This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft
File:                     5E5179BB1757068D7028510FEEB1177AA7CC8818.mft (raw, json)
Hash identifier:          /Hs3puCj6W7IIrWENyuhAq3cET5Q1uxZDijwSHAP2i8=
Subject key identifier:   BB:75:C9:A9:7D:FD:B7:2C:8F:8A:CB:CA:05:3C:5D:39:76:DA:D5:03
Authority key identifier: 5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18
Certificate issuer:       /CN=5e5179bb1757068d7028510feeb1177aa7cc8818
Certificate serial:       203AB5884C769B67645D1829D97B0429FABC080D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft
Manifest number:          05AC
Signing time:             Mon 15 Dec 2025 08:42:15 +0000
Manifest this update:     Mon 15 Dec 2025 08:37:15 +0000
Manifest next update:     Tue 16 Dec 2025 08:50:15 +0000
Files and hashes:         1: 3139322e3130392e31312e302f32342d3234203d3e203136323736.roa (hash: qRWEBAMqR9/oXRv8A+nfXFduPkpHZgx8k4TEVcf/LOk=)
                          2: 3139322e3130392e31302e302f32342d3234203d3e203239383032.roa (hash: zPOJooX1SbIfEdoUfLmfFj+bOWKjqS7oznOqpFqjTp4=)
                          3: 38332e3135302e3231362e302f32342d3234203d3e20383334.roa (hash: EBm40X3KjUETSjt3aOY0gb7euO7RTR4g317z8UFpEX0=)
                          4: 38332e3135302e3231392e302f32342d3234203d3e203533333430.roa (hash: GXLgWx6Q3CLvfyeGG+4M+PXnBAwSeVlRcKDTfEKYkeQ=)
                          5: 38332e3135302e3231382e302f32342d3234203d3e20313939343135.roa (hash: yCFgEcnTSAhMVf29HMHp04B1k4DqC3mlqJPDdmg8wFQ=)
                          6: 5E5179BB1757068D7028510FEEB1177AA7CC8818.crl (hash: /xXf3dspE/z6SoyvXR11aKIc9CcWeelghxYidUdtOZE=)
                          7: 38332e3135302e3231362e302f32322d3234203d3e203631333137.roa (hash: bA7vtpR0TyML0HjZJJdgMHPc1uK0jGA3YpWrjwZ8y+U=)
                          8: 38332e3135302e3231372e302f32342d3234203d3e20323132353034.roa (hash: k8RY7QTEncAN/MOxUGAuMRRlssrdtl7ahwCsdlVrRY0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:3a:b5:88:4c:76:9b:67:64:5d:18:29:d9:7b:04:29:fa:bc:08:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e5179bb1757068d7028510feeb1177aa7cc8818
        Validity
            Not Before: Dec 15 08:37:15 2025 GMT
            Not After : Dec 16 08:50:15 2025 GMT
        Subject: CN=BB75C9A97DFDB72C8F8ACBCA053C5D3976DAD503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6c:90:21:fd:4e:3e:d1:99:2a:bc:cd:7f:28:
                    1d:51:f3:1c:4a:84:ac:ab:b5:12:36:47:53:8e:b9:
                    31:b2:41:6d:03:c0:38:b5:59:91:e2:8e:7e:3d:9e:
                    96:ec:a5:65:58:e9:42:84:b2:41:8e:3d:1b:b3:4a:
                    14:72:b5:27:48:06:cf:2b:3d:77:df:31:a6:c7:c4:
                    76:0b:67:b3:12:d0:89:25:62:ef:2b:2a:eb:23:06:
                    c2:a2:3f:f5:82:1b:81:ac:f4:e5:d6:d1:be:0b:2f:
                    e2:14:31:3c:01:3b:51:71:73:68:86:61:5c:9b:83:
                    ef:ed:71:ed:f1:71:25:0b:c0:d2:b9:9a:89:11:3f:
                    68:48:c4:70:ac:c4:22:cc:76:d2:89:50:4f:13:5e:
                    ef:71:5a:23:05:8c:97:e1:a1:97:89:b4:ee:9e:94:
                    c1:b2:0e:bc:94:53:f9:73:3a:16:21:97:98:c4:81:
                    39:3b:dd:c6:05:c3:60:51:34:0b:c7:06:c3:ba:aa:
                    2f:79:e1:e1:47:a3:34:85:02:8f:06:15:8b:8d:d7:
                    90:8e:1c:75:d9:4b:97:7c:31:68:cc:d7:85:dc:c1:
                    d4:31:aa:4b:84:51:14:7b:a8:a3:ef:d0:61:22:dd:
                    24:c6:24:6f:ea:af:2a:20:66:78:57:c5:74:d4:cb:
                    f9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:75:C9:A9:7D:FD:B7:2C:8F:8A:CB:CA:05:3C:5D:39:76:DA:D5:03
            X509v3 Authority Key Identifier:
                keyid:5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:fa:74:f8:33:ca:c2:2b:30:e2:3c:0f:56:2d:e8:68:6a:af:
         57:fe:91:b8:b5:ca:49:d6:24:db:21:09:d3:7e:e3:13:d6:65:
         81:4a:ce:e5:f9:94:49:f7:14:77:0b:97:07:ca:ac:a7:65:3b:
         12:ac:c1:2f:b6:63:fe:cc:90:f9:2a:ff:dc:f3:8b:b3:e7:85:
         c8:8a:0f:d3:c8:04:1f:4b:f9:39:a2:78:cc:da:89:e6:33:d8:
         76:05:b5:38:06:01:c6:bb:31:3e:6f:3a:87:51:5c:1f:98:f3:
         0d:1b:85:a5:3d:b7:12:02:af:69:41:51:cd:31:b4:33:da:9d:
         7c:02:86:d8:c3:58:44:d3:3c:c6:d5:dd:de:08:f3:0a:81:64:
         f4:08:c9:6a:1d:be:4f:37:66:2e:99:5d:2c:be:20:71:72:3b:
         10:1b:56:a0:47:da:3e:7e:3b:75:ae:f5:f5:fb:cb:28:a7:43:
         8f:28:96:1d:3e:09:bd:6f:8d:10:62:84:93:0b:9d:ac:73:fc:
         00:5c:f2:5d:0f:b8:b6:e6:97:22:3e:43:4c:ac:4a:d4:ec:67:
         7b:f8:b9:16:c6:9c:64:dd:1e:82:61:2c:da:77:d8:7f:d4:32:
         a9:79:bb:9a:e9:4e:fb:89:f0:ab:e3:34:61:f3:2d:dd:15:38:
         25:d1:e6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 15:32:25 2025 by rpki-client