This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
File:                     VtZBSGvcmNSn3gkopC19aOYBXzA.mft (raw, json)
Hash identifier:          ubrbH9n6ZV5stJTOVthfmSO8i1DHRuAfB3/bpb/lFN8=
Subject key identifier:   27:2F:DE:71:B7:53:06:3D:EF:C2:79:A8:CF:C6:8E:61:4A:2A:04:78
Authority key identifier: 56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
Certificate issuer:       /CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Certificate serial:       019AF2E428AD70AFC6E8AF64CBEEB31F72CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
Manifest number:          04A8
Signing time:             Sat 06 Dec 2025 09:00:30 +0000
Manifest this update:     Sat 06 Dec 2025 09:00:30 +0000
Manifest next update:     Sun 07 Dec 2025 09:00:30 +0000
Files and hashes:         1: V1Wl9oxl7r8nt_pqx0M-wgiurRQ.roa (hash: sSJ8RxEhRyTMuAByoaK6L4W5k8CwLIPUs3kMD8DH4rM=)
                          2: VtZBSGvcmNSn3gkopC19aOYBXzA.crl (hash: BnPLrZlC9mW9rTSOzQWF6+5F+FRy6r+GHsT7++YZOEM=)
                          3: WUha7UrsdgndZN2i8LKGRI6xHz0.roa (hash: kPsS0TLTx3ZvH9JmthAMYgEGSgO6LHxlTkfSHRuTvZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 09:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:e4:28:ad:70:af:c6:e8:af:64:cb:ee:b3:1f:72:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
        Validity
            Not Before: Dec  6 09:00:30 2025 GMT
            Not After : Dec  7 09:00:30 2025 GMT
        Subject: CN=272fde71b753063defc279a8cfc68e614a2a0478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2b:5d:41:a3:e4:87:c5:36:21:ea:e1:ab:3c:
                    c5:11:f7:fc:ba:b0:e8:47:20:62:a9:fa:1a:3c:94:
                    5c:7c:90:97:af:d1:24:df:f8:9b:96:c4:b3:37:7c:
                    a1:76:73:7f:6e:7c:be:b9:ba:2d:94:4b:4b:d8:b6:
                    09:fa:2e:8c:25:8d:8b:ea:ff:f7:15:26:05:a5:6b:
                    21:13:58:f5:90:3a:b4:af:87:a8:a7:06:6e:d4:6d:
                    38:f1:99:76:93:78:3f:48:2f:fb:59:2d:52:aa:4c:
                    2f:09:89:ce:5f:55:10:f6:72:e4:3f:39:f2:95:df:
                    8b:c4:96:ad:cf:67:9c:e7:47:71:21:37:fd:d9:2c:
                    55:98:03:5b:e8:9c:8d:7e:82:84:48:62:dc:6c:37:
                    33:d6:e2:ad:20:9f:5c:c1:83:01:47:8e:b4:dd:81:
                    88:cc:ed:f5:84:ed:4b:0b:40:27:17:f6:4d:23:44:
                    e4:66:b0:c3:9c:88:46:18:5e:b5:c6:18:ea:c6:53:
                    fd:e6:d3:9d:b4:a0:c1:7d:9f:88:7a:54:c6:74:c4:
                    90:ea:7d:a4:db:59:4f:f3:c6:5d:4a:cd:1d:5e:71:
                    e8:7d:57:df:80:08:be:7c:59:30:91:8f:56:0d:21:
                    5f:b4:c5:51:07:eb:d0:04:90:2d:63:81:24:7f:38:
                    53:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:2F:DE:71:B7:53:06:3D:EF:C2:79:A8:CF:C6:8E:61:4A:2A:04:78
