This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
File:                     Vr1_at_sbUTRbT4_eY4_K9INo_8.mft (raw, json)
Hash identifier:          2mz/cnOoICP4ufDAYdVNJOKbOHanngfIEwNaQMzwe8A=
Subject key identifier:   97:6C:DE:A4:7C:4D:39:5D:0E:26:1A:CB:AB:EC:A5:8E:C6:E5:84:9E
Authority key identifier: 56:BD:7F:6A:DF:EC:6D:44:D1:6D:3E:3F:79:8E:3F:2B:D2:0D:A3:FF
Certificate issuer:       /CN=56bd7f6adfec6d44d16d3e3f798e3f2bd20da3ff
Certificate serial:       019AEF76008527D79D846B5447192D794A9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
Manifest number:          1760
Signing time:             Fri 05 Dec 2025 17:01:19 +0000
Manifest this update:     Fri 05 Dec 2025 17:01:19 +0000
Manifest next update:     Sat 06 Dec 2025 17:01:19 +0000
Files and hashes:         1: 1-uUqLBRi2l8Qom0YXKGFyiE_52s.roa (hash: 6O0uoZsxwqn/ZRSGGUR/YkC5bDCXgCwLU9wV4dkd6Ng=)
                          2: Vr1_at_sbUTRbT4_eY4_K9INo_8.crl (hash: JjC/Xp3OkxsUR4g8V6JgLr3Ambi5Y/DUSKE9QCTv1Hs=)
                          3: Yhyd6_3--40XbUHLiYyj2qr-Yoc.roa (hash: 1oOXBnBBaEwXQlaBh7+MdVkKyYQvik1W61cIDXTDdBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 11:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ef:76:00:85:27:d7:9d:84:6b:54:47:19:2d:79:4a:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56bd7f6adfec6d44d16d3e3f798e3f2bd20da3ff
        Validity
            Not Before: Dec  5 17:01:19 2025 GMT
            Not After : Dec  6 17:01:19 2025 GMT
        Subject: CN=976cdea47c4d395d0e261acbabeca58ec6e5849e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:50:69:a5:3a:fb:e2:fb:48:10:e4:c2:a4:f4:
                    7b:e0:97:34:00:de:91:b0:72:b1:ad:8e:11:e7:ff:
                    97:da:b8:ec:89:65:15:89:e6:59:4d:6f:32:d3:1f:
                    cc:a0:16:bd:9b:c2:0b:2d:82:b0:72:84:23:0f:0e:
                    4f:16:59:08:7d:1a:cf:c2:0a:6b:ea:ab:5b:b1:a0:
                    0c:e7:8f:b6:04:95:33:b9:00:88:e8:66:fd:93:0d:
                    3f:a6:24:8e:79:bc:8a:6c:93:63:74:df:ce:ec:f8:
                    c4:ca:a0:cd:3d:6f:77:70:f1:6b:ce:1a:1b:0b:14:
                    e0:8b:f6:32:f2:b2:c8:20:ef:fa:7c:76:28:c1:77:
                    eb:33:3b:73:d9:f7:98:2b:ca:7e:92:5f:6a:55:29:
                    f3:40:57:44:19:3b:a0:e1:be:c0:41:aa:00:f5:40:
                    fc:45:f5:2b:e0:be:92:ea:a8:bb:58:a1:da:5f:f4:
                    25:ef:24:bc:4c:a8:ee:43:fe:56:71:a4:ec:71:97:
                    b7:b9:12:a1:d9:80:e0:ea:c2:75:e9:d5:90:92:40:
                    42:b2:14:2a:d7:38:44:e0:80:18:a9:1e:9a:46:f5:
                    47:92:bd:70:0e:75:f9:42:fd:65:1a:76:f3:4d:01:
                    b5:21:22:f2:24:63:9a:54:28:91:91:95:24:33:25:
                    6c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:6C:DE:A4:7C:4D:39:5D:0E:26:1A:CB:AB:EC:A5:8E:C6:E5:84:9E
            X509v3 Authority Key Identifier:
                keyid:56:BD:7F:6A:DF:EC:6D:44:D1:6D:3E:3F:79:8E:3F:2B:D2:0D:A3:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:09:c2:dc:b8:e1:d3:eb:ec:7a:c0:52:0e:29:fc:ff:db:89:
         a5:c2:77:3e:2e:b6:1d:d3:6c:e2:ff:dd:95:91:e7:b4:b6:a4:
         6e:b8:fa:3c:e8:71:12:0a:2b:c8:bc:62:13:14:e0:29:a8:e1:
         09:96:66:28:e2:d5:58:0b:96:8c:2d:63:b1:51:30:ca:87:1a:
         ee:a4:e2:15:34:70:24:48:8a:69:15:a5:9c:67:3a:28:ad:70:
         7d:dc:3d:41:2f:47:f2:a1:35:bc:a5:d7:7f:8f:78:93:8e:cf:
         cc:0d:0a:c5:c9:9e:17:ce:ce:2a:4d:47:81:70:53:d9:94:a2:
         aa:75:3f:c0:39:6f:cd:2c:bd:a7:c9:ef:19:34:d6:a5:76:0d:
         f1:89:e6:e6:f1:84:db:5f:ae:53:d1:df:ad:8b:ca:ec:f3:ea:
         d4:0f:a8:96:13:49:79:22:a6:a0:48:f7:1a:59:bf:f4:bb:09:
         7a:7d:22:f3:b6:af:7c:47:7b:ef:bf:2d:e9:84:29:97:25:ae:
         b9:a8:a3:a4:41:be:3c:ec:d2:11:7e:f9:a7:40:30:fc:09:19:
         f1:fc:09:7e:1f:ff:a2:d1:97:fd:a7:bf:dc:8f:3f:a3:ed:2c:
         46:f3:7d:4d:42:34:59:e4:a1:69:bd:f7:36:f8:37:c9:c0:70:
         33:4a:c1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 19:33:37 2025 by rpki-client