This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
File:                     5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft (raw, json)
Hash identifier:          KO7TUBa5zsQjG6ekY8V6bkFVlOxdTMQ3Z5fHzxHsjYY=
Subject key identifier:   47:09:FF:69:C8:33:82:C8:90:5C:01:59:90:B9:71:20:D7:F8:5B:CA
Authority key identifier: E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15
Certificate issuer:       /CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
Certificate serial:       019AF6536FC4F4B0FE040592DBD270FFF6D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
Manifest number:          1227
Signing time:             Sun 07 Dec 2025 01:00:54 +0000
Manifest this update:     Sun 07 Dec 2025 01:00:54 +0000
Manifest next update:     Mon 08 Dec 2025 01:00:54 +0000
Files and hashes:         1: 5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl (hash: vbXHRKEo7ymk0oXkOjHFnZONyh3SMH7G4ABAwdJ2uCI=)
                          2: hYFp2PLalLwxzZhV7wbRQcfYlV8.roa (hash: LW/5pSb1sTjsNP1WLARXiewkehoBnSZqbhX0D/WoNvA=)
                          3: kRaJhPTv6AA3evpLDRDPj-DpMRE.roa (hash: 7JRuwVtlOrNDlLTW+rHW8uN2fSnzcu7/YmU6Ma1CHpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f6:53:6f:c4:f4:b0:fe:04:05:92:db:d2:70:ff:f6:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
        Validity
            Not Before: Dec  7 01:00:54 2025 GMT
            Not After : Dec  8 01:00:54 2025 GMT
        Subject: CN=4709ff69c83382c8905c015990b97120d7f85bca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:63:b7:bb:c8:ae:5e:a6:bc:74:e3:95:ad:c9:
                    bd:84:d3:a2:5b:8a:fd:bb:ae:d3:aa:45:89:54:d2:
                    8e:ea:56:7b:2b:4c:13:ad:f1:a0:c2:ad:4f:0c:4f:
                    16:ac:cd:8c:72:df:f6:27:19:cf:f7:69:7a:e1:64:
                    f2:25:dd:db:00:07:62:f5:91:99:a8:97:6d:44:4a:
                    d9:32:14:8b:4a:2c:64:c8:ff:dc:f9:81:32:3b:04:
                    8c:0c:6c:a9:c9:df:78:4b:75:fb:27:69:8f:f3:28:
                    7d:bd:c1:e8:e2:7e:54:38:b3:3a:75:72:3a:67:a0:
                    14:01:a2:ad:45:45:0d:5d:22:7d:72:26:f9:0f:03:
                    14:27:f1:43:25:de:e7:19:6b:01:1c:c3:91:7d:af:
                    6e:48:54:da:2c:11:77:43:41:23:7a:f6:76:0a:eb:
                    68:5d:5b:30:9d:12:cb:30:32:d5:30:2f:94:81:08:
                    7a:c2:91:70:b9:bc:89:41:ec:9c:c0:47:3b:14:c9:
                    a0:7f:19:5e:fd:3c:83:8d:a5:93:66:81:2a:c9:84:
                    1c:7d:02:bb:20:a2:6e:29:83:e7:c4:33:87:9b:87:
                    ef:86:55:ce:fd:de:fa:b8:5a:01:79:ac:55:13:57:
                    a6:47:3a:a1:33:07:6f:11:9c:9e:c4:9c:7f:86:10:
                    81:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:09:FF:69:C8:33:82:C8:90:5C:01:59:90:B9:71:20:D7:F8:5B:CA
            X509v3 Authority Key Identifier:
                keyid:E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:f6:79:4f:71:50:14:57:22:d6:0e:12:e1:aa:9f:5f:01:d5:
         65:37:8f:5f:ef:07:da:c2:eb:f3:8d:94:a6:c0:62:a4:05:d9:
         e7:4f:0d:03:28:16:85:f0:69:9a:fb:52:08:79:eb:99:ce:50:
         81:28:c4:74:a9:1c:4a:ef:9d:70:33:71:b6:bd:8a:e0:6c:c3:
         14:96:fd:18:e7:62:34:2b:0c:58:df:94:f8:89:c7:6d:54:0c:
         55:c2:7b:a7:b3:e0:bc:f1:48:42:a9:92:d3:19:4d:88:88:cc:
         cb:1e:07:8e:62:d8:64:25:25:b7:a7:cd:32:98:6c:54:7e:e9:
         a5:73:95:43:ed:58:2a:7b:e9:ac:c0:52:87:44:69:53:76:f2:
         83:75:4c:b3:77:d7:bd:0b:d4:b8:b9:ec:a6:2d:0a:6e:43:4c:
         7f:c7:3e:18:a3:3f:74:91:a7:f4:53:b8:b8:b1:90:16:17:b8:
         f2:13:2c:4c:d9:f9:60:d1:bf:42:e3:79:d7:2c:94:36:8b:ff:
         81:c8:3a:cf:b6:a8:c9:39:9d:d9:9c:6e:73:b1:b0:68:76:f4:
         e2:36:0d:cb:a4:8d:e0:ef:4b:db:fb:4e:6d:57:74:a1:74:15:
         ca:28:0e:44:18:e1:a0:a7:86:42:41:11:52:9e:d6:19:e3:da:
         b1:82:be:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:35:07 2025 by rpki-client