This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
File:                     5_4i9VHpWw8VAzxQNVLkm8phfGo.mft (raw, json)
Hash identifier:          3w+d0E2uwY79/O+w4RQGAmZzW+KxeUDLs6l7E0o2VME=
Subject key identifier:   31:E4:37:49:C6:0B:70:A5:F9:5C:4A:E8:9D:EA:15:E6:FE:13:43:D7
Authority key identifier: E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A
Certificate issuer:       /CN=e7fe22f551e95b0f15033c503552e49bca617c6a
Certificate serial:       019B36E9B74842F3F7A4DEDC0790D20DAA83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
Manifest number:          03EE
Signing time:             Fri 19 Dec 2025 14:00:44 +0000
Manifest this update:     Fri 19 Dec 2025 14:00:44 +0000
Manifest next update:     Sat 20 Dec 2025 14:00:44 +0000
Files and hashes:         1: 5_4i9VHpWw8VAzxQNVLkm8phfGo.crl (hash: HYqbj580CXSrmQcbM5gv01XKHkCqEsAEXORSBhtd1nA=)
                          2: THghgq3_4L1NVnK6KOFYexQq5SI.roa (hash: /zrwFkLWh9pajQgZXuExr20G8aRLgJD9APPdVLa4mp8=)
                          3: teYc1cFeqUuzMd-dJeyJRJ9jp-k.roa (hash: SD6wWRBAQPvJFZ63a4Ws+sFA/hBOJ/3xD8PJ20JClwo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 14:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:36:e9:b7:48:42:f3:f7:a4:de:dc:07:90:d2:0d:aa:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7fe22f551e95b0f15033c503552e49bca617c6a
        Validity
            Not Before: Dec 19 14:00:44 2025 GMT
            Not After : Dec 20 14:00:44 2025 GMT
        Subject: CN=31e43749c60b70a5f95c4ae89dea15e6fe1343d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:01:b5:ae:0d:ab:b0:38:a0:bd:76:d5:84:7c:
                    9c:ee:0c:91:91:1a:db:b2:ba:f9:72:f1:3f:71:11:
                    0c:7a:c3:4e:82:b5:a6:73:4a:fd:6d:3c:8f:b1:db:
                    09:26:e5:34:51:af:ec:9e:d7:1b:38:e6:c7:ab:ac:
                    29:d2:d8:20:c5:33:bd:db:6c:7a:fc:74:77:37:dc:
                    cf:f9:0f:79:61:9c:09:96:37:8a:f8:cf:ed:1e:71:
                    98:bc:09:00:8a:8c:0b:cd:22:37:7e:85:28:5f:d8:
                    54:f6:26:64:00:30:ab:ce:36:b4:ff:93:c6:96:44:
                    62:cd:09:82:38:97:c4:2a:59:48:1f:e0:4a:fb:01:
                    fc:4c:03:57:82:47:a8:bd:d6:f0:f3:98:79:b9:3c:
                    37:4c:21:f9:03:a1:19:c0:b1:57:03:43:fc:00:67:
                    2a:d0:4b:96:12:41:a1:79:d5:64:a5:e1:08:33:af:
                    42:97:60:e9:6b:53:9f:1c:44:60:19:e7:f1:4d:bc:
                    3b:bb:66:2e:0a:33:d6:7e:c2:3d:62:ec:e4:fc:94:
                    ac:c7:e6:0c:eb:0f:e0:12:83:c1:fa:05:d9:f1:25:
                    72:81:47:0c:65:dd:d7:1e:c5:64:da:8b:ab:ee:4e:
                    1e:6c:59:91:28:5d:09:5d:cd:06:47:6c:e0:52:ff:
                    1b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E4:37:49:C6:0B:70:A5:F9:5C:4A:E8:9D:EA:15:E6:FE:13:43:D7
            X509v3 Authority Key Identifier:
                keyid:E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:20:84:1b:66:18:b5:b0:c0:02:45:18:b7:47:28:17:9d:08:
         65:d9:55:98:42:21:71:7a:ec:72:b8:37:3f:b1:36:37:fa:d3:
         80:c3:52:e2:0f:88:44:88:08:2b:73:04:ab:94:3a:aa:00:80:
         45:e9:07:90:73:2c:54:79:3e:e2:c3:60:64:a3:98:74:79:d4:
         65:93:30:de:2f:8d:43:99:c4:eb:d3:1e:b7:73:c4:4b:ba:33:
         19:ee:6c:40:e7:70:98:6d:54:ed:b0:1a:73:fa:f9:48:f3:35:
         09:49:1b:b2:0c:be:d2:64:5e:01:eb:45:56:32:ea:b8:73:4e:
         ca:a9:fe:f9:f6:b3:49:60:17:31:87:64:91:c2:3e:95:6e:7c:
         10:2e:c6:11:76:64:b6:7b:1f:64:d9:62:ab:7b:7a:72:04:ff:
         e3:87:eb:50:5f:9c:9f:0c:18:eb:f6:7b:91:df:75:af:b7:db:
         d2:30:71:ba:24:22:fe:12:0b:43:0b:4c:54:dc:50:ff:f2:62:
         08:5b:71:5e:fd:d5:b6:98:9b:b5:d7:78:5e:f1:7a:44:9a:c6:
         9c:95:b7:70:2e:99:9d:d1:d8:43:b9:56:ed:d5:1e:c3:b0:5c:
         8e:7e:04:31:4f:2e:a0:12:06:14:ac:a4:35:a2:da:af:d2:af:
         25:cf:03:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 21:10:15 2025 by rpki-client