This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
File:                     T5rG_iAxrd4DZoJA48XZHsZxHh4.mft (raw, json)
Hash identifier:          6nZY9ZlNB29fYF8yPxzCocnHxQnQMTHgJHDZJngSlIg=
Subject key identifier:   5F:ED:72:AE:AB:68:7D:E9:92:1E:4F:D7:10:6B:FB:6F:65:D5:B5:20
Authority key identifier: 4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E
Certificate issuer:       /CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
Certificate serial:       019B1E3CE427427B184A4F42737A01924B5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
Manifest number:          1782
Signing time:             Sun 14 Dec 2025 19:01:05 +0000
Manifest this update:     Sun 14 Dec 2025 19:01:05 +0000
Manifest next update:     Mon 15 Dec 2025 19:01:05 +0000
Files and hashes:         1: T5rG_iAxrd4DZoJA48XZHsZxHh4.crl (hash: XNngU34H2U4SEgQ1jQwDfZ6oGWMKbmaPQv6YAJkaIoI=)
                          2: TJcT2DJKq9sbzduugmROupXys-s.roa (hash: 945dsBaVvuzrinluSo92NkW9CX506XM50XuIK87H/WU=)
                          3: qi7IIsHiw2r5ApLjqmnfIZyDYrI.roa (hash: 2E8e6YWLaIukfT6w9as+SzWaRk3QDMUINAxBnfY7Uh0=)
                          4: qrp40JibSYUajfp86w1boBXGmSo.roa (hash: Hf8opJvaDtrLthe1laKTVc3MNwDoesRiktOsOBQx/Ss=)
                          5: t4Wibxq4ODCb7PZTxEDqd4zIWdE.roa (hash: 8Nf30qr6PkolOBfuLtitg9kbH2hSLfyR4zbwrMUsPFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 19:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1e:3c:e4:27:42:7b:18:4a:4f:42:73:7a:01:92:4b:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
        Validity
            Not Before: Dec 14 19:01:05 2025 GMT
            Not After : Dec 15 19:01:05 2025 GMT
        Subject: CN=5fed72aeab687de9921e4fd7106bfb6f65d5b520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9d:08:79:7a:44:20:15:a8:f6:40:5c:e3:c2:
                    60:03:8d:b0:46:88:71:9f:ac:ff:96:77:01:f8:0c:
                    e2:98:19:31:89:13:f1:0a:7f:89:0f:63:93:21:6d:
                    97:4a:54:ce:df:42:d4:e4:cf:76:0c:84:a5:2e:9d:
                    20:a6:ba:6f:43:12:c7:48:b0:ca:73:1e:26:9e:d1:
                    6b:41:6d:ea:7c:37:1b:3b:3c:f3:4e:2d:47:f0:83:
                    75:eb:45:02:5d:35:e2:63:86:ff:a9:fb:ee:16:e9:
                    81:bc:98:1d:d1:99:fe:f6:0d:a4:8d:77:c5:dc:1c:
                    2a:4b:70:1b:c8:a2:07:95:8d:52:b6:0b:f0:e8:b6:
                    5f:60:1d:31:02:e7:ae:7f:ce:57:22:65:d1:20:01:
                    c8:85:70:e1:29:81:cf:cb:a3:c1:a6:c2:b5:dc:22:
                    8e:27:10:7c:fa:35:99:b2:42:60:05:d7:74:5f:5e:
                    ef:0c:5e:d3:93:a1:97:b4:a7:85:01:78:76:3e:be:
                    76:b0:0f:97:2e:39:87:b2:59:f3:54:fd:7d:5c:e9:
                    b6:57:00:87:33:8a:43:4f:e1:52:59:d0:7d:7b:7f:
                    6a:8d:62:23:f8:75:80:16:fa:ca:c1:50:a5:9a:9d:
                    be:e8:88:aa:10:cb:6c:44:6d:f1:e8:c5:14:f3:62:
                    26:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:ED:72:AE:AB:68:7D:E9:92:1E:4F:D7:10:6B:FB:6F:65:D5:B5:20
            X509v3 Authority Key Identifier:
                keyid:4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:18:0a:29:fb:1c:1c:c1:5a:80:50:55:4f:e4:f7:92:35:15:
         53:3f:16:69:6e:61:d9:a1:68:30:d4:35:d6:da:45:ec:73:3b:
         c4:b1:16:41:52:82:c9:1b:dc:4f:15:c6:b6:9e:21:3d:17:5b:
         75:46:dc:26:25:77:46:52:b0:d8:e9:bd:2e:d1:e0:bf:16:32:
         2a:1f:bc:f9:1e:90:c1:7e:0b:f6:8d:41:10:77:66:52:0b:a3:
         fc:4a:de:eb:37:46:dd:a2:c5:75:24:fd:e3:11:1f:47:5a:14:
         5a:03:e2:cc:3d:47:fe:12:5a:d0:68:2f:4e:6c:25:da:4c:60:
         29:02:1b:7a:f6:ae:93:18:43:7e:26:d2:3e:81:dc:49:53:4e:
         ae:47:dc:a2:68:7b:59:ea:db:8a:7f:a5:11:a1:9f:ae:43:9e:
         9a:55:fd:c2:f8:bb:1e:91:d2:1c:2b:d9:1d:c9:e5:43:57:f0:
         92:1f:d9:3d:d7:d4:de:3d:2b:7a:bf:83:ac:e8:59:10:b0:31:
         1f:f6:c3:45:2c:72:06:ca:74:15:c2:99:7d:d7:98:85:3e:06:
         e0:b7:58:f0:31:b8:3a:a8:2a:22:e1:80:66:64:47:fe:26:f0:
         13:35:82:58:24:5a:2b:80:af:3a:f0:c6:88:ea:dc:6b:62:e9:
         0c:cb:3b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 04:53:25 2025 by rpki-client