This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
File:                     5dbG6LztQL0DLRdxjBseOa6EGug.mft (raw, json)
Hash identifier:          AQZg7G/2SwabBRPejeHj8WOcLUe2I1XTrdKqWY5rbD4=
Subject key identifier:   6D:C5:06:AE:69:F5:FA:75:AC:BD:96:CB:DE:8E:B4:54:9A:B1:9C:56
Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
Certificate issuer:       /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Certificate serial:       019B1A97322B9778547F3B3E05CD6A438841
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
Manifest number:          1790
Signing time:             Sun 14 Dec 2025 02:01:14 +0000
Manifest this update:     Sun 14 Dec 2025 02:01:14 +0000
Manifest next update:     Mon 15 Dec 2025 02:01:14 +0000
Files and hashes:         1: 01g5y437H2m0RBS60K8v_5CH25Y.roa (hash: 6whrCWSU/OFo5FWbCgWTtdfsQVzcFfU3y10vUs1oFTE=)
                          2: 1-4thfGCfV_85lt2WZkN-l71fwv0.roa (hash: 7cUPpyEsjpN2LkemwyOwpAzp6M6Mod4nt5VJCSxBi3s=)
                          3: 1-U546Wnv3X2dlqBwiPgmgD5rG0Q.roa (hash: UYLMoDLmtnbaqveYEw4e1FYtKG5Xz2eS50cYOB7habA=)
                          4: 1BsLjyLGR7fVTKId14K_LDmFaOE.roa (hash: psSOJBHeT4i88iWFESSWMgqzZaf6jPzMO0pv5q33yJ4=)
                          5: 4wlDChlgzrgFapvpBy46MAFlefc.roa (hash: EYqlVV6MH4EbjLdFRd/br9sG35MzdZTRrWmN3sTJ6/Y=)
                          6: 5dbG6LztQL0DLRdxjBseOa6EGug.crl (hash: 2dz07noHFQyE4LNkUkeSkf/RCzwJUv42373GU0Hht5s=)
                          7: 6R9owLjblkvlkz3ih4RN9e--Vn8.roa (hash: k/StVbEK5dj4FEhDjLuET6E7LydiR63r1n+a13Y1e3g=)
                          8: A-Fkuj2Ry_3wy9lszQO5iFmpTsM.roa (hash: MqXfL/IjblbyaoanvxCZ0s6/syF5tUBaoXoKEYvO5Ck=)
                          9: CqQsoC1jFsSbLss7hEFtLKrKDMY.roa (hash: 7YVK/zmpOd/tEBFOBPOhNo6QF1d67oChKSOQOYEoacg=)
                          10: GEAO-RpDOblA62IXyDgWLKyaZE4.roa (hash: B/mmE5K4Y0+TtLR8pgvUmngTm+hQZlJcszavfMaBB+I=)
                          11: NFK0Hjvsp_Sq78uC-zn-OtIs2io.roa (hash: RkRZ6SorlL5rZdfTuNFGZoclIhB5xyBOn5s6WMdE+L4=)
                          12: QmD1NuxNLYfmzuhbCU_99CJ-o-k.roa (hash: ugpwTRCdEyAoIefE/m+oUbM/pJjpH0ikF/U5tO+O/jM=)
                          13: Sn5j9mrsDzCn0e9SdfxRYinpue4.roa (hash: Pmm/ivnYdFW6uuCjzZHPDQpUkRs+mtt6nnTRFq0BYj0=)
                          14: TtR0csYqYQUGmaJtYJ6I1Sb4jtA.roa (hash: /RrNIRwEKfIWdjBmKgKNDu3bdN5NswYfyOudqPj07dM=)
                          15: W5W8H6uR-lCCEmn3v-XsPLRNVss.roa (hash: MqFZSzbOqhNyXJIgrbDDE4K1XPvGby9AbWHLANkDs8A=)
                          16: cKTcZs-U_VD8X5oF6KYi9vL_XPY.roa (hash: Ojplqzn5+rFkagKqgJjGg7MR261z7vGOzqJ6p2GYag4=)
                          17: dUjWdWqHZ3bB28SlJrHRKXOFumI.roa (hash: L5pkt5HZhPKaDfcEd3yHsIdGb5cnUbqIUW0exwEPLyc=)
                          18: lM1B4eqvI9WRB2F5MltXjXFSUNw.roa (hash: AbZgfqJhiLBwdICwkR/kGfMSad6ug4enx96U2XP1Fgk=)
                          19: mza84PKMv0aUDroEfzQZip-9Um8.roa (hash: xfLnRg1sIPVix0oNDyz6FdqLtVqmjxCCvOykxKOTB0s=)
