This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
File:                     vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft (raw, json)
Hash identifier:          9zCeymKZxC+LqJg/Oq1ZXh5T3Xd9vApSm0gyATQB71Y=
Subject key identifier:   64:B0:89:26:82:6E:5F:EE:AF:F5:27:86:1E:51:A7:1B:B5:35:BE:82
Authority key identifier: BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
Certificate issuer:       /CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Certificate serial:       019AF4D2B5017295DFC00C75AEE37E03F0C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
Manifest number:          0B70
Signing time:             Sat 06 Dec 2025 18:00:40 +0000
Manifest this update:     Sat 06 Dec 2025 18:00:40 +0000
Manifest next update:     Sun 07 Dec 2025 18:00:40 +0000
Files and hashes:         1: 4zZX5zJWUsfZ5zmG6bPbMr0lvbs.roa (hash: Qk/9tkVuHYR7bI8BB1K5v6WoVgCSt0kT7wqGusdLxvQ=)
                          2: b1CA5r7KforuhTMwFyQEdQXtFg0.roa (hash: /sCtJVvcy9/zMZdU963H1KU1tkn/lGiUH4SIeeLoE9A=)
                          3: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl (hash: oxkPz8KTUFKJuP64PFEfD/zgV/UovS79cYfoFsyuY/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:d2:b5:01:72:95:df:c0:0c:75:ae:e3:7e:03:f0:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
        Validity
            Not Before: Dec  6 18:00:40 2025 GMT
            Not After : Dec  7 18:00:40 2025 GMT
        Subject: CN=64b08926826e5feeaff527861e51a71bb535be82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3d:36:67:08:a1:63:53:95:5b:73:10:6a:73:
                    0e:70:29:97:07:3d:ea:36:92:7c:17:27:c3:b0:4e:
                    82:48:e9:c7:da:d9:bb:17:56:7a:4b:d3:93:33:f3:
                    06:de:6f:2d:c0:37:6a:04:5e:ab:64:06:b6:b5:c1:
                    39:64:54:d8:9a:cc:19:c6:59:fa:2a:f2:1e:be:01:
                    2a:f9:60:36:1b:f3:50:c0:c5:91:80:22:97:b1:e3:
                    84:e1:50:09:3b:d7:6e:88:fa:73:51:e9:1d:1b:4a:
                    ba:8f:6e:28:5c:98:83:d1:7b:dc:f9:5a:42:38:83:
                    b5:c5:e8:74:db:21:99:08:ab:b3:b0:d0:a0:31:80:
                    a7:89:4f:5c:9c:32:19:ad:94:81:01:23:17:a0:63:
                    68:54:6e:17:31:1a:e5:b2:7d:5f:86:79:3a:bb:a7:
                    0e:66:80:d4:bf:6c:4e:2a:0e:eb:8e:1f:01:92:e9:
                    9c:2a:d8:d8:7f:8d:e5:cf:a8:44:ec:ae:07:21:e9:
                    06:90:d9:9d:a0:56:d9:ef:61:c1:b1:79:e3:9b:3c:
                    92:8d:96:c7:6d:3e:d4:31:95:13:38:6d:26:e2:90:
                    e7:78:c4:e3:ff:98:b6:12:fc:07:5a:00:70:c6:fa:
                    ed:9f:a3:70:51:b8:4c:81:2f:5c:6f:00:c8:16:b6:
                    1d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B0:89:26:82:6E:5F:EE:AF:F5:27:86:1E:51:A7:1B:B5:35:BE:82
            X509v3 Authority Key Identifier:
                keyid:BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:2a:8c:5e:30:87:86:1d:92:b2:eb:34:aa:54:17:42:6d:40:
         7a:e9:3b:f7:e7:4f:63:c7:a8:ad:dd:f8:a4:8f:4c:fc:32:86:
         42:51:26:92:c4:a2:f4:2c:df:60:07:1e:10:3c:5f:ed:8c:f9:
         81:ee:10:6f:c7:ff:ff:e4:87:46:f5:b7:d0:f4:1c:2e:4a:26:
         38:dc:2c:38:b4:11:59:20:59:16:2e:8a:a1:10:6c:61:e4:e9:
         40:c8:d7:06:6e:40:27:26:79:1b:25:6c:1e:d9:78:68:ff:2a:
         c8:37:b2:1f:ae:29:da:e0:60:75:56:07:53:e2:41:88:9f:db:
         02:7f:d7:b9:8e:09:9b:91:e5:c8:17:f0:2f:04:b1:ff:db:ea:
         a0:80:a4:a9:22:c1:1a:05:1d:b4:23:b2:40:56:78:31:be:bb:
         ad:72:42:c2:6f:f9:8c:22:5f:6d:e4:2f:73:80:bf:47:90:ed:
         1f:18:b3:68:20:83:3d:4b:7e:2b:8d:47:1d:b6:64:b7:81:10:
         e7:6e:91:69:a3:50:a2:68:60:02:f4:98:9b:71:60:07:dd:c9:
         da:6d:52:6b:b5:92:c9:9e:05:09:4a:08:86:78:f2:dc:06:6b:
         a2:ad:c8:af:37:c2:d8:42:79:ba:7d:6e:a1:1b:82:6f:c7:1c:
         1a:81:12:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:38:26 2025 by rpki-client