This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.mft
File:                     5DusShu7pWzENIYaTHaf-c4tFew.mft (raw, json)
Hash identifier:          mDLXBdSe762sHa2biZR7rTm0+xk36wpBqZLG/pxAGYE=
Subject key identifier:   E9:36:8E:EE:3F:D7:51:35:3F:6B:9B:3F:E8:81:80:1B:27:A1:B1:0F
Authority key identifier: E4:3B:AC:4A:1B:BB:A5:6C:C4:34:86:1A:4C:76:9F:F9:CE:2D:15:EC
Certificate issuer:       /CN=e43bac4a1bbba56cc434861a4c769ff9ce2d15ec
Certificate serial:       019B2E1D4A99FB0BB6DB21FB4D38C6ED7FCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.mft
Manifest number:          1780
Signing time:             Wed 17 Dec 2025 21:00:29 +0000
Manifest this update:     Wed 17 Dec 2025 21:00:29 +0000
Manifest next update:     Thu 18 Dec 2025 21:00:29 +0000
Files and hashes:         1: 0k8NU0Yf2AeHHbiTpnAXvABs1hU.roa (hash: oJ2JUNCDknxTjzNTxQM1bVAa79T0L1UKQs2YDAYDgxc=)
                          2: 5DusShu7pWzENIYaTHaf-c4tFew.crl (hash: ybPKX2+8/1pfMJl+qXW9q9D217D7McYyCuKWWv4jegg=)
                          3: FkwWWQIMWtA4iybPzQx4iJn4LA4.roa (hash: dygheTAaWRRRFFcR/Y94QKMdhM+IdtEOUxFApI6osJI=)
                          4: nG4btH8hnfj9Xq5wDsBzy66KvCI.roa (hash: aqERMHBB2BmuiOQ91Bb+OrBKwS60vrChPD7BlEGQeXA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 21:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2e:1d:4a:99:fb:0b:b6:db:21:fb:4d:38:c6:ed:7f:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e43bac4a1bbba56cc434861a4c769ff9ce2d15ec
        Validity
            Not Before: Dec 17 21:00:29 2025 GMT
            Not After : Dec 18 21:00:29 2025 GMT
        Subject: CN=e9368eee3fd751353f6b9b3fe881801b27a1b10f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:60:a5:27:96:4d:ca:d1:5e:f4:af:e6:e9:07:
                    4f:13:21:3c:58:43:fd:26:cf:2e:a5:a3:48:70:fe:
                    dd:0d:db:71:ee:af:42:08:32:5e:10:c6:dd:a8:7c:
                    08:a6:77:ad:e7:ce:b2:d6:a3:98:3a:b3:ac:ac:65:
                    95:51:84:7f:52:16:0b:60:ca:2c:03:dd:4f:02:31:
                    55:92:a0:20:e6:1d:f8:dc:df:d3:eb:67:5b:15:43:
                    4e:7f:79:86:8f:ec:0c:3c:53:43:58:b2:25:27:53:
                    31:22:ba:d1:ad:0c:28:5d:1f:09:cc:c3:d3:e1:64:
                    36:5d:dc:04:49:f2:e3:95:43:84:90:cd:31:17:39:
                    aa:72:18:dd:08:ba:00:f9:f9:a9:fd:15:2e:39:85:
                    a1:f4:e9:3a:6f:29:0c:ca:40:34:d4:13:9b:4a:b2:
                    bb:83:99:60:6b:03:fb:c1:1a:ee:9b:78:8a:62:56:
                    ad:af:a5:16:5d:65:c8:fd:c4:61:1e:8e:95:4d:22:
                    e2:af:15:8e:c1:e9:4f:c0:37:39:6d:10:a5:d1:46:
                    cc:9a:c3:88:a1:a5:38:13:66:2d:33:4d:dd:cd:1d:
                    c4:d8:e3:f7:f6:73:98:c0:5b:1d:76:4a:ec:48:bd:
                    71:0a:fc:0e:64:0f:a5:4c:c5:7b:c5:06:b1:25:41:
                    db:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:36:8E:EE:3F:D7:51:35:3F:6B:9B:3F:E8:81:80:1B:27:A1:B1:0F
            X509v3 Authority Key Identifier:
                keyid:E4:3B:AC:4A:1B:BB:A5:6C:C4:34:86:1A:4C:76:9F:F9:CE:2D:15:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:ab:e1:d1:3f:1f:66:b4:d6:5f:ae:ec:fb:53:ed:e6:7a:ee:
         97:6d:26:4a:75:42:49:91:65:75:93:b6:ab:45:5a:8a:3e:59:
         83:bd:45:65:19:ab:c0:db:5e:d1:67:fc:35:09:a6:40:62:c7:
         10:1f:19:3c:80:66:d3:2d:31:8a:da:d5:44:1c:9b:6a:23:ee:
         4c:c5:19:22:2a:cb:02:d1:19:66:74:c1:3d:47:17:c5:26:5c:
         d2:59:99:a8:9d:c6:fc:b3:f7:d6:17:e7:af:27:26:fb:3b:77:
         09:94:9f:28:d1:f6:c0:d8:50:ce:ed:e4:21:e5:f1:87:d3:99:
         43:1e:b0:4f:ee:24:eb:b9:be:44:9f:2d:3c:7e:31:c4:1b:e1:
         4d:8e:ec:6a:dc:cf:5f:ce:a3:a6:cc:dc:b7:10:4a:a8:b5:40:
         92:5d:a4:ff:36:9a:27:33:4b:49:c8:2c:cb:be:84:3b:cb:ef:
         44:36:77:13:e8:04:8d:b9:45:88:67:8b:4c:45:af:42:12:29:
         28:9c:c8:99:65:c1:21:4f:f9:93:6f:2b:7a:98:b6:a7:cd:64:
         57:56:b7:55:bd:bd:64:2d:55:2c:4d:da:e0:47:96:cd:30:1c:
         45:44:f3:30:5b:2c:3f:ec:ab:01:f1:45:79:49:33:0d:61:dc:
         31:c4:00:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 07:16:17 2025 by rpki-client