This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
File:                     1s5JJV9AanJVk8YuHECHeVhtVu8.mft (raw, json)
Hash identifier:          VR7x3Mf97/bu+uIHwSCbFTRUnB93XeadKsQKaw/3WAk=
Subject key identifier:   5F:CE:F2:42:BA:19:62:52:17:91:57:FE:6B:9F:53:11:2C:BB:8F:84
Authority key identifier: D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF
Certificate issuer:       /CN=d6ce49255f406a725593c62e1c408779586d56ef
Certificate serial:       019AF3521C6333096577B4ECE9548F2FCCEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
Manifest number:          0CBF
Signing time:             Sat 06 Dec 2025 11:00:35 +0000
Manifest this update:     Sat 06 Dec 2025 11:00:35 +0000
Manifest next update:     Sun 07 Dec 2025 11:00:35 +0000
Files and hashes:         1: 1s5JJV9AanJVk8YuHECHeVhtVu8.crl (hash: k6blB6jVJUFjZDyGezGuAYWfOJgL5f4KJ7Ox+fej7AE=)
                          2: CK8FwiyJmMBb-zg5kXzIAY_6FI0.roa (hash: XErrRj96RGdiXdkf0Z1TwKUF+3V+yB+0bX3FZbrkGHY=)
                          3: EJfhhxSKJku019QQkt99LIZFHTw.roa (hash: SjUIL6Kbq6N31Fxq4qDA2LJmnHYs1GWAH6ODttxmcK8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:52:1c:63:33:09:65:77:b4:ec:e9:54:8f:2f:cc:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6ce49255f406a725593c62e1c408779586d56ef
        Validity
            Not Before: Dec  6 11:00:35 2025 GMT
            Not After : Dec  7 11:00:35 2025 GMT
        Subject: CN=5fcef242ba196252179157fe6b9f53112cbb8f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:df:a7:1c:3f:6f:19:48:12:39:97:5d:35:2f:
                    40:8d:f6:cc:b8:81:06:0e:8b:4a:03:50:55:3e:cc:
                    2e:05:32:b8:f9:cf:a0:17:79:54:06:66:a4:a1:bb:
                    20:16:37:7f:99:0d:7b:f6:33:58:da:db:2e:58:bd:
                    47:08:5a:91:37:47:4f:4c:0c:e8:85:97:81:20:e6:
                    4a:e4:e7:61:0b:c7:76:66:63:0f:25:95:80:d6:43:
                    01:de:99:3a:b3:f8:a3:08:98:22:6e:ee:0d:e2:de:
                    4d:9f:11:e3:ae:4a:3d:3f:06:f7:4c:c5:2c:b4:6d:
                    49:a6:a2:cb:c6:dc:30:4a:73:d7:08:6d:fa:d4:4a:
                    bd:ea:a1:24:4b:c4:dc:18:e5:4c:27:0e:38:b1:71:
                    0f:55:fd:90:59:8e:be:9b:d2:45:c1:64:ce:7d:42:
                    fd:47:c0:96:af:e6:e2:f5:63:64:ac:ce:53:4b:6e:
                    75:c5:6a:3a:74:4c:c9:3b:5d:08:5e:86:75:33:ec:
                    dc:8c:fb:87:3a:84:da:30:af:a9:1e:39:57:c4:d4:
                    dd:af:d7:a8:a2:8d:07:d5:3a:f8:ae:5b:a6:58:b2:
                    fc:d7:40:3f:7e:48:2c:3e:1b:90:2d:8a:d3:01:60:
                    ae:8c:48:88:31:eb:88:19:45:fd:d5:08:0b:4f:e7:
                    ba:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:CE:F2:42:BA:19:62:52:17:91:57:FE:6B:9F:53:11:2C:BB:8F:84
            X509v3 Authority Key Identifier:
                keyid:D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ea:20:6b:d6:60:b4:eb:30:53:a8:cd:41:f8:8c:37:7b:a6:
         64:98:c7:32:6f:bd:1d:68:a0:de:79:29:d0:d9:44:f2:5d:ad:
         ef:bd:c0:26:ea:34:bd:0c:72:91:26:55:90:06:50:e9:6e:90:
         ee:91:66:2a:36:89:e1:7d:a0:e6:15:e8:da:c0:c6:99:46:d5:
         48:07:6e:36:6e:63:11:45:3f:c9:df:4e:3d:73:ff:c6:17:c7:
         86:a5:2b:10:c1:f8:74:8b:44:8f:05:a3:d2:88:97:28:f7:a3:
         ed:c5:38:5b:de:32:92:53:a3:cc:60:70:3d:0c:09:8a:1f:c3:
         49:66:e4:13:87:ab:09:84:0b:1a:4f:4f:53:6d:42:98:d9:67:
         42:a6:4d:18:2a:ea:ee:5d:0b:2c:29:54:d0:18:a4:e9:67:97:
         f4:0d:f3:61:cb:35:35:01:fd:74:05:bb:4b:05:50:7e:44:b9:
         6c:6c:4f:50:18:09:fd:47:59:38:8b:91:58:f6:9e:ab:76:60:
         be:6d:33:aa:aa:2a:74:16:cf:94:97:a6:01:a3:97:73:b8:90:
         74:15:49:9e:6e:cc:3c:03:df:30:23:30:1c:62:d6:62:a6:2c:
         ac:b2:63:4e:d6:3b:86:94:67:15:b6:46:d7:de:1b:c6:c1:e4:
         e0:a8:a3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:34:55 2025 by rpki-client