This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
File:                     5wb8lykDS_sEZN1MmF8UuiEOgeM.mft (raw, json)
Hash identifier:          9dMwx3sjiZEGfdEiTcR5Wya6HVZzXRjU1EFJrrgqo+w=
Subject key identifier:   FD:DD:11:C8:24:AA:37:B7:05:6E:B8:41:CE:39:DB:33:F9:96:00:8F
Authority key identifier: E7:06:FC:97:29:03:4B:FB:04:64:DD:4C:98:5F:14:BA:21:0E:81:E3
Certificate issuer:       /CN=e706fc9729034bfb0464dd4c985f14ba210e81e3
Certificate serial:       019AF1646FB5F5062BA42F5AB681DE44AB0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
Manifest number:          151E
Signing time:             Sat 06 Dec 2025 02:01:22 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:22 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:22 +0000
Files and hashes:         1: 5wb8lykDS_sEZN1MmF8UuiEOgeM.crl (hash: Nr1JE/073dWHgSofEzzoL9FOYugvSrE5f7JJHIme2Do=)
                          2: b37_mvewRVwCg1bn4EBDzO-L-T4.roa (hash: Se2kErf9iBL4UpQAgg1UiulAV/XRVJ5FdDxPc7oRHW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:6f:b5:f5:06:2b:a4:2f:5a:b6:81:de:44:ab:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e706fc9729034bfb0464dd4c985f14ba210e81e3
        Validity
            Not Before: Dec  6 02:01:22 2025 GMT
            Not After : Dec  7 02:01:22 2025 GMT
        Subject: CN=fddd11c824aa37b7056eb841ce39db33f996008f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c0:25:38:69:98:4a:37:0e:dd:f3:25:74:45:
                    7b:c8:b3:96:cd:67:3e:80:bd:32:8f:08:c5:46:1a:
                    65:63:62:38:f7:73:ca:c9:fb:bd:15:fb:30:48:a7:
                    6c:a5:10:1b:11:34:fa:f4:fc:45:8c:73:cd:48:66:
                    c2:49:b8:f8:81:cb:06:52:ca:68:cd:28:cb:58:ce:
                    63:fb:4f:05:88:47:ad:13:3a:3e:a5:e2:30:22:d8:
                    56:90:9b:47:8f:65:12:e4:0c:75:4a:f1:c9:ce:61:
                    8b:2f:90:5c:69:98:40:e4:52:61:68:58:85:47:5f:
                    2b:33:40:88:7e:55:93:a8:32:f0:96:8e:29:84:ea:
                    da:76:cb:88:5a:32:fd:ed:d2:19:02:a1:39:9c:c8:
                    b0:2b:88:9d:e0:39:b2:b1:ae:5e:09:97:1f:bd:bc:
                    51:f7:8f:9d:6d:0e:3b:a5:ae:29:ec:45:95:68:0c:
                    77:34:2b:68:c6:7d:09:8f:89:3d:70:8c:c1:cb:f1:
                    ab:00:93:ee:cf:0c:d3:9b:78:93:d4:e2:ee:eb:d5:
                    df:f4:e2:38:a0:15:2d:3c:91:bc:43:85:d8:31:5d:
                    ef:fa:69:7b:4e:96:12:22:c7:ba:85:3c:fa:e4:35:
                    3e:04:d4:3d:56:91:39:73:c7:a8:ad:87:5e:fc:ed:
                    af:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DD:11:C8:24:AA:37:B7:05:6E:B8:41:CE:39:DB:33:F9:96:00:8F
            X509v3 Authority Key Identifier:
