This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.mft
File:                     5v-BaTR_UwcrLRGtGNmiU8r--uc.mft (raw, json)
Hash identifier:          MtcK7pP4lGvW4IYxcUgFdkUKp+0z2midrESNr1yjzh0=
Subject key identifier:   8D:EB:57:50:1A:10:6D:C3:D3:E0:AC:2A:BC:AA:A4:5A:08:58:96:BB
Authority key identifier: E6:FF:81:69:34:7F:53:07:2B:2D:11:AD:18:D9:A2:53:CA:FE:FA:E7
Certificate issuer:       /CN=e6ff8169347f53072b2d11ad18d9a253cafefae7
Certificate serial:       019AF19B595A0FF644219A7058CD06013E3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5v-BaTR_UwcrLRGtGNmiU8r--uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.mft
Manifest number:          0637
Signing time:             Sat 06 Dec 2025 03:01:21 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:21 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:21 +0000
Files and hashes:         1: 5v-BaTR_UwcrLRGtGNmiU8r--uc.crl (hash: Re6i/XQ5Ksev8LDtTvtAuUBbjfdQQHfbMlRbWB9yGOU=)
                          2: wTQvHz6KrEBh22NnZfSVSbP_3L0.roa (hash: FPUhMtrstm1Ac2XI6rl3vCrIvxuS83fDR4A5ahN+U+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5v-BaTR_UwcrLRGtGNmiU8r--uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:59:5a:0f:f6:44:21:9a:70:58:cd:06:01:3e:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ff8169347f53072b2d11ad18d9a253cafefae7
        Validity
            Not Before: Dec  6 03:01:21 2025 GMT
            Not After : Dec  7 03:01:21 2025 GMT
        Subject: CN=8deb57501a106dc3d3e0ac2abcaaa45a085896bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:dd:03:50:8b:11:0c:3a:65:ea:8a:00:eb:ea:
                    d2:da:b8:54:2a:d6:ee:de:5a:c5:81:f2:f7:28:56:
                    8f:b8:14:af:23:93:12:6b:f9:d6:01:56:77:1f:da:
                    ba:47:6b:04:03:94:48:3f:cd:30:1e:3d:c6:f7:38:
                    75:84:6c:e3:c2:b4:55:24:49:53:57:aa:d5:64:ec:
                    a4:d2:69:0a:6b:3b:8e:8e:0d:a4:e1:03:6a:52:4d:
                    63:ba:04:91:83:13:42:82:59:71:b1:05:12:ae:a1:
                    7b:8c:d1:db:89:33:4e:33:5a:85:d7:f3:3c:92:65:
                    17:3d:96:ab:ad:98:cd:4a:ef:39:1a:d6:94:64:19:
                    87:b6:6e:d6:3b:a3:e0:96:69:04:fb:6c:c6:2f:72:
                    5f:e1:2a:41:5c:8f:ef:27:68:42:97:d7:d7:70:25:
                    9e:b3:a7:05:2e:e2:d2:f2:e3:f0:22:fa:58:63:7f:
                    4c:e7:07:56:92:7f:65:c5:f9:e4:4b:d5:79:b4:39:
                    af:2e:06:fd:93:81:03:66:55:1d:d1:ba:63:58:dd:
                    db:f4:af:4a:dd:1c:ae:97:cd:1f:b5:d3:86:41:fd:
                    70:a7:23:81:62:6b:32:34:c0:00:8c:b4:04:68:e5:
                    99:aa:bf:e9:fe:1a:00:63:af:ad:22:fe:12:d7:cd:
                    0c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:EB:57:50:1A:10:6D:C3:D3:E0:AC:2A:BC:AA:A4:5A:08:58:96:BB
            X509v3 Authority Key Identifier:
                keyid:E6:FF:81:69:34:7F:53:07:2B:2D:11:AD:18:D9:A2:53:CA:FE:FA:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5v-BaTR_UwcrLRGtGNmiU8r--uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:6d:bc:5e:fe:1e:b0:58:d3:a8:4c:04:12:06:63:ef:55:ad:
         66:6a:12:6b:95:51:69:69:ed:2b:0a:3d:f5:64:15:a4:1e:a7:
         48:10:52:9f:89:b0:5d:45:e1:92:da:0f:5c:58:ca:da:61:d1:
         5c:e2:d8:36:10:75:36:0a:8c:35:5d:48:03:56:5e:17:12:ba:
         a7:54:a3:be:aa:c3:58:95:16:db:b6:76:44:78:99:52:3f:3f:
         50:8f:f1:36:2a:b2:ef:55:a4:6b:ae:53:e8:d7:97:d3:63:4c:
         fd:f1:f2:c0:5d:cd:08:11:de:cc:7c:08:7c:37:d6:38:54:c6:
         72:d4:09:80:84:c8:86:7d:3f:8c:14:79:7b:b8:d2:26:30:5d:
         a9:4c:5f:6c:2b:75:73:b6:17:c6:75:91:09:09:ff:b9:0f:71:
         e6:fe:32:bd:39:6f:a3:03:36:54:d6:7a:1c:4d:f7:54:f3:33:
         41:ce:0b:09:d0:9a:94:2d:3e:8a:69:2d:d9:d3:27:60:80:f4:
         96:02:7f:2a:f8:ae:ce:a2:54:a4:e5:7c:76:b1:db:cd:c0:8b:
         3b:e7:4d:db:c5:8e:59:dd:6d:61:1c:65:c0:2d:6c:45:60:68:
         13:65:4d:68:52:68:62:2b:90:3c:aa:96:a0:0d:d5:79:60:98:
         6c:57:5c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:28:37 2025 by rpki-client