This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
File:                     5pySw7nuYLoBPZQYIgQvJQBMlew.mft (raw, json)
Hash identifier:          ZwoRdVbXgkkOGWl/7mUeBei9gpHwE2FE4wowSElUr1k=
Subject key identifier:   6F:14:86:70:F7:64:79:E2:B7:DA:65:76:6F:70:C7:DC:7B:EA:5C:22
Authority key identifier: E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC
Certificate issuer:       /CN=e69c92c3b9ee60ba013d941822042f25004c95ec
Certificate serial:       019B5A1A4C4B65585C5789132297528EFEFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
Manifest number:          1797
Signing time:             Fri 26 Dec 2025 10:00:31 +0000
Manifest this update:     Fri 26 Dec 2025 10:00:31 +0000
Manifest next update:     Sat 27 Dec 2025 10:00:31 +0000
Files and hashes:         1: 5pySw7nuYLoBPZQYIgQvJQBMlew.crl (hash: pEF9wmwnT76VQGSQe7+4kzm70E1guZwrp0A8zbUVjy0=)
                          2: rR9_uvw4xytf2agupQ_iUhFHPXQ.roa (hash: X8fcaKRyDp0VyO5muGsQviUm1Dvz7ExE7FAL5YYozyg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5a:1a:4c:4b:65:58:5c:57:89:13:22:97:52:8e:fe:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e69c92c3b9ee60ba013d941822042f25004c95ec
        Validity
            Not Before: Dec 26 10:00:31 2025 GMT
            Not After : Dec 27 10:00:31 2025 GMT
        Subject: CN=6f148670f76479e2b7da65766f70c7dc7bea5c22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:43:27:13:1d:75:0d:bb:9a:f2:79:67:97:af:
                    c5:6b:43:6a:52:ae:06:4d:ba:51:c3:0b:69:f0:21:
                    5c:1c:92:57:a5:f1:1d:f0:1f:20:39:51:52:d3:14:
                    1c:5f:e3:df:04:82:d0:0f:7b:81:10:65:01:f6:51:
                    c6:e6:98:12:7d:d9:5c:dc:02:b6:e1:69:13:74:6b:
                    06:55:4a:9b:b8:d2:f0:ed:b6:1e:e7:0b:ab:ea:a8:
                    00:ed:8e:49:65:0a:3c:ee:bf:ab:83:0b:a1:dc:ae:
                    27:c1:6b:d6:a4:df:47:48:69:6c:a2:8a:7e:23:60:
                    98:0e:89:3f:e4:48:72:51:5f:54:36:ab:aa:05:89:
                    e8:e4:35:ac:96:e8:a3:8c:bd:18:b8:b3:b5:42:2c:
                    f2:29:5c:06:59:6c:9b:dc:69:24:98:d6:be:af:a1:
                    4d:38:99:97:a4:e3:af:5f:17:6f:65:ce:51:dd:39:
                    69:07:a0:e6:f6:5e:7d:1c:6a:2d:67:8d:1b:6a:f6:
                    13:38:8c:03:a0:5c:21:b4:b8:7e:1f:08:0c:34:22:
                    a6:89:9a:50:2b:66:0f:1f:84:4d:04:fd:96:9c:80:
                    32:c9:91:18:91:7c:1f:e1:08:07:57:5d:a0:65:ba:
                    04:28:70:17:9b:fc:d6:3f:6b:ec:35:70:51:e2:69:
                    b0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:14:86:70:F7:64:79:E2:B7:DA:65:76:6F:70:C7:DC:7B:EA:5C:22
            X509v3 Authority Key Identifier:
                keyid:E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:46:d7:dc:8a:39:bd:7e:1b:ab:cc:70:f1:43:e6:22:1c:4e:
         8d:1b:ed:ff:87:63:c3:8c:d0:1d:a8:9c:94:b0:bb:64:af:a4:
         75:91:b5:dc:03:91:4a:16:07:3d:78:14:56:0e:ed:55:ae:ee:
         4c:24:0e:73:8a:39:20:a2:3b:ea:a4:a9:2c:45:7a:35:02:4f:
         7c:b5:c3:a4:e0:39:0d:bd:92:81:37:fa:7d:d9:6f:bb:85:15:
         a0:70:4d:a7:96:35:d0:a7:18:07:59:95:07:85:e8:0b:19:f0:
         76:4d:bc:ee:ea:41:d3:2c:43:25:6f:59:e7:e2:7a:fb:4e:09:
         c5:73:bb:90:b1:c6:1a:92:a6:56:ef:8c:85:84:9f:ce:b7:0b:
         16:08:58:13:4b:c9:68:f0:99:bb:13:11:6b:1a:5f:47:e2:5c:
         c3:44:7d:81:ea:96:c9:d5:60:f7:b7:af:27:d8:34:a0:db:d8:
         11:3d:75:35:08:fa:43:47:9b:22:5c:1a:22:b5:63:f6:cd:32:
         0f:da:0c:35:ec:37:fc:07:fb:4a:7e:1d:87:9c:fe:6b:f8:39:
         1c:c8:68:c8:fc:d3:38:2a:fe:89:17:03:6c:d8:d9:e8:03:e1:
         05:3d:7f:2f:a6:03:6c:d5:cb:c7:bf:57:5a:c8:13:c6:8f:0a:
         af:dc:7b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 15:46:22 2025 by rpki-client