This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
File:                     5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft (raw, json)
Hash identifier:          MLuqQhkt6OB2i1e+8aQrFXs6UsfxPffV6NqnF5xKRts=
Subject key identifier:   04:33:E7:E0:DE:2E:60:7D:F3:6C:52:0E:29:9B:22:A3:DC:D3:89:C2
Authority key identifier: E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA
Certificate issuer:       /CN=e46a3f838688843758d28057007dc6cd2898ecca
Certificate serial:       019AF577C14886584FB7F6DD6AA054F639F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
Manifest number:          1471
Signing time:             Sat 06 Dec 2025 21:00:57 +0000
Manifest this update:     Sat 06 Dec 2025 21:00:57 +0000
Manifest next update:     Sun 07 Dec 2025 21:00:57 +0000
Files and hashes:         1: 0x1lqWA0KZOHOORQhJDoeRssVQ0.roa (hash: 7p6FxiYzO+LvJNJvXWwPz8wlUJ/sKTNUZeXhx0HXHCY=)
                          2: 5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl (hash: fNKZjB3Fv2oB0LBPtDRd3VsBNmHLc/MT4VYkHF3+ZLQ=)
                          3: K79jAuNL4y91z3YYrxbmadc1H3A.roa (hash: Ce4Ha+miko3MGw4iNBYx8goUwnDzuBC5+eb8kUBjaGo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:77:c1:48:86:58:4f:b7:f6:dd:6a:a0:54:f6:39:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e46a3f838688843758d28057007dc6cd2898ecca
        Validity
            Not Before: Dec  6 21:00:57 2025 GMT
            Not After : Dec  7 21:00:57 2025 GMT
        Subject: CN=0433e7e0de2e607df36c520e299b22a3dcd389c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a4:46:c2:04:19:cb:82:b9:eb:ac:b6:00:0d:
                    0a:de:4d:a5:93:dc:cf:d9:a4:51:0c:25:b1:43:ca:
                    b2:3d:06:10:0c:00:b5:33:2c:57:5c:8f:d3:ed:15:
                    f1:b9:d0:6b:f1:37:e0:24:43:ac:80:27:90:94:bf:
                    09:97:38:ec:18:45:25:83:37:fc:66:45:74:c9:61:
                    f7:b4:3c:bf:51:67:40:21:16:89:ff:e0:72:0b:e2:
                    f2:51:75:99:85:83:45:41:b2:38:11:d8:fd:f6:42:
                    fa:a8:e2:fb:ee:6b:26:af:01:b6:a8:c1:54:43:d7:
                    56:b1:d1:73:3b:75:92:02:9d:91:44:02:bc:d4:eb:
                    ff:fa:c3:d1:bc:af:29:4a:ee:e5:2b:ab:3a:f8:6d:
                    2f:a7:6e:be:fd:c4:6e:3e:63:07:d2:58:cf:cb:1a:
                    0c:29:23:f6:10:fb:84:95:39:26:db:31:53:ea:03:
                    09:d4:75:be:bd:80:d7:a2:39:61:dc:b5:d3:5f:8d:
                    9a:4d:7d:5a:00:6f:88:8b:77:44:ae:bc:b5:19:5f:
                    71:24:35:1c:0d:59:2a:01:48:ab:d9:99:17:e2:33:
                    84:ae:f5:3d:7c:24:38:d1:17:63:f1:e5:26:9a:68:
                    2b:dc:ba:7f:39:5e:b5:bc:1e:86:17:d6:6a:0d:f9:
                    0f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:33:E7:E0:DE:2E:60:7D:F3:6C:52:0E:29:9B:22:A3:DC:D3:89:C2
            X509v3 Authority Key Identifier:
                keyid:E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:de:45:85:0c:86:b2:ee:69:0e:5c:37:2f:48:65:f6:63:ba:
         bc:0c:8b:19:f9:6b:a0:13:32:32:54:99:ed:31:8b:53:87:c2:
         c4:ad:65:57:6b:82:cb:8b:c4:b6:42:01:93:d2:d8:8c:1a:e0:
         52:9c:df:a9:51:fb:35:d5:98:19:74:4d:8d:c4:7e:89:47:f5:
         a2:64:24:9a:65:dc:13:c8:4a:4f:89:8b:55:20:60:60:be:4e:
         61:e6:8a:da:c7:e8:30:15:47:b0:fa:fe:18:d4:3f:fd:53:a8:
         44:91:23:48:d2:d3:07:89:79:e0:29:fe:02:54:4a:c2:de:94:
         eb:2e:53:0f:45:4c:85:d8:5b:6d:b7:91:68:e8:8b:88:33:d4:
         74:0b:a3:f9:59:24:3a:38:12:d9:b2:12:a9:a2:8a:42:f2:13:
         a1:6f:39:8f:6e:b9:e0:1c:70:4e:51:8d:8a:f1:66:77:5b:23:
         74:fb:17:a1:ca:e5:b7:62:ef:ad:38:f1:9b:db:eb:e7:f7:af:
         79:67:93:58:35:3b:61:95:0b:c3:a5:76:5c:7e:2d:b6:36:59:
         57:d7:72:f0:35:42:3e:2f:d1:33:5b:e3:d6:13:40:ea:6a:f8:
         88:93:7e:5e:4f:6b:d4:d7:7e:db:1a:5b:60:3d:32:1a:3a:4a:
         62:2d:48:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:38:25 2025 by rpki-client