This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
File:                     5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft (raw, json)
Hash identifier:          ESbdt7ehN6D3IEZvOq9r/8X80cG8JGcvtJVpyw9jWL8=
Subject key identifier:   D4:E7:B4:A5:31:FC:2B:04:90:3B:8F:91:31:02:5A:4B:21:F8:A1:91
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Certificate issuer:       /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial:       019AF0F5EDB30566F3822528F17AC567C7FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
Manifest number:          1775
Signing time:             Sat 06 Dec 2025 00:00:40 +0000
Manifest this update:     Sat 06 Dec 2025 00:00:40 +0000
Manifest next update:     Sun 07 Dec 2025 00:00:40 +0000
Files and hashes:         1: 53Sw43oc54bFdYl3J8aYgPuTq1A.roa (hash: F/vDAf5IclENw5iT+CZVjqI+jpZyrwkuo7GV9LGXD0M=)
                          2: 5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl (hash: pxWnYYfdb5VMiOyuCOT8Fgg5cJk0ifbDjUmdYEuEWx8=)
                          3: 5ZP4elvUNRXzjNjwomfmX04GBdQ.roa (hash: YR80JqOL0QlReW0oAqdT62tW37GZp6htoO/zykr39rI=)
                          4: 7Qai7_3OG9tOZhZIU3UmjJ8mcfE.roa (hash: l40PCQmVBuUDSbMih4mk4bv9fMlho26r3dPLXTZdNaw=)
                          5: 9Xnf0_RPB7rW94Ti4f7tLJoLt5Y.roa (hash: 6HzGHL3rDmh0KnGoCjxpw3uQutKsEpK/x9u0157VNyI=)
                          6: KDN_6FFPENk8-bDnIrfpP21-8VE.roa (hash: RLkioT2IjSMiI+bndKsLWNSNLlPwCFxgUoWcDB4O4GA=)
                          7: L9WBYojbvLbnk987LNP8zQZEzQg.roa (hash: 2vRXimXnDZGXHdopycsq1UqK3u4zkQKmcrWliNbOkFI=)
                          8: S5tOJLlP_fO4AuDKQ8_gge5ko6o.roa (hash: v1IqdqgiinrLaFWkomMQNKh2wkRHR0/kvJk++V8a1GU=)
                          9: U0jLu9ql5SdWIQT76CBH027LVAA.roa (hash: PMh+5OCLPKe8/WakcVuCjjuQ331xyUdKEkuwBGpmve4=)
                          10: WOy4XXuLEMlJp9KBWwhDiF407tA.roa (hash: 6fZWXR6YTfGld6EIK4/PHGRBk1q4g1SRUcUmJfhoCkw=)
                          11: ZpjDQL4nsFw5QzvH0G3r2a1GNlk.roa (hash: CAm7uW2+Hk0sF/LHF5dzV4+B9Tz215MhOa+XlD6Ei5U=)
                          12: _KM3VWtbdBYw-7ONqWep42LzJbM.roa (hash: e0kdHEeKs2calKvQRylwRCnRtRK5mFt57DwvVj7HLtU=)
                          13: cVKkCDaARUtvYDXoV4X9N2Ey2ZE.roa (hash: QIVK0slO8PFSnaXnlK3EvRckSMInnvVoSayFBWoxzeo=)
                          14: j9WZYSGRdVfvzLNu1mDZtYatwaY.roa (hash: nUy51L/tmtGCGiZiltuVFci4bpVMC+ZdBO8uYz2YP0g=)
                          15: p-0-WRExyZV5USsnbA07oLLM0Dk.roa (hash: TpKQK+Apn7tf7RflC4lVp209f1NDxfhMP5jeUnHBKic=)
                          16: qepQI1x3-VZdN4tY2IgS2Qt0QxA.roa (hash: bg52ywo15jKHz/Ym+vNWwgmJcwLyfvK3SRvTyb5JixQ=)
                          17: rXg2JiPJpfAU79JRlEbsnp3pLc8.roa (hash: MQVzfSubZdxq5yFhe68zUL+Rr+rpOcHAqeIz000zyLw=)
                          18: uo3I45HXu40pb8JAg4x-iMt72NU.roa (hash: DCwRNzAYt7btk9pb3J4DQg/DLUtwWKO6Tv+fQC/dgO4=)
                          19: wf1azGdbs6KejpsvGDcmKSTTHpQ.roa (hash: q5SxtkKD9yNoBx9Nh1XxgTUv7m8d3XBZq8krtOYc6Wk=)
                          20: xLOovb_V_553mPyCa2MPaJ6AL4o.roa (hash: N6NgzmGF9X7Oq9bKLoPjt2ok22T8qTteZuv/qrOneTE=)
