This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.mft
File:                     VoF64vtRPl4A1hv9MpOuTve_Im4.mft (raw, json)
Hash identifier:          dCgGUQuqWQqIokhu34vwx247m0LCVS6IQ7JkLRdyvLM=
Subject key identifier:   EB:86:17:DA:C8:7A:06:3A:64:22:D6:6C:4C:1C:52:8A:D7:F9:59:18
Authority key identifier: 56:81:7A:E2:FB:51:3E:5E:00:D6:1B:FD:32:93:AE:4E:F7:BF:22:6E
Certificate issuer:       /CN=56817ae2fb513e5e00d61bfd3293ae4ef7bf226e
Certificate serial:       019B5A51DA040FE34FA4D178F1C255837E09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VoF64vtRPl4A1hv9MpOuTve_Im4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.mft
Manifest number:          01A4
Signing time:             Fri 26 Dec 2025 11:01:11 +0000
Manifest this update:     Fri 26 Dec 2025 11:01:11 +0000
Manifest next update:     Sat 27 Dec 2025 11:01:11 +0000
Files and hashes:         1: VoF64vtRPl4A1hv9MpOuTve_Im4.crl (hash: Ve5O+iVFQC5u7TKE/RRQs2IlA1+zp/r5j7AgsqUGD78=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VoF64vtRPl4A1hv9MpOuTve_Im4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5a:51:da:04:0f:e3:4f:a4:d1:78:f1:c2:55:83:7e:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56817ae2fb513e5e00d61bfd3293ae4ef7bf226e
        Validity
            Not Before: Dec 26 11:01:11 2025 GMT
            Not After : Dec 27 11:01:11 2025 GMT
        Subject: CN=eb8617dac87a063a6422d66c4c1c528ad7f95918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:45:db:cc:02:1b:e8:40:b6:ff:03:2c:44:8f:
                    aa:e2:84:c0:bc:d6:d8:eb:52:06:a7:ed:55:08:16:
                    b2:43:0c:11:07:85:75:2b:83:eb:7b:71:fc:76:05:
                    2c:fd:00:a2:5d:ac:b7:57:43:dc:8b:65:bc:d4:fa:
                    cc:81:35:6b:16:60:ad:7a:47:e9:11:2d:89:9b:a6:
                    a0:02:9c:9c:81:ab:a0:0c:8c:0e:73:3a:12:13:5a:
                    e4:9b:dd:40:38:e6:0b:5a:19:45:9e:9d:49:7e:4b:
                    8f:e5:06:4b:c7:9b:49:ec:75:82:49:4c:65:5f:3a:
                    4a:e5:ac:78:9f:48:17:4b:0a:b7:39:c6:fe:86:c5:
                    2f:7e:20:e8:93:87:31:1c:ab:07:e9:26:a9:0e:73:
                    03:ac:33:7e:0b:2b:66:9d:8e:bd:c1:f2:38:17:91:
                    c7:cc:c1:8b:32:a9:78:75:dd:82:e1:5c:43:a9:60:
                    05:e4:09:8e:79:fd:71:58:11:ab:34:08:8a:d8:cb:
                    3d:ac:c8:2d:61:a6:5a:51:e8:65:dc:35:fc:93:45:
                    0f:ab:0b:b4:e4:9f:57:c8:5b:96:a7:c2:99:24:d8:
                    ae:ca:26:56:f2:6c:7c:5a:a4:fe:47:26:07:70:2f:
                    63:3e:43:12:56:0e:66:5a:db:db:3e:10:ca:41:6c:
                    93:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:86:17:DA:C8:7A:06:3A:64:22:D6:6C:4C:1C:52:8A:D7:F9:59:18
            X509v3 Authority Key Identifier:
