This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft
File:                     5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft (raw, json)
Hash identifier:          q2Z9s4y4K1CZDlqTXgn1tgkcM1dZFHPViMAdpI5bLWo=
Subject key identifier:   7B:23:F4:85:CD:3C:14:2D:9E:26:A4:93:85:EB:CB:14:70:B6:64:85
Authority key identifier: E5:66:E0:E5:16:28:55:4C:D9:26:34:B7:11:AB:75:8F:84:67:C4:85
Certificate issuer:       /CN=e566e0e51628554cd92634b711ab758f8467c485
Certificate serial:       019AF2AD54D7ACC6AA407BDAD24C2BF8DA51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft
Manifest number:          1762
Signing time:             Sat 06 Dec 2025 08:00:36 +0000
Manifest this update:     Sat 06 Dec 2025 08:00:36 +0000
Manifest next update:     Sun 07 Dec 2025 08:00:36 +0000
Files and hashes:         1: 5Wbg5RYoVUzZJjS3Eat1j4RnxIU.crl (hash: iKPbg8w1Sfn51xerZWU78Z3ozLRd75uIYo1YREY13Qs=)
                          2: wXYrr5S6sLNczud4QNKL5j-Xgqk.roa (hash: 4Keb/PY19EWO9qNRBP6d1iNJWH59G6NwS5aeFCqxnF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:54:d7:ac:c6:aa:40:7b:da:d2:4c:2b:f8:da:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e566e0e51628554cd92634b711ab758f8467c485
        Validity
            Not Before: Dec  6 08:00:36 2025 GMT
            Not After : Dec  7 08:00:36 2025 GMT
        Subject: CN=7b23f485cd3c142d9e26a49385ebcb1470b66485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:06:68:3b:3d:a6:c1:a5:12:2e:a1:ca:ba:e1:
                    c7:28:59:1b:e1:2f:65:b1:60:b6:c9:d8:e0:75:3a:
                    d2:89:56:98:df:41:e0:80:d2:25:e3:fc:56:3c:0f:
                    8e:2a:5a:3c:ec:76:dc:e5:eb:ae:46:90:64:78:36:
                    81:26:ee:12:80:0d:a4:9f:99:2b:60:4b:5a:d2:da:
                    c1:08:5e:f4:89:e0:4d:e1:bd:6f:23:20:3a:4f:61:
                    74:e3:88:86:ca:d1:9a:46:12:20:57:87:72:c2:ba:
                    be:8e:3e:88:90:46:22:f4:58:a7:8d:a0:0c:fb:7d:
                    e9:4d:6d:43:2f:76:e7:70:d7:e8:9b:ff:03:5b:a8:
                    18:74:55:b2:cd:9d:a6:fa:17:ad:8a:4b:4d:12:11:
                    fa:4e:ba:5d:ff:e2:8d:33:ec:55:79:c1:40:37:28:
                    58:c4:4f:cc:b4:d5:28:36:c9:28:44:8a:6b:fc:ac:
                    8c:c6:e3:32:40:66:0c:90:38:ea:ca:a2:2c:fd:94:
                    e5:31:20:58:13:18:0a:9e:ba:f0:8e:9d:3f:ae:52:
                    22:b4:5b:e4:98:6a:02:ef:d8:f7:e2:24:d0:e5:22:
                    b6:5c:d9:af:ba:cb:7c:20:d2:2b:38:d0:4e:36:e1:
                    46:9c:c3:b1:35:89:3e:b2:ba:67:92:9b:7b:cf:c1:
                    95:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:23:F4:85:CD:3C:14:2D:9E:26:A4:93:85:EB:CB:14:70:B6:64:85
            X509v3 Authority Key Identifier:
                keyid:E5:66:E0:E5:16:28:55:4C:D9:26:34:B7:11:AB:75:8F:84:67:C4:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:fe:a4:c0:1c:1f:43:92:5d:88:2a:db:43:56:e1:65:79:c4:
         30:6c:12:9d:54:58:34:4a:be:92:eb:2a:f1:9d:93:ac:44:61:
         2c:7e:5c:ad:00:1d:b7:d7:d4:65:12:e3:62:33:ce:20:48:6f:
         d0:84:65:a3:22:9e:03:55:ff:87:21:33:0f:fc:1b:3f:8a:3c:
         81:42:8c:99:f0:9b:de:00:43:82:a9:c9:67:23:d9:84:c4:bc:
         15:9a:e8:ab:d2:77:08:a8:78:23:e2:e7:65:2e:2c:3a:bf:75:
         bf:e3:f4:0f:df:12:77:29:a3:29:d0:22:78:69:5b:86:a3:91:
         88:db:ae:a6:1b:9d:54:4b:7d:4f:2e:49:88:7b:e8:cd:de:32:
         e1:9c:4c:19:0f:19:ec:50:09:b1:e8:dc:07:ec:ce:00:37:e7:
         74:8f:a4:1b:0a:7e:63:1d:32:d8:39:6c:51:af:22:d9:59:46:
         aa:2c:20:c1:5a:b9:56:a6:02:18:96:5c:ec:b5:d9:68:80:cf:
         4f:a6:51:af:5c:f9:0f:75:db:a9:e9:2d:a9:e2:75:3a:48:4b:
         a1:b7:a3:6a:1d:b4:86:1f:36:d0:3b:f7:f6:10:03:1a:5f:fb:
         4f:f6:a9:56:15:80:40:d8:b1:8b:5a:a3:2d:51:be:84:8e:cb:
         10:b9:68:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:01:21 2025 by rpki-client