This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
File:                     h5tde1dZQJk3xcLCLwrb6OgyoF0.mft (raw, json)
Hash identifier:          GoB3wzxbRyVIuYY85APZThoMUWAINQV+t3wmYF9OuWM=
Subject key identifier:   81:AF:8F:70:7A:93:C5:9B:35:92:7D:FA:C0:54:44:7B:2E:02:C9:35
Authority key identifier: 87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
Certificate issuer:       /CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Certificate serial:       019AF208A626AF6BDCD2FCED5E62EF6B0830
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
Manifest number:          1764
Signing time:             Sat 06 Dec 2025 05:00:44 +0000
Manifest this update:     Sat 06 Dec 2025 05:00:44 +0000
Manifest next update:     Sun 07 Dec 2025 05:00:44 +0000
Files and hashes:         1: 8p4ECS-0PiEFQnW0zgPTXjUCNHY.roa (hash: uWux01M0AWL/b2xulUJtLGC3kzcykXei5DX70xijRPU=)
                          2: h5tde1dZQJk3xcLCLwrb6OgyoF0.crl (hash: UPvZs9Mqnzt1RpsLNhPN2i0flJjDWdEYg+ScFY1+O20=)
                          3: ucIHsuM2Zd5fmmXGAihiHfmCWAc.roa (hash: A1OTBfEgu4GjLmAVBKwQdSIcB/EXlvqAN5tdAvErj/U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:08:a6:26:af:6b:dc:d2:fc:ed:5e:62:ef:6b:08:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
        Validity
            Not Before: Dec  6 05:00:44 2025 GMT
            Not After : Dec  7 05:00:44 2025 GMT
        Subject: CN=81af8f707a93c59b35927dfac054447b2e02c935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e3:ac:31:ea:cc:6d:f9:cd:be:8e:f8:3f:41:
                    d2:17:2e:d8:f8:61:9c:65:a6:97:89:92:f9:b3:7e:
                    ec:b1:68:44:09:c5:51:16:1f:fa:10:7b:bf:aa:0c:
                    98:36:9c:2a:e1:2c:77:9a:3f:43:b6:7f:66:1f:b0:
                    d9:da:c2:f6:6b:a7:7a:2e:4b:f4:f2:2c:9d:91:9d:
                    41:fa:4c:2a:08:38:22:34:e5:b5:4e:41:23:b9:94:
                    aa:19:50:44:7a:0f:9e:38:a5:c4:2e:b1:8e:58:cf:
                    c8:6f:92:31:42:f7:6c:79:3b:32:e3:31:60:43:79:
                    17:f4:b0:4f:f6:d8:aa:77:37:22:d4:06:ef:47:bc:
                    cc:0e:bd:15:36:fa:40:bc:b8:bc:a0:ec:d0:82:82:
                    94:74:8b:c5:10:74:46:7f:ca:e2:26:e6:76:54:a0:
                    28:b4:9c:79:bf:25:45:07:87:a6:f8:db:b3:07:42:
                    95:55:ae:77:af:6c:25:53:15:d7:a1:80:3a:bb:c9:
                    80:65:49:9c:b4:cf:6e:f5:1e:d0:81:9d:57:98:34:
                    c2:b2:ef:b1:4f:13:6e:a8:86:90:1d:4a:ef:2f:38:
                    9c:20:80:d5:73:09:d7:d7:c7:2a:6a:be:74:67:c0:
                    15:44:f0:e8:77:ef:06:cf:78:67:6e:9b:7d:ed:1d:
                    ac:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:AF:8F:70:7A:93:C5:9B:35:92:7D:FA:C0:54:44:7B:2E:02:C9:35
            X509v3 Authority Key Identifier:
                keyid:87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:8e:63:1b:a6:5a:b5:d5:7c:4e:a9:67:88:50:2c:f6:5c:52:
         53:d5:b3:9f:1f:e3:1e:37:b7:0a:b6:46:41:da:2a:96:26:c4:
         cc:42:6d:fb:78:5e:5c:66:a0:13:c9:3f:8b:de:6f:f6:58:21:
         e4:8f:fc:64:78:81:ae:c1:1a:49:f1:f8:a3:99:69:3c:fc:b2:
         82:1f:40:ed:8d:ef:df:cc:14:3d:2c:53:79:8b:13:1a:36:d8:
         b6:e7:64:74:a8:32:0b:2a:0c:1d:e1:2e:da:96:ee:ad:20:d6:
         f4:26:be:78:de:ae:86:71:88:38:cd:46:f1:bc:84:7d:f4:39:
         86:1e:fb:72:e9:d3:3b:7c:ee:54:f3:ed:64:20:c3:3f:31:23:
         4c:1e:be:73:00:b7:8a:86:bc:bc:4b:fb:80:64:9c:68:f0:6f:
         58:59:34:30:cc:db:da:a4:13:c4:ee:9c:a6:b9:9f:a7:68:75:
         54:fb:f4:12:ad:37:bb:1d:e0:c8:bc:42:e5:a8:71:63:52:b2:
         8a:f1:b7:7f:00:ac:ff:1a:ed:79:70:b2:fc:77:39:e7:36:43:
         50:fb:a9:e8:95:5a:e0:e1:78:e6:24:db:9f:0b:32:8b:cd:96:
         fb:9f:7a:25:cd:59:2d:e9:0c:7f:eb:90:3b:93:94:2a:80:63:
         23:16:13:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:00:29 2025 by rpki-client