This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
File:                     vVwIMjrCerZVOlpppzpY-AJCPWg.mft (raw, json)
Hash identifier:          QZ0F6ReTJ2+YbuTBrxqrxyMkqrURCcQ+chwAHwaZ+JM=
Subject key identifier:   A8:8F:6A:A9:8E:1E:E1:58:27:B7:24:66:39:C6:E7:90:6B:12:7C:C8
Authority key identifier: BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68
Certificate issuer:       /CN=bd5c08323ac27ab6553a5a69a73a58f802423d68
Certificate serial:       019AF3F731DB600D7A6B780B0D6C662ACCA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
Manifest number:          062F
Signing time:             Sat 06 Dec 2025 14:00:54 +0000
Manifest this update:     Sat 06 Dec 2025 14:00:54 +0000
Manifest next update:     Sun 07 Dec 2025 14:00:54 +0000
Files and hashes:         1: G_IYoZfZUxFUxoKj63LyULDLjWc.roa (hash: p32xiHa5RLyOZriAfbie5PUear7BZRAYgBWelDYnr3o=)
                          2: pBa3ZIYcjmcqVmvAHshpeA-YNy8.roa (hash: 4EmI7PijPu9Hj8achdjNLKa6nAug9jEr6AHyyJ1Ale0=)
                          3: vVwIMjrCerZVOlpppzpY-AJCPWg.crl (hash: 7bXE/yBKEj2+MDShIzw1DfnS5nu5wworvKi/TYlQJK8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:f7:31:db:60:0d:7a:6b:78:0b:0d:6c:66:2a:cc:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd5c08323ac27ab6553a5a69a73a58f802423d68
        Validity
            Not Before: Dec  6 14:00:54 2025 GMT
            Not After : Dec  7 14:00:54 2025 GMT
        Subject: CN=a88f6aa98e1ee15827b7246639c6e7906b127cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5d:3c:9f:b5:f3:0d:7d:43:66:b0:46:31:a2:
                    fb:8a:dd:6e:8e:d2:01:83:0a:ed:c9:73:9d:f2:8e:
                    67:ba:70:59:99:32:1e:fb:4f:5c:89:e8:2e:ec:33:
                    d4:f2:6d:57:09:de:15:1d:66:fc:cf:ca:57:ee:67:
                    fc:a6:b8:b7:d3:c2:8d:7c:20:08:ac:dc:23:61:91:
                    d1:8f:b4:7e:c6:c4:2c:76:02:22:8a:3f:09:02:ef:
                    de:f5:67:51:52:48:a1:1a:14:5a:e4:68:44:dd:2f:
                    28:c9:87:3f:41:5a:ae:7a:f6:05:9e:6f:4a:4f:27:
                    7e:24:74:ae:b6:8d:a5:f7:6e:b2:63:c0:20:91:5f:
                    3c:72:54:75:0d:c8:6f:90:61:9f:04:c5:df:b9:74:
                    bc:d7:90:c3:f2:17:49:e2:4b:91:2c:66:05:2e:ee:
                    d9:f8:17:91:77:98:96:6a:83:f8:6e:68:24:d7:4d:
                    a5:7e:2e:8e:5d:88:cb:6c:6b:e9:28:66:aa:53:e8:
                    48:7b:37:6a:e0:b1:22:b8:33:81:51:b2:b3:7d:ce:
                    ba:26:d2:6d:08:99:dd:2a:22:88:ab:72:50:63:a0:
                    35:59:d0:d4:ac:ed:99:2f:55:37:12:74:41:1b:25:
                    28:60:54:bb:fc:c7:31:79:bf:37:11:6d:7f:34:fd:
                    d8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:8F:6A:A9:8E:1E:E1:58:27:B7:24:66:39:C6:E7:90:6B:12:7C:C8
            X509v3 Authority Key Identifier:
                keyid:BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:4f:26:d2:0d:47:f1:30:b5:c0:1e:dd:a2:99:51:72:00:6b:
         e1:56:f5:b2:a8:1c:68:d2:57:b7:fb:68:90:54:8f:58:4b:b0:
         9a:66:fb:c9:78:ac:06:65:05:6f:95:b4:c9:91:21:16:64:40:
         48:b7:86:75:22:9b:90:a9:0f:69:d2:85:70:55:a4:93:bc:e3:
         1f:54:b3:d4:60:d5:e6:b5:55:ba:ee:dc:8f:b3:8f:0c:0b:9d:
         a1:cf:66:cf:28:c3:3d:68:5d:69:ec:ad:6f:26:35:3d:9b:48:
         20:42:ff:55:47:0e:ec:af:e2:b7:cf:4b:61:f3:fa:d1:25:75:
         03:56:c0:f8:aa:6e:56:09:98:9f:67:cd:9c:42:f4:5d:17:dc:
         d5:0d:fb:a7:76:3f:c8:d0:4c:27:4b:20:96:01:90:49:36:63:
         f3:48:2c:09:3c:0a:06:0b:49:60:df:80:2a:85:d0:b8:34:24:
         66:bf:f5:74:a3:0e:a6:4c:05:ba:f3:1a:25:6a:7f:cc:bf:21:
         ca:6f:06:5c:76:de:01:3f:79:a7:d2:02:6f:e8:15:05:12:a4:
         97:db:48:7f:d0:84:2b:be:e2:27:af:80:19:01:57:bf:e6:13:
         6f:13:03:02:8e:ba:8f:b6:c6:07:49:f6:f2:bf:67:a4:d0:e1:
         8f:4e:2f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:55:58 2025 by rpki-client