This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft
File:                     5miK6WMjwfz6tUspRVc5e0mwO8c.mft (raw, json)
Hash identifier:          zK5OknNTANH/s3ZXzImB3+B/o0HxBVqanKCosLtN62Q=
Subject key identifier:   4D:82:A4:32:0E:4E:E9:72:C4:FA:08:0F:60:D1:80:C9:B5:94:7A:9A
Authority key identifier: E6:68:8A:E9:63:23:C1:FC:FA:B5:4B:29:45:57:39:7B:49:B0:3B:C7
Certificate issuer:       /CN=e6688ae96323c1fcfab54b294557397b49b03bc7
Certificate serial:       019B10B84DECC545CD15E6CE8CEF1E8E7477
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5miK6WMjwfz6tUspRVc5e0mwO8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft
Manifest number:          1772
Signing time:             Fri 12 Dec 2025 04:01:12 +0000
Manifest this update:     Fri 12 Dec 2025 04:01:12 +0000
Manifest next update:     Sat 13 Dec 2025 04:01:12 +0000
Files and hashes:         1: 5miK6WMjwfz6tUspRVc5e0mwO8c.crl (hash: GifKXFaG62U1d8GLRWP7uP9KL4VrgVuIUwigZ3kvKyg=)
                          2: 6d81q_lbBBvU-iMaj2PmLykzsqc.roa (hash: CeNeRZHxa3cGB4BlKcDCcgvych6z2Vt9p5goEzBLjMQ=)
                          3: RcUSQ0Z3GKFYWJ4WRE1UedcK5Aw.roa (hash: hdoD+wycfWRw3rbXWOc6rZDgH+1OEob47XUZHRAtJR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5miK6WMjwfz6tUspRVc5e0mwO8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:10:b8:4d:ec:c5:45:cd:15:e6:ce:8c:ef:1e:8e:74:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6688ae96323c1fcfab54b294557397b49b03bc7
        Validity
            Not Before: Dec 12 04:01:12 2025 GMT
            Not After : Dec 13 04:01:12 2025 GMT
        Subject: CN=4d82a4320e4ee972c4fa080f60d180c9b5947a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:27:9f:75:a3:61:bb:ae:d1:20:10:0c:5d:7d:
                    36:ff:90:cc:68:f8:73:4c:14:c8:58:39:3c:e7:4d:
                    12:c0:7b:a7:ee:8f:2a:1e:33:4f:80:a8:4f:63:00:
                    52:43:24:6c:c6:62:80:73:98:37:52:21:2b:75:b2:
                    57:34:11:bb:50:fd:82:4b:4c:70:00:20:26:e6:b7:
                    7a:1b:84:d1:66:ce:a2:48:ea:1d:d1:b6:a0:b2:50:
                    00:f4:b3:a5:57:9b:03:bd:8e:85:a4:18:4a:c3:ab:
                    b4:2e:72:6e:c9:09:35:35:2d:fe:6c:8e:35:df:e0:
                    92:92:75:8c:42:36:3f:34:ca:41:95:a9:fb:92:3d:
                    f1:89:ae:c4:f9:33:aa:86:68:9f:22:90:cb:57:bf:
                    8c:d2:a3:5c:5e:83:da:30:67:08:ad:df:02:91:d4:
                    66:ef:1a:aa:73:2f:d8:d0:57:62:30:e2:32:26:f3:
                    1d:e2:6e:14:ba:0f:12:bb:7e:b8:ba:bd:62:d3:f5:
                    15:9d:d8:fe:1a:c5:68:52:a1:da:b5:95:b9:cc:ab:
                    5f:4d:55:a5:80:9b:39:b1:2f:e5:e4:2f:c8:67:ca:
                    d8:9c:3b:0d:dc:fa:f8:cd:2b:54:e8:cc:38:54:79:
                    f7:40:92:24:26:39:b2:ec:8a:d9:cc:ae:b5:81:51:
                    76:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:82:A4:32:0E:4E:E9:72:C4:FA:08:0F:60:D1:80:C9:B5:94:7A:9A
