This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft
File:                     S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft (raw, json)
Hash identifier:          JdJFWppgv2z+pgMFkcvfxM6zVMSQfikR7on8CMV1f3Y=
Subject key identifier:   C8:9D:BC:5E:A7:D9:54:73:82:0C:F4:DD:8E:5B:44:4D:5A:1A:B7:FA
Authority key identifier: 4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
Certificate issuer:       /CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Certificate serial:       019AF12DA13C035E64B0B1D355EFF9EEACE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft
Manifest number:          0527
Signing time:             Sat 06 Dec 2025 01:01:30 +0000
Manifest this update:     Sat 06 Dec 2025 01:01:30 +0000
Manifest next update:     Sun 07 Dec 2025 01:01:30 +0000
Files and hashes:         1: 0_z69Mp8Uq-H2QPlCa0CLWX2coU.roa (hash: wm+6P/OKtHhF/O/CkulyZkvoYkTpsb5odPnFIekRy3I=)
                          2: 38pIrQ1QnBg71pfob_zDIDUIiFQ.roa (hash: U9USjryy/F+R/DZGDivAyocf94409+iay7FO0stAHGw=)
                          3: N0lzm-3vygtdiWRBn9eXgxBlyZI.roa (hash: 7Y1+rEyMo7py1HRJqnnqE/nkyygO/OisK6QTtH8xA/o=)
                          4: S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl (hash: sa85dfuOTynkxn3oRpRJ66xK+Ll0OChcS1gFjvA+Q4E=)
                          5: XMt-aoKNBYw2mRgLlCcfOfS37es.roa (hash: G7hUI9W+vjvJqWM1E6n7TXAiBwlaOz/lSk1JZkA8kgc=)
                          6: _Khf-n0vZfCAmh5Kz1BybwMWUtk.roa (hash: kt8gl4Nj76yRL5CdwZbXkVqwHK70gqMfG0Z0kpN+NYA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2d:a1:3c:03:5e:64:b0:b1:d3:55:ef:f9:ee:ac:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b9331fa7be470dc179e16c306e98c6c731a575c
        Validity
            Not Before: Dec  6 01:01:30 2025 GMT
            Not After : Dec  7 01:01:30 2025 GMT
        Subject: CN=c89dbc5ea7d95473820cf4dd8e5b444d5a1ab7fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:59:e3:da:3a:18:26:16:8e:82:b9:74:08:7b:
                    56:d8:26:72:c7:17:8e:35:61:66:dd:c5:e6:c9:98:
                    f2:14:f3:52:11:02:91:cd:ae:3d:7e:f7:70:ce:3f:
                    fb:55:43:7a:98:0a:f4:4a:c3:2a:0b:66:26:f8:58:
                    6f:8f:69:d6:9f:f8:3b:02:86:3d:42:40:e1:8d:a2:
                    24:fd:71:29:f0:f0:19:81:31:38:c6:fc:81:68:9c:
                    b2:50:bd:f7:43:21:f1:e6:7d:43:3d:73:dd:d7:63:
                    d0:62:5c:69:0a:50:74:cc:43:54:23:a4:81:d1:dc:
                    0f:b2:08:a8:6a:e3:bd:20:e1:40:88:46:7f:ec:f0:
                    18:f1:ee:37:99:db:d2:5f:e9:08:6a:50:c6:b2:c5:
                    4a:d0:15:43:e6:02:d7:e2:99:a9:f8:50:47:36:61:
                    8c:cf:76:06:29:64:85:ad:c9:6b:af:85:b3:89:c0:
                    a1:89:53:e5:6f:14:e7:db:9f:a2:44:75:9e:35:bd:
                    9b:2d:c8:2a:ec:64:a5:98:a3:1d:72:7e:89:ff:50:
                    61:d0:44:bf:6e:d7:ab:ac:84:f7:0c:64:58:29:0d:
                    a7:e7:6d:91:02:c5:3a:f0:93:7f:8b:31:c5:4c:8b:
                    93:62:4b:ed:b2:4a:6a:5b:56:42:9d:77:38:cc:7e:
                    d9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:9D:BC:5E:A7:D9:54:73:82:0C:F4:DD:8E:5B:44:4D:5A:1A:B7:FA
            X509v3 Authority Key Identifier:
                keyid:4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:0f:cd:20:44:0e:74:f8:5c:3e:b7:de:b1:b9:e4:fe:db:a7:
         b6:ca:25:dd:b3:25:6b:a5:2d:7b:f1:32:78:2d:0c:a9:55:80:
         a2:7e:1c:04:a0:89:8e:47:a1:be:57:0a:f8:4c:1b:c6:2a:73:
         fb:37:30:5f:ef:84:d0:64:ac:0e:58:ca:c3:d3:ab:d9:dd:eb:
         35:31:96:6f:23:53:e7:ba:4b:c0:07:a2:22:30:d4:f6:63:09:
         9f:7d:f3:b4:0e:ef:d6:56:05:fd:c8:0e:e3:2f:10:71:60:92:
         83:c4:98:2d:5a:f1:71:8f:9b:6a:72:10:ee:22:22:45:33:97:
         8d:b9:91:40:e5:51:1f:61:6f:f6:56:2e:cc:8e:8b:1a:a5:b6:
         52:f6:c9:fb:ca:fa:ee:73:f3:41:4e:d7:0a:c7:b2:98:ef:d5:
         63:c4:78:97:12:dc:ab:92:c8:7b:9c:b8:39:70:30:61:6e:53:
         9f:50:bf:32:b6:bf:65:66:fa:b4:c2:79:5d:de:29:33:e8:26:
         82:06:0f:18:ab:b6:d3:cf:de:57:4b:11:61:3e:84:4f:1b:5f:
         1e:ac:0c:ed:6e:3c:74:fe:70:5a:17:70:8b:1c:cf:2f:85:26:
         a9:5d:ec:e8:d0:84:f2:65:b3:3b:a4:31:17:e1:86:15:73:d7:
         86:31:ad:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:21:29 2025 by rpki-client