This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
File:                     VayAK4V_5CVyI6jlUIWlCzt3DsY.mft (raw, json)
Hash identifier:          NEmHeCWVq9lTK93ZQiA3hLzW3ARMX0cXvttuwKCS7iY=
Subject key identifier:   98:40:51:AC:9A:83:43:B0:C3:16:31:40:A5:6C:2C:81:91:9E:40:CE
Authority key identifier: 55:AC:80:2B:85:7F:E4:25:72:23:A8:E5:50:85:A5:0B:3B:77:0E:C6
Certificate issuer:       /CN=55ac802b857fe4257223a8e55085a50b3b770ec6
Certificate serial:       019AF509BE87BEBDF961839EEABC34817AA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
Manifest number:          1761
Signing time:             Sat 06 Dec 2025 19:00:47 +0000
Manifest this update:     Sat 06 Dec 2025 19:00:47 +0000
Manifest next update:     Sun 07 Dec 2025 19:00:47 +0000
Files and hashes:         1: 1INwuWU-BYXL6ew4aT-a1pXEbrQ.roa (hash: qzk46/IpEpqqazhTfDJLjV42Dwol04vFzCxQ5m0qkLc=)
                          2: VayAK4V_5CVyI6jlUIWlCzt3DsY.crl (hash: 9C87rTBdWrELnUqp4mewOWozp5M2UWkFv0xEV3ijdKw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 19:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:09:be:87:be:bd:f9:61:83:9e:ea:bc:34:81:7a:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55ac802b857fe4257223a8e55085a50b3b770ec6
        Validity
            Not Before: Dec  6 19:00:47 2025 GMT
            Not After : Dec  7 19:00:47 2025 GMT
        Subject: CN=984051ac9a8343b0c3163140a56c2c81919e40ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b7:56:9f:ed:93:c4:72:20:fe:5b:fe:0a:93:
                    e9:a9:88:ed:ef:2b:9c:09:fe:54:3c:5b:f0:80:92:
                    8f:fc:95:a5:32:98:dd:c9:5d:d2:cd:e5:47:42:31:
                    03:50:08:7e:47:8a:7b:5d:19:62:b7:d1:bb:f4:b4:
                    62:f6:89:36:6a:74:d1:8b:b0:19:ba:ec:6d:c8:ae:
                    fd:cf:1d:5f:a1:fe:6f:23:95:38:36:e3:c8:4f:dd:
                    9a:3c:d3:46:61:ad:e8:fc:2d:54:8d:5f:b8:6d:d1:
                    a3:27:16:c9:85:49:74:54:83:10:6f:33:de:3c:19:
                    64:a4:d0:32:f8:a9:84:47:6e:36:48:bc:a4:78:03:
                    77:ee:ff:87:d0:60:d0:8a:f7:7a:76:88:e3:10:b4:
                    0d:a8:0f:df:38:9b:d8:42:a0:de:3a:af:18:3c:16:
                    46:38:11:ec:08:36:c6:8c:dc:af:88:5e:c1:80:03:
                    0a:03:3d:fa:c2:e3:fe:50:c0:e2:61:db:9a:0e:1c:
                    c7:e8:87:09:51:14:c1:0e:7d:99:81:9d:57:29:d5:
                    cd:5b:bf:01:51:9c:bf:78:ae:2a:80:9a:c3:13:e4:
                    f5:60:ac:b5:cf:88:d9:99:f2:70:c8:68:5e:c1:37:
                    66:31:61:bb:98:b0:43:b8:7b:e3:ff:10:3f:cd:11:
                    d2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:40:51:AC:9A:83:43:B0:C3:16:31:40:A5:6C:2C:81:91:9E:40:CE
            X509v3 Authority Key Identifier:
                keyid:55:AC:80:2B:85:7F:E4:25:72:23:A8:E5:50:85:A5:0B:3B:77:0E:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:77:56:04:44:41:86:02:21:be:68:ba:14:01:29:6c:bd:8d:
         bd:3c:94:cd:aa:53:4f:7f:86:b1:47:0d:1f:92:a8:d9:05:21:
         ea:8c:fb:a4:7b:95:29:06:ec:f8:56:ad:58:9c:a4:af:1c:7a:
         fb:a1:d8:32:55:2a:e5:6b:a2:43:07:94:d3:20:68:ba:e9:62:
         de:e7:7f:8b:14:f9:82:6c:d6:07:4f:9b:e9:68:59:5d:52:f4:
         22:4a:df:d1:6e:d0:13:af:0f:9f:f8:f5:83:68:cb:fe:23:a3:
         a9:9f:aa:fd:40:a8:41:7b:18:21:6c:ec:af:3d:32:46:52:fd:
         8c:17:c9:18:50:42:24:e4:70:6c:17:d5:7a:63:f2:3b:37:78:
         8d:e1:b4:db:84:71:6a:ab:d8:cb:09:8a:42:78:8e:26:76:71:
         2c:ea:5d:7b:72:da:fb:e6:76:f6:51:a4:19:0f:1b:e7:09:eb:
         30:61:4d:be:25:fd:8b:7b:19:ef:f6:f9:9a:25:e4:40:ae:3e:
         ef:08:8e:be:ba:92:0d:85:9b:7c:7b:95:ec:66:27:c0:e2:c4:
         8e:71:d9:8c:1e:37:13:f3:87:2f:3e:0a:2a:14:49:f5:69:42:
         28:71:b3:8b:0e:63:a4:c2:d8:f8:70:0f:cc:55:d2:64:70:f8:
         a6:1f:d9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:56:31 2025 by rpki-client