            X509v3 Authority Key Identifier:
                keyid:E6:68:8A:E9:63:23:C1:FC:FA:B5:4B:29:45:57:39:7B:49:B0:3B:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5miK6WMjwfz6tUspRVc5e0mwO8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:58:91:e9:e6:1d:6a:8e:7f:b8:a6:06:c9:68:36:8b:e4:1a:
         c8:91:e8:33:c2:3a:ff:d2:c5:91:25:27:4c:1d:ed:7a:d7:ba:
         46:41:7c:c6:6a:0f:fc:c7:fc:7f:f1:8e:c7:20:8f:ce:56:62:
         f6:7f:fe:5b:c4:c0:fa:86:04:99:c6:ed:3a:2c:f3:13:39:e2:
         82:82:21:09:79:c6:7d:d6:ff:1f:d2:44:ce:ac:4e:db:a2:cd:
         fc:35:70:ac:91:05:46:f9:8e:16:f9:d4:65:61:24:ea:0b:dd:
         14:39:c4:5f:72:1e:19:f5:90:8a:e8:ba:41:a5:d6:f5:76:cd:
         b1:ba:bd:6c:45:c7:5e:92:cd:43:07:81:a9:25:0b:a4:04:1a:
         9f:b3:87:53:4f:55:65:6e:d6:29:5d:d7:5c:38:14:fa:ed:db:
         e1:b8:ba:33:24:19:8f:15:fe:39:c2:bd:4c:2d:5c:78:66:32:
         03:6b:01:3e:01:87:d0:1c:d5:5a:cc:8d:ed:1d:dc:4e:30:cf:
         ce:17:f5:a2:7c:6e:a9:ed:0b:0b:a5:63:40:40:16:e7:ab:ec:
         c4:44:42:19:32:ca:70:6e:af:d4:c3:fb:ec:a2:7f:f0:a6:cb:
         d3:6c:7b:2b:f5:85:7a:9d:9b:42:45:95:d4:1b:59:6d:91:cf:
         e1:c5:5d:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsQuE3sxUXNFebOjO8ejnR3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2Njg4YWU5NjMyM2MxZmNmYWI1NGIyOTQ1NTczOTdiNDli
MDNiYzcwHhcNMjUxMjEyMDQwMTEyWhcNMjUxMjEzMDQwMTEyWjAzMTEwLwYDVQQD
Eyg0ZDgyYTQzMjBlNGVlOTcyYzRmYTA4MGY2MGQxODBjOWI1OTQ3YTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSefdaNhu67RIBAMXX02/5DMaPhz
TBTIWDk8500SwHun7o8qHjNPgKhPYwBSQyRsxmKAc5g3UiErdbJXNBG7UP2CS0xw
ACAm5rd6G4TRZs6iSOod0bagslAA9LOlV5sDvY6FpBhKw6u0LnJuyQk1NS3+bI41
3+CSknWMQjY/NMpBlan7kj3xia7E+TOqhmifIpDLV7+M0qNcXoPaMGcIrd8CkdRm
7xqqcy/Y0FdiMOIyJvMd4m4Uug8Su364ur1i0/UVndj+GsVoUqHatZW5zKtfTVWl
gJs5sS/l5C/IZ8rYnDsN3Pr4zStU6Mw4VHn3QJIkJjmy7IrZzK61gVF2XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2CpDIOTulyxPoID2DRgMm1lHqaMB8GA1UdIwQY
MBaAFOZoiuljI8H8+rVLKUVXOXtJsDvHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW1pSzZXTWp3Zno2dFVzcFJWYzVlMG13TzhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9jZTVjYTYtZjkzOS00ZmQ3LWI5Zjgt
MGExZWYwZWMwNTc4LzEvNW1pSzZXTWp3Zno2dFVzcFJWYzVlMG13TzhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9jZTVjYTYtZjkzOS00ZmQ3LWI5ZjgtMGExZWYwZWMwNTc4
LzEvNW1pSzZXTWp3Zno2dFVzcFJWYzVlMG13TzhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcliR6eYd
ao5/uKYGyWg2i+QayJHoM8I6/9LFkSUnTB3tete6RkF8xmoP/Mf8f/GOxyCPzlZi
9n/+W8TA+oYEmcbtOizzEznigoIhCXnGfdb/H9JEzqxO26LN/DVwrJEFRvmOFvnU
ZWEk6gvdFDnEX3IeGfWQiui6QaXW9XbNsbq9bEXHXpLNQweBqSULpAQan7OHU09V
ZW7WKV3XXDgU+u3b4bi6MyQZjxX+OcK9TC1ceGYyA2sBPgGH0BzVWsyN7R3cTjDP
zhf1onxuqe0LC6VjQEAW56vsxERCGTLKcG6v1MP77KJ/8KbL02x7K/WFep2bQkWV
1BtZbZHP4cVd5g==
-----END CERTIFICATE-----
Generated at Fri Dec 12 08:25:56 2025 by rpki-client