This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
File:                     5ozobUCegkN2Vg_jsaFo8roAguM.mft (raw, json)
Hash identifier:          5riGLWg+dipPGCCE7gHdC+jRvfBa6MqqckwDnzlmWlg=
Subject key identifier:   65:24:99:1F:B2:E5:8F:82:FF:6D:D8:29:E7:DC:BC:A1:FA:F9:08:A5
Authority key identifier: E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3
Certificate issuer:       /CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
Certificate serial:       019AF31BB607D824581D840BF8F563459E70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
Manifest number:          1760
Signing time:             Sat 06 Dec 2025 10:01:10 +0000
Manifest this update:     Sat 06 Dec 2025 10:01:10 +0000
Manifest next update:     Sun 07 Dec 2025 10:01:10 +0000
Files and hashes:         1: 5ozobUCegkN2Vg_jsaFo8roAguM.crl (hash: xsFcbbBfa9z4L+RAI+7tHyJND2V1jSMCqw76FCFKzAU=)
                          2: LVNoSuA7vvTmvNpxT00E4lAvcp4.roa (hash: pPgdCp65TG7QIX5Sq2MoRLP/ea4UDwFHNBTpNrAcJN4=)
                          3: v3gPT9ihCRL0ZeNIouhjQbTxtd0.roa (hash: yHjYFG2kFwOSEQcA6CVX+o9if+OsdxgeiHLnGMf3Fqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 10:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1b:b6:07:d8:24:58:1d:84:0b:f8:f5:63:45:9e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
        Validity
            Not Before: Dec  6 10:01:10 2025 GMT
            Not After : Dec  7 10:01:10 2025 GMT
        Subject: CN=6524991fb2e58f82ff6dd829e7dcbca1faf908a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b5:0c:6c:46:6f:05:5e:2f:0f:e2:75:e2:a4:
                    02:af:f1:81:2e:65:56:6f:bd:6a:78:9b:0d:80:fb:
                    aa:6f:2c:0d:08:27:77:75:91:29:2c:65:13:a0:97:
                    5f:4b:39:96:ac:14:ae:d5:28:28:7b:17:fa:6d:ef:
                    95:d5:ed:79:6c:55:46:c5:64:19:8f:80:42:16:2e:
                    f7:15:d5:bf:56:65:8f:85:21:45:3e:f1:f6:25:e0:
                    0c:6c:70:4d:d6:6f:b8:b8:58:fc:e9:fe:1b:d7:73:
                    9a:de:ca:69:a2:34:e5:b2:86:77:16:6c:34:12:39:
                    4d:8e:d6:78:0c:fa:f0:38:75:ef:e4:eb:09:a1:2a:
                    30:23:a2:52:a0:be:66:5a:78:cf:8e:cb:b9:8d:6d:
                    fb:b5:df:e7:02:96:fe:19:d6:bb:ea:1c:61:0f:5d:
                    44:e8:37:18:d0:55:dd:d7:52:1d:75:85:6d:ff:1e:
                    89:85:0c:41:1a:b7:15:36:cb:24:fc:c9:b7:ba:8f:
                    0e:33:bb:82:c8:9f:ee:e5:b9:42:60:82:b8:4e:68:
                    cf:a6:79:df:8f:c5:07:26:c9:4c:fb:e8:35:e8:12:
                    09:4f:99:4e:0b:f3:73:c5:b8:d5:81:84:dd:3f:3f:
                    b8:41:cb:33:43:c7:98:22:97:81:8c:dd:eb:05:f9:
                    45:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:24:99:1F:B2:E5:8F:82:FF:6D:D8:29:E7:DC:BC:A1:FA:F9:08:A5
            X509v3 Authority Key Identifier:
                keyid:E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:26:bf:11:66:ed:63:a6:e2:24:e8:76:2c:28:90:14:d2:cf:
         d8:e1:11:e7:65:b8:44:dd:6f:16:23:2b:d3:20:2e:b3:39:10:
         6e:35:02:29:2d:69:e7:08:9c:44:1c:c2:6d:28:87:c5:1f:1e:
         31:e0:33:d7:0a:3e:bf:4f:b7:40:7b:6c:c6:c0:92:df:1c:de:
         e0:97:e4:62:15:b1:af:98:6f:6f:ae:cd:79:9c:f9:62:bd:0d:
         0a:de:00:f6:c8:c8:e5:bb:59:e5:43:cb:3e:96:91:18:b4:8e:
         73:3d:bd:98:b6:cf:70:64:5a:0f:6a:80:3c:8e:71:67:7d:b9:
         b5:c3:15:dc:29:a5:e1:b3:40:0e:84:cc:48:ec:98:3f:3f:53:
         43:08:ff:e5:13:03:2b:3f:e1:f7:9c:aa:bb:b7:69:b9:6a:5f:
         bf:b8:78:ab:6c:c2:b8:2f:87:ee:23:fa:33:1b:d4:89:41:98:
         44:8b:22:d9:85:d5:a9:86:5a:e7:72:81:c6:4d:84:b5:a7:ea:
         e0:6b:bc:bd:45:11:e4:b8:94:71:0e:4b:a9:ee:00:c8:98:65:
         a1:94:71:f7:15:dc:f6:c0:d0:90:0b:1e:34:3a:0f:f3:b4:18:
         b7:84:b9:b6:e1:dc:6f:40:60:b8:60:36:ed:1e:8e:be:98:23:
         96:a8:12:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:38:20 2025 by rpki-client