This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.mft
File:                     VtV_bPKMmCwdP_bFJX85npuVW90.mft (raw, json)
Hash identifier:          NkRfAbfET4eJJoGH2FtRI+Ru92GJfqAHoXGyqaiPzDM=
Subject key identifier:   ED:EB:4F:01:22:AB:B2:A7:9E:50:BA:CC:3F:5E:52:81:87:0D:F6:05
Authority key identifier: 56:D5:7F:6C:F2:8C:98:2C:1D:3F:F6:C5:25:7F:39:9E:9B:95:5B:DD
Certificate issuer:       /CN=56d57f6cf28c982c1d3ff6c5257f399e9b955bdd
Certificate serial:       019B446E754C4CC638DEFCB8340446965384
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VtV_bPKMmCwdP_bFJX85npuVW90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.mft
Manifest number:          16B5
Signing time:             Mon 22 Dec 2025 05:00:48 +0000
Manifest this update:     Mon 22 Dec 2025 05:00:48 +0000
Manifest next update:     Tue 23 Dec 2025 05:00:48 +0000
Files and hashes:         1: 2k2NF4zi4zbbVig9hud5yw2kVd0.roa (hash: aMJAh/2uRYrZHgsBPK3N46hD67/ouh3V5n2/tUdRv7g=)
                          2: GHjwnLUndLphHCJPh-qrOX8_zps.roa (hash: b//UMqi7Agd+yuEn41KzmO7VIfrmzPVe7tc4UxNlKdk=)
                          3: VtV_bPKMmCwdP_bFJX85npuVW90.crl (hash: a6QDYkCIEbF3OTvxOm3ITbjM7c1sm34l03MxCsEMUVA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VtV_bPKMmCwdP_bFJX85npuVW90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:44:6e:75:4c:4c:c6:38:de:fc:b8:34:04:46:96:53:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d57f6cf28c982c1d3ff6c5257f399e9b955bdd
        Validity
            Not Before: Dec 22 05:00:48 2025 GMT
            Not After : Dec 23 05:00:48 2025 GMT
        Subject: CN=edeb4f0122abb2a79e50bacc3f5e5281870df605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fc:5f:b1:fe:30:33:c3:fc:b0:da:18:04:0a:
                    f6:33:4f:90:fa:e1:a8:d5:5b:fc:96:6e:10:5a:6a:
                    53:a5:33:59:55:8f:01:43:61:37:e0:0d:38:be:49:
                    21:0d:ec:d0:17:d2:03:31:7d:75:0a:ba:7a:04:e6:
                    64:a5:ab:90:64:43:94:06:de:06:71:a6:7b:07:64:
                    31:e3:8a:64:bb:d5:2c:ef:3e:36:2e:7b:c3:ea:fb:
                    66:b9:c6:12:9e:fa:12:c4:95:ca:8d:23:1e:df:20:
                    aa:50:65:cf:39:d9:d8:44:37:51:f6:e7:f6:19:33:
                    8a:4e:87:28:68:cf:03:84:09:ec:e1:48:05:5f:57:
                    72:ea:71:47:2f:0b:11:11:97:d1:71:07:e3:71:67:
                    89:c6:02:a7:fb:5d:72:06:be:0c:58:07:e0:f6:91:
                    90:55:c6:c3:e0:ca:83:37:45:f6:a4:4c:47:80:79:
                    9b:fe:73:66:09:63:95:7d:4e:49:8f:a3:5b:a6:5a:
                    5c:ef:15:31:cc:84:33:66:c9:78:dc:9b:e7:f3:c6:
                    8e:97:8a:3d:21:e7:5b:6f:e3:23:77:21:cd:17:99:
                    54:5c:8e:bc:a7:fb:b4:95:3e:ee:76:7e:6d:69:36:
                    f3:69:27:b1:ef:ed:81:4e:f1:7e:b7:ec:c9:16:39:
                    0b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:EB:4F:01:22:AB:B2:A7:9E:50:BA:CC:3F:5E:52:81:87:0D:F6:05
            X509v3 Authority Key Identifier:
                keyid:56:D5:7F:6C:F2:8C:98:2C:1D:3F:F6:C5:25:7F:39:9E:9B:95:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtV_bPKMmCwdP_bFJX85npuVW90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:6e:9a:ca:40:b1:1e:8d:b5:37:3e:4a:e4:96:ff:92:33:32:
         7e:c0:83:4a:50:d5:b3:c6:e8:d5:26:5c:66:77:6f:5e:e0:eb:
         a4:8d:f9:b7:81:71:01:47:f7:05:d4:a7:db:a4:be:db:e8:df:
         68:12:62:21:f8:5f:53:f2:7c:4a:2a:e6:cc:6c:1a:91:15:4d:
         c6:2a:fe:c6:09:01:08:53:f4:04:3e:ad:59:92:0a:31:6b:0a:
         cc:2f:40:0b:12:0d:a5:2c:3a:27:e6:f3:8a:2a:56:6a:b4:6b:
         bb:a1:f1:d2:51:99:1e:b7:ac:0e:4d:65:87:06:2f:f7:dd:74:
         6e:a0:92:53:cd:45:ef:40:ec:df:f9:12:ff:f4:03:ee:2c:ab:
         8c:9f:d8:dc:06:69:a2:9e:3f:92:24:95:72:4e:53:62:27:a5:
         b3:dc:f7:e0:13:c7:fa:5c:c1:15:f1:d9:ac:e3:70:80:38:51:
         de:57:b1:d9:19:d4:a4:c7:2c:d6:b0:25:1d:7f:75:83:ff:3b:
         9e:9d:7f:72:5a:e3:33:25:40:9f:e7:2c:f2:e5:e0:dd:ff:08:
         94:26:8f:cf:b2:d7:6c:e3:29:8f:7b:01:db:82:43:b6:6f:39:
         f3:f6:3e:e6:88:ee:d4:b1:e2:14:b9:d6:5c:84:39:91:54:df:
         f6:be:10:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 06:56:12 2025 by rpki-client