This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
File:                     VDxcNKYv--2PwPDsAbQsDFDufvc.mft (raw, json)
Hash identifier:          bymbiinR6zquBlcodVQqAKwCWJPToCcrWXviW5AhtvQ=
Subject key identifier:   6C:A5:CA:08:79:C1:57:CD:03:C4:CA:E0:17:60:34:2F:13:3B:4E:02
Authority key identifier: 54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
Certificate issuer:       /CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Certificate serial:       019AF1D20E6D0CB91FCAF1326CA7F7A71B0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
Manifest number:          097B
Signing time:             Sat 06 Dec 2025 04:01:06 +0000
Manifest this update:     Sat 06 Dec 2025 04:01:06 +0000
Manifest next update:     Sun 07 Dec 2025 04:01:06 +0000
Files and hashes:         1: 3OLIMizXOJwfjWRWiEBjpUKJwIU.roa (hash: QMFZT0i3XGS+MsKzCsZOmKPi7vfVCyuG5tTyqhdATNA=)
                          2: NPlJ_KhWtoEU85P6_bEw-JrQECw.roa (hash: +WKUN/INEKKaNIE4RDQgpQc6rCP9GRAzlztHhcY8Wc4=)
                          3: PVF7wnGzCTMj-DMi0Yh7tJoQV50.roa (hash: ifNzodbn64RIKDxyUKgvxQYTPT/TGzAFj9xlomWoMYM=)
                          4: VDxcNKYv--2PwPDsAbQsDFDufvc.crl (hash: WOQpUUV1ccaMJL1kIFeKvQXuGfNpNmW/4Vd58oY9fXo=)
                          5: aP1xgGw8H7jCOI-VSZ01nj8-4CM.roa (hash: tc+u6WTs4frUnC9+3IttTv0/u7Rmmf/DRJCt109dDEg=)
                          6: egWiNnqY9Vl0Wup08EirG2JX11M.roa (hash: cdwWkaZBw0jnB5ddN/k9GlCFftOqTidrPnaELenZvX8=)
                          7: lSBrUQBEKuTSY6AdNT1ZVvcTRx8.roa (hash: G+WOXA6z8Ino3VGaelG9h3UW5mZBPuWh+ANhGCA7MB0=)
                          8: tRNUe3Kk3eWia8VX_dKXZILdgjE.roa (hash: JStwVDR6ukqM/F9+GpHeAO0i8HlEBKkQBbaoGUyV6eY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d2:0e:6d:0c:b9:1f:ca:f1:32:6c:a7:f7:a7:1b:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
        Validity
            Not Before: Dec  6 04:01:06 2025 GMT
            Not After : Dec  7 04:01:06 2025 GMT
        Subject: CN=6ca5ca0879c157cd03c4cae01760342f133b4e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f0:34:dd:a2:ea:2b:a2:5b:92:62:58:8c:67:
                    3b:2e:22:64:b7:50:df:55:77:9d:a4:9a:80:de:ec:
                    96:2a:e4:6d:6b:e5:19:4c:97:c5:62:31:e0:32:d9:
                    09:4e:4c:4f:9e:2a:29:06:4d:38:43:43:fd:fe:75:
                    f8:ca:ea:3b:4e:a0:9e:28:c6:b2:13:77:59:84:82:
                    1e:a8:b7:ad:3d:0a:fe:e6:20:00:f5:56:bc:6c:9c:
                    4b:77:f6:c0:fb:f9:2b:f0:75:5f:29:25:e9:65:6f:
                    4e:5c:6f:94:96:a2:62:4d:9b:de:f6:60:41:3d:44:
                    52:55:4d:e7:68:22:6d:cb:1b:2c:f7:d9:1c:53:bf:
                    49:80:61:f9:c1:11:4f:60:ab:9e:04:27:49:04:ed:
                    d1:cf:7a:52:da:dc:7f:b8:fa:4e:1f:96:c9:f5:a3:
                    e2:5d:61:79:a1:58:00:67:42:19:c3:55:6e:e9:3d:
                    bf:9c:e0:89:63:1b:7e:d9:8d:e7:8b:0d:b3:31:0c:
                    fc:a4:ed:be:f5:b0:d7:00:68:fa:2f:a3:52:14:ee:
                    d0:13:63:3e:33:94:9f:65:a4:f8:db:d5:9f:d6:be:
