This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
File:                     5BqMQuzom1-_whDce1VMcupPNUQ.mft (raw, json)
Hash identifier:          nv0d+L5Ug6efn/O/2qtHGZxsc+h4tTf/Ki2i1BINNWk=
Subject key identifier:   0B:59:0A:1D:43:B4:EC:39:4F:2B:8D:A5:CE:70:03:14:27:50:51:07
Authority key identifier: E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
Certificate issuer:       /CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Certificate serial:       019AF31B271A7E3404369CBE60568218A3AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
Manifest number:          1762
Signing time:             Sat 06 Dec 2025 10:00:34 +0000
Manifest this update:     Sat 06 Dec 2025 10:00:34 +0000
Manifest next update:     Sun 07 Dec 2025 10:00:34 +0000
Files and hashes:         1: 5BqMQuzom1-_whDce1VMcupPNUQ.crl (hash: NvMIPiJRnxortdO/9EO+MwAgIlZb6wmIQRYete3Bnfc=)
                          2: HK-o-7NfDvPjOf99JzJL3ciySc8.roa (hash: DfwAR936JyRgw/jNJGOSmvyuLlvSXJeaVAPRyL2njSw=)
                          3: HMayfNdgxzPgTIksbOz-A7oqLCk.roa (hash: 3k2Q130datVFrgfiHucYcHqZP3tKnpk1Z1BK3tttEV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 10:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1b:27:1a:7e:34:04:36:9c:be:60:56:82:18:a3:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
        Validity
            Not Before: Dec  6 10:00:34 2025 GMT
            Not After : Dec  7 10:00:34 2025 GMT
        Subject: CN=0b590a1d43b4ec394f2b8da5ce70031427505107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a6:0b:3c:75:c5:0e:cf:40:91:27:ff:58:70:
                    c5:8a:1f:d4:04:9f:6b:9d:50:88:14:95:07:2b:e4:
                    56:a8:f9:b8:62:66:95:d1:af:af:cf:f1:ff:e9:7e:
                    5e:9a:d1:8a:99:cd:c5:c1:8b:5f:a5:1e:1c:8f:63:
                    8d:58:5e:5e:09:e3:61:a1:86:1d:39:7c:6d:46:ea:
                    3e:f0:da:12:42:dc:27:94:0f:2e:18:81:aa:38:42:
                    06:da:bd:31:95:06:95:2f:73:1f:99:78:27:53:c8:
                    99:b7:59:b7:59:5c:ef:ad:c7:b6:14:d1:6c:9a:09:
                    e0:02:2d:69:49:fc:ea:e4:3e:8f:2d:93:96:73:6f:
                    35:51:4c:65:09:ff:c2:89:48:6b:22:c2:ab:e9:52:
                    e6:c5:cb:86:b2:6c:94:d8:ad:aa:3c:e3:cb:a5:00:
                    5d:78:08:9d:5d:79:a7:91:96:1d:64:b1:b6:ed:48:
                    48:fc:90:b8:ec:50:d2:15:0f:f8:c4:3e:bb:03:47:
                    f3:8f:0f:04:1b:55:9e:a9:46:58:c5:6c:0b:34:ce:
                    8d:bb:36:6d:69:11:9e:43:a3:04:c5:9c:7d:c3:1b:
                    76:6a:ba:0a:86:93:76:21:d4:70:85:77:ac:f4:f7:
                    24:e2:3c:db:49:4c:c8:5b:98:60:02:5f:3b:5b:7f:
                    31:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:59:0A:1D:43:B4:EC:39:4F:2B:8D:A5:CE:70:03:14:27:50:51:07
            X509v3 Authority Key Identifier:
                keyid:E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:64:1c:7e:07:dd:a8:38:66:99:58:b5:3e:5c:0c:45:d2:b9:
         a2:1b:2b:23:6d:36:df:74:03:11:8b:2c:c3:5e:09:04:46:80:
         14:42:b8:51:2b:5e:c5:3a:65:59:bb:40:c5:18:94:36:48:c2:
         08:37:de:da:9b:1f:ff:e8:7b:01:63:da:d1:54:50:f7:0d:af:
         72:05:24:c8:3f:c0:33:be:38:80:79:00:71:0f:44:f0:21:e4:
         2b:de:40:09:0e:a3:18:cc:a1:d9:17:50:17:c5:1f:07:f8:9a:
         8c:b2:15:1a:fa:5b:f4:08:e9:10:da:28:36:3a:7d:f0:ec:d0:
         81:89:b1:eb:4d:80:a8:85:ae:90:c0:f2:3f:c6:96:c9:ff:1a:
         91:a2:dc:e6:08:ac:bd:a1:6d:7d:3a:60:ab:22:c3:c2:8a:ef:
         bb:60:21:df:bc:f3:26:59:f5:cd:59:30:7d:fb:d3:f9:69:84:
         7a:9d:7e:9e:40:30:8e:4d:a4:e2:01:47:38:ed:cc:b3:9c:4a:
         e5:57:b7:a4:66:64:82:78:01:ec:9d:61:55:c5:3f:8e:f8:7c:
         bc:79:d3:b1:4a:95:cb:d8:e7:ce:7e:6e:2d:61:99:7f:1a:ce:
         a5:fa:1b:79:84:ee:3b:e0:a8:ed:65:d6:9c:c9:75:49:29:21:
         36:ae:8b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:24:58 2025 by rpki-client