This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.mft
File:                     V5Sv215qGIV4CSClT_qCQI6oW6E.mft (raw, json)
Hash identifier:          AiUwRbTsDbBGnlWfbWl2KmcutDT8PFq5Lx31yYBHQLQ=
Subject key identifier:   5E:A0:3D:20:B6:24:39:54:5B:AD:7A:AC:C8:96:5B:1D:DC:18:53:80
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Certificate issuer:       /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial:       019AF1643CC38AD6D3D9B2255E934AC3EE01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.mft
Manifest number:          1787
Signing time:             Sat 06 Dec 2025 02:01:09 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:09 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:09 +0000
Files and hashes:         1: 0Q4TTPSEDP2vwJw57Q98mNyLvHY.roa (hash: g+tt3wTt25Gy9GiGDu9XZL7vdB+saK0K7FaXmAomO5Y=)
                          2: DHjfwuWAYJJh7p_MCkbsmnyD1j0.roa (hash: LUkdazz94OiT/KAXqeQfCgc3awAt3nr20omKP9jyUv4=)
                          3: KDqp0KJBu-4WRFmlODTZGvtEzMo.roa (hash: sgx3u4OlPaMIX30o9Pw/sWgXitROdXpHDBcbHgo10iA=)
                          4: Tbcx9w57JlajlSr_D5AgzfLOVcY.roa (hash: 9ZMFnkZJalflC1y21xwgngk/wJpk4yIEOnHaqOzi8Nk=)
                          5: URhndB2z4bBAh3ApjFvckcVFg-o.roa (hash: 8fCApbL0btkJ/iY0cLD4A30Cl8V8tS6A1W9MGWYX73Q=)
                          6: V5Sv215qGIV4CSClT_qCQI6oW6E.crl (hash: BKJ78PDU6Gen+WIjU8lCJTZPLcLHp5HchkUtXyB/2U8=)
                          7: uAM4WpW0Sk1wUAV5w6VXPbJv9MY.roa (hash: GZ+0j2rVpXrpodZjQH1uYXWWYgFVWGNe8kdd6v4smBQ=)
                          8: wN12RJcK-_CRebSzXn9J25Yr5VM.roa (hash: U3IOSsKfeLNTBtDNIBErlYBjoE5txf9cmKxG7Wkj8ug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:3c:c3:8a:d6:d3:d9:b2:25:5e:93:4a:c3:ee:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
        Validity
            Not Before: Dec  6 02:01:09 2025 GMT
            Not After : Dec  7 02:01:09 2025 GMT
        Subject: CN=5ea03d20b62439545bad7aacc8965b1ddc185380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:eb:b5:e7:91:fb:65:05:a1:9a:17:31:05:26:
                    d3:15:7e:a5:64:74:4b:da:ba:0b:df:cb:11:eb:58:
                    4d:b4:e7:69:bf:3d:a5:33:e1:d4:45:13:36:12:f1:
                    6c:57:8e:61:6f:93:7f:cf:35:40:23:d0:f9:cd:ca:
                    44:4c:83:92:16:30:2f:6b:69:d8:68:b5:f1:e3:be:
                    11:65:31:0c:78:da:fb:01:90:cd:d3:2b:05:ba:07:
                    43:24:71:e2:3f:6c:42:55:9f:4d:4f:13:b7:f6:bf:
                    30:dc:b5:b2:a7:14:ef:73:2f:1d:31:f8:33:66:1b:
                    b4:bb:91:17:a4:d3:73:d9:df:ec:7d:db:0d:65:07:
                    19:2e:86:cf:a8:a1:41:4b:44:37:56:6c:d1:4b:b7:
                    59:61:10:f3:46:d3:ff:c1:38:4c:f4:29:19:51:ef:
                    8e:6b:84:31:06:ed:ac:44:ed:9d:a8:fc:0a:c0:65:
                    38:70:ad:57:33:ed:da:ac:69:c4:df:6f:22:c2:3b:
                    f6:2b:65:4f:e8:c3:40:d6:5a:8e:d8:03:af:e7:19:
                    c9:f7:ea:ce:f2:75:a8:28:af:9c:1b:1c:b6:17:55:
                    ba:ed:33:1b:ce:7b:5d:57:22:1c:00:e5:eb:e3:93:
                    64:be:1e:c8:3f:02:66:ff:b4:3c:40:2c:3c:06:b0:
                    73:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A0:3D:20:B6:24:39:54:5B:AD:7A:AC:C8:96:5B:1D:DC:18:53:80
            X509v3 Authority Key Identifier:
                keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:5e:82:b9:90:4f:ab:1c:cb:96:73:bb:11:32:23:2e:01:f3:
         f4:b2:9f:09:97:f3:9c:4e:f9:07:55:65:d0:1b:e4:58:74:15:
         95:35:6d:0f:b5:62:f1:69:94:d2:37:53:33:37:5b:d1:97:94:
         d2:f2:50:e0:e7:38:fd:b1:c2:24:5a:09:39:36:c4:ff:68:44:
         3c:c3:b4:14:19:a0:51:9b:a5:e2:50:ac:b3:d5:ca:ec:fa:c3:
         05:e7:51:f8:98:93:12:2e:20:c7:29:3f:52:07:d6:05:79:7a:
         a3:e5:39:c5:4b:5f:1c:cf:ac:31:80:e2:09:01:4b:48:4e:07:
         9a:0d:c0:0e:17:bc:24:53:03:0e:b5:fb:ab:62:ae:3c:8f:26:
         2b:09:e0:9d:35:6d:5c:0e:5f:76:a2:52:3f:f3:c4:4e:cc:08:
         6c:94:b9:f5:63:5c:d9:43:b2:99:17:ec:99:30:34:da:cc:5d:
         b6:2b:33:c6:fb:df:ef:e5:c7:c0:fe:41:66:89:10:e1:71:82:
         62:08:25:dc:47:c6:6e:1b:53:52:31:8d:db:5d:74:f6:12:00:
         fe:f0:30:a7:15:9c:55:89:46:5b:f5:e4:fb:14:4b:99:a8:11:
         a8:c2:06:eb:fe:72:8e:57:49:05:57:94:8c:29:65:80:9d:c3:
         0c:c8:d6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:25:06 2025 by rpki-client