This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft
File:                     N5FWc7KL362ywgGaxo0EZP0htxo.mft (raw, json)
Hash identifier:          dWNRy3SzhGH5m7W6AZfT66OWijOHK13ebyFKpdtUYEw=
Subject key identifier:   7D:7A:EA:8F:EA:44:0D:DE:07:F0:C4:3F:CA:A3:34:7A:68:B5:7F:F0
Authority key identifier: 37:91:56:73:B2:8B:DF:AD:B2:C2:01:9A:C6:8D:04:64:FD:21:B7:1A
Certificate issuer:       /CN=37915673b28bdfadb2c2019ac68d0464fd21b71a
Certificate serial:       019AF3894CBE96E909FE58F71EF6148206AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft
Manifest number:          16F6
Signing time:             Sat 06 Dec 2025 12:00:52 +0000
Manifest this update:     Sat 06 Dec 2025 12:00:52 +0000
Manifest next update:     Sun 07 Dec 2025 12:00:52 +0000
Files and hashes:         1: DH9htlq0hiwldp4q07DNTkVZOf8.roa (hash: J0KU22uieTNYBq4unRpzKgHyqTQbyJRKS4kqQcbzVVo=)
                          2: N5FWc7KL362ywgGaxo0EZP0htxo.crl (hash: U5ueYE5LVYLKr8QpjSdjKDFoI6sbOV0Ob8Qlc2H7d8c=)
                          3: jeU3xqGrcmxdIS4lfaliQojmUd4.roa (hash: WoVvfzkH0PYO9V3NP53Pv15mZRXcsOzFbw+RGpI6V54=)
                          4: mbXBHvnDkr71szR1uqXUf3o_CNU.roa (hash: gBt+bTGYlOGXiT5DEgI8/fzoH444V5sSGRbb6v+iHAk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 12:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:89:4c:be:96:e9:09:fe:58:f7:1e:f6:14:82:06:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37915673b28bdfadb2c2019ac68d0464fd21b71a
        Validity
            Not Before: Dec  6 12:00:52 2025 GMT
            Not After : Dec  7 12:00:52 2025 GMT
        Subject: CN=7d7aea8fea440dde07f0c43fcaa3347a68b57ff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fb:54:4e:04:4a:0f:f2:6f:91:cd:3f:bd:44:
                    23:87:4a:e6:59:d6:cf:b9:2a:a8:51:54:18:0b:04:
                    a5:c7:77:b1:37:9b:18:46:cb:31:15:0a:7e:d8:78:
                    f5:40:92:47:6d:2a:67:6c:49:ab:a9:8b:85:4e:f0:
                    ff:39:66:7f:f3:43:76:98:49:e3:1f:0b:94:5f:c1:
                    a9:31:9a:1c:d5:03:47:ef:32:f3:16:db:be:4e:c5:
                    01:df:71:72:00:d6:74:b0:31:b6:96:1d:82:d6:15:
                    7b:53:23:80:1d:b5:16:77:b6:cf:33:5c:b7:41:8f:
                    23:bc:0f:a2:b9:2e:c3:94:36:e6:25:60:48:4b:ea:
                    4f:94:51:bf:54:fb:76:92:25:92:65:92:be:b8:32:
                    ac:fd:f8:fe:16:ba:28:7f:54:9c:24:32:90:ab:32:
                    b7:20:4e:07:d2:c4:f8:82:a0:26:42:b8:6a:ee:ce:
                    1e:df:2d:97:47:e2:20:43:38:11:f2:98:64:db:9d:
                    27:37:59:b1:d7:b9:d6:2f:fa:62:16:d5:ea:e8:d6:
                    f0:5f:53:60:d6:f0:1f:1a:cb:01:33:fb:23:af:07:
                    58:31:19:88:4b:fe:c4:b3:9a:58:c3:6d:c4:50:2a:
                    ad:9d:6d:1a:81:ac:d2:55:0a:a6:d2:6c:55:89:5c:
                    99:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:7A:EA:8F:EA:44:0D:DE:07:F0:C4:3F:CA:A3:34:7A:68:B5:7F:F0
            X509v3 Authority Key Identifier:
                keyid:37:91:56:73:B2:8B:DF:AD:B2:C2:01:9A:C6:8D:04:64:FD:21:B7:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:76:5c:15:76:78:59:51:24:cd:d0:60:7e:ed:c0:a1:54:cd:
         e1:13:3f:57:9a:57:67:b7:4f:70:98:54:9d:5b:d8:1d:df:68:
         4e:c1:d1:9e:1d:54:1e:2a:91:4b:48:48:73:19:cf:22:10:e3:
         41:82:09:e7:bf:17:4b:1d:a6:88:d7:66:a4:41:79:9a:4d:74:
         ab:bd:6a:50:da:eb:4b:59:2e:1f:6e:01:4e:1a:ea:3b:12:a0:
         99:70:9c:d6:4e:ce:82:80:a4:14:34:69:ea:34:ad:2a:38:e3:
         e7:90:3d:87:b5:f7:7b:07:d0:6d:5b:81:a6:b6:5e:fa:ae:17:
         64:f9:de:ba:b5:d8:de:58:65:c4:e0:6c:ed:14:fd:69:46:84:
         f6:61:73:6c:dc:a7:91:fd:1b:7d:e5:e7:f6:19:f1:b3:28:3a:
         75:63:30:e9:d4:a8:fc:2e:71:78:e0:35:52:73:75:c8:98:02:
         cc:e7:43:6e:58:d8:91:a4:d2:dc:ab:3b:91:6d:1e:fc:fd:f6:
         24:88:8c:5b:ec:89:c5:55:db:99:03:df:d8:72:68:f6:60:11:
         c9:6f:62:b7:7c:50:af:2c:b0:c8:a1:4b:5a:5a:3d:36:53:2b:
         0c:0d:b1:fc:33:83:68:89:39:ec:25:19:f1:de:1c:2a:49:23:
         bc:d5:38:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:10:28 2025 by rpki-client