This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
File:                     5UTrMoWRGEs_r55xqTHLMl3LEag.mft (raw, json)
Hash identifier:          gb6J9VXyciAL4FNaAc67lv8sADH6cUfvt9g7pIH1UFU=
Subject key identifier:   1C:76:1B:6E:CE:27:A0:5D:29:91:0F:98:AA:30:E3:2C:18:C3:3A:97
Authority key identifier: E5:44:EB:32:85:91:18:4B:3F:AF:9E:71:A9:31:CB:32:5D:CB:11:A8
Certificate issuer:       /CN=e544eb328591184b3faf9e71a931cb325dcb11a8
Certificate serial:       019B2B542C2E2A2BE50D99B3A38AAF8D496E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
Manifest number:          039A
Signing time:             Wed 17 Dec 2025 08:01:35 +0000
Manifest this update:     Wed 17 Dec 2025 08:01:35 +0000
Manifest next update:     Thu 18 Dec 2025 08:01:35 +0000
Files and hashes:         1: 5UTrMoWRGEs_r55xqTHLMl3LEag.crl (hash: J+6LLDjiZ7XUtlUpL5DDogtvEckEjuCGOHCjQjXcek8=)
                          2: WZ6QV7I388WfR1atNyelt0Q9Mso.roa (hash: KwrEk8zO8slIVjQv6gkfQCNK8LKZkPpOkNAIgKKlEQo=)
                          3: cYRGhzL82eBqpmxlM9QdQCYRf0M.roa (hash: JsKzcZfq1zGMtrEgXsSMPufU5mv03rsq7Q409GdhdZ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 08:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2b:54:2c:2e:2a:2b:e5:0d:99:b3:a3:8a:af:8d:49:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e544eb328591184b3faf9e71a931cb325dcb11a8
        Validity
            Not Before: Dec 17 08:01:35 2025 GMT
            Not After : Dec 18 08:01:35 2025 GMT
        Subject: CN=1c761b6ece27a05d29910f98aa30e32c18c33a97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:64:08:63:89:5d:2d:3d:a6:13:ed:c6:ad:20:
                    2d:b9:59:46:0f:bf:6c:15:d8:85:82:22:40:07:a1:
                    b9:c0:33:f3:46:1d:22:4a:96:28:d2:9d:51:ae:6a:
                    99:92:f8:60:6c:4f:60:3b:a0:9c:b2:5b:ee:8e:ef:
                    7d:e9:95:fe:e6:85:3d:ed:50:9d:e1:1a:69:a5:fb:
                    3b:13:43:c2:41:ea:18:a3:91:37:3b:39:57:4c:6d:
                    a0:07:ad:06:ae:a2:d1:e6:be:5e:6f:87:d8:bc:ba:
                    7c:13:2d:d7:39:9a:9a:37:21:6c:42:5c:4c:44:fb:
                    96:53:03:4d:de:29:c5:e0:57:59:42:27:ff:36:20:
                    b4:fb:4e:ab:43:6a:13:ce:4c:52:66:8c:fc:16:24:
                    2c:53:e2:fb:bf:a2:e3:0e:f5:f3:6c:07:98:45:b9:
                    ff:10:9a:97:ed:16:28:6a:92:29:72:8f:a3:0e:c5:
                    5b:4f:b2:eb:f8:9a:28:80:fa:31:98:3b:31:ca:1c:
                    75:43:3f:16:70:cb:a9:92:07:92:ae:30:d7:d0:ec:
                    72:bd:dc:e5:cc:91:84:43:8d:a6:0a:d6:c6:a8:1e:
                    bd:e1:c6:a4:dc:bd:23:19:29:95:97:9d:15:30:75:
                    29:45:23:75:26:12:ab:19:37:86:f1:3e:3a:53:5d:
                    78:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:76:1B:6E:CE:27:A0:5D:29:91:0F:98:AA:30:E3:2C:18:C3:3A:97
            X509v3 Authority Key Identifier:
                keyid:E5:44:EB:32:85:91:18:4B:3F:AF:9E:71:A9:31:CB:32:5D:CB:11:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:f0:a5:88:12:2f:28:db:5f:9b:54:af:b4:31:af:1a:d2:b7:
         88:08:e7:b6:39:ff:b2:a2:ad:b0:e7:f3:45:66:33:b1:42:52:
         cd:c3:f9:52:b0:28:65:10:5d:ac:81:2b:5a:d6:e5:77:0e:fd:
         9b:ce:28:af:4c:1d:3f:6d:d1:54:74:18:d7:fd:5b:64:bf:fb:
         a0:83:ce:4f:3a:ea:62:35:2e:b7:84:a4:7c:6e:fc:f1:b3:06:
         fb:eb:7e:1f:24:63:ec:d5:a0:92:96:ca:4d:e7:1c:65:47:a6:
         c1:2e:b4:f5:c6:f8:b6:ae:b3:94:b8:07:39:17:36:dd:02:4d:
         28:17:9c:21:3d:50:c8:b5:73:66:dd:9a:7c:c7:20:71:52:c0:
         c2:f8:dd:fa:bb:ab:39:c1:c5:00:fb:c0:30:b1:ae:71:e9:4c:
         82:f7:8f:41:56:f2:73:a9:70:ce:13:c8:ed:01:3f:c8:94:f8:
         24:84:ec:5c:94:b4:e4:78:3b:af:96:07:87:0c:bf:53:61:42:
         8b:86:5e:b5:31:2a:23:41:7c:6e:dd:d3:cd:e6:87:09:35:b9:
         c7:a0:38:f6:0d:c3:e4:74:04:6d:a4:98:76:84:36:5c:54:b4:
         5a:e4:55:bb:ef:88:c1:2d:bb:29:ce:0b:38:d7:b0:f5:34:e7:
         da:3c:7a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 17:54:16 2025 by rpki-client