This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft
File:                     VYB6PcvAJaz2l774HkA7SpbPu1E.mft (raw, json)
Hash identifier:          bMkWHcSElO2GEODxsGxdq6O8QmpB+DLMjNI2Rtq5cmw=
Subject key identifier:   64:F9:D8:28:E3:46:34:BD:29:F9:30:EF:CF:29:BC:EC:58:28:8E:7E
Authority key identifier: 55:80:7A:3D:CB:C0:25:AC:F6:97:BE:F8:1E:40:3B:4A:96:CF:BB:51
Certificate issuer:       /CN=55807a3dcbc025acf697bef81e403b4a96cfbb51
Certificate serial:       019B3757986484F4D2FD054D83491935FAF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft
Manifest number:          0686
Signing time:             Fri 19 Dec 2025 16:00:46 +0000
Manifest this update:     Fri 19 Dec 2025 16:00:46 +0000
Manifest next update:     Sat 20 Dec 2025 16:00:46 +0000
Files and hashes:         1: H7y3h5egzZRq_DcRMXxnHePpEqo.roa (hash: SsgPkP/OTMccNNIk11dqOnNXkC8Kebf+Srm+sRJHeWM=)
                          2: IMkZVlT8eK-xJK8Ea9SflvQkFCY.roa (hash: J6Aqupuzh1XHZTyQ8eqa5z/nXeBEsxyVOCdiPL4Sgt0=)
                          3: VYB6PcvAJaz2l774HkA7SpbPu1E.crl (hash: L0/jxsF2utVwbGFlb8HUlLNLkvhwooSkUiWfNKIHg/U=)
                          4: ixZP8lw2F7ZQ1n6z2ul-PVTfMYc.roa (hash: 8HnGm/A9kKO8qk6ptSile1LUya5t/LNEUOnSh7y0uik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:57:98:64:84:f4:d2:fd:05:4d:83:49:19:35:fa:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55807a3dcbc025acf697bef81e403b4a96cfbb51
        Validity
            Not Before: Dec 19 16:00:46 2025 GMT
            Not After : Dec 20 16:00:46 2025 GMT
        Subject: CN=64f9d828e34634bd29f930efcf29bcec58288e7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:d0:44:13:f2:98:46:67:21:b9:91:ab:ad:0f:
                    88:e4:cd:54:20:a7:a0:91:24:de:18:ae:67:28:e2:
                    dc:a9:a8:34:bc:fb:4d:50:e6:e3:60:48:fb:6c:72:
                    65:07:ab:e5:b5:ca:54:3c:db:e0:80:9c:72:3b:c4:
                    54:6d:be:40:d8:2a:ef:d3:7c:8e:91:47:87:02:40:
                    b9:ea:a0:72:0a:9d:cb:e2:1b:ae:7f:3e:5f:0d:43:
                    cf:57:87:b6:22:21:48:09:4c:dd:6d:63:7a:38:0c:
                    a9:a0:8e:e8:a7:96:a3:73:c3:6d:5e:af:dd:f5:53:
                    ee:8b:25:8e:bd:0e:62:12:d1:07:33:ed:63:ae:42:
                    52:bf:83:eb:e6:36:d5:23:85:f5:5a:c1:64:d3:c9:
                    13:65:07:02:66:27:0a:f9:f0:1d:b3:be:7a:83:30:
                    54:33:bd:3d:ad:1a:e8:ff:99:66:0f:23:dc:94:88:
                    76:5b:00:2f:e6:d9:34:75:8c:05:0a:25:50:98:63:
                    82:4b:c8:07:d1:36:8c:eb:49:3e:d3:5c:70:7f:df:
                    87:aa:2b:2d:0e:d8:bc:3f:36:95:19:92:b4:0d:08:
                    5b:de:8a:d4:1b:df:ce:a7:db:ec:c6:1e:80:7e:7f:
                    74:3b:cb:1d:dc:8c:27:27:90:74:9d:26:65:2e:ef:
                    16:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F9:D8:28:E3:46:34:BD:29:F9:30:EF:CF:29:BC:EC:58:28:8E:7E
            X509v3 Authority Key Identifier:
                keyid:55:80:7A:3D:CB:C0:25:AC:F6:97:BE:F8:1E:40:3B:4A:96:CF:BB:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:45:d0:72:21:9c:90:07:fb:8c:b0:f5:c3:5d:dd:97:7a:90:
         5f:82:fe:dd:3f:ab:9a:07:fa:9d:88:09:09:dc:92:91:63:a8:
         82:5c:3b:f3:5d:67:85:9d:0e:df:80:0d:12:94:b1:ed:5d:59:
         5f:f8:48:c6:b3:4c:83:fe:4b:68:f5:15:4d:0e:97:a9:de:c4:
         cc:c8:36:7f:f4:77:55:03:c4:f3:e5:59:56:c4:40:10:62:df:
         94:67:f1:7d:de:0e:43:20:f3:c5:64:27:ea:a1:d1:67:53:37:
         e3:c9:0e:b2:8f:f1:54:74:88:cb:93:42:67:fe:18:25:a5:a4:
         3e:3c:2c:e9:f0:1d:05:d5:40:bb:72:37:ea:78:15:50:41:31:
         bd:72:98:f5:2a:19:07:4e:b3:cf:f2:21:3e:d0:f4:ba:f7:4f:
         72:cd:ea:db:89:5a:e0:5b:d1:27:43:de:71:a7:8e:df:07:1c:
         d9:ac:a3:27:ad:7a:38:1a:0b:b6:8e:0a:26:2d:70:3c:e2:90:
         9c:f2:8d:25:3d:b2:01:ac:bf:38:a7:1c:23:a3:d1:d3:8c:a7:
         d9:4f:35:59:04:17:c0:40:79:db:ba:cb:f7:69:c7:1c:aa:07:
         8b:af:fc:2e:4b:64:ba:b7:d6:e7:76:f0:b1:f8:61:20:62:d3:
         69:bf:ad:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:28:29 2025 by rpki-client