This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
File:                     0lE5LNfm5ApFwbikR5iA7vlg8zA.mft (raw, json)
Hash identifier:          j5FXBSNB5pfPv+vDj+TWDUtCEfKrbkLI5UNFcr88pOU=
Subject key identifier:   0A:E7:56:CF:54:2A:4D:07:68:A2:66:7F:AE:DF:EF:C8:B5:EB:DB:70
Authority key identifier: D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30
Certificate issuer:       /CN=d251392cd7e6e40a45c1b8a4479880eef960f330
Certificate serial:       019AF1D1D6B9CD5641ED57A6B2ED1C3EC1EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
Manifest number:          1761
Signing time:             Sat 06 Dec 2025 04:00:52 +0000
Manifest this update:     Sat 06 Dec 2025 04:00:52 +0000
Manifest next update:     Sun 07 Dec 2025 04:00:52 +0000
Files and hashes:         1: 0lE5LNfm5ApFwbikR5iA7vlg8zA.crl (hash: FrzoOlxKd6Kan6d6OyjWI+mUc4Dt2z6KH3nGk0XMBiI=)
                          2: FJ052FCXxgY8148DvYkO__En3kw.roa (hash: JLmqR8aNA75wEnRdZMPO0CuZGQnOp6G+B6BOZat9Lxk=)
                          3: ja-2ssrlTJp2pStih2G9Qb0Qy5c.roa (hash: QTsSWZKA6bZq44kgpQ1aopr0h9GiEKlR3CEv28RO574=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d1:d6:b9:cd:56:41:ed:57:a6:b2:ed:1c:3e:c1:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d251392cd7e6e40a45c1b8a4479880eef960f330
        Validity
            Not Before: Dec  6 04:00:52 2025 GMT
            Not After : Dec  7 04:00:52 2025 GMT
        Subject: CN=0ae756cf542a4d0768a2667faedfefc8b5ebdb70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c7:83:27:d3:6f:0b:d8:9a:ae:2b:b3:0e:74:
                    0b:ac:22:11:89:3e:61:9b:00:26:73:63:11:e9:53:
                    49:c1:dd:a9:a9:10:8b:7e:45:a3:bf:a5:e2:a4:2f:
                    d7:c6:06:ef:0c:ce:a0:ed:74:26:15:2c:d4:80:ec:
                    6c:d5:58:7b:4a:8c:98:b1:2f:62:cc:14:9f:fb:02:
                    16:b6:96:31:2f:c1:20:dd:1a:c9:cf:2a:a4:63:2d:
                    35:d2:ae:48:7c:b4:c6:d2:58:9b:1e:a1:3e:84:bb:
                    07:06:e8:f8:a7:28:04:f5:72:c7:ec:1e:4f:41:b1:
                    bd:3e:45:71:0e:94:34:16:b1:4c:a5:ca:a3:8a:00:
                    13:33:5a:92:28:1e:de:fe:44:2f:d1:5e:98:1a:70:
                    1b:91:bd:23:6e:83:03:71:f5:b6:a3:74:af:f6:6d:
                    40:5d:60:28:9f:36:7a:66:3b:fd:64:5f:ac:7b:57:
                    02:83:ef:11:8e:8e:ee:c9:6f:95:60:90:fa:5a:3c:
                    37:66:3e:8f:27:a9:d4:11:42:a4:56:37:57:86:a0:
                    0e:55:da:04:c1:dd:86:40:a0:d3:c3:ce:cb:63:16:
                    5d:0b:2f:13:60:ef:b2:6d:5b:b3:d8:77:8a:31:c3:
                    94:40:be:95:f5:8d:30:31:17:ae:46:03:3b:04:0e:
                    83:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E7:56:CF:54:2A:4D:07:68:A2:66:7F:AE:DF:EF:C8:B5:EB:DB:70
            X509v3 Authority Key Identifier:
                keyid:D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:d3:2c:10:38:fb:ec:96:ea:bf:9b:e5:fa:29:1b:8f:24:7a:
         4d:44:5f:28:d5:33:a9:aa:e2:c6:1e:47:b4:8f:93:eb:68:7d:
         d9:58:85:d0:a0:a9:8b:c6:07:b0:1f:8f:30:eb:df:b6:b5:d9:
         7f:64:8b:d1:38:8a:e9:32:55:bb:73:9c:ab:74:e2:e1:09:c6:
         41:5b:ba:fd:12:de:26:27:31:d8:9f:24:5f:bb:25:72:c9:af:
         76:67:99:2b:0b:33:4d:21:51:1f:96:70:ec:0f:73:26:de:01:
         7b:cf:72:ab:b2:c4:3c:48:fd:a5:4e:7a:13:dc:f8:5a:7f:d7:
         75:b3:e6:40:96:58:00:2f:f3:6a:56:a1:ea:18:1a:f7:4e:dc:
         b1:5b:ad:80:46:6d:7b:4f:bf:db:d2:92:2b:fd:12:2c:74:6d:
         cb:8c:18:32:b9:50:2a:61:a2:4e:ac:f1:ca:2f:83:95:2f:f5:
         eb:ae:ab:7d:98:8b:48:f9:2b:38:52:38:c6:5e:4b:12:28:2f:
         cf:0e:f2:a5:c8:d8:1b:e4:94:a9:0d:18:43:f5:b8:96:33:79:
         cc:25:0a:ca:b6:5f:6e:36:c9:dc:25:c3:7d:40:bb:5c:fe:47:
         73:04:7e:87:82:2d:77:5e:ea:ab:8e:91:b6:1b:28:de:b6:42:
         ec:e7:96:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:58:14 2025 by rpki-client