                    17:4a:f4:8f:5a:a4:57:08:d9:02:24:72:71:1c:d0:
                    59:d1:b1:b4:ae:38:e9:21:3c:fa:90:51:de:8f:de:
                    31:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A5:CA:08:79:C1:57:CD:03:C4:CA:E0:17:60:34:2F:13:3B:4E:02
            X509v3 Authority Key Identifier:
                keyid:54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:d1:6f:db:ce:c5:23:4c:9f:cf:0e:1f:58:66:00:ea:a0:44:
         a6:b6:99:8d:62:b7:13:0f:62:1f:b9:e2:75:87:a0:50:81:39:
         5c:1e:c8:99:57:03:6a:77:7f:ff:44:ab:a1:db:61:ff:d1:75:
         13:6d:49:21:89:37:e0:12:44:cf:91:9c:e6:a3:20:04:b4:b4:
         f7:d4:9d:9e:b8:c8:da:22:ff:71:9d:b5:86:cf:4a:73:98:c2:
         fc:ef:3f:3d:0d:79:69:2c:cf:40:01:57:6f:38:61:42:72:f3:
         cc:44:c7:79:54:d1:72:82:2d:c3:26:35:e6:a8:b8:da:65:94:
         4c:dc:cd:75:a4:d7:bf:f0:84:d0:8a:cb:f8:83:16:0f:1e:7a:
         5a:0e:91:89:e4:1f:0b:da:02:18:1e:85:8d:ac:60:82:7f:bc:
         26:c2:c9:0b:15:75:c6:08:75:db:f7:c4:15:79:e0:8a:c8:22:
         cd:c4:14:fc:dd:0c:a1:14:38:ba:94:09:d8:73:2d:d6:6e:46:
         73:3b:3d:01:c8:ba:f2:f8:ad:14:d4:19:43:dd:07:01:d4:a0:
         fc:10:12:01:09:77:76:c5:7d:8d:d1:1b:9e:60:3e:f7:d1:88:
         6f:b8:54:0a:4d:0c:30:7d:53:93:8a:b4:6f:cc:7e:55:37:47:
         22:c8:29:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrx0g5tDLkfyvEybKf3pxsPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0M2M1YzM0YTYyZmZiZWQ4ZmMwZjBlYzAxYjQyYzBjNTBl
ZTdlZjcwHhcNMjUxMjA2MDQwMTA2WhcNMjUxMjA3MDQwMTA2WjAzMTEwLwYDVQQD
Eyg2Y2E1Y2EwODc5YzE1N2NkMDNjNGNhZTAxNzYwMzQyZjEzM2I0ZTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvA03aLqK6JbkmJYjGc7LiJkt1Df
VXedpJqA3uyWKuRta+UZTJfFYjHgMtkJTkxPniopBk04Q0P9/nX4yuo7TqCeKMay
E3dZhIIeqLetPQr+5iAA9Va8bJxLd/bA+/kr8HVfKSXpZW9OXG+UlqJiTZve9mBB
PURSVU3naCJtyxss99kcU79JgGH5wRFPYKueBCdJBO3Rz3pS2tx/uPpOH5bJ9aPi
XWF5oVgAZ0IZw1Vu6T2/nOCJYxt+2Y3niw2zMQz8pO2+9bDXAGj6L6NSFO7QE2M+
M5SfZaT429Wf1r4XSvSPWqRXCNkCJHJxHNBZ0bG0rjjpITz6kFHej94x5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGylygh5wVfNA8TK4BdgNC8TO04CMB8GA1UdIwQY
MBaAFFQ8XDSmL/vtj8Dw7AG0LAxQ7n73MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkR4Y05LWXYtLTJQd1BEc0FiUXNERkR1ZnZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8xNmUwMjItNGRhOC00Njg0LTg1ZTYt
ZjRmMWY5M2UwNDY3LzEvVkR4Y05LWXYtLTJQd1BEc0FiUXNERkR1ZnZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS8xNmUwMjItNGRhOC00Njg0LTg1ZTYtZjRmMWY5M2UwNDY3
LzEvVkR4Y05LWXYtLTJQd1BEc0FiUXNERkR1ZnZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWdFv287F
I0yfzw4fWGYA6qBEpraZjWK3Ew9iH7nidYegUIE5XB7ImVcDand//0Srodth/9F1
E21JIYk34BJEz5Gc5qMgBLS099SdnrjI2iL/cZ21hs9Kc5jC/O8/PQ15aSzPQAFX
bzhhQnLzzETHeVTRcoItwyY15qi42mWUTNzNdaTXv/CE0IrL+IMWDx56Wg6RieQf
C9oCGB6Fjaxggn+8JsLJCxV1xgh12/fEFXngisgizcQU/N0MoRQ4upQJ2HMt1m5G
czs9Aci68vitFNQZQ90HAdSg/BASAQl3dsV9jdEbnmA+99GIb7hUCk0MMH1Tk4q0
b8x+VTdHIsgpYA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:22:28 2025 by rpki-client