This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.mft
File:                     VUg02oYAyWxf3pEnj1IObA0m__M.mft (raw, json)
Hash identifier:          JHcXRehYDMKWVoumsZjIeO4Wrk4foHrdo0hCLJDbF6Y=
Subject key identifier:   51:F7:36:00:CC:03:7A:38:E6:37:98:D7:1D:01:34:DD:69:C8:2B:0E
Authority key identifier: 55:48:34:DA:86:00:C9:6C:5F:DE:91:27:8F:52:0E:6C:0D:26:FF:F3
Certificate issuer:       /CN=554834da8600c96c5fde91278f520e6c0d26fff3
Certificate serial:       019AF1640A884093120B0F9BAD153908EF44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VUg02oYAyWxf3pEnj1IObA0m__M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.mft
Manifest number:          1763
Signing time:             Sat 06 Dec 2025 02:00:56 +0000
Manifest this update:     Sat 06 Dec 2025 02:00:56 +0000
Manifest next update:     Sun 07 Dec 2025 02:00:56 +0000
Files and hashes:         1: 5OnBt5fL5MuAuloyjNrpzjDMT3s.roa (hash: QZQ6W42PCK11onI84QRhAfS8bmyYPGgKmV0EzNnafkg=)
                          2: VUg02oYAyWxf3pEnj1IObA0m__M.crl (hash: OvFIt33QAhbDRQ5sBLe8iNLVUJJElDUlGuGZzAj8wcU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VUg02oYAyWxf3pEnj1IObA0m__M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:0a:88:40:93:12:0b:0f:9b:ad:15:39:08:ef:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=554834da8600c96c5fde91278f520e6c0d26fff3
        Validity
            Not Before: Dec  6 02:00:56 2025 GMT
            Not After : Dec  7 02:00:56 2025 GMT
        Subject: CN=51f73600cc037a38e63798d71d0134dd69c82b0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:63:7a:ee:72:13:9a:7b:01:54:28:3b:a0:f1:
                    75:bb:da:7a:77:3f:1e:7a:08:5e:02:e1:e6:f7:87:
                    3e:c3:42:3f:f5:cc:30:8c:4c:48:57:47:88:6d:70:
                    e6:58:04:b1:f8:a6:a5:ac:9c:96:12:da:c4:fe:dc:
                    d8:27:84:08:f8:de:33:0b:31:f5:6b:9c:38:60:b8:
                    1f:aa:ec:90:ff:9d:52:b1:31:eb:b0:f4:4f:6e:d6:
                    48:e5:a2:88:06:ae:ea:2e:fc:69:4b:4b:ae:db:ca:
                    24:6d:66:08:8a:f5:fa:17:82:d3:92:ba:1f:76:64:
                    e9:0c:41:4b:1c:44:94:67:af:3e:7a:60:b4:39:1a:
                    54:10:7a:4b:00:50:17:52:d5:5f:5e:33:6c:b9:a9:
                    3e:55:7d:4d:7b:49:2c:2f:28:a5:04:e8:7d:39:c4:
                    a5:4e:87:a8:df:dd:57:f4:39:9d:e3:49:c8:ff:62:
                    18:17:91:3b:34:d7:97:ce:e5:3e:35:e5:71:7b:0b:
                    90:a0:88:4d:01:6f:98:68:47:66:bd:bc:e1:40:6e:
                    4d:75:4e:a1:91:d3:d3:4a:74:c5:73:35:4e:f2:0a:
                    7d:87:f6:e7:d9:81:14:87:19:a6:62:c2:71:58:6b:
                    37:50:33:ef:03:c4:20:99:42:6a:e2:99:d5:71:29:
                    5e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F7:36:00:CC:03:7A:38:E6:37:98:D7:1D:01:34:DD:69:C8:2B:0E
            X509v3 Authority Key Identifier:
                keyid:55:48:34:DA:86:00:C9:6C:5F:DE:91:27:8F:52:0E:6C:0D:26:FF:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUg02oYAyWxf3pEnj1IObA0m__M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:d6:49:b5:17:e8:48:3c:4e:a4:5b:55:a9:78:43:8a:05:5c:
         e0:9a:7c:c2:b4:a9:e9:9a:9f:9e:93:1d:34:39:d8:24:10:21:
         e9:9d:bb:ad:c0:23:15:f8:cc:9f:8b:04:34:4c:17:de:be:cc:
         0d:db:66:ae:a5:b2:9c:3f:4e:6f:2c:f4:98:fe:7b:0e:c6:ff:
         29:54:71:d6:ad:92:d0:82:2f:57:ab:c1:ea:fd:ce:e4:a5:2d:
         fa:b9:c2:41:39:48:80:56:f8:19:60:01:0f:67:32:d0:9a:85:
         ec:6c:83:3b:e9:39:59:ba:35:0c:ed:54:fb:21:9d:c0:9c:7d:
         4b:9d:1c:a1:e6:c5:34:c7:ee:eb:6e:b7:f5:c4:90:b0:af:f1:
         3d:15:d3:b1:75:f6:74:70:8f:61:d0:9f:28:ab:7a:3a:8a:36:
         7b:10:78:b4:30:64:8f:2c:43:6e:23:bd:3d:4c:28:0b:5a:77:
         d3:eb:c6:c3:96:bd:1c:ad:fb:5f:aa:b7:2e:e3:a0:16:6f:21:
         9e:ca:8a:16:12:7a:1e:1d:51:de:b7:06:92:1e:03:28:e5:97:
         35:67:b8:90:75:fb:ea:c6:59:4d:a8:ce:98:71:d2:71:86:86:
         f1:08:37:57:b7:35:22:9f:ec:45:69:7c:47:b5:2c:28:48:70:
         2d:5a:be:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:22:20 2025 by rpki-client