            X509v3 Authority Key Identifier:
                keyid:56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:94:ff:96:a3:5f:ce:cb:e0:1b:17:6c:21:69:0e:df:8a:8a:
         7d:cf:e9:b2:3d:28:f9:a8:4b:07:29:a8:7d:5d:d3:e5:ea:51:
         d9:71:b4:16:5e:b8:79:0a:53:cf:38:f8:82:e3:c1:ba:ce:06:
         81:fa:b7:72:68:8a:2e:2c:94:2b:16:b2:21:b9:11:84:06:1e:
         84:78:d0:9e:3b:6c:ab:7c:30:7b:ad:e4:b6:53:8b:68:33:b0:
         be:b3:54:ac:b9:4b:34:bb:57:da:67:c3:6c:64:98:4e:68:df:
         ca:ef:1a:9d:7a:85:f6:72:f7:a7:a2:2c:49:57:5d:63:46:6b:
         b6:c9:15:e4:b9:35:45:1f:a4:6a:cc:db:c2:30:9e:f7:c0:4d:
         de:fb:b9:f9:b1:05:5f:9d:ce:e4:2f:d7:3b:3a:2b:eb:71:74:
         87:16:30:8b:bc:d5:9f:00:89:9f:6b:e8:34:9c:c3:66:f5:e6:
         15:b1:aa:01:2b:81:97:35:49:50:56:26:06:3a:9d:30:e8:7d:
         d4:51:05:57:b4:ad:8d:ae:ef:af:9c:9a:92:f0:84:25:3a:ad:
         c1:78:47:ec:bb:28:94:07:81:1b:84:15:71:0a:55:e6:63:d4:
         29:f8:89:88:29:ea:b3:de:33:30:41:d9:8a:95:eb:0f:ec:ce:
         a9:61:5d:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZry5CitcK/G6K9ky+6zH3LNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ZDY0MTQ4NmJkYzk4ZDRhN2RlMDkyOGE0MmQ3ZDY4ZTYw
MTVmMzAwHhcNMjUxMjA2MDkwMDMwWhcNMjUxMjA3MDkwMDMwWjAzMTEwLwYDVQQD
EygyNzJmZGU3MWI3NTMwNjNkZWZjMjc5YThjZmM2OGU2MTRhMmEwNDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1itdQaPkh8U2IerhqzzFEff8urDo
RyBiqfoaPJRcfJCXr9Ek3/iblsSzN3yhdnN/bny+ubotlEtL2LYJ+i6MJY2L6v/3
FSYFpWshE1j1kDq0r4eopwZu1G048Zl2k3g/SC/7WS1SqkwvCYnOX1UQ9nLkPzny
ld+LxJatz2ec50dxITf92SxVmANb6JyNfoKESGLcbDcz1uKtIJ9cwYMBR4603YGI
zO31hO1LC0AnF/ZNI0TkZrDDnIhGGF61xhjqxlP95tOdtKDBfZ+IelTGdMSQ6n2k
21lP88ZdSs0dXnHofVffgAi+fFkwkY9WDSFftMVRB+vQBJAtY4EkfzhTwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCcv3nG3UwY978J5qM/GjmFKKgR4MB8GA1UdIwQY
MBaAFFbWQUhr3JjUp94JKKQtfWjmAV8wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnRaQlNHdmNtTlNuM2drb3BDMTlhT1lCWHpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iNjUxMjYtMzFjYi00YWU2LWJlY2Et
ZTNlMDRiZDRmMjQyLzEvVnRaQlNHdmNtTlNuM2drb3BDMTlhT1lCWHpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9iNjUxMjYtMzFjYi00YWU2LWJlY2EtZTNlMDRiZDRmMjQy
LzEvVnRaQlNHdmNtTlNuM2drb3BDMTlhT1lCWHpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJT/lqNf
zsvgGxdsIWkO34qKfc/psj0o+ahLBymofV3T5epR2XG0Fl64eQpTzzj4guPBus4G
gfq3cmiKLiyUKxayIbkRhAYehHjQnjtsq3wwe63ktlOLaDOwvrNUrLlLNLtX2mfD
bGSYTmjfyu8anXqF9nL3p6IsSVddY0ZrtskV5Lk1RR+kaszbwjCe98BN3vu5+bEF
X53O5C/XOzor63F0hxYwi7zVnwCJn2voNJzDZvXmFbGqASuBlzVJUFYmBjqdMOh9
1FEFV7Stja7vr5yakvCEJTqtwXhH7LsolAeBG4QVcQpV5mPUKfiJiCnqs94zMEHZ
ipXrD+zOqWFdhA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:12:48 2025 by rpki-client