This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/05690b-71d7-470a-b30b-b38dfa874464/1/vQMiKKpsoFHnP7kIxtx_fRnNF6c.mft
File:                     vQMiKKpsoFHnP7kIxtx_fRnNF6c.mft (raw, json)
Hash identifier:          Z4VaaZOtTp8BYnmtw2bjJBYMjCXWAI5kZbzEl9ERqfM=
Subject key identifier:   DE:88:E8:B6:49:95:6C:05:3F:4E:81:68:22:16:6A:0F:AD:3B:BC:23
Authority key identifier: BD:03:22:28:AA:6C:A0:51:E7:3F:B9:08:C6:DC:7F:7D:19:CD:17:A7
Certificate issuer:       /CN=bd032228aa6ca051e73fb908c6dc7f7d19cd17a7
Certificate serial:       019B22BE33253B200EC41F20B7614A691F5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vQMiKKpsoFHnP7kIxtx_fRnNF6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/05690b-71d7-470a-b30b-b38dfa874464/1/vQMiKKpsoFHnP7kIxtx_fRnNF6c.mft
Manifest number:          EF
Signing time:             Mon 15 Dec 2025 16:00:48 +0000
Manifest this update:     Mon 15 Dec 2025 16:00:48 +0000
Manifest next update:     Tue 16 Dec 2025 16:00:48 +0000
Files and hashes:         1: MQ0BhLhDY16aSFu-krId8FWSPd0.roa (hash: OVGXr0uOsmMmql+TGRFCUGdA5aFUyZs6gW7v3hLNnQM=)
                          2: qjbyWde1XhC4sj33T6GPhZzzpyc.roa (hash: 6PIovSMQ1HWFIw9iaFJCX/B7m4VDyHUXqOi1ioHrJZE=)
                          3: sqExp3bLbEaF_353Y8KaU_CHDaI.roa (hash: O5BoSyzsa2fu0HO2sPp/Rp4LLwQ+GTDHarF8NxmMgZQ=)
                          4: vQMiKKpsoFHnP7kIxtx_fRnNF6c.crl (hash: dj6RWOpqATmkGqKFTaQPvRTdTmqo3ESxSxfXnvMk1IA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/05690b-71d7-470a-b30b-b38dfa874464/1/vQMiKKpsoFHnP7kIxtx_fRnNF6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/05690b-71d7-470a-b30b-b38dfa874464/1/vQMiKKpsoFHnP7kIxtx_fRnNF6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vQMiKKpsoFHnP7kIxtx_fRnNF6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 15:30:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:22:be:33:25:3b:20:0e:c4:1f:20:b7:61:4a:69:1f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd032228aa6ca051e73fb908c6dc7f7d19cd17a7
        Validity
            Not Before: Dec 15 16:00:48 2025 GMT
            Not After : Dec 16 16:00:48 2025 GMT
        Subject: CN=de88e8b649956c053f4e816822166a0fad3bbc23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:23:eb:58:da:67:4d:f7:04:37:59:3c:c7:d3:
                    6b:f9:1f:b2:25:7b:bd:44:02:47:73:06:bc:8e:f8:
                    fb:7e:a3:17:75:30:47:e2:d2:0a:1f:1f:8f:fc:e5:
                    48:e9:c6:47:2d:a0:32:ab:e1:7d:4c:bf:b1:b4:59:
                    da:47:95:d4:ac:56:ae:77:c7:e0:f9:4d:d8:6d:af:
                    9e:cd:98:c9:df:d1:5d:b0:f6:3f:c7:eb:db:ca:7e:
                    e4:2e:57:38:4a:60:8a:d3:90:c9:07:17:28:6a:ff:
                    bc:40:5b:9e:27:06:39:6b:20:7f:0d:39:e4:8e:a4:
                    39:70:18:94:4d:c2:1c:c0:e2:d4:32:b9:2b:29:6b:
                    34:87:81:f4:e2:ca:a4:b7:6e:f5:8a:fe:d7:3a:91:
                    39:54:a2:ce:7a:94:e8:11:50:0c:62:f0:bf:1b:47:
                    81:48:cf:e8:9a:42:68:8e:b2:9b:5f:be:e0:6e:5e:
                    11:30:a6:92:18:4d:fc:4f:58:ed:48:b5:c0:9f:59:
                    52:be:a7:dd:71:90:11:c0:26:5f:d8:34:73:ce:8c:
                    db:cf:80:34:27:42:b5:2a:af:01:9d:d8:b5:bb:52:
                    3b:84:53:9a:28:67:8a:ac:78:d6:2b:82:ad:e7:7a:
                    2f:f8:22:e1:42:23:81:74:ed:13:9a:da:82:58:9b:
                    b0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:88:E8:B6:49:95:6C:05:3F:4E:81:68:22:16:6A:0F:AD:3B:BC:23
            X509v3 Authority Key Identifier:
                keyid:BD:03:22:28:AA:6C:A0:51:E7:3F:B9:08:C6:DC:7F:7D:19:CD:17:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQMiKKpsoFHnP7kIxtx_fRnNF6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/05690b-71d7-470a-b30b-b38dfa874464/1/vQMiKKpsoFHnP7kIxtx_fRnNF6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/05690b-71d7-470a-b30b-b38dfa874464/1/vQMiKKpsoFHnP7kIxtx_fRnNF6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:2f:9f:40:f5:6c:b6:bf:cc:c8:a8:86:7b:8f:5a:1b:02:73:
         a6:68:4e:61:54:dd:d9:91:5b:98:88:42:96:b3:58:25:18:19:
         2d:32:8c:e3:27:28:e3:c1:c7:04:68:8b:de:c7:2f:bf:cf:ac:
         d4:2f:83:46:af:8d:41:c2:e5:23:f9:f5:7f:54:7e:76:f0:da:
         bc:c8:4d:16:a6:3b:8b:6f:14:61:d2:a2:2e:f9:93:4f:6d:b4:
         a0:06:36:3d:d4:08:ac:b0:3c:be:b4:9e:dd:fe:11:f6:a0:36:
         47:2c:c9:39:ed:03:0b:2d:9a:e9:dd:5d:55:4b:73:0a:55:8f:
         3c:09:a9:51:00:65:fe:f8:74:4d:67:c2:db:b0:61:30:de:80:
         3e:c2:ce:70:66:a1:e7:2f:ea:fe:3c:17:1c:05:eb:79:61:c8:
         a8:6d:cd:1c:ce:01:a8:bf:8a:47:dd:78:d2:2b:e9:97:ff:b3:
         59:54:73:33:6c:50:69:31:08:43:f0:70:29:7d:e3:1e:41:39:
         d1:1a:a1:49:18:14:3a:c5:51:53:fe:6e:0e:d3:83:98:f3:69:
         fa:73:2f:70:3f:a9:ac:72:68:2d:4e:2b:25:a7:a5:d0:62:1f:
         31:bf:95:9b:8f:0f:db:4b:35:2b:1a:cc:95:28:19:25:aa:7e:
         11:58:8d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 20:23:29 2025 by rpki-client