This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.mft
File:                     5_7U53ggnDyuk9S3bTUHBEYsOqs.mft (raw, json)
Hash identifier:          QbH0571Qi20cSioPc1bZs5a1w5y4kqDrW/Jw7G0omgo=
Subject key identifier:   A7:95:18:03:31:D1:A2:67:13:D9:57:93:59:3D:AC:84:EA:BB:D8:1C
Authority key identifier: E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB
Certificate issuer:       /CN=e7fed4e778209c3cae93d4b76d350704462c3aab
Certificate serial:       019AF68A930A89A6ED7D6BF7929B0CBDD01D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.mft
Manifest number:          14FC
Signing time:             Sun 07 Dec 2025 02:01:08 +0000
Manifest this update:     Sun 07 Dec 2025 02:01:08 +0000
Manifest next update:     Mon 08 Dec 2025 02:01:08 +0000
Files and hashes:         1: 3dWrvfdk2lOprYs35ma5yv6Q6rc.roa (hash: QEfTlDVAF7d4T61rI01qjNc/6EEThQ75e05z/96HAxs=)
                          2: 5_7U53ggnDyuk9S3bTUHBEYsOqs.crl (hash: yEGoxwrczpKqHpcvLtsAfST0PXNWxzhSfD0wlDJTztY=)
                          3: HgeaiXNp8oaIkVjkrRG17ULDd1I.roa (hash: wPu6bKujUWw8Q6Ywc1kUepdeVq7pWlsdycgmuKRoAys=)
                          4: syDl6KVmgOwsscvxTmE3dADj5SU.roa (hash: cG4uVVemUe2/DT7IYDlCJ/ncex0OUaiZ7Ec8SSBIfmY=)
                          5: vpcXfvOVUYvgdsD39Q3TEMF747w.roa (hash: F5uTTVHy8rE8NLX3W81LLNFl51OsEFvrkrC45V6z1JI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f6:8a:93:0a:89:a6:ed:7d:6b:f7:92:9b:0c:bd:d0:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7fed4e778209c3cae93d4b76d350704462c3aab
        Validity
            Not Before: Dec  7 02:01:08 2025 GMT
            Not After : Dec  8 02:01:08 2025 GMT
        Subject: CN=a795180331d1a26713d95793593dac84eabbd81c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:80:af:23:6a:ac:14:2c:03:a4:44:bf:d0:93:
                    71:22:a0:0d:8b:48:8f:76:4f:8c:a3:d1:ac:57:dd:
                    20:4d:1d:ca:eb:da:1c:79:19:ee:e3:40:ec:b2:bc:
                    95:5a:8d:e9:6a:16:59:47:95:d1:21:07:ae:92:2e:
                    ba:23:ce:b9:93:ea:d1:0b:b5:5c:97:c9:ef:e5:b9:
                    27:6b:73:02:86:51:f8:91:6e:fa:27:90:86:34:3f:
                    6f:5c:df:cf:f0:0c:2e:34:42:96:15:ac:7f:c3:02:
                    82:b5:10:4a:2b:b6:71:46:1a:44:5d:82:84:2f:7b:
                    6d:bd:8d:06:1a:66:a5:90:6c:2e:38:4d:29:bf:ea:
                    d8:24:15:14:80:a4:e1:39:e7:b5:75:87:23:d6:b8:
                    fb:9d:f2:ea:3c:ff:67:f3:3c:fc:64:b0:5b:01:27:
                    31:f6:3a:57:1a:cc:f4:32:ae:d5:f1:83:37:8b:b0:
                    53:ac:7a:a6:25:7d:46:6b:01:cd:15:5b:82:55:5e:
                    42:f6:16:91:9a:d3:89:7e:7b:cf:0f:f1:3f:cc:96:
                    3f:72:29:2d:dc:2d:33:52:fe:9e:16:00:03:34:b9:
                    63:5c:74:cf:f7:eb:4f:56:95:d6:ce:23:0c:17:a6:
                    69:8b:cf:c4:72:35:b5:66:cf:90:fb:0c:dd:4d:50:
                    79:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:95:18:03:31:D1:A2:67:13:D9:57:93:59:3D:AC:84:EA:BB:D8:1C
            X509v3 Authority Key Identifier:
                keyid:E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:8a:93:cb:78:b8:39:e0:6e:ab:0a:45:45:b9:9f:f6:c8:9a:
         c0:73:fc:6c:32:5f:89:26:f6:36:2a:52:f8:c9:0b:00:09:8c:
         ab:cb:6f:f1:5d:19:ca:0f:15:7e:7d:3f:fd:7f:7f:59:fa:4f:
         34:0d:1d:13:d1:43:bc:6c:05:b1:12:c7:d2:80:11:e0:6a:5c:
         7d:77:25:31:bf:bf:0b:b9:3f:da:5f:cf:ca:bc:3f:27:59:7a:
         98:47:4e:3b:e2:99:56:52:78:fc:bc:2c:e4:30:1f:bf:65:fc:
         95:a2:7d:87:6c:c9:b3:45:44:80:28:a3:a9:e6:35:b2:a6:cc:
         9c:65:3f:29:ab:44:0c:de:6b:6b:72:03:0e:0f:1f:0e:56:da:
         e5:05:04:23:52:71:94:1b:7f:6b:29:23:e3:8c:03:37:68:f4:
         b4:9d:71:6d:42:cf:59:95:99:b6:1e:7c:1c:6a:9d:31:62:26:
         a6:6d:11:8b:d7:f7:02:14:30:47:56:2b:10:a8:18:33:fa:7c:
         e0:de:8b:81:6a:47:fc:4f:c7:3e:b7:a2:29:25:92:76:af:97:
         5e:bf:95:2e:51:56:b2:86:50:2a:4a:5e:a6:d3:71:22:6c:f0:
         e8:a5:5d:c6:4c:a9:22:74:ea:ab:f5:50:dd:1a:cc:0a:e2:b7:
         52:da:56:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:55:32 2025 by rpki-client