This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
File:                     5_4i9VHpWw8VAzxQNVLkm8phfGo.mft (raw, json)
Hash identifier:          jCA3DIH69Pr3g2u0uLudkvCsd5SI33NrdH01An0ibaI=
Subject key identifier:   F7:E1:D5:B9:44:D1:66:CE:2B:41:CD:D0:12:D7:84:B3:C5:2B:EA:90
Authority key identifier: E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A
Certificate issuer:       /CN=e7fe22f551e95b0f15033c503552e49bca617c6a
Certificate serial:       019AF1646CE1CE9BA2B810915F1536DE20EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
Manifest number:          03CA
Signing time:             Sat 06 Dec 2025 02:01:21 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:21 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:21 +0000
Files and hashes:         1: 5_4i9VHpWw8VAzxQNVLkm8phfGo.crl (hash: 5itab62I8EIrWfkazY5V+gtZfaJMAATV+T2Ex4xPR/0=)
                          2: THghgq3_4L1NVnK6KOFYexQq5SI.roa (hash: /zrwFkLWh9pajQgZXuExr20G8aRLgJD9APPdVLa4mp8=)
                          3: teYc1cFeqUuzMd-dJeyJRJ9jp-k.roa (hash: SD6wWRBAQPvJFZ63a4Ws+sFA/hBOJ/3xD8PJ20JClwo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:6c:e1:ce:9b:a2:b8:10:91:5f:15:36:de:20:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7fe22f551e95b0f15033c503552e49bca617c6a
        Validity
            Not Before: Dec  6 02:01:21 2025 GMT
            Not After : Dec  7 02:01:21 2025 GMT
        Subject: CN=f7e1d5b944d166ce2b41cdd012d784b3c52bea90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:97:ad:06:ec:97:b2:54:2d:f8:a9:49:56:5f:
                    7f:31:34:6d:a9:44:43:e6:6c:77:86:80:ca:d1:b2:
                    aa:5c:34:da:d8:08:1b:6f:21:9b:ed:31:03:02:e6:
                    a9:ac:7f:13:ec:5c:ad:33:8a:a5:05:4f:bc:6c:3f:
                    19:7a:21:ba:48:d8:4f:13:29:ae:31:03:80:53:5b:
                    4f:a9:b1:8f:87:2c:7d:ed:1b:29:7c:a6:4a:b1:f1:
                    74:a2:4c:fe:66:10:8d:e1:bd:13:5f:70:a7:33:19:
                    0d:7b:3d:b3:cf:06:43:69:0a:02:4e:dc:44:af:ee:
                    fb:20:66:7f:c3:f4:14:f7:6c:28:6a:8c:2b:3e:6d:
                    a3:46:d3:97:ae:70:c8:93:a3:58:8b:7d:af:e5:e0:
                    c5:24:47:fb:f4:ec:59:0d:b1:ac:72:aa:47:d3:bf:
                    83:10:bd:0c:50:51:64:2d:e6:71:a4:36:12:dc:9d:
                    1e:7a:aa:cc:73:0f:46:50:54:45:7f:a1:b5:0b:be:
                    94:46:d2:23:5f:d6:96:7b:7e:db:b5:9d:2d:6e:4e:
                    78:6e:9c:14:d0:c8:d5:e4:54:eb:a7:93:a6:a2:f4:
                    3b:4e:8d:3c:b0:67:8a:53:c1:0a:e5:08:55:44:e1:
                    79:01:8b:74:41:1d:30:9e:b6:f3:b5:41:cd:4b:9a:
                    a2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E1:D5:B9:44:D1:66:CE:2B:41:CD:D0:12:D7:84:B3:C5:2B:EA:90
            X509v3 Authority Key Identifier:
                keyid:E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:03:93:0d:d7:55:2c:ac:82:fc:46:01:8d:8e:9b:c3:98:2e:
         e2:59:69:7f:b4:d7:8b:56:68:e2:36:29:2f:2d:31:0d:d4:95:
         09:8b:35:00:56:7b:40:9f:7d:c7:b3:b3:d8:73:00:8f:bc:25:
         4b:88:1a:48:c0:00:de:25:5f:b9:6f:07:03:06:c6:90:10:14:
         7c:57:84:a2:6f:32:99:24:b5:bc:d6:69:c2:bc:4f:e2:ed:1e:
         61:3f:6a:6f:1a:a3:d4:b5:6c:cc:33:f1:98:1f:9e:e8:81:d2:
         18:44:a4:79:c7:46:f9:81:a4:a6:e7:6b:53:6f:01:c9:5d:3a:
         2c:5d:b8:08:f4:36:be:c1:65:d5:9c:7c:b7:95:cd:d1:2d:c1:
         a5:ca:e8:5f:72:30:74:bd:c9:92:c0:e1:be:71:ce:d5:7a:c6:
         d7:24:44:3d:08:89:10:56:c2:b2:82:e6:c3:81:03:9f:19:43:
         c4:50:92:a3:63:1f:5b:32:46:d5:58:0c:66:09:6d:5a:b9:4c:
         f8:2f:58:b6:44:ae:f4:90:d8:7f:05:ac:1b:1b:92:be:a2:13:
         00:a4:66:7b:64:f5:c6:46:f8:9a:74:0f:62:9b:24:4a:6f:cd:
         b2:b9:61:08:68:23:b0:eb:b8:53:df:0c:a3:b8:16:ee:7b:55:
         83:78:43:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:01:23 2025 by rpki-client