This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
File:                     5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft (raw, json)
Hash identifier:          u9PRsYkAIEeykaZLM7l223O+JmIbjcLn7C2i8LYI7Pk=
Subject key identifier:   29:68:09:13:8D:81:59:FA:77:F6:29:4F:49:CB:8F:FC:CE:A3:86:BF
Authority key identifier: E6:73:FF:10:D7:A5:54:FC:51:A7:F9:9C:1F:61:E1:CE:EF:99:85:BC
Certificate issuer:       /CN=e673ff10d7a554fc51a7f99c1f61e1ceef9985bc
Certificate serial:       019AF1D1E2E4421B21A47AE0699EEE511DB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
Manifest number:          1050
Signing time:             Sat 06 Dec 2025 04:00:55 +0000
Manifest this update:     Sat 06 Dec 2025 04:00:55 +0000
Manifest next update:     Sun 07 Dec 2025 04:00:55 +0000
Files and hashes:         1: 5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl (hash: 54vbF8ldYNSqBCIFt2IvWNmFJsBrbHR8rK8dzNgYcrY=)
                          2: 99MFFBjF3Dc4zTlDGHUkWaGScYw.roa (hash: WeTl8ArSSJSSsmY/ooHSrE+g99Jv4JYzfunEC3Fj5PM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d1:e2:e4:42:1b:21:a4:7a:e0:69:9e:ee:51:1d:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e673ff10d7a554fc51a7f99c1f61e1ceef9985bc
        Validity
            Not Before: Dec  6 04:00:55 2025 GMT
            Not After : Dec  7 04:00:55 2025 GMT
        Subject: CN=296809138d8159fa77f6294f49cb8ffccea386bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:08:3a:f9:9f:f7:3b:e2:44:12:be:25:c3:94:
                    d2:31:2a:0c:69:80:ff:ae:59:0a:04:26:8c:fc:f3:
                    44:17:c4:8e:30:15:72:4a:ed:2a:d7:49:b0:9b:ea:
                    c6:f9:52:fb:8e:74:99:a0:5e:db:58:aa:82:40:31:
                    d3:cd:ca:d6:60:25:f1:64:d4:d8:09:df:55:de:c5:
                    3a:36:16:21:65:16:8d:d4:c8:95:dd:f8:57:c2:c5:
                    f4:54:88:a8:10:a9:cc:cb:66:45:ec:7a:27:e8:8f:
                    80:15:0a:57:68:1e:e9:84:f0:94:46:6a:1b:e3:13:
                    32:08:5b:c4:76:09:51:66:11:db:73:d1:41:35:67:
                    85:f6:3e:54:e6:14:4e:e8:92:36:3f:48:af:da:b4:
                    bb:d4:65:03:ae:c7:41:dd:70:86:f7:48:86:cc:bb:
                    b0:7d:10:36:f9:f2:c5:a4:19:ba:b3:46:66:3a:9b:
                    b7:14:bc:cc:95:a4:39:36:01:d8:82:97:9c:db:f6:
                    49:39:8c:d2:02:45:62:83:8e:a9:1c:e9:ee:0a:3c:
                    19:cc:38:6d:16:41:d1:75:3d:3a:7a:a6:99:1d:e5:
                    27:52:a4:1d:a2:a9:0a:6d:00:3f:37:41:5c:ce:e1:
                    be:00:10:f9:d8:54:f1:3a:dd:89:76:60:77:79:91:
                    41:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:68:09:13:8D:81:59:FA:77:F6:29:4F:49:CB:8F:FC:CE:A3:86:BF
            X509v3 Authority Key Identifier:
                keyid:E6:73:FF:10:D7:A5:54:FC:51:A7:F9:9C:1F:61:E1:CE:EF:99:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:0b:f0:b5:63:7b:75:20:64:90:5f:c9:9c:f9:b2:2b:70:bb:
         4e:1e:bd:77:78:8c:01:9a:93:ba:bb:e2:25:c4:fe:c4:10:e2:
         cc:82:87:79:a9:71:ef:43:15:37:91:f1:59:b0:7d:8c:c3:02:
         61:9c:c9:22:b3:32:4d:b7:8c:4c:01:13:73:52:ea:c2:6a:a4:
         4e:3a:c5:51:7a:ca:77:66:49:4b:7a:21:81:f3:8d:df:0b:99:
         84:e7:de:13:3f:54:3e:d1:b6:6f:08:4b:a2:5e:c2:55:d3:42:
         fa:b9:dc:7d:cc:79:e6:e8:f8:5e:b2:57:72:bb:02:4a:99:ee:
         c5:84:93:8e:f1:e2:2a:3b:a0:13:7d:a4:10:ef:f4:d4:5c:9c:
         ca:13:77:f9:f4:a3:4c:31:00:14:f6:25:75:8b:df:ce:ca:52:
         2f:32:eb:8a:2e:b8:b1:19:b5:27:e0:ac:55:c9:4b:3a:f4:fc:
         d6:ee:d1:79:84:51:15:bc:21:d8:0e:be:20:9d:a6:73:ed:a2:
         a9:99:c9:57:c9:3b:d3:93:cd:40:46:26:d4:76:5c:e1:06:22:
         52:ea:a5:6d:ad:ac:df:5e:4d:71:86:9d:95:cc:dd:2e:4f:95:
         26:86:d3:c7:5e:c3:b7:cd:f1:8e:bf:eb:71:d6:67:2a:49:a7:
         cd:89:49:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:11:27 2025 by rpki-client