                keyid:E7:06:FC:97:29:03:4B:FB:04:64:DD:4C:98:5F:14:BA:21:0E:81:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:4b:8b:0c:b8:36:5e:4c:fe:6e:11:38:02:2d:e8:d8:f3:23:
         27:82:e2:f7:64:af:66:2b:8e:40:95:b2:77:29:64:e1:a6:f0:
         44:e9:22:b4:72:33:68:9d:6f:c5:14:e5:ab:22:c4:a1:e7:f0:
         0c:3a:45:13:84:db:0d:a1:88:c0:3f:06:ae:0f:27:4a:d0:98:
         32:41:82:87:e4:e9:45:ad:f1:9b:7c:de:b8:ea:83:af:06:e8:
         3d:1d:83:8e:03:e2:b6:8a:93:8e:b4:31:d9:34:47:84:95:9c:
         7c:90:d2:14:c2:0a:db:45:43:5f:ba:7a:35:8c:c0:aa:74:6a:
         6c:19:b6:d1:d9:88:0e:95:8b:77:66:88:53:8f:14:79:86:2d:
         06:3c:b5:d1:7c:1f:41:8d:36:8e:74:a3:6f:ff:00:1e:c1:50:
         88:a5:d4:b1:88:d6:68:37:22:ea:3f:04:e0:37:88:2e:ea:c5:
         14:09:cc:cf:1c:57:c5:21:4e:ef:58:cd:cb:89:1d:f2:1b:d4:
         90:95:f1:e6:0f:12:08:3a:2e:32:89:8d:f4:52:fb:2a:94:ba:
         b0:cd:60:f1:f9:63:14:d3:2d:5e:33:6e:42:fd:14:ef:ce:1f:
         e3:65:8d:15:97:aa:ba:3e:43:7d:2a:14:d0:4e:4e:a1:ad:38:
         13:e8:c8:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxZG+19QYrpC9atoHeRKsOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MDZmYzk3MjkwMzRiZmIwNDY0ZGQ0Yzk4NWYxNGJhMjEw
ZTgxZTMwHhcNMjUxMjA2MDIwMTIyWhcNMjUxMjA3MDIwMTIyWjAzMTEwLwYDVQQD
EyhmZGRkMTFjODI0YWEzN2I3MDU2ZWI4NDFjZTM5ZGIzM2Y5OTYwMDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48AlOGmYSjcO3fMldEV7yLOWzWc+
gL0yjwjFRhplY2I493PKyfu9FfswSKdspRAbETT69PxFjHPNSGbCSbj4gcsGUspo
zSjLWM5j+08FiEetEzo+peIwIthWkJtHj2US5Ax1SvHJzmGLL5BcaZhA5FJhaFiF
R18rM0CIflWTqDLwlo4phOradsuIWjL97dIZAqE5nMiwK4id4Dmysa5eCZcfvbxR
94+dbQ47pa4p7EWVaAx3NCtoxn0Jj4k9cIzBy/GrAJPuzwzTm3iT1OLu69Xf9OI4
oBUtPJG8Q4XYMV3v+ml7TpYSIse6hTz65DU+BNQ9VpE5c8eorYde/O2viwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3dEcgkqje3BW64Qc452zP5lgCPMB8GA1UdIwQY
MBaAFOcG/JcpA0v7BGTdTJhfFLohDoHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXdiOGx5a0RTX3NFWk4xTW1GOFV1aUVPZ2VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80NzYzODMtZjZkYS00ZTBlLThlMTIt
ZDJkY2YwNWQzMzc2LzEvNXdiOGx5a0RTX3NFWk4xTW1GOFV1aUVPZ2VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC80NzYzODMtZjZkYS00ZTBlLThlMTItZDJkY2YwNWQzMzc2
LzEvNXdiOGx5a0RTX3NFWk4xTW1GOFV1aUVPZ2VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEkuLDLg2
Xkz+bhE4Ai3o2PMjJ4Li92SvZiuOQJWydylk4abwROkitHIzaJ1vxRTlqyLEoefw
DDpFE4TbDaGIwD8Grg8nStCYMkGCh+TpRa3xm3zeuOqDrwboPR2DjgPitoqTjrQx
2TRHhJWcfJDSFMIK20VDX7p6NYzAqnRqbBm20dmIDpWLd2aIU48UeYYtBjy10Xwf
QY02jnSjb/8AHsFQiKXUsYjWaDci6j8E4DeILurFFAnMzxxXxSFO71jNy4kd8hvU
kJXx5g8SCDouMomN9FL7KpS6sM1g8fljFNMtXjNuQv0U784f42WNFZequj5DfSoU
0E5Ooa04E+jIpA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:19:10 2025 by rpki-client