This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
File:                     5RZFNJeeYKVkcBIysuUgCIlUJgY.mft (raw, json)
Hash identifier:          c6u5eldtxuh/Gk0PJWYUpHorm0+1+Tf6NaYCLRQ0d9w=
Subject key identifier:   13:DA:95:58:00:22:74:74:07:F8:46:77:FD:2F:17:EE:B7:88:B6:CE
Authority key identifier: E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
Certificate issuer:       /CN=e5164534979e60a564701232b2e5200889542606
Certificate serial:       019AF208F1AE6ED395B1A10D9062BC81AA88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
Manifest number:          080E
Signing time:             Sat 06 Dec 2025 05:01:03 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:03 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:03 +0000
Files and hashes:         1: 5RZFNJeeYKVkcBIysuUgCIlUJgY.crl (hash: 5/QqHBSNw+knp0/GHKuBTGkAtxbAEhNM7mMa/7LvAME=)
                          2: d099hTA9N0rBX0a4mIMTtvx7dLM.roa (hash: LT02ny7o04CIcPy2ptlO2f83f/uDQvGL+KruqdAn2tw=)
                          3: jfgLmk_8BZt8FNL99fA-Isnp7jU.roa (hash: 3hldq5xpp8oSt4a5EF6tgPHwrwLntpc0Iw/stE0N/MY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:08:f1:ae:6e:d3:95:b1:a1:0d:90:62:bc:81:aa:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5164534979e60a564701232b2e5200889542606
        Validity
            Not Before: Dec  6 05:01:03 2025 GMT
            Not After : Dec  7 05:01:03 2025 GMT
        Subject: CN=13da95580022747407f84677fd2f17eeb788b6ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8f:7f:af:09:38:28:f4:8a:d0:05:98:12:80:
                    d3:32:83:90:55:4c:ef:f7:20:aa:76:2b:38:22:e9:
                    73:aa:57:4c:e5:eb:5d:b2:eb:88:ed:ed:46:d7:70:
                    c9:e6:25:6c:60:bb:57:66:c9:e1:f5:84:d5:81:59:
                    69:f3:be:3b:b1:2a:1f:7c:83:9e:a2:28:6e:92:82:
                    55:b9:0f:c8:4c:4d:f4:b7:4c:06:46:a9:7b:30:59:
                    11:a0:18:ad:87:12:6e:d8:47:28:b9:a6:c4:f4:77:
                    1b:83:d9:f4:3a:70:73:12:91:58:32:0d:19:5f:23:
                    6e:8d:4f:17:cf:28:70:d2:ab:af:92:58:ef:b4:93:
                    cc:7c:a8:68:e7:c3:5a:f2:2b:3d:16:05:0d:ff:dd:
                    2c:c6:2c:d4:34:61:82:e0:b7:b8:1b:30:ff:1b:ad:
                    96:9d:35:b2:53:a8:a7:a3:de:bc:65:ac:d4:fd:b3:
                    96:ac:30:68:a1:cd:e5:d7:95:4f:af:8e:4e:bc:b5:
                    82:21:57:be:30:f2:02:c0:db:48:fc:4b:7f:f6:ae:
                    22:3c:51:3f:c0:c8:28:29:5b:a7:5c:fe:57:0a:84:
                    d2:07:d9:7b:ab:52:77:cd:1d:27:35:3e:63:99:f5:
                    80:74:c9:12:c3:35:b2:42:41:d4:28:cf:92:9b:bf:
                    99:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:DA:95:58:00:22:74:74:07:F8:46:77:FD:2F:17:EE:B7:88:B6:CE
            X509v3 Authority Key Identifier:
                keyid:E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:a5:0f:09:0e:97:dd:f6:8d:4b:32:5a:7b:df:38:ec:5e:19:
         3e:5c:02:65:52:32:8b:bf:c5:f3:fd:5f:a5:fa:92:3c:00:57:
         03:4d:ff:1b:ca:e5:8d:4d:a5:7a:89:5c:4c:78:07:74:25:6d:
         99:ab:a8:f0:85:28:b3:e5:b1:1b:61:c8:cd:3a:f1:c1:c2:c5:
         cf:b1:4d:e0:94:3a:05:86:7b:d0:38:14:a0:b1:84:10:c6:3c:
         cf:4c:21:f2:8c:ba:78:78:4a:42:96:4e:52:78:f8:8d:e8:3c:
         26:93:62:0e:be:61:f1:15:11:86:70:1b:8a:af:26:76:e4:25:
         9c:b2:d0:4a:a6:52:7c:67:c3:d0:43:22:5d:d3:63:f9:d7:e8:
         4a:3d:41:20:21:46:26:9d:bf:0c:0c:55:a1:1b:ee:0a:2a:c2:
         78:68:09:06:58:af:2c:75:65:8d:44:78:9a:d9:c8:26:2a:fe:
         ff:79:9b:79:3e:46:2b:ea:ac:7b:c6:fa:28:6a:6f:71:fd:13:
         68:28:30:35:33:8a:63:b5:06:1f:98:57:3b:c4:70:ea:a3:59:
         7b:83:e4:28:12:03:77:47:ba:16:3e:2a:70:df:b8:fb:87:2c:
         5e:af:c1:4a:bc:6b:d1:9e:87:87:4f:f4:83:8f:ab:ce:0e:0e:
         8a:41:7f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:03:26 2025 by rpki-client