This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
File:                     5Neqo9JcL5677HTIMMwM3pMYyPg.mft (raw, json)
Hash identifier:          649AbmcOmixe8kR92o2X0Eu9UQ43D7gUktakNcwO/rs=
Subject key identifier:   F5:9C:C0:29:14:59:DA:E3:55:50:EA:46:87:05:19:2D:70:1C:FE:2F
Authority key identifier: E4:D7:AA:A3:D2:5C:2F:9E:BB:EC:74:C8:30:CC:0C:DE:93:18:C8:F8
Certificate issuer:       /CN=e4d7aaa3d25c2f9ebbec74c830cc0cde9318c8f8
Certificate serial:       019AF24001E02E5DF59F10CBA2847BCAED88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
Manifest number:          068F
Signing time:             Sat 06 Dec 2025 06:01:12 +0000
Manifest this update:     Sat 06 Dec 2025 06:01:12 +0000
Manifest next update:     Sun 07 Dec 2025 06:01:12 +0000
Files and hashes:         1: 5Neqo9JcL5677HTIMMwM3pMYyPg.crl (hash: RLSIsborBmm66N6BcDsmgBVuDr9PIX0Wkmxn3UETfnk=)
                          2: XdhbDlsmi-wLrPkew-d4TMCD4uQ.roa (hash: GZ7CAjXYNkyYQQ/5CpNjIQ4FPx45ItKMUE3PHSgxPGM=)
                          3: wSUmQHvgicp0DUrp54U8e4B9bSs.roa (hash: 6yxPMXDSw6KRHugvWVrYp4LQxI6BlFDftXD+dNw90ug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:40:01:e0:2e:5d:f5:9f:10:cb:a2:84:7b:ca:ed:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4d7aaa3d25c2f9ebbec74c830cc0cde9318c8f8
        Validity
            Not Before: Dec  6 06:01:12 2025 GMT
            Not After : Dec  7 06:01:12 2025 GMT
        Subject: CN=f59cc0291459dae35550ea468705192d701cfe2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b7:fb:cb:db:78:18:00:e0:01:a9:db:b5:f8:
                    d1:fc:c8:2b:4f:c9:2c:5e:97:09:f7:59:fa:31:6a:
                    72:c1:0d:5a:56:05:b9:90:ab:b5:89:34:f1:e3:f4:
                    64:9d:7f:1a:f7:c7:1b:10:23:a4:92:e1:2b:04:7c:
                    d6:b3:24:b7:68:1f:62:83:40:e8:a9:21:ce:f8:43:
                    01:85:be:da:3a:ec:b2:e9:a6:7f:0d:41:79:74:f4:
                    93:f2:8f:fe:0c:f1:35:fe:07:08:88:68:4c:8b:a4:
                    3a:de:27:59:27:4e:e9:72:08:98:fb:ad:ea:59:25:
                    97:c3:86:cc:04:10:07:b2:07:82:70:6e:b6:a3:3b:
                    7b:5c:2d:e9:a8:61:49:27:57:9d:ee:6a:0e:a6:df:
                    e1:83:f5:39:8e:d1:fb:49:b8:e6:c1:3a:ad:b4:15:
                    f1:1b:71:3b:fb:87:d4:c5:91:50:e0:71:fe:00:14:
                    ac:5f:e3:44:81:8b:16:c4:ff:14:d1:88:34:03:d8:
                    1a:77:0f:8a:7e:29:5c:dd:e4:4a:8f:a9:8f:de:91:
                    6e:95:86:f2:e2:91:58:ee:54:b0:3a:62:66:3f:be:
                    df:c0:98:b8:13:3d:0d:c1:e6:ed:44:26:db:55:af:
                    8d:e3:29:ba:6d:80:ef:56:e7:e8:93:1f:cc:d5:91:
                    14:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:9C:C0:29:14:59:DA:E3:55:50:EA:46:87:05:19:2D:70:1C:FE:2F
            X509v3 Authority Key Identifier:
                keyid:E4:D7:AA:A3:D2:5C:2F:9E:BB:EC:74:C8:30:CC:0C:DE:93:18:C8:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:4a:4a:30:3b:2f:d2:e7:25:e3:7c:c5:be:a9:be:eb:f6:a1:
         2d:c8:b1:53:92:50:c8:15:bc:e4:db:d7:66:3e:f3:e1:c2:a8:
         76:a9:10:f1:53:34:56:7e:6e:5c:34:2a:7c:d5:fa:d5:18:bf:
         58:ea:11:c8:3a:d3:05:ef:49:27:75:1e:4a:b8:ee:31:fe:71:
         b6:88:b2:28:3c:7c:2b:fc:8c:cf:09:a1:a4:73:2a:d7:c0:67:
         5e:1c:64:54:fb:67:89:2b:7e:0f:f7:fc:f1:55:e1:9f:20:4c:
         59:68:52:bd:9d:ee:c7:80:27:e5:9b:e9:ed:e3:1a:6c:87:f2:
         c1:1c:8e:8f:13:3b:8e:a1:7e:75:de:b6:29:ee:26:fe:b3:d0:
         c2:8a:17:20:57:3c:94:bd:bd:9d:12:54:61:5f:2d:22:d3:81:
         0b:34:b1:c5:67:ff:9a:5f:40:d0:6b:70:ad:f4:82:bf:a7:36:
         b9:ee:aa:4a:3b:0b:b8:8e:23:93:0c:2a:da:58:95:8b:68:45:
         e1:d2:41:b2:28:73:ab:19:5d:e2:0a:2f:fe:4f:1f:f5:09:01:
         72:d3:f2:dd:8c:a9:8d:cb:f0:2c:ce:e1:3b:99:5a:a6:b7:ef:
         75:1a:82:81:a3:12:82:0d:6b:68:2f:bd:46:91:4b:df:a9:8e:
         85:c8:ff:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:26:54 2025 by rpki-client