This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
File:                     5f4C8qp2xAK312oRTcdzXV-TW4g.mft (raw, json)
Hash identifier:          985tMjCGbkLdsCd/md+qCWSuirv4Ac9C1kwTn8C0b7Q=
Subject key identifier:   65:76:23:17:D0:4E:50:A8:D7:EB:CE:5B:7F:0D:5D:C1:83:F7:CE:E8
Authority key identifier: E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
Certificate issuer:       /CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Certificate serial:       019AF5099617A51193CAD50FEC9EBDE9354B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
Manifest number:          1763
Signing time:             Sat 06 Dec 2025 19:00:37 +0000
Manifest this update:     Sat 06 Dec 2025 19:00:37 +0000
Manifest next update:     Sun 07 Dec 2025 19:00:37 +0000
Files and hashes:         1: 5f4C8qp2xAK312oRTcdzXV-TW4g.crl (hash: zzkHL0UWp29chLOxPOaBMPJAhwvSav87lFKvdHWOydc=)
                          2: O7xkMgYDWmT39_oyZPNETli4dGo.roa (hash: BJVxC4UljGsK/BbuRqwBk8+Scbbux5UgI7xaPeJbQCA=)
                          3: mTHF4xRS849mOw36faqzyw4dbV0.roa (hash: wG6gmT9BywW9Amqbl4suJT23ZQUJGIpmhCizynoZqms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:09:96:17:a5:11:93:ca:d5:0f:ec:9e:bd:e9:35:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
        Validity
            Not Before: Dec  6 19:00:37 2025 GMT
            Not After : Dec  7 19:00:37 2025 GMT
        Subject: CN=65762317d04e50a8d7ebce5b7f0d5dc183f7cee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d1:01:78:46:06:61:e8:9a:ec:a1:37:f4:c3:
                    0d:9c:17:46:aa:df:e8:5e:fe:35:15:ce:c3:e9:82:
                    6b:75:51:ff:d7:ff:8c:30:84:e7:4b:72:c4:33:8e:
                    fc:de:db:0e:80:b4:81:fe:5d:76:8b:dd:60:8e:43:
                    2c:63:55:7d:08:33:2c:11:23:d5:49:8a:56:e6:6d:
                    92:24:25:bd:a0:eb:3d:7f:10:2c:cd:4e:1c:36:be:
                    ae:d0:78:15:d0:64:98:8b:5a:ba:4d:26:ee:69:c4:
                    7b:90:41:66:ea:04:5c:ca:66:3b:b5:b6:5d:92:4b:
                    01:ef:4a:31:dd:0a:e3:fa:10:30:50:0e:dd:f6:c1:
                    23:bb:41:96:db:01:f8:1f:69:17:a4:e1:3b:c2:98:
                    3e:34:39:2b:29:fc:df:13:ae:63:14:e1:05:02:0a:
                    72:cc:7f:d1:fb:79:e6:91:29:f8:d9:0b:9a:55:31:
                    c9:f4:f8:55:e0:06:18:01:43:3d:0f:eb:0e:a6:a2:
                    44:57:35:48:aa:af:9f:53:46:eb:1e:43:ec:c9:9b:
                    d5:c7:c5:89:ff:d9:54:6d:ab:f1:1b:45:01:62:03:
                    4e:d1:db:de:1b:bc:32:47:8d:19:6c:8c:da:26:1c:
                    51:8a:62:d5:86:e9:a5:5d:3b:a2:b4:fe:68:42:ce:
                    2c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:76:23:17:D0:4E:50:A8:D7:EB:CE:5B:7F:0D:5D:C1:83:F7:CE:E8
            X509v3 Authority Key Identifier:
                keyid:E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:f4:76:2b:aa:9d:33:9e:c5:73:59:90:a7:7a:6c:3f:65:fc:
         09:44:1d:cf:71:c0:b8:c5:c2:9b:00:9a:c8:fa:00:0c:20:d8:
         d3:5c:02:20:09:38:5d:39:cf:05:01:35:2a:e0:a7:37:fe:72:
         fd:9b:ba:25:7b:d2:6e:f7:04:a9:ca:7b:31:08:62:fe:29:93:
         ed:fb:16:40:87:32:c6:f2:db:9a:44:24:ea:fa:20:73:00:52:
         fc:21:ac:a1:bb:89:e5:be:f9:36:cb:90:0a:11:0f:2f:a4:c0:
         a2:c8:63:c2:4c:1e:57:16:77:77:d4:36:79:a5:76:dd:a2:8b:
         e5:87:75:7d:cd:ae:da:ad:5d:0a:5e:f4:45:da:4e:b9:67:87:
         99:c8:23:ff:84:88:14:32:75:6c:f5:50:59:ae:ab:4b:c8:7e:
         bf:08:0a:b8:4c:f8:ac:80:f6:47:dc:3a:eb:43:d5:83:de:1c:
         f8:fb:08:c8:2e:fa:96:78:51:04:03:c2:15:db:bb:de:e0:c1:
         ab:cf:7b:f8:9b:14:95:53:31:1a:37:0d:cb:9b:d4:f0:3d:66:
         dd:dc:4d:67:e7:02:15:4b:70:e3:8b:12:bb:9c:71:e7:d8:49:
         c9:19:c5:82:13:0b:60:89:8e:96:15:16:8c:05:d0:99:d0:fd:
         aa:8a:6b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:05:01 2025 by rpki-client