This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft
File:                     vVxqtrwgalTEq7N0FYWMstU9NJ4.mft (raw, json)
Hash identifier:          QW28NJ/6v1U0vxYptvkFqhc3z0ZYs6q1EHLpZgVFYdk=
Subject key identifier:   80:09:1C:DA:D5:75:79:80:1A:26:26:44:59:75:A3:31:BF:39:F2:34
Authority key identifier: BD:5C:6A:B6:BC:20:6A:54:C4:AB:B3:74:15:85:8C:B2:D5:3D:34:9E
Certificate issuer:       /CN=bd5c6ab6bc206a54c4abb37415858cb2d53d349e
Certificate serial:       019B36B4A7442A035871F581CDA01EF60F20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft
Manifest number:          49
Signing time:             Fri 19 Dec 2025 13:02:47 +0000
Manifest this update:     Fri 19 Dec 2025 13:02:47 +0000
Manifest next update:     Sat 20 Dec 2025 13:02:47 +0000
Files and hashes:         1: 30rO_BdRX1qylu2XkOuDKVnX5kA.roa (hash: bXGCsHFr9AJnwD9C9VsQWa2UE5+/86m77Z5zzSFtsJQ=)
                          2: vVxqtrwgalTEq7N0FYWMstU9NJ4.crl (hash: B8wf2h6VjyKm1cr2oVQLJbkKZzfel8q7LJprCpWyGa8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 13:02:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:36:b4:a7:44:2a:03:58:71:f5:81:cd:a0:1e:f6:0f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd5c6ab6bc206a54c4abb37415858cb2d53d349e
        Validity
            Not Before: Dec 19 13:02:47 2025 GMT
            Not After : Dec 20 13:02:47 2025 GMT
        Subject: CN=80091cdad57579801a2626445975a331bf39f234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f4:4e:df:6a:8a:1a:82:d5:b0:49:e8:59:cc:
                    5e:4b:8e:08:b1:1b:6c:9a:40:f0:4e:e9:28:de:d7:
                    57:97:31:55:58:31:36:17:af:e2:61:fb:91:c4:d5:
                    a0:8d:67:33:05:f6:31:f2:75:cb:56:09:33:31:02:
                    de:a0:3d:45:dd:83:74:9d:bb:93:c2:ae:10:ba:4f:
                    46:b4:82:25:f3:8a:ca:ff:dd:37:10:16:f8:77:33:
                    b2:84:97:a2:7e:0a:2b:10:f7:3f:c6:e4:c9:73:f4:
                    99:a3:fb:a9:6a:d9:0c:f3:c8:8a:0b:3f:6b:ad:8f:
                    56:0c:58:90:b4:c0:a1:51:35:31:a7:84:a1:99:5b:
                    25:dd:62:e9:fc:a9:ef:90:c6:c7:b7:57:3d:41:d9:
                    72:4a:cb:8b:7b:dd:fa:a3:c6:9c:7b:52:c3:04:64:
                    90:b7:8c:71:e6:68:c2:06:5b:c0:7b:77:01:f6:34:
                    b5:5a:e5:30:7e:d8:db:eb:a3:76:73:f5:29:b1:91:
                    33:ff:af:c6:8a:76:86:c2:1f:31:65:71:ec:c2:f5:
                    e8:c7:67:40:16:a6:43:90:2a:ee:4f:7e:83:ed:20:
                    cf:12:e7:27:39:d7:af:37:9f:83:05:22:4d:84:d5:
                    6c:10:35:5e:47:7f:5c:f2:0a:52:73:ed:9a:45:4e:
                    d6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:09:1C:DA:D5:75:79:80:1A:26:26:44:59:75:A3:31:BF:39:F2:34
            X509v3 Authority Key Identifier:
