This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
File:                     5QwixmuF-smN6D12HvQkNDerA5M.mft (raw, json)
Hash identifier:          Oz9TD5EX5qKthvrNhzg+e1T4pWUOfD63YXUWJMCi1G8=
Subject key identifier:   B6:8B:34:DE:90:2B:5C:E1:08:99:17:76:8C:B0:9F:32:C9:3F:3D:2E
Authority key identifier: E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
Certificate issuer:       /CN=e50c22c66b85fac98de83d761ef4243437ab0393
Certificate serial:       019AF208D041A807E81C387E11F0138FFFE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
Manifest number:          13FE
Signing time:             Sat 06 Dec 2025 05:00:55 +0000
Manifest this update:     Sat 06 Dec 2025 05:00:55 +0000
Manifest next update:     Sun 07 Dec 2025 05:00:55 +0000
Files and hashes:         1: 5QwixmuF-smN6D12HvQkNDerA5M.crl (hash: iBTa0EQIjFYneHSkVmzRKK4SxBlSbgI5CctP+4g10QU=)
                          2: 5vvZLFuVzrlfVEjgWVSSvDzWzYc.roa (hash: d36pZwdlPn9b+lfJWHYLiYs9ysvYmjF2/rOLd55l7Go=)
                          3: f1b7by6SkYswASAnSv-cgB5XP2Y.roa (hash: x+DctqLC1gEcaYW0QmBitaKdQAwlen0XRAIQGmNrAQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:08:d0:41:a8:07:e8:1c:38:7e:11:f0:13:8f:ff:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e50c22c66b85fac98de83d761ef4243437ab0393
        Validity
            Not Before: Dec  6 05:00:55 2025 GMT
            Not After : Dec  7 05:00:55 2025 GMT
        Subject: CN=b68b34de902b5ce1089917768cb09f32c93f3d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:48:1f:fd:98:17:10:ce:e9:17:c7:84:26:9f:
                    5d:5c:3c:a8:4b:f6:1b:66:97:d1:e1:0b:8d:27:d1:
                    ad:db:be:86:17:ad:25:fc:65:87:9f:a0:28:49:ff:
                    02:c0:07:a7:1a:3e:96:b1:b7:29:89:50:0c:fc:35:
                    99:47:a1:05:2e:92:32:51:a5:2f:1a:96:d6:d8:c7:
                    b8:43:ff:bf:63:7c:55:a7:04:83:e1:e5:9a:c0:6c:
                    3c:7b:84:a9:81:7b:17:08:c2:ab:c7:38:b6:a4:b4:
                    1c:3b:c8:fc:94:7b:e5:ef:19:87:b8:ca:c8:19:1c:
                    07:67:f6:89:a5:54:26:68:43:b2:f8:44:45:47:4f:
                    58:af:bf:99:05:75:ee:80:86:a8:9a:47:f6:e3:65:
                    09:81:78:31:8b:fc:e4:44:5c:c4:72:35:bf:dc:0f:
                    82:7f:b3:18:fc:a9:41:69:28:28:02:66:53:c4:e1:
                    3c:7f:eb:ed:91:45:40:fa:5b:6f:8c:8c:d8:0e:2f:
                    06:da:31:10:9e:ef:8f:88:36:c6:89:f3:2f:3a:fe:
                    b6:9f:35:9c:fd:e6:b2:33:c5:50:f4:d1:d2:82:5b:
                    f4:5a:b4:25:3a:61:cd:91:c2:10:0a:ae:d2:75:4b:
                    27:8c:9b:6f:5a:3a:0e:db:84:1d:bd:9b:07:ee:53:
                    3c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:8B:34:DE:90:2B:5C:E1:08:99:17:76:8C:B0:9F:32:C9:3F:3D:2E
            X509v3 Authority Key Identifier:
                keyid:E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:69:d9:cf:7a:63:05:87:11:a5:3b:74:ed:1f:b8:85:9e:93:
         78:6c:2b:ac:d5:50:38:f0:a6:2d:f6:19:2b:81:0f:e6:15:66:
         b1:a5:94:ee:61:d4:64:88:2b:22:c7:45:86:0e:b3:89:d8:19:
         d6:41:f6:db:33:28:b6:62:a1:e0:f0:21:e3:f8:10:de:03:7f:
         5b:97:17:0d:12:f9:a9:d8:8a:7f:5e:e3:9d:0b:61:b6:30:cc:
         37:30:27:cd:db:0c:80:b8:84:a2:f7:eb:2f:91:a8:7e:3a:76:
         1e:79:e1:26:8c:48:70:e6:68:d0:e5:19:f5:40:7a:8f:05:97:
         0e:85:64:da:92:32:82:02:52:b2:c2:ef:2c:f0:a8:95:45:a9:
         6a:f6:d6:93:8d:c5:62:d3:7d:a3:5e:04:38:3a:99:ea:73:34:
         52:d6:d0:ff:cc:f4:f2:fc:76:88:1c:0d:df:f8:30:73:c9:ad:
         49:98:f4:4a:64:ad:36:ce:bd:35:11:c5:d1:65:54:19:16:dc:
         ce:c6:11:c3:8c:32:fe:c3:da:4f:47:a5:16:c1:b3:6a:8f:4e:
         a7:d4:1a:38:c0:93:c4:79:6c:59:8b:2d:2b:f1:c1:59:66:3f:
         a6:4c:71:01:d6:5e:1d:c8:ee:39:81:6d:23:04:90:9b:90:fd:
         96:e5:fd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:34:34 2025 by rpki-client