This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
File:                     5nEAZ58HKCzUjLUQe_l69684ick.mft (raw, json)
Hash identifier:          6w5YSQXQ/oRe2Jc2t8y9ABKGs3H1qZvvOoXuh/td96Q=
Subject key identifier:   D9:F4:0D:33:74:EF:FE:C3:FC:73:18:04:4F:F9:A0:C0:21:5D:39:FC
Authority key identifier: E6:71:00:67:9F:07:28:2C:D4:8C:B5:10:7B:F9:7A:F7:AF:38:89:C9
Certificate issuer:       /CN=e67100679f07282cd48cb5107bf97af7af3889c9
Certificate serial:       019B5AF624FE01C1AB0C28A06C34A23BAD08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
Manifest number:          179A
Signing time:             Fri 26 Dec 2025 14:00:39 +0000
Manifest this update:     Fri 26 Dec 2025 14:00:39 +0000
Manifest next update:     Sat 27 Dec 2025 14:00:39 +0000
Files and hashes:         1: 5nEAZ58HKCzUjLUQe_l69684ick.crl (hash: ATtv/x0SV9y0MV2C88LjO6kNemCk6KEDTdOMcOVKWD4=)
                          2: 7eIKY9Ns0L09w5kNzh8lsSD-qX4.roa (hash: y3hJhXF+j9m5PtpyF4jbGxtnUIPaOdhFtO4SCic0Agc=)
                          3: j-ZyKNm5qJSX-2tMIRTjHHmV6S0.roa (hash: EtviVU5gFIFyi2gZ6S98pdS7AYV4lh9vjrKlnqMRix0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5a:f6:24:fe:01:c1:ab:0c:28:a0:6c:34:a2:3b:ad:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e67100679f07282cd48cb5107bf97af7af3889c9
        Validity
            Not Before: Dec 26 14:00:39 2025 GMT
            Not After : Dec 27 14:00:39 2025 GMT
        Subject: CN=d9f40d3374effec3fc7318044ff9a0c0215d39fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a0:ab:4e:5d:12:8e:db:a7:95:78:c6:bf:dd:
                    19:d7:e1:6d:84:b7:9b:29:51:fb:26:02:56:f0:cb:
                    87:13:40:a6:a5:ea:3b:54:7a:c0:de:4e:1b:c2:48:
                    35:3b:0e:5e:66:2d:60:1b:35:3a:fd:a5:74:2d:88:
                    93:83:82:ec:a6:8e:c9:24:0b:f5:2f:64:99:ba:58:
                    27:15:66:8c:e1:93:92:5a:f8:fd:fa:7d:b1:f2:b9:
                    c1:07:b9:be:88:30:b7:59:0d:db:74:3a:37:88:bd:
                    ec:48:a7:69:0c:1d:03:36:eb:22:bd:8c:22:d8:eb:
                    7d:7e:1b:2b:3d:11:91:c0:b4:09:9a:43:7d:d3:d0:
                    ac:30:d1:22:5c:ed:05:68:8b:3e:9d:75:c7:ae:9f:
                    d9:fd:47:1d:e7:4c:95:38:5c:47:c0:0f:0f:05:2e:
                    14:a9:8b:65:b3:f4:61:82:bb:ad:d7:41:1d:a5:7b:
                    4f:96:93:9b:19:66:79:5b:16:3e:f4:26:13:59:a1:
                    27:00:ab:44:2d:de:2a:bf:3a:46:c9:cc:41:bf:71:
                    2a:45:bb:e0:41:42:1d:60:a8:73:59:0b:cf:0b:19:
                    2a:6c:b7:3f:20:33:e8:1c:fd:53:f5:c2:ec:09:0b:
                    f4:24:e1:fe:25:b3:a8:f7:b2:04:51:e0:ab:c6:4b:
                    59:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F4:0D:33:74:EF:FE:C3:FC:73:18:04:4F:F9:A0:C0:21:5D:39:FC
            X509v3 Authority Key Identifier:
                keyid:E6:71:00:67:9F:07:28:2C:D4:8C:B5:10:7B:F9:7A:F7:AF:38:89:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:85:1d:5e:56:5f:83:55:f1:89:13:67:b3:8b:a7:00:8e:af:
         99:b4:60:74:2f:49:34:08:26:f2:a3:3c:c3:36:d1:d2:23:1d:
         20:54:51:a7:3b:5e:13:a4:82:11:0a:77:14:42:2c:e6:f9:c2:
         ba:90:ed:5f:80:12:71:8e:07:4d:4c:7b:df:f5:e4:04:de:fe:
         69:df:9d:30:7f:72:20:cb:b1:11:07:35:fc:08:8b:eb:9a:a6:
         8f:f5:07:39:5e:bb:e5:e0:64:e9:a5:66:d5:9b:34:8f:73:b3:
         87:f8:0b:01:75:d2:39:4d:47:6a:e5:47:56:76:a8:31:eb:ae:
         4c:6f:c6:89:24:3d:cf:2d:3c:91:61:36:a7:a3:1d:9e:e9:a4:
         88:57:6d:4b:7f:c0:f7:1d:73:e6:ff:f5:28:b7:ac:1e:e3:5b:
         fb:44:b2:cd:1b:35:dd:65:25:7e:4c:b0:d7:56:fb:08:57:cc:
         38:9a:9c:6c:5f:2e:2a:96:da:fe:ea:68:b6:58:31:0c:c1:b6:
         5c:ab:1b:12:89:c2:2e:39:13:73:02:df:da:d4:71:eb:dc:86:
         3b:55:08:c7:bc:bf:b1:eb:78:e6:8a:42:77:34:6b:5b:1f:a5:
         bd:8e:48:bd:37:8b:42:30:1e:a7:c9:b5:f1:8b:68:0a:2b:74:
         30:2b:8a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 16:06:35 2025 by rpki-client