This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
File:                     F5WshDzYupAYj3MTZSu1YSmbKW8.mft (raw, json)
Hash identifier:          r5artZoSIblqBx+zY3bDvNVZtHNQhh5ifLPPDBefaXw=
Subject key identifier:   2D:2E:B4:B1:33:10:7D:EF:D5:EE:C9:4F:70:F9:5C:91:9A:C7:23:91
Authority key identifier: 17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F
Certificate issuer:       /CN=1795ac843cd8ba90188f7313652bb561299b296f
Certificate serial:       019AF4D2AA89386A7FFF1330D78BA5A5FC1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
Manifest number:          176E
Signing time:             Sat 06 Dec 2025 18:00:38 +0000
Manifest this update:     Sat 06 Dec 2025 18:00:38 +0000
Manifest next update:     Sun 07 Dec 2025 18:00:38 +0000
Files and hashes:         1: BGKLdnBBDejou33OrAMguB4fA_4.roa (hash: nQjabd0iTAbPBudq8662bhERneJSKjsRW9LjqK/8NoE=)
                          2: F5WshDzYupAYj3MTZSu1YSmbKW8.crl (hash: f2GgtUkgJzsRPZOkbmH8NZYZRcgiSvmCyIDWpyPw7Ps=)
                          3: LkE6OmvUvLDEPLVXvhD8kSWchgI.roa (hash: TIEViqlGaXbwRIzS3a8WhThpumMDQCKC4sJFBNgCRkg=)
                          4: ZFdBgXtGzTSyBGSw60XB32cB-AA.roa (hash: 9AZAjPuYZlr2IIMZY508T3D+XaoUBtHO/4Z0E+AyZEw=)
                          5: _OFNw-GBnd-o_UkPPoF8Y7s25zo.roa (hash: YjFqSfXiAolAj9dxHs/dwz/o2yt4XxRKBGVbY9zdKmU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 18:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:d2:aa:89:38:6a:7f:ff:13:30:d7:8b:a5:a5:fc:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1795ac843cd8ba90188f7313652bb561299b296f
        Validity
            Not Before: Dec  6 18:00:38 2025 GMT
            Not After : Dec  7 18:00:38 2025 GMT
        Subject: CN=2d2eb4b133107defd5eec94f70f95c919ac72391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5c:76:07:50:54:dd:79:b1:77:24:f8:ec:66:
                    9e:f1:9a:af:ee:52:55:6c:34:14:bf:f1:a0:10:b1:
                    03:ac:7f:66:23:b3:29:c8:33:c9:c8:98:24:af:b1:
                    0d:83:b3:d2:59:4b:95:df:49:5c:bf:26:ca:62:bf:
                    9f:52:12:72:f5:75:63:5f:b1:fe:85:6c:2f:c2:73:
                    e6:c8:91:bd:71:17:d1:ae:ab:72:56:61:48:6c:80:
                    e1:a8:85:06:0a:9d:a8:63:17:1f:af:18:e6:71:08:
                    be:27:cc:8e:5f:e7:34:10:41:1b:c8:2c:20:48:df:
                    a2:e4:73:2a:9a:26:1c:1a:a6:a2:bb:54:f8:57:20:
                    eb:0a:25:f8:28:9f:b4:58:a9:f7:fd:57:94:45:4e:
                    ce:ba:94:ff:70:e0:a7:03:81:3f:c5:73:4c:a4:11:
                    67:b0:47:f3:2d:9c:36:4a:36:b0:d1:e2:c2:05:b4:
                    ee:f6:63:c1:1a:26:82:73:4f:ff:e0:9e:2f:06:9a:
                    08:63:8b:33:d9:22:82:8a:88:9e:52:b5:96:c4:82:
                    dc:0d:7e:9e:fe:7c:50:74:23:42:00:73:ed:25:06:
                    84:7c:19:42:f0:9c:dc:45:96:81:e9:16:f8:15:cf:
                    6a:4c:07:30:b7:1d:69:5c:fc:7e:72:cb:6e:9a:f7:
                    11:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:2E:B4:B1:33:10:7D:EF:D5:EE:C9:4F:70:F9:5C:91:9A:C7:23:91
            X509v3 Authority Key Identifier:
                keyid:17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:ea:51:f9:5a:9e:08:73:b0:6f:b0:4c:0f:ee:c4:5f:38:0b:
         cd:35:27:22:11:7b:d5:eb:86:f2:3e:39:0f:a5:e0:5c:5c:eb:
         99:7b:03:7d:61:f4:f3:1d:61:50:ef:f5:3b:55:b0:13:76:d2:
         1a:7c:61:d6:73:68:a9:37:57:53:fa:6d:d8:fe:a5:69:0c:2a:
         61:26:cb:50:eb:2c:47:80:a0:d9:37:19:a7:5d:f0:45:65:b9:
         a6:fa:a4:33:83:3a:0a:59:e0:31:3c:14:05:18:2c:65:c7:f0:
         5c:91:43:30:74:47:8a:fa:b4:d0:92:c1:5e:75:ad:be:1b:49:
         83:c2:92:bb:29:7e:74:e7:3d:e9:39:0a:36:53:d8:ba:90:60:
         f5:c7:cf:34:d6:08:71:00:71:3c:11:7d:c0:1c:10:01:3b:fb:
         af:e2:55:7a:83:0b:ed:7d:1a:a9:25:86:fa:1c:89:36:a1:a8:
         03:40:c8:7e:86:66:c8:a7:af:2b:6a:d3:c4:8c:77:e7:3d:ca:
         f4:68:75:a0:61:bb:c6:2a:65:87:bc:67:c4:12:c1:9c:76:65:
         7b:ab:4f:99:21:43:c5:24:b0:77:0d:6d:77:85:16:cb:c2:51:
         33:1b:2d:a0:a8:6c:5f:47:0d:2d:ed:53:37:a9:94:06:94:e5:
         e2:c3:ed:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:03:45 2025 by rpki-client