This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft
File:                     t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft (raw, json)
Hash identifier:          zo713tdjQVmyOxJIO1GsGdpOZ0jXhYCbJw6icJ/p3Pw=
Subject key identifier:   79:1F:06:49:E3:28:59:90:39:0B:75:5C:B2:D7:F8:7F:D0:B4:65:8A
Authority key identifier: B7:9C:2D:E3:EB:30:91:80:F4:F5:A5:AF:2D:56:FE:42:58:78:46:48
Certificate issuer:       /CN=b79c2de3eb309180f4f5a5af2d56fe4258784648
Certificate serial:       019AF12E55E93C2312C802DE5242A290A9CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5wt4-swkYD09aWvLVb-Qlh4Rkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft
Manifest number:          0873
Signing time:             Sat 06 Dec 2025 01:02:16 +0000
Manifest this update:     Sat 06 Dec 2025 01:02:16 +0000
Manifest next update:     Sun 07 Dec 2025 01:02:16 +0000
Files and hashes:         1: NPzS7dKaq70IcGX_A1Qcj_ZLSso.roa (hash: NKVUhSy28Mx3aJChPzTkXureREnDmeAOH1iQ7b+r7LU=)
                          2: t5wt4-swkYD09aWvLVb-Qlh4Rkg.crl (hash: C96cj+DJQ4VuQ+ERE+LveKnlqz60yuiQZ+tJZ537B2c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t5wt4-swkYD09aWvLVb-Qlh4Rkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:55:e9:3c:23:12:c8:02:de:52:42:a2:90:a9:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b79c2de3eb309180f4f5a5af2d56fe4258784648
        Validity
            Not Before: Dec  6 01:02:16 2025 GMT
            Not After : Dec  7 01:02:16 2025 GMT
        Subject: CN=791f0649e3285990390b755cb2d7f87fd0b4658a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ac:ca:a7:7b:09:16:54:c1:e5:37:c8:31:3b:
                    77:a3:2a:66:ea:b8:86:d2:7b:58:86:d0:04:73:52:
                    32:5e:85:1e:65:87:ef:ca:b5:a4:f6:fa:84:4f:5b:
                    b4:6b:c3:13:58:92:c2:fc:94:07:22:1c:dc:71:7c:
                    38:d2:43:f0:4c:4d:c7:f0:b7:ae:21:23:e2:c3:07:
                    f9:e7:19:81:a3:e4:b6:25:e5:36:77:a0:d5:15:53:
                    76:93:b7:94:5c:4b:d3:f6:4e:f3:f3:93:19:e0:8b:
                    9f:bf:c1:b9:60:47:89:6f:b0:04:93:d4:d7:b2:31:
                    a0:da:10:8b:d7:9e:d2:b2:3e:9f:10:bc:24:ea:07:
                    de:82:cd:94:e3:9c:a9:3e:21:d3:31:55:59:b6:85:
                    22:b8:a4:6f:ca:e8:67:8b:6e:cb:3b:4f:97:09:2f:
                    63:ac:83:06:81:d7:7f:e1:1b:4f:50:66:0e:94:de:
                    97:95:c8:b8:3c:ac:23:09:fb:f0:c3:1e:ad:25:c8:
                    c9:4c:67:cc:2c:ff:be:08:e1:8a:e7:fe:d0:65:f3:
                    91:9d:9e:10:b2:97:a1:74:c3:59:d2:25:56:df:aa:
                    d0:dc:ed:8a:2a:5e:05:d4:60:24:ad:a2:7c:c2:6c:
                    b6:67:85:92:48:03:ff:2b:9b:ac:b8:a3:88:7f:5b:
                    a0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:1F:06:49:E3:28:59:90:39:0B:75:5C:B2:D7:F8:7F:D0:B4:65:8A
            X509v3 Authority Key Identifier:
                keyid:B7:9C:2D:E3:EB:30:91:80:F4:F5:A5:AF:2D:56:FE:42:58:78:46:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5wt4-swkYD09aWvLVb-Qlh4Rkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:2d:41:c7:76:d3:4a:5b:cd:e3:6a:d5:bd:6b:fe:fb:20:fe:
         68:e1:2f:8b:7b:17:d9:93:2c:b3:96:f0:64:4d:09:c7:ce:b3:
         62:00:72:dd:8e:28:f3:65:16:7a:fb:28:79:95:2c:83:55:d4:
         73:28:15:ad:89:16:37:ed:71:5e:fa:d7:4a:66:85:66:99:5f:
         5a:67:5c:85:a4:96:30:6b:47:a0:47:75:63:49:ea:24:b2:e6:
         7f:56:b8:fb:bb:fb:b1:72:0a:11:d8:8e:a8:67:a8:74:a3:0f:
         ed:e1:16:bf:df:77:67:c5:da:89:43:8a:a0:0c:ca:fb:7a:fa:
         73:5c:e5:54:9c:6e:ff:19:9c:26:01:e7:b0:f6:22:f4:21:d1:
         a4:0d:86:fb:b5:4e:b1:9f:98:78:3d:36:d0:c2:91:12:cf:91:
         a6:07:41:c8:6b:d6:c5:99:0f:15:21:b0:24:c1:a4:e1:24:13:
         25:4a:1f:ef:33:46:e8:5a:0d:e4:f2:54:41:98:ee:69:90:cf:
         51:61:89:ae:2a:45:60:14:69:53:1e:79:8d:1f:f8:2b:77:01:
         be:06:59:e3:de:49:34:59:70:0a:1c:33:89:e4:90:19:5f:3b:
         53:41:65:03:5b:f8:b5:95:18:67:87:5f:60:8b:a1:a3:0f:0a:
         2f:5b:f5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:24:27 2025 by rpki-client