This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/026744-966e-4268-8137-43a049e0b6ce/1/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.mft
File:                     5fiGMOimNi6ZUd_ZrVmlLGv1TnU.mft (raw, json)
Hash identifier:          weuOwU/XlhYsJbxkV/BN77sCaaRTbKB2qx8cUC/4qQ4=
Subject key identifier:   D4:DF:58:AA:8F:9F:9C:4D:67:3F:C3:C9:6A:83:98:D4:B3:1C:78:C1
Authority key identifier: E5:F8:86:30:E8:A6:36:2E:99:51:DF:D9:AD:59:A5:2C:6B:F5:4E:75
Certificate issuer:       /CN=e5f88630e8a6362e9951dfd9ad59a52c6bf54e75
Certificate serial:       019AF50990941C1C043F180ABFC8D20D954D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/026744-966e-4268-8137-43a049e0b6ce/1/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.mft
Manifest number:          0767
Signing time:             Sat 06 Dec 2025 19:00:36 +0000
Manifest this update:     Sat 06 Dec 2025 19:00:36 +0000
Manifest next update:     Sun 07 Dec 2025 19:00:36 +0000
Files and hashes:         1: 5fiGMOimNi6ZUd_ZrVmlLGv1TnU.crl (hash: F6eVxEqX1eZczpihcpfCgI+909CghV+tZpfautVXRZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/026744-966e-4268-8137-43a049e0b6ce/1/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/026744-966e-4268-8137-43a049e0b6ce/1/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:09:90:94:1c:1c:04:3f:18:0a:bf:c8:d2:0d:95:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5f88630e8a6362e9951dfd9ad59a52c6bf54e75
        Validity
            Not Before: Dec  6 19:00:36 2025 GMT
            Not After : Dec  7 19:00:36 2025 GMT
        Subject: CN=d4df58aa8f9f9c4d673fc3c96a8398d4b31c78c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a3:d4:27:e5:b6:4e:b6:27:26:27:95:ee:82:
                    9d:36:0b:f2:17:9a:dd:4b:6c:d3:d3:4a:33:0b:9f:
                    6c:1e:97:32:24:9d:b7:d7:92:8e:33:a8:cc:54:cf:
                    65:e9:21:45:78:bd:25:39:85:6b:1e:ab:6c:b2:4c:
                    5a:1f:12:4b:1e:52:67:96:4f:81:84:74:fe:fa:43:
                    59:33:a6:1a:d6:7d:3e:7a:2b:c8:b5:57:ea:44:a4:
                    5b:63:5b:b4:58:1e:2b:61:3d:b6:a8:b4:53:c6:0f:
                    fc:81:33:58:3b:ba:62:ba:8b:fd:4c:7b:07:30:64:
                    aa:b4:3b:d6:8b:2f:11:fb:68:e7:95:9c:39:92:19:
                    cb:26:57:33:31:6c:5d:72:26:b6:f8:51:b7:97:cc:
                    c6:10:5d:54:cc:c6:b6:fe:ba:15:6f:87:10:29:46:
                    2c:70:5a:f1:f3:74:f4:7e:2b:60:cb:18:48:ce:ee:
                    f2:8e:d3:72:0e:d3:4e:9e:a1:f1:1b:b7:f3:6b:27:
                    4f:f8:18:29:dc:c0:fb:34:9f:26:ac:05:b2:db:0a:
                    20:0b:db:be:aa:3b:7b:f0:6b:b3:a5:98:cc:84:08:
                    28:98:8c:e9:50:d3:bb:bb:f0:67:05:d5:5d:6d:67:
                    b4:40:df:55:02:50:18:ab:40:b0:5f:45:6c:92:76:
                    ff:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:DF:58:AA:8F:9F:9C:4D:67:3F:C3:C9:6A:83:98:D4:B3:1C:78:C1
            X509v3 Authority Key Identifier:
                keyid:E5:F8:86:30:E8:A6:36:2E:99:51:DF:D9:AD:59:A5:2C:6B:F5:4E:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/026744-966e-4268-8137-43a049e0b6ce/1/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/026744-966e-4268-8137-43a049e0b6ce/1/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:68:d7:41:96:3e:2d:8e:5d:b0:f4:ef:34:aa:ad:95:a7:49:
         f2:94:1f:84:0e:3a:a4:05:43:47:60:40:a3:e8:c4:99:16:d4:
         7b:6a:cc:66:75:79:31:38:a6:1d:e6:22:06:4d:2f:46:6b:9f:
         de:84:b9:4e:de:ab:ee:4a:db:97:d6:49:63:bc:08:c1:86:68:
         e9:3c:37:3c:77:97:8f:ea:94:e2:91:f8:17:8a:73:98:9f:3b:
         2f:de:a6:de:69:1c:70:3e:ae:43:5e:fe:00:52:1c:d1:b9:e1:
         41:ce:2c:cb:b0:12:81:70:c3:2f:52:2c:59:48:eb:e8:ed:3f:
         83:d4:20:7d:3d:a3:77:f2:5a:d4:f1:48:68:ae:f7:ba:e3:05:
         02:cf:80:0e:c7:08:f9:a3:19:76:c2:22:77:14:52:75:04:91:
         50:30:e0:bc:90:38:3c:5f:86:d2:cf:6c:66:54:23:64:11:76:
         61:a6:68:32:8d:93:ef:99:e1:4a:4b:63:06:b7:6b:22:e0:30:
         1b:06:01:83:b1:d6:a4:a2:8a:12:db:c6:4e:38:58:5c:af:45:
         e6:11:2c:75:36:8a:cf:dd:21:c1:a3:d8:a5:52:71:e4:a9:b6:
         57:c4:a7:b5:5f:5d:b3:60:6f:61:c7:43:96:23:78:9a:84:be:
         76:71:68:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:42:46 2025 by rpki-client