This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
File:                     N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft (raw, json)
Hash identifier:          7JVvAMOMQg3dD2zbQIkALx3SCexyV9/EQ9yo1Y6XdvE=
Subject key identifier:   69:11:7F:E8:8C:AA:BE:F0:A8:AB:71:B8:B2:99:F5:02:D8:40:41:A8
Authority key identifier: 37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
Certificate issuer:       /CN=379cd67c0c18959239358553229e91f543cc5a5f
Certificate serial:       019AF5411A05C2ACE685164F6DE699306906
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
Manifest number:          1746
Signing time:             Sat 06 Dec 2025 20:01:15 +0000
Manifest this update:     Sat 06 Dec 2025 20:01:15 +0000
Manifest next update:     Sun 07 Dec 2025 20:01:15 +0000
Files and hashes:         1: N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl (hash: ipT+jDmljsgRxHF3JSvEWSJzcdGCVGrXkrUfXHZlSfM=)
                          2: _OMF5Nl70k5FI6dZyBbjhO75Whc.roa (hash: 9Vx2B9Q4z5L6Kqh9xs9MrJDUwmGHBM33p0J4623FkWI=)
                          3: rWytEJ3FiAYVl_Gh2eAbgXCpgnc.roa (hash: N2Jpj3ow/5rvsnHjtA7tEJKRTrNoSnYmSjGqItrSpc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 20:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:41:1a:05:c2:ac:e6:85:16:4f:6d:e6:99:30:69:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379cd67c0c18959239358553229e91f543cc5a5f
        Validity
            Not Before: Dec  6 20:01:15 2025 GMT
            Not After : Dec  7 20:01:15 2025 GMT
        Subject: CN=69117fe88caabef0a8ab71b8b299f502d84041a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:90:69:b7:5f:db:b9:af:66:e2:62:b9:52:eb:
                    d9:db:8b:a5:43:7b:32:3e:62:5d:06:f8:95:f0:a0:
                    ae:3f:ac:3d:fd:15:e0:78:89:46:a5:98:39:49:03:
                    12:2a:23:8b:f6:bf:40:36:c7:61:d8:e2:ea:c9:3a:
                    b8:aa:cd:db:49:07:a4:1c:09:09:23:c8:bd:a7:ef:
                    5e:1a:e2:82:63:92:95:3a:a7:aa:44:f0:42:3b:8a:
                    77:77:a6:eb:33:e2:18:74:93:d0:e0:9c:f2:a1:f3:
                    8f:23:2a:19:23:98:5a:83:b8:a8:74:a1:37:24:27:
                    50:c0:e1:a5:71:96:b8:ca:89:be:b0:d6:a4:79:ad:
                    08:e4:a3:82:6b:6d:a0:9a:b3:a8:f4:5a:f4:15:c2:
                    fb:cb:44:82:bb:d3:d7:42:e1:f4:69:9b:9f:1e:5f:
                    42:b0:91:a9:2a:dc:68:6a:80:16:44:ad:a0:89:b3:
                    ab:60:8f:a9:9b:c5:33:da:61:f7:45:8e:6f:58:c9:
                    bb:21:58:d0:95:95:a8:6f:52:16:91:ee:28:5e:0c:
                    58:d5:76:40:ca:a4:b2:db:77:a7:8f:34:21:01:f6:
                    3a:6a:ec:c7:c4:06:2d:fd:d5:e2:54:16:c5:56:27:
                    94:8d:b6:85:6c:85:71:ef:b2:1d:87:73:11:85:46:
                    77:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:11:7F:E8:8C:AA:BE:F0:A8:AB:71:B8:B2:99:F5:02:D8:40:41:A8
            X509v3 Authority Key Identifier:
                keyid:37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:78:1a:d7:98:08:79:3e:ee:40:4d:66:e5:35:39:e3:c9:b7:
         67:2f:c5:11:1b:b2:d5:63:89:96:87:98:9a:72:03:cc:f3:83:
         a1:0f:ec:6d:9b:7b:1e:b9:de:50:fb:ae:90:a1:a2:4e:a1:64:
         72:ba:56:f0:64:9a:e7:0a:7f:3c:ff:46:f9:45:72:19:88:c0:
         e5:f0:88:11:60:47:23:cf:44:7a:b3:27:12:be:73:3b:9c:a0:
         1b:cf:a7:e5:6e:43:0e:83:5e:1b:b1:1c:9b:e8:53:10:49:22:
         8f:4a:b5:3b:54:6c:f2:85:0d:6e:6e:a7:77:4f:4b:52:b8:dc:
         d4:93:90:79:b8:85:05:90:4e:ea:c8:c1:cd:21:aa:d4:8c:63:
         66:14:ca:77:2e:bf:4e:23:b3:62:bb:a9:ae:38:f8:21:44:4b:
         65:70:88:df:b7:59:17:37:e4:2c:2f:fc:f5:95:a1:bd:16:9c:
         c8:f0:8e:d7:42:e7:c1:46:8b:d5:cf:2e:eb:76:54:c5:27:01:
         16:4a:c8:58:46:1a:60:57:a0:10:42:ba:98:62:78:05:d3:24:
         4e:a5:6c:3e:55:3a:22:3c:ce:c9:55:f7:63:31:4f:88:04:38:
         66:9f:c8:b7:62:0e:e0:20:19:6d:fa:00:a6:c1:c8:a5:a9:be:
         f3:a0:82:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:55:58 2025 by rpki-client