This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
File:                     0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft (raw, json)
Hash identifier:          wcg6O4w4kRG3dVrMMDypWtvrXyCnKf9Vz3rcgau3TME=
Subject key identifier:   B3:DC:C2:B2:56:8F:EB:D9:AD:D9:F9:75:A7:44:DF:6C:5E:F9:23:81
Authority key identifier: D2:6E:45:38:F1:DD:EA:77:F5:73:96:BB:93:B9:07:F1:52:DF:69:7C
Certificate issuer:       /CN=d26e4538f1ddea77f57396bb93b907f152df697c
Certificate serial:       019B35D78CA312CAC7BC5059C37ED0FCF17F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
Manifest number:          056D
Signing time:             Fri 19 Dec 2025 09:01:17 +0000
Manifest this update:     Fri 19 Dec 2025 09:01:17 +0000
Manifest next update:     Sat 20 Dec 2025 09:01:17 +0000
Files and hashes:         1: 0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl (hash: a5J3mqzkMxGFDXMMyN1OwxUvNwRARsWkLe80Hr5+Sdw=)
                          2: NJkr6UX1dyZbz9hAAHSEva9N1dU.roa (hash: dH1+iQ8jrIWNeK4bcaaw6PWPrPpzci2xfb2T6H4KeWY=)
                          3: nh7sfAMY2Tccb18ce2fpxnrtx8Q.roa (hash: b96JAOO8n31SIeeTv1ll8vmQplePANc0Xbj3yOfw8j0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 07:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:35:d7:8c:a3:12:ca:c7:bc:50:59:c3:7e:d0:fc:f1:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d26e4538f1ddea77f57396bb93b907f152df697c
        Validity
            Not Before: Dec 19 09:01:17 2025 GMT
            Not After : Dec 20 09:01:17 2025 GMT
        Subject: CN=b3dcc2b2568febd9add9f975a744df6c5ef92381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0d:e1:58:0d:fc:78:a0:47:e6:0b:57:51:ab:
                    c4:d6:09:83:d7:6e:cb:28:3b:f9:91:46:e0:c6:d8:
                    58:97:92:35:bd:76:27:93:b6:67:3b:5c:05:36:36:
                    69:85:b4:0b:85:b4:d3:56:d5:90:1a:8b:1e:f1:d0:
                    bd:25:87:4c:3d:f9:6e:8e:60:7a:99:94:68:d0:cd:
                    3e:38:4f:37:3d:7b:43:d6:26:08:d7:31:b6:93:48:
                    dc:25:83:6f:5f:b8:58:aa:ee:2a:00:ab:5b:fd:7f:
                    18:64:1b:1c:b1:76:b0:99:c0:a5:b7:8e:27:fe:da:
                    bb:61:db:70:26:85:4c:fc:fc:bd:4b:f0:d1:41:18:
                    b0:2b:3c:99:28:06:36:6c:c8:d4:fb:b5:09:33:38:
                    74:01:ec:7c:4b:fc:c8:79:3d:a3:22:42:97:93:0c:
                    73:42:b1:e7:80:86:74:e4:a8:b0:f3:57:24:5b:e9:
                    47:c0:7e:77:51:8c:b6:48:cc:76:3e:d5:34:ad:bf:
                    be:3a:44:6d:f6:c0:31:71:8b:1d:60:aa:1d:0f:26:
                    b2:6c:b7:a7:26:f9:7c:47:cf:cb:01:be:e1:62:e1:
                    63:28:c5:a5:a6:2d:1d:c6:95:e2:fb:83:23:c7:d8:
                    6b:ce:0b:e0:eb:99:bc:ed:ff:de:9c:9e:fe:13:09:
                    42:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DC:C2:B2:56:8F:EB:D9:AD:D9:F9:75:A7:44:DF:6C:5E:F9:23:81
            X509v3 Authority Key Identifier:
                keyid:D2:6E:45:38:F1:DD:EA:77:F5:73:96:BB:93:B9:07:F1:52:DF:69:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:3f:8f:5a:cf:2e:42:ab:c1:c4:a9:77:a6:a5:f2:53:ba:1b:
         f2:65:f9:de:4a:79:57:93:80:54:8c:ee:cd:a8:06:39:d5:b5:
         c8:f7:b1:10:a1:73:2f:d8:5a:43:28:90:d9:fc:77:31:07:9e:
         02:94:ba:25:17:76:be:47:e6:d3:6b:0d:79:f2:60:02:15:47:
         b4:ec:c8:0c:04:68:12:16:c8:07:92:be:b3:0b:b2:f3:e0:10:
         d5:8f:5a:87:0a:d9:f4:07:f3:9b:4e:66:c4:4c:93:d0:3c:93:
         08:53:5a:35:47:39:46:32:9f:58:a9:ff:6b:b2:7c:23:ab:57:
         a6:c9:6d:b1:8c:65:03:ed:eb:9b:0f:e9:5c:e2:75:56:be:86:
         e6:6c:2b:c8:cb:0f:0d:0c:18:20:3d:16:c4:6c:06:26:a9:ae:
         68:10:98:24:dd:4f:80:35:e8:ed:cb:72:51:c0:b8:33:73:25:
         ee:df:f6:fa:32:50:8a:48:4a:a7:a3:f0:05:d8:fd:d6:4b:66:
         15:3f:08:c3:01:1e:fd:bd:be:e6:2b:5f:ee:b3:a0:3d:e3:09:
         c5:f7:0a:f4:05:0f:34:43:66:8e:99:2c:54:18:2b:e1:e3:28:
         76:c5:26:46:70:2e:fb:67:61:39:47:ff:80:d9:13:a8:13:49:
         99:c9:2e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 13:42:16 2025 by rpki-client