                keyid:BD:5C:6A:B6:BC:20:6A:54:C4:AB:B3:74:15:85:8C:B2:D5:3D:34:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:65:38:58:82:5b:8a:3c:f8:b4:30:90:49:8d:85:73:e3:1f:
         b1:5d:37:f9:2c:f5:96:b2:03:1a:4c:ad:5e:3d:f9:36:8c:29:
         43:7f:9f:2d:46:2c:54:de:d6:e4:24:32:9e:62:a8:0d:cb:ee:
         da:8e:12:d0:0a:62:c5:0c:d8:e2:ea:72:17:bb:8e:4b:1a:1e:
         21:fe:1a:31:72:e5:7a:c2:62:de:9c:e5:f2:ee:d0:94:79:0e:
         f0:82:5a:64:57:03:a2:72:32:a4:ee:ef:09:4f:9a:58:f4:67:
         56:fb:0d:e8:fa:33:cc:ae:ef:87:65:be:88:52:80:1e:53:16:
         79:f5:01:bd:9f:7d:0c:7a:96:c1:06:8e:36:6f:bf:cf:1a:0b:
         ae:f8:17:97:e5:19:3c:16:69:f2:9b:62:10:9e:c0:7e:95:92:
         86:15:ac:3d:55:a4:63:b1:37:7d:3e:81:3e:6f:5b:39:ea:31:
         e4:8c:c3:e8:be:08:af:94:c9:3a:53:bf:99:fc:45:e1:c9:ad:
         f3:75:b6:38:90:b5:f0:8d:5f:48:1f:fd:fe:b2:72:94:e4:51:
         78:87:10:54:4d:47:b7:c5:80:fc:49:1f:d2:c5:a7:83:9b:d0:
         f2:21:c7:3f:74:a4:37:54:4f:dc:79:8e:2d:2f:4d:ed:75:6e:
         e6:b7:9b:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs2tKdEKgNYcfWBzaAe9g8gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNWM2YWI2YmMyMDZhNTRjNGFiYjM3NDE1ODU4Y2IyZDUz
ZDM0OWUwHhcNMjUxMjE5MTMwMjQ3WhcNMjUxMjIwMTMwMjQ3WjAzMTEwLwYDVQQD
Eyg4MDA5MWNkYWQ1NzU3OTgwMWEyNjI2NDQ1OTc1YTMzMWJmMzlmMjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/RO32qKGoLVsEnoWcxeS44IsRts
mkDwTuko3tdXlzFVWDE2F6/iYfuRxNWgjWczBfYx8nXLVgkzMQLeoD1F3YN0nbuT
wq4Quk9GtIIl84rK/903EBb4dzOyhJeifgorEPc/xuTJc/SZo/upatkM88iKCz9r
rY9WDFiQtMChUTUxp4ShmVsl3WLp/KnvkMbHt1c9QdlySsuLe936o8ace1LDBGSQ
t4xx5mjCBlvAe3cB9jS1WuUwftjb66N2c/UpsZEz/6/GinaGwh8xZXHswvXox2dA
FqZDkCruT36D7SDPEucnOdevN5+DBSJNhNVsEDVeR39c8gpSc+2aRU7W7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIAJHNrVdXmAGiYmRFl1ozG/OfI0MB8GA1UdIwQY
MBaAFL1cara8IGpUxKuzdBWFjLLVPTSeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlZ4cXRyd2dhbFRFcTdOMEZZV01zdFU5Tko0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xMmY0ZTYtYWYxZC00ZWYxLWI3YWQt
NDIzMjNiMjAwOWUzLzEvdlZ4cXRyd2dhbFRFcTdOMEZZV01zdFU5Tko0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8xMmY0ZTYtYWYxZC00ZWYxLWI3YWQtNDIzMjNiMjAwOWUz
LzEvdlZ4cXRyd2dhbFRFcTdOMEZZV01zdFU5Tko0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATmU4WIJb
ijz4tDCQSY2Fc+MfsV03+Sz1lrIDGkytXj35NowpQ3+fLUYsVN7W5CQynmKoDcvu
2o4S0ApixQzY4upyF7uOSxoeIf4aMXLlesJi3pzl8u7QlHkO8IJaZFcDonIypO7v
CU+aWPRnVvsN6PozzK7vh2W+iFKAHlMWefUBvZ99DHqWwQaONm+/zxoLrvgXl+UZ
PBZp8ptiEJ7AfpWShhWsPVWkY7E3fT6BPm9bOeox5IzD6L4Ir5TJOlO/mfxF4cmt
83W2OJC18I1fSB/9/rJylORReIcQVE1Ht8WA/Ekf0sWng5vQ8iHHP3SkN1RP3HmO
LS9N7XVu5rebLA==
-----END CERTIFICATE-----
Generated at Fri Dec 19 21:20:37 2025 by rpki-client