This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft
File:                     VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft (raw, json)
Hash identifier:          NH7fM5MzWtInrz87T7yZCTMVknbhs9HReSg7N/49JD8=
Subject key identifier:   3D:3A:00:B9:8D:37:1C:49:24:03:E3:6E:89:F1:AC:31:C4:94:EB:6D
Authority key identifier: 56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
Certificate issuer:       /CN=568ae803b9ba38855401827b3eece14505a9c0f6
Certificate serial:       019B126F99124D760BF33427BFB8FD38E737
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft
Manifest number:          1783
Signing time:             Fri 12 Dec 2025 12:01:02 +0000
Manifest this update:     Fri 12 Dec 2025 12:01:02 +0000
Manifest next update:     Sat 13 Dec 2025 12:01:02 +0000
Files and hashes:         1: 8gXUkKQw8arTOvKo91QrTIhhgLM.roa (hash: 3FKGGmL5ZFlUUkm/8Tty8cDyN60SEeEzpNytHf+rPGY=)
                          2: HSdlh2QFEpGM_46Ow4vGDv79v_E.roa (hash: 1ypzUErprDZDRYPQT+U1/uxj8msJvU+nPJ/mnvBhz8M=)
                          3: VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl (hash: P5uluyFY/HGTMbJVWaQDeOYWlmxOtGuUT7ye5avj2qQ=)
                          4: bOWi-Km4EdNL2RWwyu6fkO8cIac.roa (hash: bBX5W0vrQkhD//eKPSX/Grh0TmEf+XdqKDRiX0ii7jA=)
                          5: elIaIJuXbpWatRWeZpRoJLAB6RM.roa (hash: QMxGtNIR9eV06fnxcnLZU8NRPRckOjRHuOBGgCXj72Q=)
                          6: k9_h63CkyTFP9dp8XuNDvCxNzms.roa (hash: Im4uKqma1iWFJ1wc2qRnkE5lMnQ4ol3CcsuFcdhwEn0=)
                          7: qmXSBo6ZQHf5SBcPKJaq60n1DpQ.roa (hash: jnR4myiAxP2Qb03Ouublrmfx01PiIWyUlSrg/eITJIY=)
                          8: y2v6-6CCLmifQ83qZdjogrFre-M.roa (hash: oYIyUisFgSWQrEZe7E7GOqu26OhZjK1CM4VjnsKMVLo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Dec 2025 08:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:12:6f:99:12:4d:76:0b:f3:34:27:bf:b8:fd:38:e7:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568ae803b9ba38855401827b3eece14505a9c0f6
        Validity
            Not Before: Dec 12 12:01:02 2025 GMT
            Not After : Dec 13 12:01:02 2025 GMT
        Subject: CN=3d3a00b98d371c492403e36e89f1ac31c494eb6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:be:ce:45:fc:9a:0e:da:8a:0e:c7:f4:fb:fe:
                    0a:65:7f:67:d1:d7:58:ea:5a:a3:37:3e:de:55:72:
                    2d:cc:f3:88:e4:20:0c:8d:a0:1c:01:74:27:09:7d:
                    44:cb:15:d3:2a:aa:44:ff:b1:08:a8:56:cc:c0:6f:
                    82:80:53:82:43:9d:7d:e6:67:06:bb:63:67:58:22:
                    95:d5:31:03:1b:df:cb:b0:48:32:58:a6:98:ee:3b:
                    61:6e:47:3e:b3:3f:50:4d:07:70:1b:2c:32:e2:5b:
                    65:ae:50:7d:5d:c9:6d:a5:9b:55:e6:d5:a1:18:cf:
                    03:74:0f:68:b7:2a:1e:be:7d:15:ad:55:3c:bb:2c:
                    2c:61:8d:b0:67:2f:f5:cb:86:ed:5f:d0:42:0c:a2:
                    75:da:b9:65:90:8a:5a:7f:cc:cd:d7:bd:a0:78:4a:
                    a6:60:4e:2d:e3:80:cf:ca:16:ca:fe:37:38:3d:a6:
                    f3:d8:ca:19:a7:de:98:eb:ac:5b:12:14:59:e4:fb:
                    39:6c:2e:f7:14:db:3b:bc:62:c1:2e:9c:10:1b:6a:
                    91:b0:d8:25:c0:e6:f2:4e:4d:45:49:46:47:fb:6b:
                    a3:02:e0:d4:71:ff:60:d6:0d:d2:ee:ff:43:53:15:
                    b7:70:21:ec:4e:d6:32:7b:d2:a9:05:cd:e1:06:e4:
                    27:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:3A:00:B9:8D:37:1C:49:24:03:E3:6E:89:F1:AC:31:C4:94:EB:6D
            X509v3 Authority Key Identifier:
                keyid:56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:d6:ff:ff:23:be:f6:c6:b1:4e:b1:11:89:b1:a7:7b:22:e3:
         21:43:05:77:c0:40:f2:ff:a3:e4:79:3e:7a:be:9a:4f:85:33:
         47:af:cf:6a:4b:de:46:3d:7d:56:14:48:bc:49:76:a0:45:f6:
         5d:b6:a9:37:2a:e6:4c:9a:2d:0e:5a:45:d2:52:f6:06:0e:5c:
         36:f1:7c:cc:71:60:00:6f:a2:78:6b:dd:91:b7:7b:5e:84:ed:
         66:98:51:77:94:81:64:bf:df:bc:53:90:96:bd:de:7c:a4:25:
         ff:1c:bc:c1:1e:97:17:62:c1:f3:87:51:4f:25:56:68:0b:d0:
         a5:28:ad:31:38:48:40:81:ad:89:d1:94:aa:c3:25:8d:93:5b:
         c9:3a:86:42:b0:32:3b:55:09:3c:45:5a:eb:e7:7e:72:8d:74:
         7d:04:ab:03:56:d6:6a:2e:f8:b5:62:54:c0:bf:c7:bd:aa:b4:
         57:c5:b4:39:34:d3:2f:93:30:7f:09:c2:12:57:b3:21:64:c3:
         be:11:cc:dd:06:5d:96:77:f3:39:00:e3:8b:1e:29:1f:1e:f4:
         19:e6:ab:29:53:d5:43:a7:b4:27:3d:d0:04:31:c7:8c:db:cb:
         47:bb:d8:8b:0d:75:81:94:7e:c5:fd:4e:bd:f0:60:a6:1b:3b:
         89:1c:c0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 17:35:18 2025 by rpki-client