This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
File:                     5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft (raw, json)
Hash identifier:          39czv8qhO74wYiYf9banUt3ysqWVnkVE7m6uikYR8tE=
Subject key identifier:   93:E8:BE:92:21:63:B9:C6:78:8A:99:72:1D:38:06:E7:0E:82:16:31
Authority key identifier: E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
Certificate issuer:       /CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Certificate serial:       019AF27706AA6273191226A5966BC542672F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
Manifest number:          0C84
Signing time:             Sat 06 Dec 2025 07:01:17 +0000
Manifest this update:     Sat 06 Dec 2025 07:01:17 +0000
Manifest next update:     Sun 07 Dec 2025 07:01:17 +0000
Files and hashes:         1: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl (hash: VDEP3w3V8nszNeYvbcmFSnANZrFi37+cxGHdxhyH1K8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:77:06:aa:62:73:19:12:26:a5:96:6b:c5:42:67:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
        Validity
            Not Before: Dec  6 07:01:17 2025 GMT
            Not After : Dec  7 07:01:17 2025 GMT
        Subject: CN=93e8be922163b9c6788a99721d3806e70e821631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:91:8d:0e:0c:90:05:73:38:24:b2:c0:d2:ca:
                    db:14:f3:d1:a1:53:87:10:00:70:2d:ff:e8:67:ad:
                    ab:93:fe:95:98:f8:97:cd:df:d5:1a:d8:50:e1:e2:
                    7e:c3:ee:fa:c6:5e:1b:5e:ab:1b:7f:4c:69:51:0a:
                    a9:f4:de:03:96:53:81:7a:73:20:d8:7b:12:d8:5d:
                    22:7a:bb:40:80:5e:7b:42:f4:86:aa:34:c7:cb:bc:
                    1a:0a:42:47:e2:54:c3:92:59:50:ca:d9:06:d7:2b:
                    63:a7:8f:0b:48:a0:09:c7:5c:48:24:d4:43:ec:11:
                    12:80:90:96:b6:dc:ef:68:13:ed:d2:4e:cc:3a:bf:
                    8e:32:df:2d:ee:0d:62:8f:eb:4e:34:b6:d1:37:bc:
                    c3:bd:cc:be:c7:f6:db:3c:f4:aa:26:d9:2e:b6:86:
                    6e:57:34:cc:0a:04:05:7f:ac:87:ba:c3:c1:9d:5b:
                    0b:14:4f:05:77:51:2c:60:17:ae:7e:c4:1c:39:a5:
                    9f:28:97:00:91:d1:df:05:04:e4:76:44:71:3c:3f:
                    4e:a3:75:d0:c6:66:9c:c9:a7:c3:5a:1a:59:b3:a7:
                    ae:a6:14:d6:ae:2a:66:8c:a7:d4:d8:0a:fa:d0:89:
                    5f:2b:83:f6:b7:ab:60:9d:05:fa:10:9b:4a:a0:3d:
                    3c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E8:BE:92:21:63:B9:C6:78:8A:99:72:1D:38:06:E7:0E:82:16:31
            X509v3 Authority Key Identifier:
                keyid:E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:47:98:df:b4:39:7d:77:62:3b:20:af:39:69:03:89:5b:3f:
         ef:d2:1f:65:d9:81:64:10:63:5c:c4:28:e6:39:07:10:28:ae:
         7d:22:48:ea:f1:0d:1f:0c:8d:82:9e:41:5a:80:26:34:53:6f:
         ac:a8:9c:c0:9f:a8:97:79:ad:30:a6:1b:76:d9:85:ce:ab:71:
         0e:ce:42:5d:f4:ac:64:cd:8f:7a:28:ab:e8:38:c9:41:d2:c5:
         4e:93:a3:15:69:77:99:c7:ce:3f:af:d1:30:da:9e:fa:95:cf:
         a0:a9:f2:40:47:cf:57:b2:f3:73:a0:76:a0:70:72:90:eb:58:
         4a:7e:25:52:2e:b1:83:13:e7:46:3f:81:a1:a6:a3:1a:35:f5:
         8b:bd:3e:22:71:39:34:d4:dd:b7:a2:95:41:87:a7:68:8b:60:
         77:e4:67:c4:a4:7c:ae:1a:32:40:69:fa:eb:76:cf:7c:dc:2a:
         f6:83:ee:fb:19:3a:6b:9e:27:ca:06:25:c9:ec:ca:ab:c1:c8:
         72:a9:ec:f6:04:8e:db:0d:f2:6f:ac:ef:a8:3c:03:bf:0f:f4:
         aa:3c:2f:68:ed:79:4e:8a:1e:f9:6d:8c:73:d7:52:cf:73:dd:
         06:93:21:62:ce:c2:66:d4:d9:ee:f2:96:ff:cb:b4:96:c3:4c:
         cf:98:22:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:53:23 2025 by rpki-client