This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
File:                     5TrZtDK7g9FBxIDe54vDX_R8tyw.mft (raw, json)
Hash identifier:          kzDGpBwGAH9YfDXTHEW9urQZCvdjTCENHmOYwASmwXM=
Subject key identifier:   8D:83:61:F8:E9:08:58:98:EE:40:1D:23:84:70:5F:5A:64:70:8E:D5
Authority key identifier: E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
Certificate issuer:       /CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Certificate serial:       019AF389D436B05D37EF0630557D85DDB593
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
Manifest number:          1763
Signing time:             Sat 06 Dec 2025 12:01:27 +0000
Manifest this update:     Sat 06 Dec 2025 12:01:27 +0000
Manifest next update:     Sun 07 Dec 2025 12:01:27 +0000
Files and hashes:         1: 5TrZtDK7g9FBxIDe54vDX_R8tyw.crl (hash: 1+Rrln4tWX3QETMSys0ffPUxjdtaZZ3LHoT5VnqYHfg=)
                          2: FR3a7fbq59iIo0zAlvy5kzi1iZU.roa (hash: Z35c/JbC3hZCBf85VdNEpndC+c0TUxZMQxPjJSIsAQ0=)
                          3: suPxSfpNrh7z5_Ta2x6TjwnQ2sY.roa (hash: jrCuL3fpLVTl6VSsAmka/tgQrfuz/laa7SHWrZ9+ExE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:89:d4:36:b0:5d:37:ef:06:30:55:7d:85:dd:b5:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
        Validity
            Not Before: Dec  6 12:01:27 2025 GMT
            Not After : Dec  7 12:01:27 2025 GMT
        Subject: CN=8d8361f8e9085898ee401d2384705f5a64708ed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f2:66:59:0d:f6:96:34:d6:81:73:1b:df:22:
                    9a:0b:ea:86:52:a6:b9:6d:52:9e:eb:e1:1f:9b:e5:
                    c1:b9:5c:40:87:8f:77:d4:06:35:51:1a:84:d5:aa:
                    8b:5b:21:72:85:67:c8:99:30:16:25:c1:f4:ee:ec:
                    9f:c4:ac:51:38:57:b9:e2:bf:1e:7e:57:f8:7d:6d:
                    75:d9:9c:66:84:13:35:3f:0b:97:ba:42:fb:6b:ba:
                    d6:f7:0a:f5:cf:40:d7:12:d0:4e:c5:f9:a0:67:e1:
                    b9:67:d0:9d:f1:5d:36:50:c5:52:6e:af:81:10:17:
                    01:23:c5:e4:d9:88:1e:40:8c:a1:f9:39:1e:34:94:
                    f9:99:06:2a:f4:5f:25:a5:a2:57:bd:03:42:7d:5b:
                    b8:8e:09:2e:4d:e2:da:86:5b:93:0d:69:58:18:a6:
                    2c:64:6b:fb:0f:31:41:8f:90:39:69:de:fe:04:23:
                    28:e9:24:f8:f7:2f:62:8a:84:fb:98:84:af:5c:64:
                    a0:fa:d5:42:9c:77:15:94:5c:74:bb:81:55:41:ea:
                    c0:97:c5:28:42:ad:64:02:1b:14:d4:cd:fa:ed:44:
                    8f:16:4c:a5:9a:f6:a9:7b:87:38:b3:91:01:71:ea:
                    6e:d2:3b:95:d2:25:06:79:32:a7:60:cc:55:3e:d6:
                    6e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:83:61:F8:E9:08:58:98:EE:40:1D:23:84:70:5F:5A:64:70:8E:D5
