This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft
File:                     VLJNiVv5wKX9AApFo0dRCyoIf7g.mft (raw, json)
Hash identifier:          BZYLV/xGYZJheyoPbe7FpTVzKs6DSFKmBZA0cgJgM8s=
Subject key identifier:   45:1B:8A:E9:8B:CA:C9:C6:38:EC:66:21:64:1B:63:38:2A:FB:5B:18
Authority key identifier: 54:B2:4D:89:5B:F9:C0:A5:FD:00:0A:45:A3:47:51:0B:2A:08:7F:B8
Certificate issuer:       /CN=54b24d895bf9c0a5fd000a45a347510b2a087fb8
Certificate serial:       019B32D69E2A89DC119E02B8B42F25FB2E99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLJNiVv5wKX9AApFo0dRCyoIf7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft
Manifest number:          1782
Signing time:             Thu 18 Dec 2025 19:01:24 +0000
Manifest this update:     Thu 18 Dec 2025 19:01:24 +0000
Manifest next update:     Fri 19 Dec 2025 19:01:24 +0000
Files and hashes:         1: AsLBu-KLF_eIlciVtmCw6FoQZWI.roa (hash: Uxf292him4J1J69/hFLIe30svhXR87gNziaZeS20lGA=)
                          2: VLJNiVv5wKX9AApFo0dRCyoIf7g.crl (hash: VBOavgNPpG9NOecSARqYAMf4MOU6hMAEDacefLLwhm4=)
                          3: oi9YFEbcvlN5alPq7ixyYhFrq48.roa (hash: ADhZ+05HO4hub6uw9RxwuVi7MstO4VKG0zRMmKQDcKA=)
                          4: wKg9cqvso1ZsScpo5DIqClZRYrs.roa (hash: tU29LISc03t78s9NesDI+Otx6e7RN8GctCHPQvZVkgY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLJNiVv5wKX9AApFo0dRCyoIf7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 19:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:32:d6:9e:2a:89:dc:11:9e:02:b8:b4:2f:25:fb:2e:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54b24d895bf9c0a5fd000a45a347510b2a087fb8
        Validity
            Not Before: Dec 18 19:01:24 2025 GMT
            Not After : Dec 19 19:01:24 2025 GMT
        Subject: CN=451b8ae98bcac9c638ec6621641b63382afb5b18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5b:e9:3f:99:fd:e7:d6:e3:82:99:af:65:0a:
                    96:04:58:00:66:09:8e:12:69:2f:13:d3:99:22:11:
                    77:38:4a:ac:d4:6b:c9:ad:e0:49:23:31:a2:34:4f:
                    97:58:32:ce:e4:96:a8:80:58:22:04:8d:97:b3:61:
                    23:65:4e:4f:56:e6:e2:dc:e1:47:f9:57:a0:63:cf:
                    18:42:7b:23:25:20:a6:fe:47:c0:71:a2:10:9f:09:
                    ff:ea:91:85:67:02:e5:ea:3f:f4:21:25:6f:11:94:
                    a2:e7:82:cd:24:84:09:0e:75:06:f9:16:0d:d2:3b:
                    38:91:e2:65:93:19:88:e3:29:96:0f:05:b2:46:3a:
                    32:4a:86:15:a1:e2:c2:7c:a5:f7:a9:22:84:c2:1c:
                    db:c9:c2:39:f3:55:82:2c:23:04:9a:4c:32:13:f4:
                    6d:d9:ce:24:51:d6:7d:84:83:ac:3c:f3:ee:33:62:
                    99:cf:3a:58:d7:7c:dd:f3:e2:ee:62:5b:2b:b7:8d:
                    70:d2:14:ca:dd:21:56:57:13:0e:e7:d6:bb:a0:67:
                    52:64:fe:53:f9:a0:83:42:2d:0b:6f:46:b0:4d:bb:
                    a6:14:11:37:ce:59:a5:9b:8e:40:3d:f5:d6:f5:fd:
                    0d:f1:ec:43:fd:d0:38:24:38:3c:07:3c:7c:d2:52:
                    b2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1B:8A:E9:8B:CA:C9:C6:38:EC:66:21:64:1B:63:38:2A:FB:5B:18
            X509v3 Authority Key Identifier:
                keyid:54:B2:4D:89:5B:F9:C0:A5:FD:00:0A:45:A3:47:51:0B:2A:08:7F:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLJNiVv5wKX9AApFo0dRCyoIf7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:23:c4:84:4d:af:79:94:e0:45:45:5b:80:c8:a0:57:19:ff:
         5a:85:8f:a6:7e:d8:48:d4:a0:01:cd:0c:45:68:b0:1c:f1:ee:
         be:3a:ff:2b:45:6c:71:ab:5f:44:a6:38:ce:cd:2e:4a:2b:44:
         f5:9d:3a:c7:67:58:9c:a0:03:70:53:1a:4e:a7:81:7d:9f:69:
         59:70:8c:6c:df:14:9c:cb:a8:99:04:2f:eb:65:41:f1:02:7f:
         2d:3f:e2:9e:3c:01:07:dd:7c:2f:7d:cf:3f:17:c3:23:c6:52:
         b3:68:db:b1:61:65:72:79:5f:24:76:56:1a:8e:4f:d1:5f:9d:
         61:ed:36:8d:ea:d3:89:5f:6a:f2:23:04:79:b3:9b:7b:3e:d4:
         80:57:d0:62:c7:29:9b:0a:4b:ee:4f:12:fa:91:bb:ad:5e:18:
         e5:0d:67:ba:0c:c1:9a:5a:18:ce:75:2e:cd:1e:cd:fe:3e:f4:
         a8:6d:c1:d6:69:34:64:04:68:88:6c:09:1b:5b:d0:2e:e8:70:
         ef:4c:56:91:0f:f5:f3:a9:00:b3:f5:90:d6:64:7e:2e:17:d0:
         6d:2b:65:0a:82:99:37:d6:7f:26:9a:8f:0c:57:d7:d9:70:7f:
         f4:4f:ad:97:62:66:d0:bc:03:02:a8:67:7b:5e:35:06:f2:de:
         57:04:b7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 23:35:19 2025 by rpki-client