:be:9d:4f:69:
         58:b3:00:49:bf:a8:42:9f:d6:b6:6a:93:d3:2a:46:6b:4b:c9:
         6c:00:bb:db:e2:9b:32:19:77:25:7e:bc:7c:e8:6b:7d:65:e5:
         38:4a:5b:55:d6:ce:96:fe:b3:e0:fa:40:b9:41:97:d4:31:9a:
         3e:b3:a1:5e:2b:f0:2f:fb:da:1b:2c:bc:f6:dc:18:99:9b:f6:
         e8:ea:23:4a:0f:aa:6a:09:67:b9:3a:68:c8:76:6b:e7:44:7e:
         33:6e:54:f7:8b:37:5c:48:5a:f4:65:07:12:2e:f9:b6:07:71:
         a9:02:3a:48:d8:9c:7b:dd:1c:83:4b:cb:c7:49:c4:d3:7e:04:
         ca:ba:69:4c:23:91:ce:12:52:79:9f:dc:d9:7a:18:e2:01:93:
         12:64:e2:9a:bd:29:aa:90:1d:10:f0:b9:0b:39:4c:85:2e:e0:
         39:a2:09:c4:f3:1b:27:60:05:37:d3:f0:63:1b:e5:20:1f:f8:
         8c:eb:46:b7:15:9d:2d:e6:28:fa:18:07:01:2c:5b:4c:92:39:
         61:45:50:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:22:03 2025 by rpki-client