This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft
File:                     t5msmJxEsuHNq8JY6WypPKrUvWQ.mft (raw, json)
Hash identifier:          UNju4dpDJoMtIJnZ2wodBaajSLo7aKtCgfN+8Y1oJY0=
Subject key identifier:   2D:BD:A5:C6:B8:53:AB:10:5E:41:D7:1D:8A:94:5C:D8:6F:1D:90:AC
Authority key identifier: B7:99:AC:98:9C:44:B2:E1:CD:AB:C2:58:E9:6C:A9:3C:AA:D4:BD:64
Certificate issuer:       /CN=b799ac989c44b2e1cdabc258e96ca93caad4bd64
Certificate serial:       019AF12CCB09C79DE97CA4FBC254BA341BB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft
Manifest number:          0B03
Signing time:             Sat 06 Dec 2025 01:00:35 +0000
Manifest this update:     Sat 06 Dec 2025 01:00:35 +0000
Manifest next update:     Sun 07 Dec 2025 01:00:35 +0000
Files and hashes:         1: N5hZORY6BH0_7cHTBNOVNkVCEYU.roa (hash: WR+MD/xxBtQVHPY1qaKKu6KnkMSkFI0jT+q93Z2CIUM=)
                          2: eG7qPRRyMuGDnTaL5wdOylUl9yc.roa (hash: wEVy8BCY3//obLJ2YEaxXlAcf2i+3jpwZETui93UpjU=)
                          3: eZ9lsBSBE-9HylowSORYyQP1H3Y.roa (hash: 4bc1g2EfiPBsisazV/A2lyPDwqt6FApY78qkMRjIEcc=)
                          4: t5msmJxEsuHNq8JY6WypPKrUvWQ.crl (hash: SThQcJzyvhx2OjoAYrdiNhGBst6XY2uuq/mHLFCBhPA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2c:cb:09:c7:9d:e9:7c:a4:fb:c2:54:ba:34:1b:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b799ac989c44b2e1cdabc258e96ca93caad4bd64
        Validity
            Not Before: Dec  6 01:00:35 2025 GMT
            Not After : Dec  7 01:00:35 2025 GMT
        Subject: CN=2dbda5c6b853ab105e41d71d8a945cd86f1d90ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1d:21:7e:90:b7:7c:a3:ce:33:19:89:7d:fa:
                    0d:a1:74:df:8d:13:4e:1a:03:10:95:c7:c3:15:d6:
                    a7:10:15:06:3a:79:00:c6:0b:af:e2:ec:6c:e0:82:
                    91:1b:50:bb:d0:d9:9e:1e:df:72:69:27:df:00:1b:
                    09:33:6d:72:e8:70:1a:28:57:10:15:4f:06:12:82:
                    99:cc:79:37:97:0d:c3:4b:42:15:e8:ad:7c:15:38:
                    fb:2f:b1:73:42:81:4f:e8:0c:ff:a8:31:9c:40:49:
                    e9:7e:72:06:f0:6a:cc:34:e3:13:b5:a8:32:c3:64:
                    f8:5d:f7:17:c4:ba:88:1a:ff:34:11:7b:42:22:cb:
                    c6:7e:fc:65:ad:6a:d4:aa:10:7e:7f:5a:be:a4:3f:
                    9c:02:e3:63:5a:05:ab:c1:43:4d:f7:bf:c7:f6:95:
                    cd:9e:a2:1b:04:d0:94:cc:5d:28:c9:50:77:27:c2:
                    16:7e:2f:77:71:e5:53:d8:67:a6:d8:c2:e0:49:b9:
                    6c:f7:59:be:c6:60:ec:95:fb:7c:da:06:97:02:1e:
                    b6:2b:89:e2:34:d8:1f:72:df:7a:22:5d:88:5d:d5:
                    2b:88:a8:85:e2:17:ad:11:1b:e6:6c:0c:42:03:18:
                    d5:f7:d1:2f:74:da:47:30:24:34:a5:c3:c1:6b:5c:
                    e2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:BD:A5:C6:B8:53:AB:10:5E:41:D7:1D:8A:94:5C:D8:6F:1D:90:AC
            X509v3 Authority Key Identifier:
                keyid:B7:99:AC:98:9C:44:B2:E1:CD:AB:C2:58:E9:6C:A9:3C:AA:D4:BD:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:fc:26:47:8f:d5:84:3d:6a:44:0f:6b:7d:03:a7:2c:23:43:
         2d:a9:0c:8f:b9:57:97:e1:26:85:4f:50:b1:39:a7:43:8f:38:
         c4:bb:42:36:c6:0c:03:86:df:c0:d1:be:0a:59:8a:6b:03:8b:
         d4:25:19:b3:31:05:a7:8a:12:1d:15:77:b5:93:6f:d0:de:ce:
         72:13:d2:9e:73:e2:55:cc:4f:dd:88:d5:82:8f:7a:31:d9:f6:
         a2:13:ba:8b:a7:a5:0a:d1:04:3f:2c:db:05:f3:5d:34:22:84:
         4c:52:68:30:1b:9c:88:4b:ee:12:39:fc:2e:6c:fb:91:3e:6c:
         6f:72:75:5d:22:7f:a7:43:9c:f9:2b:e0:8c:4a:d3:b4:73:71:
         a6:88:cb:ad:9c:d4:4f:83:fb:ee:69:b2:ea:ee:6c:32:77:0d:
         8f:38:33:ed:ff:0f:8a:80:c4:fd:8f:aa:75:15:f4:12:d5:7e:
         92:d0:78:c5:ca:d3:12:22:d4:ea:f4:03:e5:4a:a5:42:47:73:
         1b:4f:bc:19:93:34:7e:4f:f1:1c:a9:cd:9c:9b:62:58:6e:a6:
         3a:69:e0:12:09:c7:32:da:1b:98:0d:41:28:60:0e:87:d1:bd:
         ed:29:12:fc:c5:b9:55:de:1d:7f:ba:21:0f:d8:a2:4f:00:e5:
         cb:93:2c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:19:54 2025 by rpki-client