This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
File:                     Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft (raw, json)
Hash identifier:          wwGznCA5YI3LoZCYJIGqEjVwMqeGkyCad5SSBYKQlz0=
Subject key identifier:   BC:6C:EA:7F:9A:2C:8B:4D:0F:00:D8:5F:B7:A8:F5:73:69:4C:73:F7
Authority key identifier: 19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A
Certificate issuer:       /CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
Certificate serial:       019B243EC5527CB2590F199A2E232F14B0CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
Manifest number:          082A
Signing time:             Mon 15 Dec 2025 23:00:51 +0000
Manifest this update:     Mon 15 Dec 2025 23:00:51 +0000
Manifest next update:     Tue 16 Dec 2025 23:00:51 +0000
Files and hashes:         1: Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl (hash: 6odf0R/DFGYSvCyAWRHHoV1kUX+9cS8i1Xuqc39UTgI=)
                          2: UDJ25qWD57Bw7FcU1JLbyObIuuo.roa (hash: DrbNben6Azyc3081NKjsbYp37NNjbptdcPBV8kesvaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 22:36:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:24:3e:c5:52:7c:b2:59:0f:19:9a:2e:23:2f:14:b0:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
        Validity
            Not Before: Dec 15 23:00:51 2025 GMT
            Not After : Dec 16 23:00:51 2025 GMT
        Subject: CN=bc6cea7f9a2c8b4d0f00d85fb7a8f573694c73f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c0:91:f3:1e:02:49:13:65:f8:70:08:de:14:
                    99:38:55:6b:48:d2:ba:65:26:56:16:08:89:dd:43:
                    82:80:e7:1b:97:a6:fe:18:bf:eb:16:d2:fa:1b:3c:
                    d9:3f:a1:63:a7:79:00:dd:f3:5f:3d:4d:74:a3:f8:
                    2b:6b:2c:15:55:80:0b:7a:1e:75:76:ab:e1:a1:84:
                    79:5b:26:20:39:41:54:77:45:bf:86:be:ad:47:74:
                    46:90:ff:40:5a:a3:7f:33:98:9b:16:4a:de:23:6d:
                    b1:fc:23:0b:21:84:af:92:31:1d:f3:e7:78:c2:c6:
                    d1:e9:53:f3:ba:ec:ee:91:b0:c2:63:5b:62:0b:ee:
                    54:90:74:a5:c2:bd:6d:97:90:b8:4a:6a:8f:cf:6b:
                    2c:de:de:9d:ef:69:b7:d7:6f:06:3f:7c:f0:ac:e7:
                    9a:75:81:8e:f0:cf:84:c4:22:88:f6:ec:f5:b2:32:
                    ef:46:43:31:ec:04:be:31:bc:14:6c:f1:72:6e:67:
                    64:b6:57:f6:7d:6a:89:a1:b5:0d:7c:de:14:94:12:
                    c5:21:9d:ef:91:67:f3:c7:7e:8e:7d:6a:3d:cd:f2:
                    12:16:6c:40:36:bb:23:65:af:88:bc:a4:9a:11:15:
                    f5:28:14:bd:a8:68:45:9c:bb:9c:5b:95:c8:5a:54:
                    23:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:6C:EA:7F:9A:2C:8B:4D:0F:00:D8:5F:B7:A8:F5:73:69:4C:73:F7
            X509v3 Authority Key Identifier:
                keyid:19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ab:ae:c8:48:df:74:e3:4a:d9:f3:22:4e:2a:a0:b7:2d:e4:
         88:9c:38:67:9b:81:35:8e:1d:88:97:bf:41:13:99:d1:57:31:
         48:5e:ac:b6:fa:5e:be:88:c4:6a:7c:9e:21:42:06:d9:31:a4:
         c7:5b:b6:d2:2d:20:34:5d:ed:81:6d:17:0d:8d:cc:44:c8:3e:
         80:f9:01:b6:38:64:83:7f:1a:85:1d:be:6d:3b:82:2c:51:c3:
         ba:8e:4f:f1:5b:38:4c:94:4a:4b:23:8f:71:8f:fa:68:d6:c2:
         e2:09:b4:94:62:eb:c1:5a:37:79:34:08:c5:26:ac:07:e5:80:
         2f:dc:4f:49:9d:ed:cd:fa:f2:e3:b0:e8:6c:96:90:7c:d9:05:
         68:31:08:01:f2:c2:1e:75:87:9e:01:d8:dd:49:42:5a:e0:0c:
         ad:8b:0d:7d:67:59:8b:3f:92:dd:07:a9:11:3d:2a:ee:d6:75:
         1c:81:3e:7a:d4:77:67:60:d3:0f:e3:bb:5f:7a:60:1a:7e:d7:
         2b:f1:be:05:45:c5:2c:9f:2c:4e:ad:34:17:c1:bb:ed:98:b6:
         b2:5d:17:e1:b8:69:57:17:4d:d6:c8:81:d2:00:24:bb:f0:dc:
         57:12:03:01:29:f2:46:09:94:b5:81:45:c3:24:e1:61:f8:d8:
         e0:04:22:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 05:26:28 2025 by rpki-client