This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.mft
File:                     V5ren-rtxAbfXhG87wOTzV6f0N0.mft (raw, json)
Hash identifier:          pZfeH6CfnfI7wad+QRAsA6MS7yMKf/5pPvJH4v/dfTw=
Subject key identifier:   0A:B1:19:B1:E9:69:0F:2D:A9:83:88:98:C6:8A:29:69:16:69:DF:B5
Authority key identifier: 57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD
Certificate issuer:       /CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd
Certificate serial:       019AF2E45EC9A07595613E3A61CD3004B109
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.mft
Manifest number:          1291
Signing time:             Sat 06 Dec 2025 09:00:43 +0000
Manifest this update:     Sat 06 Dec 2025 09:00:43 +0000
Manifest next update:     Sun 07 Dec 2025 09:00:43 +0000
Files and hashes:         1: 6TwLhRWsmxkkhggFLTKj7guz2DE.roa (hash: s2x2RuJc1EuTWcfLAZGiSbTr9uwQiNoRbPeGEeK1UYk=)
                          2: CtLvXpDbiC_lIsOnzUkFvQoNOW0.roa (hash: HxkNpx8Pcltu0KFjSBg3rwAtGuveX0ZtVcwj6Ck1QYw=)
                          3: QBsToBJpbd_nRq5EIjRck6T3KbA.roa (hash: KZeNSeGK7PvW4oyfh6BDCeqEbjJDhVh49ggmavvGkaQ=)
                          4: V5ren-rtxAbfXhG87wOTzV6f0N0.crl (hash: Icr/FOJubQXxo5b9RMwCxJMOrq/0I3/oOMvMRmTYFZ0=)
                          5: it6eyv1PXsnwOYZ5tToSQoWvdAg.roa (hash: N0molOw5CWe+DWTGkd/A+hFtz4Us3dLpNC7Vsa2boYc=)
                          6: uw5uYRfw3pC5nJXxczi3tVvkY7I.roa (hash: noD3uoydquQYeR5oh05bo3dbdjw+XIFKtmuy3W50gWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 09:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:e4:5e:c9:a0:75:95:61:3e:3a:61:cd:30:04:b1:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd
        Validity
            Not Before: Dec  6 09:00:43 2025 GMT
            Not After : Dec  7 09:00:43 2025 GMT
        Subject: CN=0ab119b1e9690f2da9838898c68a29691669dfb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:10:c6:0d:c2:84:80:ed:4a:e6:89:cb:08:b7:
                    e7:d1:f7:50:54:b2:67:28:b3:bb:dd:23:47:15:4f:
                    74:f8:38:17:5a:e5:27:02:37:89:cf:01:2f:87:c5:
                    90:20:a4:63:b2:65:30:67:a9:eb:30:29:1d:d3:1c:
                    17:3e:10:cd:c5:fb:0a:1e:ac:bd:c1:5f:44:9b:ad:
                    dd:14:66:5f:71:4b:dc:e8:a6:65:e0:7e:05:c1:c1:
                    43:21:f5:e9:b3:44:16:53:91:d2:37:2f:c5:bf:23:
                    1f:50:cb:7e:a3:2d:96:5b:5a:fa:96:7e:21:a5:c4:
                    ce:69:89:af:ec:cc:e6:af:c5:1f:2b:93:71:63:79:
                    93:b9:1d:22:3d:04:db:81:82:78:8d:db:fc:68:6d:
                    8f:61:4c:10:0e:ca:22:4f:f1:d6:62:6c:3c:94:22:
                    ff:f1:d9:e1:19:47:1b:cd:c4:6e:91:74:61:db:5e:
                    e8:19:79:58:28:6d:21:dd:88:9d:71:62:3d:6e:66:
                    d6:62:bd:b6:98:44:a0:6a:02:05:b2:0a:c5:db:02:
                    e9:35:9c:a1:ab:f3:2f:3f:3f:9f:2f:9a:42:ac:18:
                    d6:a8:12:7e:db:bf:3c:3e:74:6a:aa:74:60:4f:60:
                    e7:66:3b:d1:04:92:3b:18:85:b1:f5:d7:10:7a:cb:
                    96:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B1:19:B1:E9:69:0F:2D:A9:83:88:98:C6:8A:29:69:16:69:DF:B5
            X509v3 Authority Key Identifier:
                keyid:57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:4a:82:42:5e:06:f8:94:cd:7d:f4:44:5c:28:e3:fd:37:fd:
         b7:7d:a9:a2:1c:28:90:a5:7e:f2:12:46:73:cb:1f:1e:2c:59:
         6d:43:3b:57:ed:8a:6e:0b:1a:15:c6:7d:50:63:5e:12:fc:07:
         4c:d8:25:e1:70:b4:f2:2c:8e:64:8f:8e:07:7b:28:b3:77:9c:
         2e:70:9c:42:cf:da:15:e8:35:0d:a0:ed:0e:66:5f:9e:84:0e:
         ac:28:7a:f5:b0:1a:12:f0:6d:f5:42:ef:84:5f:1c:a7:4e:78:
         84:8f:2d:4f:f2:6d:4b:e1:d4:30:1a:f1:7b:0c:43:22:bc:be:
         63:52:b7:5a:9d:54:93:3f:74:78:b8:8c:9e:d9:47:52:3b:ac:
         74:0d:6d:76:27:87:4d:a1:24:17:77:4d:69:d6:7c:c4:32:b1:
         ac:f7:f2:6a:9b:e6:c6:25:ce:d6:6e:14:1f:57:46:1c:6a:e3:
         67:26:7a:c8:36:b5:9a:7a:f7:bf:11:b3:d6:44:fc:c7:65:b5:
         87:73:33:ca:c3:4e:33:db:15:22:0c:48:16:51:a3:f0:79:46:
         0b:2e:1a:e3:46:d3:8e:47:19:e0:0a:ed:6a:0f:d2:e8:72:0e:
         42:30:3a:29:10:7f:4b:47:37:e9:3f:7a:15:06:13:21:2a:66:
         28:b0:27:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:21:09 2025 by rpki-client