                keyid:56:81:7A:E2:FB:51:3E:5E:00:D6:1B:FD:32:93:AE:4E:F7:BF:22:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoF64vtRPl4A1hv9MpOuTve_Im4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:0b:61:6e:fc:58:c2:32:a4:c3:f9:ca:7b:4c:44:c4:77:b5:
         52:3a:28:15:4d:de:77:74:e7:68:22:0c:e5:d2:9a:07:6d:84:
         e6:53:bc:b6:3b:1f:6a:62:96:41:92:92:23:9a:29:2c:c0:0c:
         ad:72:8e:77:80:52:f8:5f:96:52:31:3d:1c:f1:91:c8:fd:9e:
         d0:bf:d0:28:06:c0:67:b6:22:24:ea:41:5a:5f:b6:9c:97:6b:
         75:3b:66:ee:2c:ea:dd:fb:2b:0b:2a:90:40:85:02:7d:fe:d5:
         1d:a5:3c:44:94:79:f5:6a:c4:d6:9b:69:63:e3:39:44:4b:7a:
         4d:da:b9:a4:66:44:7b:82:fe:f6:eb:1f:97:ad:35:2f:16:c7:
         dd:56:79:0d:48:c7:54:a0:47:9e:38:d6:0b:18:0d:6f:53:8d:
         99:f0:5f:9c:39:1c:f5:4e:76:09:98:56:4a:21:08:8f:26:6d:
         4e:40:ba:8f:ed:a4:19:a0:0d:3a:0c:56:d9:45:da:00:3f:01:
         cd:ca:98:2c:6e:19:26:3e:b1:21:3e:4b:eb:b3:67:9b:cd:e2:
         1b:44:52:21:f9:00:eb:b4:95:77:c7:56:70:b8:04:cf:f9:2f:
         0b:bd:62:e0:9e:49:3e:df:a0:a9:22:4e:d1:3b:13:8e:79:d6:
         65:df:b1:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtaUdoED+NPpNF48cJVg34JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ODE3YWUyZmI1MTNlNWUwMGQ2MWJmZDMyOTNhZTRlZjdi
ZjIyNmUwHhcNMjUxMjI2MTEwMTExWhcNMjUxMjI3MTEwMTExWjAzMTEwLwYDVQQD
EyhlYjg2MTdkYWM4N2EwNjNhNjQyMmQ2NmM0YzFjNTI4YWQ3Zjk1OTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kXbzAIb6EC2/wMsRI+q4oTAvNbY
61IGp+1VCBayQwwRB4V1K4Pre3H8dgUs/QCiXay3V0Pci2W81PrMgTVrFmCtekfp
ES2Jm6agApycgaugDIwOczoSE1rkm91AOOYLWhlFnp1JfkuP5QZLx5tJ7HWCSUxl
XzpK5ax4n0gXSwq3Ocb+hsUvfiDok4cxHKsH6SapDnMDrDN+CytmnY69wfI4F5HH
zMGLMql4dd2C4VxDqWAF5AmOef1xWBGrNAiK2Ms9rMgtYaZaUehl3DX8k0UPqwu0
5J9XyFuWp8KZJNiuyiZW8mx8WqT+RyYHcC9jPkMSVg5mWtvbPhDKQWyTFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOuGF9rIegY6ZCLWbEwcUorX+VkYMB8GA1UdIwQY
MBaAFFaBeuL7UT5eANYb/TKTrk73vyJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm9GNjR2dFJQbDRBMWh2OU1wT3VUdmVfSW00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84YTZlY2ItMDkyOC00NWE2LWI5MGYt
Mzg2MmI3MjQwODk1LzEvVm9GNjR2dFJQbDRBMWh2OU1wT3VUdmVfSW00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi84YTZlY2ItMDkyOC00NWE2LWI5MGYtMzg2MmI3MjQwODk1
LzEvVm9GNjR2dFJQbDRBMWh2OU1wT3VUdmVfSW00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACwthbvxY
wjKkw/nKe0xExHe1UjooFU3ed3TnaCIM5dKaB22E5lO8tjsfamKWQZKSI5opLMAM
rXKOd4BS+F+WUjE9HPGRyP2e0L/QKAbAZ7YiJOpBWl+2nJdrdTtm7izq3fsrCyqQ
QIUCff7VHaU8RJR59WrE1ptpY+M5REt6Tdq5pGZEe4L+9usfl601LxbH3VZ5DUjH
VKBHnjjWCxgNb1ONmfBfnDkc9U52CZhWSiEIjyZtTkC6j+2kGaANOgxW2UXaAD8B
zcqYLG4ZJj6xIT5L67Nnm83iG0RSIfkA67SVd8dWcLgEz/kvC71i4J5JPt+gqSJO
0TsTjnnWZd+xOg==
-----END CERTIFICATE-----
Generated at Fri Dec 26 14:18:26 2025 by rpki-client