This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
File:                     1-VkY92suBLF1FE4jy-SKY8yaqo8.mft (raw, json)
Hash identifier:          4Dyl0ROUAuCxDToiIV07J+c3R/rQ3ruGIbDM3DpOGBw=
Subject key identifier:   EA:59:4F:12:A0:F4:F2:0B:25:71:4B:01:81:0B:3E:C1:67:9B:D4:9E
Authority key identifier: F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F
Certificate issuer:       /CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f
Certificate serial:       019AF352D665672ECAB78F268D7E5CC44D1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
Manifest number:          0B19
Signing time:             Sat 06 Dec 2025 11:01:23 +0000
Manifest this update:     Sat 06 Dec 2025 11:01:23 +0000
Manifest next update:     Sun 07 Dec 2025 11:01:23 +0000
Files and hashes:         1: 1-VkY92suBLF1FE4jy-SKY8yaqo8.crl (hash: 4ofVhKOSytPD9pfVvX2MYo2VWd9hw0s2JrbDDextwoQ=)
                          2: 7-j4zYeoEZb3GyJAS87cCTQvMeg.roa (hash: EAdEDlZP/7sT6Qp3HfzjAY/RfoPmZ+aNXdW6ptqfGUA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 11:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:52:d6:65:67:2e:ca:b7:8f:26:8d:7e:5c:c4:4d:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f
        Validity
            Not Before: Dec  6 11:01:23 2025 GMT
            Not After : Dec  7 11:01:23 2025 GMT
        Subject: CN=ea594f12a0f4f20b25714b01810b3ec1679bd49e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:dc:6b:73:64:b9:78:2d:e3:cd:d9:2f:aa:51:
                    af:58:c4:8b:ed:9b:78:72:15:a0:c1:f1:11:e2:17:
                    ba:0d:07:44:f1:6d:8f:df:fb:ae:aa:59:c2:12:ba:
                    ce:17:92:3f:b6:47:70:0a:c5:bf:00:60:26:7c:d4:
                    84:47:dc:d4:62:0d:9c:8e:56:50:db:13:3c:c7:bf:
                    85:d1:39:2c:bf:55:c8:56:1a:68:6e:c1:98:42:01:
                    4c:fb:ff:eb:74:94:c6:17:9b:33:aa:c7:73:f6:f4:
                    11:c4:3e:bb:e8:e8:4d:2c:4d:c1:22:ee:1b:1e:d1:
                    a7:50:9c:f1:c6:db:c9:1e:cc:f8:cb:59:b2:dc:24:
                    ad:71:26:53:45:c1:8a:be:f9:2e:93:98:54:e5:e0:
                    ef:c5:73:3b:bf:a4:5c:0f:9b:d4:a0:58:fd:9b:d7:
                    f1:27:32:47:47:94:52:9f:44:34:e4:4c:c5:dc:0f:
                    43:2a:c0:41:de:8e:ed:f8:98:78:8a:2a:37:20:60:
                    a4:7b:86:56:3f:dc:ab:9f:8a:cf:b3:60:da:bb:73:
                    53:63:c7:d0:2c:d3:1c:a7:90:2b:5a:ae:1c:e4:d6:
                    f2:41:7e:94:ae:f1:9d:fc:97:f9:cf:ef:8a:f0:f1:
                    8b:23:5d:6e:13:4b:f5:60:33:7f:59:9f:86:42:08:
                    62:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:59:4F:12:A0:F4:F2:0B:25:71:4B:01:81:0B:3E:C1:67:9B:D4:9E
            X509v3 Authority Key Identifier:
                keyid:F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:1b:a5:91:65:6d:b9:c5:76:a6:04:5d:c6:1e:5e:bd:5c:fa:
         6c:fc:9e:4f:e2:2a:06:40:e7:86:35:30:d7:4c:eb:af:f1:f8:
         52:04:32:dc:12:4d:b8:ae:41:08:61:71:e9:74:63:91:bb:00:
         64:3c:2b:01:7e:7c:b2:61:5f:26:58:07:66:d6:b9:35:3f:81:
         3b:8d:64:34:21:57:ae:95:38:14:9a:fe:3d:5a:63:9b:88:0e:
         20:fa:b4:4d:15:7b:0f:4f:2e:a6:d6:89:a4:d2:f9:da:6e:15:
         3a:03:46:04:42:cc:e6:34:c0:2a:6a:c0:49:10:95:3e:de:e8:
         b2:c0:ee:ff:ab:fa:bd:51:bb:35:91:c9:7c:1d:98:ef:23:e6:
         00:20:82:1c:6e:a3:aa:db:31:a9:71:0e:43:02:6e:9e:f7:02:
         e8:d8:56:9d:37:e9:32:b2:77:72:de:7b:70:06:5e:5e:1b:a3:
         5f:94:c6:a5:4b:d8:fb:8a:18:7e:b1:f0:47:5c:a7:b7:a6:b1:
         4a:3d:b8:e8:33:75:bc:06:f3:89:4d:c3:c6:1e:fe:a6:b5:56:
         e5:e7:77:3e:bb:8a:28:fc:d5:10:c4:a6:d5:26:00:f9:6b:25:
         56:c2:e8:d7:e2:0b:dc:20:49:7d:e5:9d:85:1b:13:c1:5f:67:
         0d:20:3c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:05:55 2025 by rpki-client