This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
File:                     n15P8s7k23qVvPKjrRHJR1dbsaY.mft (raw, json)
Hash identifier:          0E4bbNoo5q4mz0oQiGxRIjCMhwwCZeZu+Eu5WO/dmDQ=
Subject key identifier:   5B:09:DD:3D:ED:99:1E:00:D5:8D:1B:64:5C:A6:A9:BC:A3:31:71:B0
Authority key identifier: 9F:5E:4F:F2:CE:E4:DB:7A:95:BC:F2:A3:AD:11:C9:47:57:5B:B1:A6
Certificate issuer:       /CN=9f5e4ff2cee4db7a95bcf2a3ad11c947575bb1a6
Certificate serial:       019AF19AE36E2F86444B994140C74E76F264
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
Manifest number:          0CE5
Signing time:             Sat 06 Dec 2025 03:00:51 +0000
Manifest this update:     Sat 06 Dec 2025 03:00:51 +0000
Manifest next update:     Sun 07 Dec 2025 03:00:51 +0000
Files and hashes:         1: 1-jitS6EpXiqLjoTy0y90wIH72rI.roa (hash: Rfg5nTBCaEYBRoN4EImwETKxmFJYdYpWUORSCCGtVf4=)
                          2: CoX1lhKeqnywoZzkBVdeBK0K-8E.roa (hash: UeFCTUO9sjJL5Z6FG4W0m09+58Inz20WQtlj2knxqFc=)
                          3: n15P8s7k23qVvPKjrRHJR1dbsaY.crl (hash: 7IP3UqWGk8o5OJuhcNFki8jFOUzmI3+ksjbhSivbeiA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 03:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9a:e3:6e:2f:86:44:4b:99:41:40:c7:4e:76:f2:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f5e4ff2cee4db7a95bcf2a3ad11c947575bb1a6
        Validity
            Not Before: Dec  6 03:00:51 2025 GMT
            Not After : Dec  7 03:00:51 2025 GMT
        Subject: CN=5b09dd3ded991e00d58d1b645ca6a9bca33171b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:02:bd:13:43:12:3f:a4:7f:dc:8c:c8:da:27:
                    99:fa:b0:2e:c0:61:aa:a9:26:46:d6:c3:b2:33:d9:
                    a1:65:fe:c2:68:f7:31:26:9b:52:e4:c0:a3:0a:3e:
                    09:d6:cc:fa:9d:c8:f0:39:9d:98:9b:9d:0b:1d:09:
                    b7:55:b7:e8:58:af:97:fc:25:ac:a6:87:d4:4a:ab:
                    3a:7b:89:de:3a:0f:ca:3b:9f:85:13:8c:65:1b:b4:
                    76:68:2f:db:6c:02:ba:e2:fb:6d:6f:2a:70:7a:5c:
                    e6:0a:d4:bc:37:c3:5b:27:16:d7:83:34:c1:d4:04:
                    5a:5f:aa:c4:ce:36:06:92:10:fa:50:b6:27:67:18:
                    e7:13:30:08:64:2f:73:19:c7:34:6e:66:5d:31:f8:
                    96:85:64:c2:1b:ae:6b:80:51:fa:0d:f5:0e:23:c1:
                    a4:f4:09:7a:59:b2:67:97:06:36:e6:43:5f:d1:9d:
                    dc:8b:ac:72:16:cf:56:86:ea:81:7a:17:ee:a9:d1:
                    1d:70:25:5d:12:ad:73:c7:75:e9:b3:56:f3:b3:55:
                    48:13:f6:e3:65:5d:a5:da:a1:3f:de:8e:31:44:6c:
                    db:b3:80:69:3d:58:af:94:9c:ba:03:d7:26:0a:f0:
                    70:1e:30:d7:3f:b8:0b:4f:1e:8a:fb:0e:58:ea:61:
                    2d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:09:DD:3D:ED:99:1E:00:D5:8D:1B:64:5C:A6:A9:BC:A3:31:71:B0
            X509v3 Authority Key Identifier:
                keyid:9F:5E:4F:F2:CE:E4:DB:7A:95:BC:F2:A3:AD:11:C9:47:57:5B:B1:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:f3:e4:e8:1c:9c:c0:7e:f0:5b:80:87:88:b7:5c:a5:5f:2a:
         24:18:80:60:b7:fe:d3:36:36:07:2f:e7:9d:96:95:b1:76:e9:
         c1:6c:7a:43:f7:ab:ca:69:01:5e:58:b9:d3:13:76:af:bd:74:
         53:c9:5e:41:90:7a:a1:19:9f:8e:bc:3b:02:93:48:dc:cd:72:
         0d:de:f7:28:dc:52:7f:19:ae:03:43:0a:88:db:a0:11:f7:42:
         00:00:b6:2c:cf:ba:68:7d:0f:60:81:c6:17:8f:e5:86:8e:f0:
         a6:0c:7b:fb:28:d7:c1:95:e7:23:0f:11:36:94:b9:98:6b:6f:
         51:38:22:d6:e6:6b:fc:74:39:60:8f:fd:0d:98:6b:69:cf:4a:
         5f:85:2e:2f:86:13:38:06:b3:28:b7:4d:6e:6e:c5:7b:73:44:
         3c:0a:f0:6d:e2:0d:5e:56:03:8f:d5:b1:4b:e6:ff:c3:44:a6:
         6a:76:e7:27:40:52:8c:11:a5:2b:da:95:54:9c:a4:9b:10:c4:
         ef:a0:c3:9a:00:4b:e0:06:a1:aa:5f:8f:76:94:49:f5:2b:68:
         13:cb:c1:d6:62:93:69:df:80:ca:25:01:c8:8a:7a:4e:51:3a:
         81:da:c1:c8:92:40:d7:79:d9:aa:ee:3d:76:eb:93:e5:b9:bb:
         6a:d3:63:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:04:47 2025 by rpki-client