This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
File:                     1vrDln6phZIn2fe-dE4qbqSG4Rc.mft (raw, json)
Hash identifier:          Oe8P4G4wJAUzvjcUWVytkgOJmReJXsOYTwhyV7LYxys=
Subject key identifier:   B4:B5:A7:49:9D:58:80:D8:FC:02:3D:43:82:05:E5:AD:08:CB:E2:8F
Authority key identifier: D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17
Certificate issuer:       /CN=d6fac3967ea9859227d9f7be744e2a6ea486e117
Certificate serial:       019B5A514B0E7D70B83D9AB58683A62E8242
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
Manifest number:          16CF
Signing time:             Fri 26 Dec 2025 11:00:35 +0000
Manifest this update:     Fri 26 Dec 2025 11:00:35 +0000
Manifest next update:     Sat 27 Dec 2025 11:00:35 +0000
Files and hashes:         1: 1vrDln6phZIn2fe-dE4qbqSG4Rc.crl (hash: nnAb3pmwGIZxVaNRQH0x/vQvQhQmTe092eKvN1NiW6A=)
                          2: DiY5VK-6JORpLYohOA3eEOX0gEg.roa (hash: tPQ07ahlxA30mMATuVo2hJ+wEmf9vgItJrH9Fyn7bOk=)
                          3: qaZi9O_cl0MumDzO9hU8yRiyop0.roa (hash: KJX3Yemun4G/B+fGxAEnLDKmtV4r8cWB99Xh182dcB4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5a:51:4b:0e:7d:70:b8:3d:9a:b5:86:83:a6:2e:82:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6fac3967ea9859227d9f7be744e2a6ea486e117
        Validity
            Not Before: Dec 26 11:00:35 2025 GMT
            Not After : Dec 27 11:00:35 2025 GMT
        Subject: CN=b4b5a7499d5880d8fc023d438205e5ad08cbe28f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7d:39:18:ef:b0:08:a5:b1:0f:4a:ca:e9:30:
                    6c:87:7c:57:91:54:f2:3d:2b:b0:64:ec:d5:53:92:
                    79:db:e5:92:7e:ff:7f:ca:f4:e8:50:66:f1:fb:ae:
                    ff:0f:cc:ff:2f:c8:7e:ea:17:40:3e:15:07:98:25:
                    1c:86:74:fd:3e:37:3a:db:6f:25:74:bc:36:c4:6a:
                    b3:69:62:69:15:c1:de:f7:69:69:3e:9f:52:12:b4:
                    16:40:ff:33:72:74:6d:c8:f2:b1:a5:a5:c7:af:80:
                    52:a0:63:ff:34:4c:54:4e:38:b1:dd:b5:d7:5d:3b:
                    df:e2:bb:12:a0:be:1a:33:da:a6:08:c4:40:7b:43:
                    7a:85:b0:cf:32:ea:82:cb:84:08:30:69:14:66:44:
                    fb:03:a5:0a:05:97:ff:fe:74:e3:51:e0:34:73:ce:
                    6d:63:c3:59:da:bb:75:fb:1c:15:49:b7:85:1f:bd:
                    ae:44:43:84:2f:0a:6a:87:b1:1f:40:ee:0c:34:49:
                    aa:c2:ff:94:f5:81:b2:e6:9b:6b:6d:14:88:ec:c1:
                    d5:7d:be:d5:9a:9b:9b:7e:3e:87:cb:62:eb:af:09:
                    60:e0:ac:84:24:75:9d:01:12:72:b6:38:7f:4c:dc:
                    f3:95:b6:97:0d:31:d6:95:e5:3a:80:51:dc:19:e0:
                    3f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B5:A7:49:9D:58:80:D8:FC:02:3D:43:82:05:E5:AD:08:CB:E2:8F
            X509v3 Authority Key Identifier:
                keyid:D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:de:7a:bd:3f:95:5e:23:fb:96:62:c7:b9:9c:37:a4:25:0f:
         1a:44:f6:51:39:04:a2:0c:66:3f:0c:93:71:11:55:8b:aa:e9:
         c3:2b:f8:62:55:e8:f6:7c:60:3b:17:b6:85:ea:46:be:5a:dd:
         83:8a:c7:3c:1b:79:16:a9:bf:09:99:0c:01:eb:e9:9f:c9:01:
         ac:c3:5f:ca:7a:29:2a:31:24:b1:ef:bb:0f:f5:81:84:60:2b:
         81:37:66:d6:4a:08:ac:4a:0c:17:4e:01:d1:64:d4:6a:4d:84:
         ee:c0:fd:0d:51:9c:78:fe:3c:f4:d4:48:d7:8d:0b:9e:fc:fb:
         b0:f5:9b:c2:18:69:b3:82:e1:e4:df:2f:8c:05:a1:de:43:2a:
         30:27:da:f8:1b:a6:05:29:26:2e:dd:fa:26:af:5e:16:e8:86:
         a4:6d:7a:7e:7b:fe:37:5e:4a:12:4c:ca:77:4f:75:bb:5a:66:
         c1:45:bd:48:ae:cc:51:c4:98:a2:a5:9c:c3:d6:61:63:e9:2b:
         e5:f7:4e:98:03:28:c6:16:b7:9a:ed:d5:b9:55:b0:cf:07:9f:
         58:af:1f:e1:a5:31:81:ae:6e:07:7d:4b:b4:8d:1b:76:7f:06:
         5b:8d:ce:81:15:da:86:47:b9:3e:41:72:d8:60:34:52:53:41:
         1d:51:54:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 14:05:25 2025 by rpki-client