                          21: yQ-AQ94E1D9Tv3q18wm7Fve1ObI.roa (hash: H8VQOZeeUDRGGEzlonPzEMZCTDLV4o0msTIPImbqpx8=)
                          22: zmQcXGUtGhS1_tiNEBK-z0ub5Is.roa (hash: w9Y2nBHc4Olve6gCgm/MbgZTbOJSTsJeyEW3ubYEBD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 00:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:f5:ed:b3:05:66:f3:82:25:28:f1:7a:c5:67:c7:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
        Validity
            Not Before: Dec  6 00:00:40 2025 GMT
            Not After : Dec  7 00:00:40 2025 GMT
        Subject: CN=d4e7b4a531fc2b04903b8f9131025a4b21f8a191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4a:68:78:f7:d9:3a:0c:5a:9c:25:d6:91:74:
                    1f:a0:87:8c:57:2e:70:c6:b7:fb:13:e5:d6:33:74:
                    1a:ae:f5:ae:a3:60:87:ef:fa:14:98:de:08:93:5c:
                    54:33:9e:1b:9a:10:ca:33:7f:79:ed:2f:cc:82:64:
                    94:71:ed:3b:cc:7c:02:d2:17:96:c5:20:89:94:0b:
                    50:7e:1d:4d:90:13:cf:24:7f:4c:98:4c:4e:53:7d:
                    8a:42:cb:93:01:aa:08:d2:6a:5c:b0:ff:e3:eb:3e:
                    cf:36:5f:be:7e:48:f7:1a:23:75:d3:34:28:e3:6a:
                    ad:5b:a9:c8:9a:ef:0b:34:26:bb:5a:db:a0:cf:c0:
                    21:17:85:0f:cc:02:3e:a2:cc:1e:ca:ae:e7:bb:3f:
                    d6:a7:4d:13:08:76:d2:a8:c8:66:42:9a:cc:48:db:
                    8a:7a:f3:16:51:49:28:da:99:3d:5e:c9:aa:17:e3:
                    79:e5:ed:ed:3b:4e:35:80:08:e0:69:f0:5b:0c:7a:
                    29:ea:cb:ed:83:16:aa:a5:14:44:ca:53:78:c7:06:
                    4f:96:0c:f2:2f:53:f8:77:6d:e2:75:3e:ec:89:6e:
                    d9:e1:76:68:6c:0b:3e:28:38:d0:a8:de:f5:2e:b1:
                    a7:e4:4f:f3:7e:46:3c:1f:a7:6e:d6:89:be:6d:15:
                    fe:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E7:B4:A5:31:FC:2B:04:90:3B:8F:91:31:02:5A:4B:21:F8:A1:91
            X509v3 Authority Key Identifier:
                keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:68:f3:13:95:79:58:5c:94:a3:a9:07:3e:f2:ab:e4:11:47:
         f5:dd:bd:3e:86:0f:8e:0e:ba:c3:4f:be:7f:84:af:3c:f9:c2:
         55:4e:dd:89:82:08:76:1a:8d:e2:4e:df:34:56:3f:59:7b:f4:
         03:9b:81:49:ab:f4:10:70:8a:06:aa:20:41:c4:9e:f0:3e:63:
         99:de:2e:2d:df:54:7d:e9:70:46:e8:bf:89:ac:50:91:25:bc:
         8a:5f:c9:88:c0:0e:a3:33:00:59:9f:b0:64:16:ca:e4:1f:f2:
         fb:cb:ab:04:ff:76:fc:91:0a:27:ee:71:98:5c:e0:cf:7e:95:
         4d:f9:12:7e:92:53:a2:c4:d1:5b:b5:c6:d5:ad:c3:32:ab:ea:
         af:b8:a8:d3:a9:5f:f8:a4:62:59:9b:29:ea:4e:02:86:5d:4b:
         61:e8:62:aa:98:ce:df:33:6e:3a:82:49:7f:ed:e6:60:0c:86:
         89:99:c4:c0:89:73:76:94:7f:bc:27:49:ee:f5:10:1f:83:19:
         d0:50:3e:1d:b3:93:47:cb:bc:f6:ec:66:45:ce:7e:b1:a5:79:
         2a:d2:7e:bb:89:b6:c0:d3:7a:bb:64:e9:bb:d2:97:3a:38:26:
         63:2f:e9:64:ad:4d:c1:2c:82:71:da:e5:8f:bd:d0:f7:d8:b4:
         1b:ae:28:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:04:49 2025 by rpki-client