This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
File:                     _gp5GaPtexO12rOchuBKepcjFHM.mft (raw, json)
Hash identifier:          B02g0ZZKRGLjB6U51TXs+a+1t1FZhhlx/sg4VVxIxzk=
Subject key identifier:   92:AC:29:6A:B4:91:FA:2D:12:DB:37:E7:B3:96:2F:2A:8B:27:F6:D0
Authority key identifier: FE:0A:79:19:A3:ED:7B:13:B5:DA:B3:9C:86:E0:4A:7A:97:23:14:73
Certificate issuer:       /CN=fe0a7919a3ed7b13b5dab39c86e04a7a97231473
Certificate serial:       019B3EA3AA58D26A4C23A621155787979067
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
Manifest number:          14D6
Signing time:             Sun 21 Dec 2025 02:01:11 +0000
Manifest this update:     Sun 21 Dec 2025 02:01:11 +0000
Manifest next update:     Mon 22 Dec 2025 02:01:11 +0000
Files and hashes:         1: AIlfpG57oaa0IcaTUnoTGn0e-MU.roa (hash: doNG5v78wDg1ZSRUc5huAPyd+QjLPudy5eWVSUSR05g=)
                          2: HT7grAARmQeTl9rgD_I5_Dh0UNk.roa (hash: lbOrIFQ1pfBggQZzBgBo0lXjKP8U8v/LXvuvO53enSU=)
                          3: _gp5GaPtexO12rOchuBKepcjFHM.crl (hash: 75365B5HomANa9XQYMRMQcs1DU7atOQia73t6BPd/T0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3e:a3:aa:58:d2:6a:4c:23:a6:21:15:57:87:97:90:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe0a7919a3ed7b13b5dab39c86e04a7a97231473
        Validity
            Not Before: Dec 21 02:01:11 2025 GMT
            Not After : Dec 22 02:01:11 2025 GMT
        Subject: CN=92ac296ab491fa2d12db37e7b3962f2a8b27f6d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:96:c4:fa:64:36:40:ec:b9:ef:58:11:2b:15:
                    b9:73:b3:66:a9:8c:4d:e3:4f:29:72:2f:19:67:6b:
                    7e:4f:52:b6:10:40:0d:70:e8:65:a1:f2:b6:c9:8f:
                    0f:6e:85:f3:47:92:85:9e:19:df:09:32:2a:f5:fd:
                    28:87:fc:69:18:38:f6:53:f8:80:14:9a:fd:ad:ff:
                    8e:a6:19:ec:2f:85:07:0b:53:13:3f:62:7a:b0:2d:
                    48:85:a3:52:5b:40:bb:c6:af:43:c4:bd:b9:e2:15:
                    53:d9:09:16:46:7c:80:9e:d9:b1:a5:67:ee:73:27:
                    78:ac:52:eb:cd:94:15:58:bd:02:9c:57:08:9e:12:
                    a7:8f:21:53:75:02:56:da:93:ae:5c:c8:d5:f4:53:
                    41:21:e7:b0:86:c4:84:9d:54:93:ab:21:e2:4b:f5:
                    f4:1b:ba:74:ff:c7:df:fe:fe:08:1f:fe:eb:0d:86:
                    9c:74:6e:23:b2:c0:d0:a2:9d:a1:60:6f:83:18:86:
                    49:b8:8e:11:18:27:39:3c:08:21:ce:26:20:63:d2:
                    e7:a3:65:42:c7:19:8a:35:d6:84:ea:99:4d:7f:17:
                    80:0e:2c:8b:99:b8:68:a8:2c:dd:09:6d:bf:35:f5:
                    66:46:a2:e9:ed:ff:d6:08:95:71:b1:53:77:b1:ee:
                    1d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:AC:29:6A:B4:91:FA:2D:12:DB:37:E7:B3:96:2F:2A:8B:27:F6:D0
            X509v3 Authority Key Identifier:
                keyid:FE:0A:79:19:A3:ED:7B:13:B5:DA:B3:9C:86:E0:4A:7A:97:23:14:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:82:ab:ef:fb:cb:ae:93:70:a8:f3:dd:53:53:d4:28:af:96:
         7d:eb:9a:35:d1:16:dc:56:9b:ef:63:84:4c:8f:e4:d2:00:75:
         a1:3c:9f:d3:3d:11:03:ba:b7:02:fe:03:64:20:0f:cb:c2:8f:
         c3:66:fe:ff:02:4e:cc:ac:c8:5e:67:41:12:89:6b:13:4e:1b:
         5a:95:c3:6c:93:e6:91:1e:09:a7:e7:ca:08:e3:f7:36:99:6e:
         10:93:bd:e6:5e:97:7e:ce:d4:77:2e:4f:af:a4:cd:33:85:eb:
         e0:4f:a6:7c:44:23:18:3d:5b:9b:57:a4:19:44:20:69:9a:e5:
         6e:b4:1a:2c:e0:41:de:b7:47:54:e3:37:e6:45:8d:43:1d:32:
         cb:fc:d7:45:1a:f3:36:6a:d2:71:0e:fb:c3:54:8e:2b:e6:63:
         88:be:09:06:20:28:45:aa:25:2b:3c:bd:31:b7:39:92:ad:ed:
         5c:46:ae:6f:90:1d:cf:91:01:90:42:b7:ec:6e:6d:c1:a6:11:
         61:d8:d1:7f:11:03:c5:f0:ba:1b:6a:c1:83:10:db:22:66:0c:
         f0:32:57:5a:30:8d:26:8e:67:f4:b0:a0:f2:37:f3:6a:cc:bd:
         e6:e6:b8:6b:3e:64:6a:65:74:08:c8:2a:c9:db:f7:0a:49:d8:
         ff:3f:49:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 06:56:04 2025 by rpki-client