            X509v3 Authority Key Identifier:
                keyid:E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:c7:43:ce:c9:86:7b:29:48:e6:73:75:b4:89:34:ff:13:43:
         4d:bc:24:bb:3c:d8:f0:96:ab:a7:c6:c5:17:a3:6e:a3:98:f9:
         46:89:21:26:48:d4:c4:a0:c1:82:6f:5c:17:f2:ed:89:79:86:
         82:5f:c8:40:8d:8f:f7:02:cc:d2:e8:18:9a:44:32:3e:b2:e9:
         69:14:0a:dd:c8:39:b9:80:f6:68:af:84:25:92:08:fc:2e:88:
         68:72:59:a5:0b:50:d3:b2:f0:f0:53:1c:b0:86:4f:9e:ca:fc:
         d4:81:b8:ac:60:81:b8:9f:02:89:3c:bf:bc:00:80:f0:57:f8:
         e6:9c:a7:c2:d5:89:c7:24:11:32:fc:52:1d:ed:2d:bb:7d:2b:
         ce:49:28:44:47:ec:ee:97:4d:cb:6f:b4:6e:fb:79:1e:f2:34:
         2c:09:a6:d0:2b:c7:6f:c3:d3:bf:79:d6:60:b7:a1:f7:23:75:
         6c:fc:b4:7e:c7:00:95:4e:bc:05:34:b1:54:12:e6:4a:14:f3:
         73:32:5d:8f:2d:3b:f0:60:7f:a8:59:01:10:aa:c1:ea:15:69:
         67:70:96:e6:d0:e4:78:3e:d5:a8:50:51:9b:5b:d1:90:c7:0e:
         cc:18:f1:60:8e:69:cd:80:09:3a:01:f5:b5:ab:6d:99:62:13:
         1c:2e:44:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzidQ2sF037wYwVX2F3bWTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1M2FkOWI0MzJiYjgzZDE0MWM0ODBkZWU3OGJjMzVmZjQ3
Y2I3MmMwHhcNMjUxMjA2MTIwMTI3WhcNMjUxMjA3MTIwMTI3WjAzMTEwLwYDVQQD
Eyg4ZDgzNjFmOGU5MDg1ODk4ZWU0MDFkMjM4NDcwNWY1YTY0NzA4ZWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/JmWQ32ljTWgXMb3yKaC+qGUqa5
bVKe6+Efm+XBuVxAh4931AY1URqE1aqLWyFyhWfImTAWJcH07uyfxKxROFe54r8e
flf4fW112ZxmhBM1PwuXukL7a7rW9wr1z0DXEtBOxfmgZ+G5Z9Cd8V02UMVSbq+B
EBcBI8Xk2YgeQIyh+TkeNJT5mQYq9F8lpaJXvQNCfVu4jgkuTeLahluTDWlYGKYs
ZGv7DzFBj5A5ad7+BCMo6ST49y9iioT7mISvXGSg+tVCnHcVlFx0u4FVQerAl8Uo
Qq1kAhsU1M367USPFkylmvape4c4s5EBcepu0juV0iUGeTKnYMxVPtZudwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2DYfjpCFiY7kAdI4RwX1pkcI7VMB8GA1UdIwQY
MBaAFOU62bQyu4PRQcSA3ueLw1/0fLcsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVRyWnRESzdnOUZCeElEZTU0dkRYX1I4dHl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9lOGJkMGItZjM2ZC00NWY1LWI5ODUt
MDliYjUyODc1MzFiLzEvNVRyWnRESzdnOUZCeElEZTU0dkRYX1I4dHl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9lOGJkMGItZjM2ZC00NWY1LWI5ODUtMDliYjUyODc1MzFi
LzEvNVRyWnRESzdnOUZCeElEZTU0dkRYX1I4dHl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV8dDzsmG
eylI5nN1tIk0/xNDTbwkuzzY8Jarp8bFF6Nuo5j5RokhJkjUxKDBgm9cF/LtiXmG
gl/IQI2P9wLM0ugYmkQyPrLpaRQK3cg5uYD2aK+EJZII/C6IaHJZpQtQ07Lw8FMc
sIZPnsr81IG4rGCBuJ8CiTy/vACA8Ff45pynwtWJxyQRMvxSHe0tu30rzkkoREfs
7pdNy2+0bvt5HvI0LAmm0CvHb8PTv3nWYLeh9yN1bPy0fscAlU68BTSxVBLmShTz
czJdjy078GB/qFkBEKrB6hVpZ3CW5tDkeD7VqFBRm1vRkMcOzBjxYI5pzYAJOgH1
tattmWITHC5ELg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:32:13 2025 by rpki-client