                          20: u0oJmkSedaonOs5uLkSqqL59uJ4.roa (hash: C6uJzJ3uiAjMgAmGSpBjfqhHJVcbN5byOHdLx08rPTM=)
                          21: ujwUfZi-j2E7tiXxuxPwDEMg9Do.roa (hash: ZVTJzzTXgsjt6o/MwKVQt8mq4QnG+HkM2MYUgIyYqIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1a:97:32:2b:97:78:54:7f:3b:3e:05:cd:6a:43:88:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
        Validity
            Not Before: Dec 14 02:01:14 2025 GMT
            Not After : Dec 15 02:01:14 2025 GMT
        Subject: CN=6dc506ae69f5fa75acbd96cbde8eb4549ab19c56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c5:85:79:67:38:e8:ad:cb:c3:03:65:14:4c:
                    cd:94:1b:20:39:59:1b:7f:89:a7:12:91:38:f2:67:
                    11:28:c9:e5:ae:81:6e:b8:4f:cb:e7:b8:32:e7:0a:
                    47:f1:30:65:3d:1e:c4:d1:21:93:75:38:8a:80:ab:
                    f3:aa:90:96:a2:db:a0:81:d3:32:78:e0:64:1d:6c:
                    a3:d9:83:4b:07:1d:11:91:ff:39:25:9f:78:38:49:
                    ff:0b:e1:d7:0f:44:fe:86:27:e1:41:20:cc:c0:35:
                    f4:d6:69:c3:70:a7:fc:9d:95:ab:f6:03:77:0a:0e:
                    61:e4:d7:90:2d:60:12:07:9d:e9:db:20:47:1a:d7:
                    39:67:ae:af:62:15:3a:35:7d:fc:24:09:10:83:4c:
                    86:c2:95:61:3f:6a:dd:16:32:3c:7c:cb:6b:a3:71:
                    bb:48:2e:37:d7:d3:b1:d8:94:5d:13:11:2a:fb:19:
                    e8:d4:a3:34:83:83:43:57:98:29:53:2b:7b:15:d7:
                    1a:32:0a:67:a5:60:65:43:60:c0:95:d7:4e:ae:42:
                    ed:ee:6c:ec:9f:9d:5b:9f:11:ce:d0:08:e0:78:19:
                    a8:dd:fe:d0:ba:69:80:44:09:df:43:cd:0c:d2:7e:
                    53:90:16:5b:b4:1f:db:6d:82:36:64:c3:79:d2:a9:
                    fa:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C5:06:AE:69:F5:FA:75:AC:BD:96:CB:DE:8E:B4:54:9A:B1:9C:56
            X509v3 Authority Key Identifier:
                keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:aa:42:cf:4f:5b:3e:82:ff:79:84:d6:cc:c6:8d:ac:c6:5e:
         24:b7:cc:1d:48:b2:cc:8a:97:dd:9c:ea:ce:dd:f2:87:d0:42:
         fc:ca:af:c6:43:94:8e:f3:ee:93:94:dd:69:a0:5e:2a:45:36:
         38:ca:17:b2:71:0a:69:e4:c6:74:9f:8b:75:a1:e2:11:db:36:
         39:00:a2:3c:ff:62:35:fd:d1:e9:6b:92:05:08:83:49:fd:c2:
         f3:f2:6f:cd:b5:c1:0e:d6:d8:a1:98:a6:0e:92:9f:c4:e1:33:
         57:07:96:ba:8d:18:6c:3d:42:30:40:2d:9c:c7:e6:82:6f:c2:
         ba:92:30:f1:d6:b5:39:7f:68:64:68:48:3e:7b:38:ba:38:db:
         a5:a7:f3:20:c6:ff:0d:22:b9:37:25:9d:bd:b9:77:76:85:17:
         55:d2:86:c0:e2:d2:19:77:f9:4f:bb:99:dc:7c:cf:4e:bf:ad:
         49:31:e8:95:5e:53:bc:bd:37:fb:8b:36:50:75:70:e2:70:c2:
         52:22:30:a0:5a:55:4c:72:d8:80:ce:00:23:3e:44:73:ab:ed:
         6a:47:8f:b2:57:d8:7c:13:a3:45:00:af:59:1f:49:f4:29:83:
         33:08:f7:e0:e5:b2:99:d4:f9:8e:64:35:e2:81:58:6c:df:09:
         c7:0f:79:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 08:39:48 2025 by rpki-client