This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft
File:                     V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft (raw, json)
Hash identifier:          IOBkiQhvWNHAjTNYVhc9R+SZHyfsyimpHdHK+Td/gls=
Subject key identifier:   C5:B6:B2:0F:FD:2B:33:59:E2:CB:5C:F6:54:9A:79:54:01:1D:51:F4
Authority key identifier: 57:49:46:70:E9:56:E3:FB:15:11:94:8C:59:56:E2:A4:26:79:33:88
Certificate issuer:       /CN=57494670e956e3fb1511948c5956e2a426793388
Certificate serial:       019B112636B2D639F3A34F21CD0E5CDE925C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V0lGcOlW4_sVEZSMWVbipCZ5M4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft
Manifest number:          176F
Signing time:             Fri 12 Dec 2025 06:01:15 +0000
Manifest this update:     Fri 12 Dec 2025 06:01:15 +0000
Manifest next update:     Sat 13 Dec 2025 06:01:15 +0000
Files and hashes:         1: V0lGcOlW4_sVEZSMWVbipCZ5M4g.crl (hash: KVU4V9MNwzkCPnYCQOKK+aJqT+okdbj8J+GDRrLXyBY=)
                          2: vIhHYLmEHVa7FRdnU3kcgimxEf8.roa (hash: NCzIq7GooEeEiWcAxPp0VOLgVz/cvdDQC34wVi7kJRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V0lGcOlW4_sVEZSMWVbipCZ5M4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Dec 2025 06:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:11:26:36:b2:d6:39:f3:a3:4f:21:cd:0e:5c:de:92:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57494670e956e3fb1511948c5956e2a426793388
        Validity
            Not Before: Dec 12 06:01:15 2025 GMT
            Not After : Dec 13 06:01:15 2025 GMT
        Subject: CN=c5b6b20ffd2b3359e2cb5cf6549a7954011d51f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:13:f6:72:f6:25:fe:d4:91:d9:61:7e:e2:4a:
                    21:c3:77:8d:cd:8b:56:af:0e:9b:0d:a7:c3:5c:55:
                    58:08:62:34:8b:5b:56:25:63:c5:a7:da:5d:ec:c8:
                    c4:cb:c6:66:12:28:45:a3:2d:b4:e9:94:51:0e:51:
                    22:31:e6:a6:95:20:89:93:7e:1b:91:b4:3c:e8:90:
                    d9:ac:ed:57:ff:9f:a7:8c:a6:43:56:cc:e4:0e:92:
                    4b:ff:36:9c:6d:bf:53:3e:9b:e8:7f:8b:a8:3d:23:
                    7b:b1:26:92:90:49:12:19:c8:64:ce:3b:a1:f5:3b:
                    86:3f:23:4f:f9:80:21:09:b3:7b:75:cd:49:e0:14:
                    be:43:d0:7e:9c:01:d0:90:58:1c:81:b6:d1:b6:b6:
                    b8:fc:b2:80:59:52:20:a2:25:60:ea:f8:12:6c:f2:
                    d2:ac:7b:7f:83:a8:3f:c1:6e:42:ea:a9:88:17:c2:
                    c2:67:74:38:ac:8e:5b:e4:7c:ef:46:9b:95:72:3d:
                    a9:23:a3:d9:08:e3:30:a8:cb:78:69:ba:6b:05:62:
                    70:d0:be:e4:50:c0:e2:5a:e2:eb:c5:fc:64:53:86:
                    50:c0:95:32:ea:08:90:66:7a:96:35:b4:2c:59:0f:
                    ea:69:f9:ca:22:65:4c:59:2d:bd:df:b1:40:93:38:
                    4e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B6:B2:0F:FD:2B:33:59:E2:CB:5C:F6:54:9A:79:54:01:1D:51:F4
            X509v3 Authority Key Identifier:
                keyid:57:49:46:70:E9:56:E3:FB:15:11:94:8C:59:56:E2:A4:26:79:33:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0lGcOlW4_sVEZSMWVbipCZ5M4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:2d:4d:07:1a:a8:c3:0a:43:34:6c:2e:d9:cb:d5:4c:74:5a:
         13:ac:c1:01:10:61:81:f5:f7:d7:d5:29:f2:fb:52:b4:b6:06:
         e4:2d:f7:ff:e5:85:4f:c1:80:41:1b:5e:79:f3:42:ac:bc:a1:
         ac:2b:e9:a6:af:f4:46:49:9e:f1:89:c0:b6:04:41:90:28:01:
         e3:fc:ec:5b:0d:d9:4f:1d:c1:df:71:32:38:fd:b3:9e:e9:95:
         b8:e4:59:68:fd:db:11:07:a5:0d:78:08:13:9a:d1:9b:f5:e7:
         ba:cb:59:fd:79:3c:50:89:c7:9a:7f:80:51:63:c0:29:c8:88:
         e9:bf:22:e5:f8:d1:52:45:7a:f9:d6:96:01:8b:1f:03:02:13:
         94:c4:5e:46:d2:80:e5:2b:05:a4:d0:39:93:75:dc:bb:9c:e2:
         67:26:c8:94:9e:35:43:f5:f0:61:6e:08:9e:73:31:4f:12:ad:
         d4:78:77:62:34:c4:de:29:f9:65:b2:0c:d3:6c:42:7b:35:6b:
         cc:da:1a:57:3d:14:9c:ac:ec:7f:4a:9e:8d:0e:23:49:2d:18:
         b2:35:da:73:d3:85:85:8f:47:55:9b:93:28:ba:12:23:b8:f7:
         e5:ad:9f:1b:79:c6:67:25:2c:1e:82:ec:44:f7:44:2e:32:3a:
         cf:ef:eb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 09:08:40 2025 by rpki-client