This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
File:                     53OduQwc6YQx3zSKE3blOsbgUjw.mft (raw, json)
Hash identifier:          a9iG3LrjbU7EFYJy/vceXk9Mr6Rs3byfWFjM9JpkttQ=
Subject key identifier:   B4:61:CB:86:73:BD:E4:FA:CF:4C:EB:A1:67:21:44:A3:2C:75:C3:E5
Authority key identifier: E7:73:9D:B9:0C:1C:E9:84:31:DF:34:8A:13:76:E5:3A:C6:E0:52:3C
Certificate issuer:       /CN=e7739db90c1ce98431df348a1376e53ac6e0523c
Certificate serial:       019B2061D80FCDBB43778418DBC23395DAE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
Manifest number:          0C97
Signing time:             Mon 15 Dec 2025 05:00:41 +0000
Manifest this update:     Mon 15 Dec 2025 05:00:41 +0000
Manifest next update:     Tue 16 Dec 2025 05:00:41 +0000
Files and hashes:         1: 53OduQwc6YQx3zSKE3blOsbgUjw.crl (hash: /STZBZmmyudNK9wKFMmgzG81LR5unCLXspXycENrj6c=)
                          2: 5lxNCVmtG-eGQDzqS31HH90R7gQ.roa (hash: UMFun1XpckbWJBcsjucwYOiUnMjxn3AfVM2MpuImkbQ=)
                          3: J7gZFbpwbQ3l58heUCupO_rw9SI.roa (hash: 3O3YSRLT+CEf3bqQzHcFcD73p8jJc1vMJRrl8kOmCOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 05:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:20:61:d8:0f:cd:bb:43:77:84:18:db:c2:33:95:da:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7739db90c1ce98431df348a1376e53ac6e0523c
        Validity
            Not Before: Dec 15 05:00:41 2025 GMT
            Not After : Dec 16 05:00:41 2025 GMT
        Subject: CN=b461cb8673bde4facf4ceba1672144a32c75c3e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c8:24:e5:78:4b:72:d5:b5:7e:6f:91:38:fe:
                    8c:fb:90:9a:a4:b8:0e:d9:4a:83:9b:a2:fa:fc:cf:
                    69:5f:b0:7b:74:e2:f0:e0:6f:1b:39:ea:34:8d:63:
                    1f:c8:db:c6:a3:f5:b6:1c:6a:48:95:e9:8a:0f:59:
                    1a:95:a0:d1:f2:b6:c4:ac:06:d5:e8:40:2a:58:85:
                    d7:49:37:f6:f4:65:db:8e:bf:7e:97:79:8e:8a:f7:
                    5a:a8:9c:e2:62:4f:48:52:8a:fa:63:25:1a:a3:1a:
                    9f:51:68:60:8d:2f:49:8b:9e:86:e1:93:0e:0f:e7:
                    2a:d8:db:85:8d:ae:4d:68:ca:2b:e4:55:d7:a3:33:
                    a7:20:58:66:64:d4:6a:28:a7:b3:7e:72:3c:a9:5a:
                    b5:05:a1:fd:b9:f2:2d:62:66:a9:55:b4:95:7a:79:
                    c9:fd:3a:59:e1:c2:ab:35:8a:ae:1a:74:aa:2d:0d:
                    b1:74:45:ba:62:4b:1c:b3:c7:75:dc:8d:1d:7c:49:
                    d7:74:58:42:ad:2a:21:ec:4d:d3:ef:1e:a4:f7:bd:
                    32:9d:ee:1f:3f:f8:d9:30:f8:22:7d:46:3c:96:c5:
                    dc:32:5d:d8:4a:83:9c:17:d8:a6:03:c8:fc:db:7f:
                    a0:83:d0:6b:ad:16:b0:8f:64:f5:0a:ed:8f:69:4c:
                    12:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:61:CB:86:73:BD:E4:FA:CF:4C:EB:A1:67:21:44:A3:2C:75:C3:E5
            X509v3 Authority Key Identifier:
                keyid:E7:73:9D:B9:0C:1C:E9:84:31:DF:34:8A:13:76:E5:3A:C6:E0:52:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:65:1c:31:15:c6:bd:8b:00:19:38:6f:b5:08:4f:8e:64:b9:
         75:03:99:d9:60:80:79:b7:1b:c4:b6:6c:c9:14:e3:fe:5c:16:
         0b:97:2b:a4:90:4c:7a:08:c1:23:4b:3a:fe:ca:69:77:d1:62:
         c5:90:85:d9:c6:65:d8:ea:16:ef:a6:f2:2c:0d:2d:3b:7e:29:
         9e:23:ce:f5:f5:21:17:70:a8:2a:65:e5:d6:3f:ce:7b:91:60:
         f0:0e:4b:16:a0:70:c0:5f:ca:6a:25:49:e0:34:81:7f:dc:c6:
         39:8a:f2:a8:93:5e:df:5f:75:d3:05:78:ca:19:97:2d:fa:e4:
         bf:bb:23:32:4e:0f:97:59:a2:01:12:48:de:47:37:69:a6:10:
         88:03:e3:0a:d2:d8:0b:29:ce:7c:37:67:21:e1:1e:7b:ef:49:
         63:80:02:12:29:8c:b4:59:6a:c5:67:80:9f:9d:5d:df:1a:b0:
         db:1e:32:a3:a4:7f:24:12:b1:ac:9c:de:81:39:0b:38:36:42:
         42:b5:d0:a8:9b:14:e6:1d:6c:30:87:5e:dd:34:12:d0:28:1f:
         e9:f4:41:c5:c1:ac:21:86:52:61:32:40:4b:1e:b6:42:da:27:
         b9:e8:ce:e4:17:7f:4d:47:5d:e5:a9:66:13:97:e7:cd:6a:68:
         d1:c6:bc:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 12:51:51 2025 by rpki-client