This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
File:                     mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft (raw, json)
Hash identifier:          TvmdnfeQJ6F0Bd6gf2CpoznrCOX2Hm+96MGEbRkYmG0=
Subject key identifier:   62:B2:3B:0D:9E:C8:ED:9E:5C:4C:E3:40:F5:A0:72:49:76:7E:C6:1E
Authority key identifier: 9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1
Certificate issuer:       /CN=9a7edeac0c6c20ea49d492990e4858541d190ff1
Certificate serial:       019AF42E80E5CC8802EA030027793EC72A4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
Manifest number:          14A5
Signing time:             Sat 06 Dec 2025 15:01:19 +0000
Manifest this update:     Sat 06 Dec 2025 15:01:19 +0000
Manifest next update:     Sun 07 Dec 2025 15:01:19 +0000
Files and hashes:         1: 34VAKZ3gTB0K6y5Jn98OpVnf6K0.roa (hash: 0+PPWp0o1/rwBJiAmqaqRlxFY24T5j6RDdie2DfGC7Q=)
                          2: CqJnQHuWTrr1JOb1x2qlCn7qYBQ.roa (hash: raq5ehc6BfIUJsoK2h14SXHgtvt48xPVADOcv/2fuZ8=)
                          3: N1jgADyUTzZVwypKV4hmJUHKrXY.roa (hash: Qy4oSTgjweNPQS1JWknF5IN4kbJvVHFhsoiURw/KHeY=)
                          4: mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl (hash: y/ucHPKSWucl1jfuRJhFQoUIUWOmn8bUFIJnFBZ7aiE=)
                          5: n5tnQjmPsSAa7e0U_BISzqIEQuY.roa (hash: MzEMfBEyS0reuH82ojDXQdP0KgBQQ3sK4Mxn6oyxx3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:2e:80:e5:cc:88:02:ea:03:00:27:79:3e:c7:2a:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a7edeac0c6c20ea49d492990e4858541d190ff1
        Validity
            Not Before: Dec  6 15:01:19 2025 GMT
            Not After : Dec  7 15:01:19 2025 GMT
        Subject: CN=62b23b0d9ec8ed9e5c4ce340f5a07249767ec61e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c3:52:5a:9a:aa:8c:3c:6f:24:0f:e5:2d:db:
                    ab:84:25:b1:be:8d:5e:72:df:9d:f7:9b:1a:8c:1d:
                    ac:f5:df:9a:9c:e6:9d:5a:e5:0e:d2:e5:d8:8c:5a:
                    7a:03:17:22:2b:d1:3f:d1:4b:5c:92:c7:8d:ca:5d:
                    12:68:e5:40:5c:6a:7e:bc:59:39:2d:c6:f0:e6:ed:
                    8c:e9:3e:f0:ea:3d:33:15:7c:b7:3d:e8:dc:76:ee:
                    d4:45:c7:86:5f:0c:8b:7f:aa:5e:94:76:38:67:ae:
                    82:32:1e:10:01:aa:5c:1f:2e:96:f1:12:d7:75:c3:
                    71:2d:cc:ee:88:5b:f8:11:d1:c6:88:c8:e6:fc:5b:
                    a4:37:f0:81:8e:11:97:88:b2:c2:ea:2b:33:e4:bd:
                    da:97:8b:58:26:69:4a:e4:89:26:ce:d3:17:f4:f3:
                    b6:b9:8a:fd:e3:26:56:c3:35:a3:df:41:ab:55:9c:
                    c3:06:09:3a:35:75:ec:4a:40:4d:00:58:f9:a0:a8:
                    8b:1c:04:22:8a:db:0c:e4:86:9d:2d:2c:8a:56:06:
                    4e:99:11:59:9b:0d:16:17:6e:bf:94:4d:29:07:8f:
                    3d:4b:e2:43:ff:6b:b8:5c:29:e5:4b:86:33:b9:20:
                    94:fa:a3:54:4a:d4:47:f7:4c:4a:54:7b:f7:c7:09:
                    5f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B2:3B:0D:9E:C8:ED:9E:5C:4C:E3:40:F5:A0:72:49:76:7E:C6:1E
            X509v3 Authority Key Identifier:
                keyid:9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:0b:82:34:e7:3c:54:81:f4:35:14:a8:1f:3c:55:de:6b:67:
         1c:05:61:6f:d9:df:5d:b5:65:2f:91:03:b1:0f:4b:5d:88:42:
         21:ab:18:39:b6:8b:fc:43:0e:0e:f0:c9:88:6a:f7:33:94:ce:
         8f:98:40:03:d1:a9:37:c4:91:72:9b:f0:ca:21:a9:f4:e8:8e:
         a8:e1:dc:55:8b:46:0e:1c:26:90:ed:67:be:46:81:26:2f:ff:
         86:35:6e:45:9f:ae:ed:56:8e:2f:ae:df:f1:85:19:98:93:b1:
         a8:89:18:88:a7:4f:1e:43:84:af:97:4b:8a:d5:46:e8:5e:56:
         95:b8:25:61:15:2c:a4:b9:2e:5b:2c:c9:ac:0a:14:9d:ff:0c:
         d9:96:44:46:21:02:c6:ad:2b:0d:4f:2d:d6:f4:19:22:86:e0:
         35:b8:41:35:0d:04:34:2c:75:b9:0e:f7:6b:24:b5:c3:53:24:
         d6:62:0d:40:4a:9a:4c:bf:61:7a:63:54:8a:a4:4b:fb:be:84:
         44:97:eb:21:29:c9:5e:96:49:4c:6e:58:01:0b:7d:4f:78:34:
         89:e7:ee:a7:ad:a5:93:77:93:72:f9:60:69:6d:9a:76:8a:d2:
         4f:a1:4e:40:6e:8a:b0:72:8d:bd:d8:16:08:6c:26:91:2a:85:
         f6:b8:86:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:43:58 2025 by rpki-client