This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/E-p4so8FT3L1Imrj7EVJgO0qEMk.mft
File:                     E-p4so8FT3L1Imrj7EVJgO0qEMk.mft (raw, json)
Hash identifier:          tClLeH+Aeb83AUxtYMV4JVTAPykwzoZpH8iyjjBdMYQ=
Subject key identifier:   5B:59:32:A6:07:87:63:75:1C:F0:04:A2:74:BB:5A:16:5A:DD:4D:45
Authority key identifier: 13:EA:78:B2:8F:05:4F:72:F5:22:6A:E3:EC:45:49:80:ED:2A:10:C9
Certificate issuer:       /CN=13ea78b28f054f72f5226ae3ec454980ed2a10c9
Certificate serial:       019AF2764F1F94C159540371414B6B7CB564
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-p4so8FT3L1Imrj7EVJgO0qEMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/E-p4so8FT3L1Imrj7EVJgO0qEMk.mft
Manifest number:          1489
Signing time:             Sat 06 Dec 2025 07:00:31 +0000
Manifest this update:     Sat 06 Dec 2025 07:00:31 +0000
Manifest next update:     Sun 07 Dec 2025 07:00:31 +0000
Files and hashes:         1: 5KIIVyjGIk4Y46LFCgXlsbG0ceU.roa (hash: Xz1vxoc/2JzTYgWFNLP2b5HhiG4cOh6ASEmZ5MSoawI=)
                          2: 7Cbk56YMtk4eeHszepWGAY95j6o.roa (hash: bEel6cKTonKjgyIxRSSsFeCeLhlbBhq28O8ZUY+SPtI=)
                          3: E-p4so8FT3L1Imrj7EVJgO0qEMk.crl (hash: qH8/8yH5f4CqoVILxs92nponLLjQ1uGMRtgrbrXlgwo=)
                          4: hWX6adi1DHSjSUNi9HMTwr9YdEw.roa (hash: kJxS0MWK94QBq5QtXuWItPMzDt45pJLFeF1GUOWbjzs=)
                          5: qgj31LRN4cWBU3Ai7i2PLzFRJvY.roa (hash: uHmLYi1uCCoCGb9+gbErKo7gEZkoZurGlEJ/eIy9P8I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/E-p4so8FT3L1Imrj7EVJgO0qEMk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/E-p4so8FT3L1Imrj7EVJgO0qEMk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-p4so8FT3L1Imrj7EVJgO0qEMk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:4f:1f:94:c1:59:54:03:71:41:4b:6b:7c:b5:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ea78b28f054f72f5226ae3ec454980ed2a10c9
        Validity
            Not Before: Dec  6 07:00:31 2025 GMT
            Not After : Dec  7 07:00:31 2025 GMT
        Subject: CN=5b5932a6078763751cf004a274bb5a165add4d45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b1:96:1b:bb:9d:82:dc:37:bb:f1:69:35:5e:
                    18:e8:f9:c3:3a:69:b3:eb:ee:dd:95:2c:db:8e:53:
                    75:7d:53:29:86:3a:1b:7e:0b:2d:34:16:d2:8a:b5:
                    78:12:49:ee:d4:75:a6:ee:b8:dc:ca:32:9b:6d:9a:
                    14:cb:1b:2a:f0:ad:96:d1:0d:24:c6:43:e9:98:69:
                    45:f1:d0:3e:43:91:b1:c0:d6:ae:0c:0c:d4:1b:37:
                    3d:75:5a:11:c5:f0:83:51:12:99:d5:fc:06:62:4c:
                    d8:83:4a:dd:fa:9e:d2:7a:63:33:ff:ee:92:63:97:
                    42:50:4b:6a:79:fb:ce:aa:e2:d6:bb:d1:49:a5:b4:
                    30:e3:aa:65:ea:f0:ba:06:62:ac:34:07:16:3f:63:
                    96:63:84:8d:1f:39:c9:84:12:24:53:c3:54:24:48:
                    21:04:68:d7:43:11:7a:d1:38:71:03:71:9a:0d:2d:
                    c3:7d:45:89:eb:87:61:ec:a2:36:37:d3:07:4d:54:
                    90:09:bf:29:f7:9a:92:b7:23:bf:22:af:20:36:1c:
                    0e:69:c8:12:48:7a:f3:fc:c8:49:7f:4b:e1:9a:7b:
                    5b:58:5b:bd:0f:a0:11:67:a6:d1:ec:a3:d2:07:cc:
                    a2:54:8a:30:4f:1a:a2:99:e0:b3:c1:db:4b:cb:a5:
                    49:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:59:32:A6:07:87:63:75:1C:F0:04:A2:74:BB:5A:16:5A:DD:4D:45
            X509v3 Authority Key Identifier:
                keyid:13:EA:78:B2:8F:05:4F:72:F5:22:6A:E3:EC:45:49:80:ED:2A:10:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-p4so8FT3L1Imrj7EVJgO0qEMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/E-p4so8FT3L1Imrj7EVJgO0qEMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/E-p4so8FT3L1Imrj7EVJgO0qEMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:77:d1:2a:e1:28:1d:31:15:d8:ec:d8:27:33:5c:af:98:ca:
         c1:88:37:4c:16:66:11:e0:5e:1b:32:27:93:34:73:84:10:b9:
         1c:e4:e7:4d:91:1f:21:7d:22:7a:4a:c8:04:f8:66:75:be:71:
         e3:ad:fe:70:f0:43:27:a1:aa:31:e8:8b:91:c2:e5:3f:a8:a7:
         7d:f6:62:14:30:6d:56:1f:89:73:ac:cd:52:8a:5d:84:69:cb:
         e6:38:15:99:93:be:65:95:60:fc:e6:16:45:71:58:ac:9d:51:
         bb:f1:a9:61:98:8a:a3:5a:7e:1e:4d:92:a8:e3:36:32:34:18:
         40:28:8d:96:ad:eb:47:bb:b8:30:0a:1f:d5:09:3a:18:6c:50:
         7a:8a:c5:4d:67:e2:c5:46:a0:77:30:14:a3:a2:a9:97:e0:2e:
         65:84:fb:3d:8c:4f:42:44:c1:ac:1c:87:b5:49:23:14:26:08:
         0d:ef:1a:9e:29:1d:e3:8e:c3:66:48:2d:39:b9:3a:17:07:34:
         b6:92:7f:ae:d0:43:78:bb:cd:d1:ab:66:c1:7c:ef:8e:03:f9:
         70:3e:f9:e7:22:28:7b:05:ba:f0:fa:6c:3a:2d:a1:5b:00:0e:
         13:19:bc:1b:60:ce:1e:dc:2d:5c:69:06:c3:6d:93:97:4c:00:
         d9:cb:d1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:12:58 2025 by rpki-client