This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
File:                     5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft (raw, json)
Hash identifier:          JwWhm8jr1mcVuZFalMy6dYIM3RT/LT4QwtCRdi6eIH0=
Subject key identifier:   02:1A:F7:BD:2E:FF:45:79:F4:99:F5:B4:56:F0:E4:98:7C:96:40:A2
Authority key identifier: E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70
Certificate issuer:       /CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
Certificate serial:       019AF3528ED3ABB0C40A5583B7F5865E55B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
Manifest number:          1763
Signing time:             Sat 06 Dec 2025 11:01:05 +0000
Manifest this update:     Sat 06 Dec 2025 11:01:05 +0000
Manifest next update:     Sun 07 Dec 2025 11:01:05 +0000
Files and hashes:         1: 5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl (hash: Jkp/238pInRa9GVMSIAbqIsqmPcRxgqTsNakXKf0mLs=)
                          2: TmGH7yXkMz-v6gHvCr9qE37nKcA.roa (hash: n1u54C/BtvIrlKmaScJ2jkmbHT4HONn1UuTucKaDW6g=)
                          3: k7UwqFFBmprxDA56kDwgmZFvA3g.roa (hash: oLwFA32V9FgAocZGOyNmCc1klUCv8GcjZUVDNdla0Jo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:52:8e:d3:ab:b0:c4:0a:55:83:b7:f5:86:5e:55:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
        Validity
            Not Before: Dec  6 11:01:05 2025 GMT
            Not After : Dec  7 11:01:05 2025 GMT
        Subject: CN=021af7bd2eff4579f499f5b456f0e4987c9640a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d0:26:29:41:b9:0e:1c:9d:e9:1a:3c:21:78:
                    9f:59:21:5a:71:7d:de:d7:df:fd:88:91:57:66:92:
                    e2:55:db:bd:57:0f:38:04:79:a9:65:d4:43:66:66:
                    92:b6:3e:bd:d5:44:ec:59:f2:65:c0:b8:2c:ab:2c:
                    ee:9b:ed:00:c5:83:f1:fc:19:a0:e0:37:b3:f7:b0:
                    7a:36:88:91:05:6d:f5:8a:e8:4e:36:e7:44:9d:fb:
                    7f:e9:69:2c:93:e3:ea:00:70:2b:de:39:36:10:0e:
                    7d:8e:74:fb:38:a4:34:bb:f0:66:b6:0d:0f:f5:07:
                    aa:9d:d6:b0:a5:94:3d:2e:a3:8a:57:ad:f6:0a:62:
                    2c:3b:5c:7f:90:98:97:cb:d4:aa:15:f3:2d:b9:81:
                    02:d9:1e:72:86:4a:dc:99:05:58:6d:49:ee:bd:66:
                    08:29:83:db:3f:f1:0a:0c:06:bf:a3:4c:b7:3c:08:
                    19:52:ae:53:e0:84:c8:c6:d0:13:17:f2:28:d1:5c:
                    0a:2f:be:f9:ec:77:2c:18:e4:dc:5e:24:a0:91:e8:
                    bc:45:0f:8e:af:33:e0:70:3f:c7:9a:39:65:c8:eb:
                    4b:86:4f:98:f1:3d:2b:60:66:60:ce:b6:f9:ae:bd:
                    61:6a:cf:1a:d4:f8:23:76:d1:49:70:60:a6:14:42:
                    ab:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:1A:F7:BD:2E:FF:45:79:F4:99:F5:B4:56:F0:E4:98:7C:96:40:A2
            X509v3 Authority Key Identifier:
                keyid:E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:fd:6e:2e:e5:09:34:ba:cf:3f:ce:95:db:ad:f9:bf:a7:b1:
         4e:62:58:38:ad:fe:21:72:43:61:cc:0c:ef:1f:f2:dc:f6:f4:
         32:4c:46:8f:9c:45:b4:4b:e4:fd:eb:ec:19:6f:6c:62:06:6e:
         0a:78:04:93:d7:a8:ca:b3:42:a9:7b:31:e5:3e:a7:87:5c:39:
         97:41:a0:e1:8a:a8:56:65:bb:75:7e:5e:74:0f:9e:aa:8c:b3:
         08:84:39:07:1d:d1:8e:f1:87:38:30:4f:ff:a3:18:ef:c6:91:
         ae:a8:14:2b:34:44:82:d9:b3:4d:a6:21:5f:01:55:77:3e:e9:
         29:61:a2:79:21:8d:04:9f:86:00:a1:18:36:a6:1b:b6:9d:82:
         38:e8:dd:31:e9:d6:1c:f9:24:07:71:43:ab:e6:16:1c:9c:a8:
         07:1d:12:60:9e:e2:1b:23:81:a9:99:fe:e2:db:04:6f:c4:1e:
         28:24:17:da:50:c5:48:8d:b5:bf:ae:e8:95:4c:0e:06:ba:eb:
         de:e1:55:73:c1:64:cf:db:f4:58:35:34:09:58:93:d5:82:92:
         cd:76:e9:22:80:a7:28:88:ec:e3:8b:5a:10:35:2f:35:8d:2b:
         c5:22:21:21:12:46:84:9e:55:1d:0f:33:4f:56:11:26:68:b5:
         05:27:49:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:14:49 2025 by rpki-client