This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
File:                     IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft (raw, json)
Hash identifier:          txucdg92mj8ZogtE7+r1wI4mLaqI5+q3yYx3MGkNnnQ=
Subject key identifier:   A1:FD:25:33:20:9E:A3:D4:BE:87:52:BE:A8:1C:FA:B8:EF:E4:28:7F
Authority key identifier: 21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53
Certificate issuer:       /CN=2146e560a3f5cac7c64fe0f13be663d94c871453
Certificate serial:       019AF2092C5432693C99F76A255DAB0AF37E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
Manifest number:          05E6
Signing time:             Sat 06 Dec 2025 05:01:18 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:18 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:18 +0000
Files and hashes:         1: 65OBtTjCvSppmw7kLz43nf5_Bv0.roa (hash: gdoaQ1Q9gp77JEHF6QFUxphPMS2cWPxD6n6ohLQUaSY=)
                          2: 7KVtKRza7VDnZMrMe02kpGBrUpg.roa (hash: eDnVdL3nLyal8dEfu0dA+KtEtGPaNa6zd/fLOYxM2vg=)
                          3: IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl (hash: rqCJ2fY4R809/BuR5PMCCKdU5IlbkY78rLRmh5K/W1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:2c:54:32:69:3c:99:f7:6a:25:5d:ab:0a:f3:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2146e560a3f5cac7c64fe0f13be663d94c871453
        Validity
            Not Before: Dec  6 05:01:18 2025 GMT
            Not After : Dec  7 05:01:18 2025 GMT
        Subject: CN=a1fd2533209ea3d4be8752bea81cfab8efe4287f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d2:dd:fd:ed:5b:77:19:4b:e0:e1:5d:ef:e7:
                    36:80:e5:3b:f1:f3:3a:68:89:77:6d:a3:c5:b1:63:
                    40:d6:08:58:f1:db:4d:08:70:89:7a:99:8a:0c:9c:
                    9c:d4:e9:a4:4d:56:26:39:3c:0b:b0:21:ef:15:be:
                    49:89:91:50:4b:d0:f4:62:a8:ce:b8:06:b4:de:58:
                    e2:80:b4:cd:77:39:20:d3:c7:3a:c9:be:90:47:c9:
                    a0:d7:84:3a:1c:93:73:6f:99:f9:62:09:3c:0b:e8:
                    82:84:c6:5d:06:55:72:7d:45:79:9d:68:2d:8e:7f:
                    9b:a0:8e:d6:4a:1f:e6:e3:d7:f3:54:0a:dd:9b:49:
                    03:4a:88:e2:2f:f7:b7:75:9c:99:4b:b7:b6:05:03:
                    0a:7b:31:24:e1:17:03:d9:8f:5b:39:b8:6c:83:36:
                    d0:40:39:b1:b6:cf:9a:19:4f:4a:a7:22:24:e7:ce:
                    d5:0e:39:03:23:1e:eb:4f:26:67:d3:5d:2f:45:9d:
                    77:9b:85:ba:29:1c:7e:19:26:06:ba:53:9c:7e:47:
                    43:7e:dc:71:17:01:9e:a2:d6:08:ab:43:c6:a1:17:
                    31:dd:ac:6f:68:f1:3c:05:e7:f0:68:15:d1:aa:bf:
                    a3:35:f0:76:97:03:67:92:17:09:70:de:10:93:83:
                    94:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:FD:25:33:20:9E:A3:D4:BE:87:52:BE:A8:1C:FA:B8:EF:E4:28:7F
            X509v3 Authority Key Identifier:
                keyid:21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:47:cf:78:4b:a9:29:ce:99:3f:c5:0c:e8:82:ec:8e:ae:ad:
         73:42:cc:a4:67:99:2c:51:c6:a6:a8:6d:0a:9d:7b:ab:32:20:
         e0:4b:d4:96:43:f0:91:6e:ed:d2:f0:97:aa:31:6b:eb:bf:a8:
         0f:2f:20:b8:c0:a5:f6:32:1c:69:11:e4:e9:bb:0d:6c:64:af:
         c8:32:53:af:ec:43:79:10:22:ae:90:d5:a8:f9:92:ec:a9:03:
         96:af:bc:c6:70:84:70:2c:81:6d:46:8b:1a:3c:a9:30:22:aa:
         e8:a3:02:f8:58:3d:f9:c0:53:94:36:6e:26:8a:10:4e:55:c9:
         e7:93:f4:ef:20:14:d1:13:d2:03:e2:14:b3:0c:47:ef:16:87:
         41:c2:a3:9d:40:92:02:a4:54:d0:7a:22:7f:24:22:5d:60:61:
         aa:fa:6b:f2:b9:0d:a7:40:a3:bb:b4:f6:8f:7d:24:d6:19:ec:
         ba:78:aa:15:bb:9d:be:11:2b:bb:51:0a:3f:e4:34:fb:6a:19:
         ad:ea:82:34:40:6e:e4:e8:32:d7:37:a4:e2:1f:a9:01:69:16:
         a2:fb:e0:54:41:18:b6:6f:a8:95:98:84:f7:1a:83:be:f4:e0:
         6d:72:99:b6:ec:80:34:3b:41:1d:66:47:07:62:52:2b:38:e0:
         bd:d0:ef:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:54:19 2025 by rpki-client