This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
File:                     5GWsyQgJ77RczaJQoQV2GElLhus.mft (raw, json)
Hash identifier:          xrQOaORmtrMbYpstIo/nfe5tsJdX2r61i+3u2NR3T54=
Subject key identifier:   E9:FE:5A:86:AA:86:94:70:98:B3:C5:F7:D2:45:30:52:1D:22:9B:B3
Authority key identifier: E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB
Certificate issuer:       /CN=e465acc90809efb45ccda250a1057618494b86eb
Certificate serial:       019AF68ABFAF6B4959CFE6302B59E0497F57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
Manifest number:          1764
Signing time:             Sun 07 Dec 2025 02:01:19 +0000
Manifest this update:     Sun 07 Dec 2025 02:01:19 +0000
Manifest next update:     Mon 08 Dec 2025 02:01:19 +0000
Files and hashes:         1: 5GWsyQgJ77RczaJQoQV2GElLhus.crl (hash: pkGeNcodOuPwu64AXJR03IDGtG70M0yBv/TNxn+IRmg=)
                          2: HXkMZsrBmT3pdly4pNHClnxxiAs.roa (hash: uINrlSFHfmPOAUFp+GFnrxpC6bCJm76Z7RhHxB80xWI=)
                          3: g56Uh-QZpNYvH0QrLNbigssPnrQ.roa (hash: wrpYwLhb1No98RIDJLncVQMkGDqMDtvmrpGIa2b7nWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f6:8a:bf:af:6b:49:59:cf:e6:30:2b:59:e0:49:7f:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e465acc90809efb45ccda250a1057618494b86eb
        Validity
            Not Before: Dec  7 02:01:19 2025 GMT
            Not After : Dec  8 02:01:19 2025 GMT
        Subject: CN=e9fe5a86aa86947098b3c5f7d24530521d229bb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:81:39:73:c8:00:de:28:2c:c5:61:e9:24:2f:
                    f9:79:8f:ea:1b:91:92:ca:ed:86:08:96:a4:56:33:
                    8e:05:8c:05:33:d9:ab:d8:eb:46:b2:53:97:0e:8c:
                    ac:3e:6e:37:01:16:3d:dd:61:94:02:f1:72:36:32:
                    18:eb:d5:56:38:5d:cb:36:0b:f7:78:a5:a2:84:6a:
                    bf:25:88:52:07:a9:8f:c4:45:44:09:4f:0e:fe:1f:
                    fb:96:3a:80:79:4f:bc:01:c6:7e:12:a8:4a:26:2d:
                    61:7f:87:fb:b9:6b:b8:89:37:6f:ef:e2:95:08:a1:
                    64:b6:be:2f:3f:6a:dd:58:be:16:9b:cb:ea:10:2e:
                    fd:a8:d7:e4:29:60:b7:3e:9c:d4:ec:b6:84:81:14:
                    79:50:ca:77:73:21:15:f4:ea:5a:94:5e:d1:21:87:
                    28:de:75:41:fe:8e:37:3f:6a:35:ac:9c:4e:40:87:
                    2c:fd:a4:07:c9:e1:82:96:e8:7d:df:7d:a9:fe:77:
                    59:e4:de:42:75:81:81:1f:08:4f:d1:59:f3:a9:e2:
                    03:85:ed:2d:19:a3:fc:1b:4b:41:da:72:6b:9e:d3:
                    91:a0:ab:e1:62:c4:b8:7d:ae:4a:d3:dd:f3:a8:fe:
                    13:d9:a8:27:7e:62:3e:c7:1c:b3:e2:82:f8:65:df:
                    1f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FE:5A:86:AA:86:94:70:98:B3:C5:F7:D2:45:30:52:1D:22:9B:B3
            X509v3 Authority Key Identifier:
                keyid:E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:4d:8a:93:d7:31:44:d5:48:89:10:4a:68:d9:97:af:88:ba:
         4c:fc:f8:9e:99:e2:80:b6:87:d2:72:fa:0f:21:18:10:8c:8b:
         9d:d5:02:15:ce:02:4c:e2:4f:bd:82:e6:7e:f0:9c:88:f9:a2:
         6d:7f:4a:56:9c:33:49:1b:fb:69:22:ac:0a:ed:0d:3c:7f:1d:
         55:92:aa:ca:19:75:78:17:33:07:e7:15:c5:a0:f9:a9:79:d7:
         ef:c9:7f:fa:32:8d:45:f9:81:a9:17:ab:5e:fd:5c:4d:4f:07:
         a9:eb:4b:2d:65:e2:aa:cf:e8:73:07:72:db:b4:95:18:e4:12:
         8b:cd:86:da:9a:b5:7a:d5:1a:0d:c1:42:94:e1:76:57:4a:12:
         f3:b1:85:a2:d9:48:eb:b0:f0:69:89:89:60:f5:89:40:7e:cc:
         a5:a9:eb:35:97:36:dc:50:12:b8:80:3c:bc:5c:18:17:9e:0c:
         57:da:f1:fe:fb:b2:0f:59:7e:80:4f:e1:e6:41:f5:e5:2d:bc:
         e7:d2:24:57:e7:08:a1:f1:77:ec:a2:9a:64:aa:0c:68:a3:19:
         b1:02:ae:b8:b0:57:1c:4d:97:80:15:18:3c:b2:84:09:7b:48:
         f1:75:7b:2b:b2:f2:9c:e1:b6:43:bf:db:26:10:d5:65:60:d0:
         30:73:77:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:20:48 2025 by rpki-client