This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/f6cb85-8e1e-455f-b4b8-dfcf7e636218/1/Vp3-Sa8607mlhpS6081OY4TwEYY.mft
File:                     Vp3-Sa8607mlhpS6081OY4TwEYY.mft (raw, json)
Hash identifier:          LDXRxEB/s0g6FSEsGpTQLZto69m5eQXEoNxOhw4OfQ0=
Subject key identifier:   A5:0D:6D:EF:2D:D8:E9:72:7E:BC:68:EF:CF:A8:39:2E:2B:35:D5:A3
Authority key identifier: 56:9D:FE:49:AF:3A:D3:B9:A5:86:94:BA:D3:CD:4E:63:84:F0:11:86
Certificate issuer:       /CN=569dfe49af3ad3b9a58694bad3cd4e6384f01186
Certificate serial:       019B5977661DC4FF8F7DCC245CC163D015AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vp3-Sa8607mlhpS6081OY4TwEYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/f6cb85-8e1e-455f-b4b8-dfcf7e636218/1/Vp3-Sa8607mlhpS6081OY4TwEYY.mft
Manifest number:          C6
Signing time:             Fri 26 Dec 2025 07:02:35 +0000
Manifest this update:     Fri 26 Dec 2025 07:02:35 +0000
Manifest next update:     Sat 27 Dec 2025 07:02:35 +0000
Files and hashes:         1: Vp3-Sa8607mlhpS6081OY4TwEYY.crl (hash: HW2vkqfAVuKN9luuhbd7qzqYO/vZpdicKzcQMOFwz0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/f6cb85-8e1e-455f-b4b8-dfcf7e636218/1/Vp3-Sa8607mlhpS6081OY4TwEYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/f6cb85-8e1e-455f-b4b8-dfcf7e636218/1/Vp3-Sa8607mlhpS6081OY4TwEYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vp3-Sa8607mlhpS6081OY4TwEYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:59:77:66:1d:c4:ff:8f:7d:cc:24:5c:c1:63:d0:15:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=569dfe49af3ad3b9a58694bad3cd4e6384f01186
        Validity
            Not Before: Dec 26 07:02:35 2025 GMT
            Not After : Dec 27 07:02:35 2025 GMT
        Subject: CN=a50d6def2dd8e9727ebc68efcfa8392e2b35d5a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3d:7d:ed:77:eb:0a:e1:30:89:9b:81:cd:e8:
                    4a:6a:c4:f6:f9:9e:e8:75:62:4b:7a:7a:49:5a:d7:
                    39:78:b1:e5:4b:4b:be:c5:05:14:4d:06:95:ef:c0:
                    9d:02:00:ac:75:4e:7f:11:ff:a6:88:35:3d:da:62:
                    86:44:a0:0b:b6:6a:19:86:7f:b7:86:4b:60:0c:e5:
                    a7:fe:c3:9f:f4:a9:4b:a3:4a:85:d5:68:48:17:8d:
                    cf:f8:cc:bb:70:c1:50:21:e3:08:e8:ac:f9:06:ea:
                    6a:19:01:06:8a:84:8b:07:e4:7c:97:54:39:ec:5e:
                    4f:64:08:07:79:97:ae:71:a7:9a:30:dd:d7:e3:6d:
                    2d:6e:29:87:9f:85:7a:fe:9d:e9:fe:e4:ff:79:cc:
                    2a:7b:e0:e1:13:8f:41:67:3f:07:ea:5d:0f:28:9e:
                    f3:b4:87:ee:35:b6:28:96:5e:da:27:c8:83:d9:77:
                    cb:e7:c8:5b:57:8d:c9:3a:76:d9:c9:8a:50:be:2a:
                    19:19:b9:42:c7:aa:b4:ba:6a:21:2a:39:29:f0:d9:
                    8a:3e:31:82:c7:3e:e3:2e:0e:8a:a6:de:7e:45:98:
                    6a:31:f8:ea:2c:d9:61:05:b5:de:a1:4f:11:43:01:
                    b0:4f:dc:d5:8a:c1:0f:76:19:71:61:72:b2:e8:4a:
                    e8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:0D:6D:EF:2D:D8:E9:72:7E:BC:68:EF:CF:A8:39:2E:2B:35:D5:A3
            X509v3 Authority Key Identifier:
                keyid:56:9D:FE:49:AF:3A:D3:B9:A5:86:94:BA:D3:CD:4E:63:84:F0:11:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vp3-Sa8607mlhpS6081OY4TwEYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f6cb85-8e1e-455f-b4b8-dfcf7e636218/1/Vp3-Sa8607mlhpS6081OY4TwEYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f6cb85-8e1e-455f-b4b8-dfcf7e636218/1/Vp3-Sa8607mlhpS6081OY4TwEYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:56:f7:52:60:b3:57:6c:af:16:17:e0:51:f4:2c:90:58:36:
         52:04:f3:38:d6:f5:54:f7:d8:38:7e:8d:a0:cb:db:7d:e5:a4:
         8b:5c:eb:4b:f1:55:3d:7a:4a:a3:e6:bb:48:a6:84:5d:99:a2:
         7b:c9:63:7e:c3:d3:8c:94:a6:e9:72:50:da:e3:7a:45:c1:ff:
         b8:c9:a4:fb:1e:9e:97:4a:5a:60:6e:b0:8f:85:c4:5d:31:8f:
         ed:6f:30:c1:dd:9c:ab:b1:9b:e0:ec:c5:e5:1f:90:a9:30:0a:
         9d:29:ae:a5:90:37:6a:c7:a6:96:e1:05:b4:5b:c8:74:ed:7e:
         0a:f4:71:7a:55:e0:2d:7d:b3:b5:84:c9:bc:24:32:c3:7e:d7:
         a7:1b:cb:0c:c1:eb:3c:55:4d:02:11:ef:e9:a4:6f:69:8d:a9:
         f8:1f:c3:e0:af:66:88:f2:92:35:6b:fd:90:8a:d2:be:78:3c:
         3c:24:73:dd:b0:98:a9:55:ea:56:d8:6c:85:65:33:57:22:d0:
         aa:72:97:a8:16:66:d2:aa:a9:72:e0:d1:18:2f:4a:17:c8:88:
         78:1d:42:4a:11:ff:d1:ac:55:09:ce:1a:c6:71:03:3e:d2:f8:
         f9:b8:95:51:be:dd:fc:56:49:02:c3:03:7e:fa:a1:b1:9b:9e:
         e5:2f:09:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 15:45:43 2025 by rpki-client