This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
File:                     1s5JJV9AanJVk8YuHECHeVhtVu8.mft (raw, json)
Hash identifier:          f4rSBuEbMh2GdhUAsg8wc1tf2ZwFBeGAbGl/3mbqH3Y=
Subject key identifier:   48:51:24:77:77:15:92:A8:19:DD:88:72:B8:22:7C:3C:C7:3D:C6:18
Authority key identifier: D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF
Certificate issuer:       /CN=d6ce49255f406a725593c62e1c408779586d56ef
Certificate serial:       019B38D7FC3207315D7BC6D6DB8D4A15F10A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
Manifest number:          0CE3
Signing time:             Fri 19 Dec 2025 23:00:37 +0000
Manifest this update:     Fri 19 Dec 2025 23:00:37 +0000
Manifest next update:     Sat 20 Dec 2025 23:00:37 +0000
Files and hashes:         1: 1s5JJV9AanJVk8YuHECHeVhtVu8.crl (hash: W5QczUJhCyzzXk8K1NTvzsnEX+av+tELJUv7IoPRDok=)
                          2: CK8FwiyJmMBb-zg5kXzIAY_6FI0.roa (hash: XErrRj96RGdiXdkf0Z1TwKUF+3V+yB+0bX3FZbrkGHY=)
                          3: EJfhhxSKJku019QQkt99LIZFHTw.roa (hash: SjUIL6Kbq6N31Fxq4qDA2LJmnHYs1GWAH6ODttxmcK8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 23:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:38:d7:fc:32:07:31:5d:7b:c6:d6:db:8d:4a:15:f1:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6ce49255f406a725593c62e1c408779586d56ef
        Validity
            Not Before: Dec 19 23:00:37 2025 GMT
            Not After : Dec 20 23:00:37 2025 GMT
        Subject: CN=48512477771592a819dd8872b8227c3cc73dc618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:90:fd:eb:24:09:d8:17:23:39:b6:91:05:7d:
                    58:71:67:c8:a9:f0:5f:cd:cf:52:9d:d4:50:ec:07:
                    19:98:c1:e3:04:2c:0f:53:13:25:0d:26:73:ee:61:
                    24:43:72:b6:df:1b:85:e0:cd:be:16:58:73:ba:90:
                    8a:9a:3a:43:36:d6:90:32:7a:28:01:6e:6c:01:75:
                    fd:d8:10:27:1a:b4:9f:88:b2:1f:e0:4e:0a:31:c4:
                    51:c0:ac:03:0a:b6:94:d9:41:bc:64:fd:38:22:98:
                    00:df:0b:a7:70:12:19:2a:09:12:d1:b8:c5:88:d3:
                    f1:ab:6f:33:c2:b2:9f:a3:d9:dc:8c:3f:0f:70:8e:
                    ae:5f:87:fa:80:2b:29:55:8e:55:f8:12:fe:5b:02:
                    ce:db:e3:d0:9a:c8:dd:cd:5e:6c:eb:0f:0d:7d:ad:
                    43:ba:34:0b:84:98:9f:f0:d1:df:c6:78:b5:ca:2d:
                    a1:0b:5a:74:ac:18:42:7b:2e:fc:d7:26:75:06:67:
                    36:2b:e4:9f:31:b3:8f:66:9d:bc:6d:54:f2:0c:80:
                    8b:80:5f:bc:3d:98:06:99:99:19:0d:b7:fe:d7:f2:
                    e3:8f:2d:8a:13:de:58:34:08:e2:5c:8d:cb:42:73:
                    61:4b:39:9e:c0:95:2c:c1:6c:d4:51:c7:ce:5c:da:
                    16:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:51:24:77:77:15:92:A8:19:DD:88:72:B8:22:7C:3C:C7:3D:C6:18
            X509v3 Authority Key Identifier:
                keyid:D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:33:60:eb:cf:db:da:59:9e:da:20:9b:ce:e5:38:ba:5e:3d:
         b0:1c:c8:04:b9:af:b5:a1:d3:11:9d:2b:25:cf:fd:5e:85:57:
         dc:83:ce:b0:4f:24:de:25:23:58:28:a7:57:20:87:04:5a:a2:
         df:ed:91:d2:9e:99:5b:8a:75:fb:06:6c:ee:dc:ef:9c:7c:1f:
         76:e3:c0:8b:09:e2:26:70:89:07:44:22:a5:a1:d6:df:c1:93:
         2a:1f:7c:3f:64:8c:ae:d4:fc:41:01:18:5b:26:29:cc:f5:6a:
         37:83:f1:66:16:df:6b:5a:49:71:46:b0:78:df:15:5f:43:f5:
         ab:05:6b:c7:57:5d:43:11:59:95:32:85:21:67:57:14:33:5f:
         f8:10:3d:e7:df:72:f2:6e:9c:8d:0a:13:0e:0e:86:2c:50:a9:
         45:fd:3a:eb:bf:e7:e1:4f:ca:f8:7a:ca:c0:b7:cc:bc:76:85:
         fd:72:a1:6c:ab:aa:69:a5:a2:5e:60:20:60:be:44:66:01:01:
         b9:d2:27:e2:5f:95:74:33:3a:2b:d8:99:b6:75:47:43:08:be:
         71:6f:5a:4d:e8:32:4e:34:19:8d:6c:ec:3b:68:27:7c:bb:05:
         06:01:04:cf:f0:27:39:0b:0c:55:29:7c:a3:1e:5d:ba:cb:6a:
         c3:fc:4d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:37:10 2025 by rpki-client