This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
File:                     5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft (raw, json)
Hash identifier:          W1CFuS4G41rpPVj0rXkbKKIg9cJpShGiN+n065vtgN0=
Subject key identifier:   80:ED:A1:00:2C:4A:16:AF:50:C6:D3:2A:80:B4:96:66:85:FA:5F:7A
Authority key identifier: E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52
Certificate issuer:       /CN=e5729ee89636ba34fe56bd72e758f582ade70e52
Certificate serial:       019AF50A4B7A06D96CA54060627E81C04676
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
Manifest number:          0376
Signing time:             Sat 06 Dec 2025 19:01:23 +0000
Manifest this update:     Sat 06 Dec 2025 19:01:23 +0000
Manifest next update:     Sun 07 Dec 2025 19:01:23 +0000
Files and hashes:         1: 5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl (hash: fxPPN6+Lr1PpLbneeT00ZYSCfextjJHqPik34ilP588=)
                          2: GqkvkcQA2bbgQwHJ2b6jWAleiGg.roa (hash: EGM2nICbqAUwB5CP81F3mXlaWH5q4kAR9J7Mx82LHRQ=)
                          3: U_pf5mr7mVogKbgEVCSPIKt6P1Q.roa (hash: A+REPWck5DlDgbp9k+f3tR4pBhovVcICYPMhumJUrjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 19:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:0a:4b:7a:06:d9:6c:a5:40:60:62:7e:81:c0:46:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5729ee89636ba34fe56bd72e758f582ade70e52
        Validity
            Not Before: Dec  6 19:01:23 2025 GMT
            Not After : Dec  7 19:01:23 2025 GMT
        Subject: CN=80eda1002c4a16af50c6d32a80b4966685fa5f7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b2:08:e7:b7:7e:d2:cc:01:8a:89:4f:ae:40:
                    d4:20:50:50:8d:b6:16:89:41:29:d5:3d:22:20:eb:
                    f6:02:9b:79:7f:ac:38:34:da:47:99:0d:cd:f0:00:
                    a3:66:f7:f8:44:9a:3b:e8:a6:ae:34:89:84:76:48:
                    4a:19:e1:2a:c4:d9:fc:e1:7c:c9:d3:86:9f:da:02:
                    c8:e2:47:9e:3c:e3:f3:71:a4:01:b6:48:e1:da:8f:
                    9a:01:34:fd:5e:8b:4a:a7:34:89:f0:69:b6:f0:07:
                    0b:a4:4a:39:cf:b9:1f:7a:0e:78:0c:f1:fa:3a:9d:
                    d9:73:f1:79:bd:b6:09:29:b6:16:7b:d9:2d:63:86:
                    2d:98:ac:29:ef:ab:da:9b:53:87:99:03:b8:9e:60:
                    fe:e2:88:b5:2a:ea:53:67:9d:27:07:ff:f2:ea:a5:
                    62:4a:5e:c1:52:16:f1:0f:91:be:36:38:61:ba:9c:
                    26:df:7f:03:46:f9:98:f9:bd:5e:82:39:3b:7e:a8:
                    48:91:f9:a6:63:a0:e1:70:7c:08:fe:b8:6b:4e:59:
                    86:09:fe:ce:f4:59:4f:24:e0:10:d2:a7:bb:ca:ec:
                    74:39:1b:ff:36:43:e6:77:18:95:45:8f:34:0b:ee:
                    ef:73:ac:3e:2a:37:ad:f8:de:30:33:f0:d7:59:96:
                    24:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:ED:A1:00:2C:4A:16:AF:50:C6:D3:2A:80:B4:96:66:85:FA:5F:7A
            X509v3 Authority Key Identifier:
                keyid:E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:51:79:9f:d4:a4:19:52:32:32:96:45:80:b0:06:7f:06:6e:
         06:36:7f:93:1c:47:dc:ff:50:e2:fb:ab:d7:3f:44:7d:63:60:
         2c:75:53:30:ec:08:6d:74:5b:c5:af:4b:6d:c3:a3:3f:d2:43:
         32:2d:dd:96:db:a6:1f:1a:81:34:bd:0c:91:96:b7:c7:db:a0:
         66:11:c2:89:69:85:97:27:36:c8:9e:c8:b6:87:1e:4c:45:b7:
         96:68:e5:f1:dd:3a:d3:f7:ca:2f:7b:65:fa:f2:57:b7:b7:7c:
         ac:74:f3:30:bb:f4:71:15:65:01:6a:b4:81:33:5c:8d:80:41:
         4d:78:56:7d:56:15:30:f3:8b:8d:f0:06:50:4f:78:5f:13:5e:
         ea:53:b5:12:d4:cf:95:87:4f:4e:48:32:b2:c7:8a:59:13:48:
         9f:ff:0b:bb:20:67:3c:21:96:c3:1b:1b:cb:a9:ae:d8:02:96:
         7c:21:85:45:62:1f:58:4e:90:c8:ef:fc:5d:78:2c:1d:04:1b:
         36:c5:34:5b:a4:a8:ea:e6:32:f8:86:77:dc:2e:85:3d:ce:1a:
         c7:29:59:a5:f8:9e:36:d5:62:e3:e4:4e:20:2c:47:92:3d:da:
         db:b7:4d:73:d7:98:fe:39:31:fb:c2:7f:b1:ba:5d:e5:e2:7d:
         5c:93:3b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:01:54 2025 by rpki-client