This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
File:                     65M6GrHHFeCzssf_oOEDhFYU03s.mft (raw, json)
Hash identifier:          Zr8mHFltucK1Gi8sTPzK+bIzTExri3x1xcqIGUErfsY=
Subject key identifier:   78:33:1E:CF:9D:9C:6A:B9:B3:45:AB:C1:2F:06:F4:5D:12:09:1F:C7
Authority key identifier: EB:93:3A:1A:B1:C7:15:E0:B3:B2:C7:FF:A0:E1:03:84:56:14:D3:7B
Certificate issuer:       /CN=eb933a1ab1c715e0b3b2c7ffa0e103845614d37b
Certificate serial:       019AF2096685819A736D4F3763AB953C2FDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
Manifest number:          05ED
Signing time:             Sat 06 Dec 2025 05:01:33 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:33 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:33 +0000
Files and hashes:         1: 65M6GrHHFeCzssf_oOEDhFYU03s.crl (hash: ncxG0CQo/KvGSghJTd5h+32gC6aSqG0KXLwQ9Ya1HgY=)
                          2: UQAL-JJc9xbj3dvWQx-rKxJywfk.roa (hash: arBBklCXAnQ+7dDU+siDZljmex4Eu/z9+wzjqqM7ap4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:66:85:81:9a:73:6d:4f:37:63:ab:95:3c:2f:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb933a1ab1c715e0b3b2c7ffa0e103845614d37b
        Validity
            Not Before: Dec  6 05:01:33 2025 GMT
            Not After : Dec  7 05:01:33 2025 GMT
        Subject: CN=78331ecf9d9c6ab9b345abc12f06f45d12091fc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6f:e7:10:31:c4:d1:ef:3f:6c:18:12:bc:5e:
                    39:57:07:a2:e2:ef:0c:7a:70:ce:b3:27:69:84:4a:
                    3c:fb:03:4b:cf:14:46:d0:f0:8a:0c:53:cf:f6:52:
                    c8:d7:a0:13:09:8d:b2:bd:56:a9:2b:18:c4:ab:0f:
                    b6:ef:6e:59:27:36:1f:c4:63:9b:21:bc:c9:ed:4e:
                    57:6c:01:54:04:7c:04:e2:52:86:b8:4e:3d:e3:4a:
                    eb:d9:15:12:56:19:a5:dc:6e:40:5a:0d:f2:a5:9f:
                    57:b9:9b:93:4c:4f:1b:f8:07:7c:8c:59:fa:e0:e1:
                    5d:15:ef:a3:58:89:2b:e2:81:a3:db:6c:0a:ac:e0:
                    47:4b:58:68:e1:10:14:15:8c:9c:9e:2a:19:20:2c:
                    0a:4c:de:2b:50:ef:f7:c7:21:ca:4c:7c:e3:72:07:
                    94:61:a9:42:bb:82:09:f1:98:76:c7:ad:af:60:30:
                    e8:54:d1:81:69:d5:6f:9a:3b:fc:56:2f:69:ca:75:
                    c4:02:38:65:84:f7:9c:fe:a2:d8:f1:22:d9:cd:5f:
                    4c:1f:8f:17:7f:e4:db:f2:88:f0:72:eb:9d:a5:31:
                    df:89:f3:11:2e:d5:d7:63:66:6d:ac:f8:ea:42:c1:
                    1d:f8:75:ef:5e:c5:40:0b:26:57:ad:7d:bc:f7:06:
                    10:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:33:1E:CF:9D:9C:6A:B9:B3:45:AB:C1:2F:06:F4:5D:12:09:1F:C7
            X509v3 Authority Key Identifier:
                keyid:EB:93:3A:1A:B1:C7:15:E0:B3:B2:C7:FF:A0:E1:03:84:56:14:D3:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:9f:a5:4d:42:d4:69:24:82:bc:ae:54:d4:58:d8:a0:13:db:
         d6:40:df:d7:d1:2b:57:13:5d:21:c3:51:43:53:3c:84:7a:2d:
         da:1a:e0:fd:c1:41:45:09:ef:57:75:8e:1a:2f:49:f9:50:b8:
         d7:82:ec:ca:de:53:64:26:b9:71:8e:d3:db:57:e6:8d:40:c9:
         dc:ee:28:35:0e:ee:a3:30:04:0b:28:a1:c5:d3:89:f6:02:ce:
         78:a9:11:f7:0d:ee:ac:24:f5:a2:42:3e:17:58:94:62:94:20:
         70:c0:46:6a:81:51:dd:5f:9c:46:03:90:62:a2:28:87:9a:a6:
         c9:b8:b2:78:2a:4a:df:1f:87:e0:6b:ab:8b:87:88:f7:3b:69:
         4a:20:88:a8:b8:11:b4:68:22:04:37:02:cd:69:a4:b0:cd:8c:
         6f:10:98:cf:50:dc:44:82:0b:04:6d:8c:29:99:3b:38:db:31:
         8c:53:bb:54:21:62:6f:a0:cd:26:13:22:9d:96:1b:d1:db:79:
         44:da:bb:4b:a6:bc:cd:48:c1:7e:c2:91:ab:ce:d0:78:bc:e1:
         e0:d1:50:af:04:ce:52:cb:47:c4:e4:ba:db:06:c6:3a:78:68:
         33:f1:99:58:8b:75:a3:4a:2a:dc:3c:42:86:39:fa:6a:d6:c6:
         11:5c:c9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:45:56 2025 by rpki-client