This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
File:                     l8S83VMS-KfDPeS311wVtMu8Hdo.mft (raw, json)
Hash identifier:          r0sS7xWmazK+Y+S+nC5+q9ewrytx5HlvOTh7ZsOLxOY=
Subject key identifier:   E5:62:6F:5F:77:B9:EB:93:8E:ED:59:B5:51:7C:05:DC:09:36:35:7B
Authority key identifier: 97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
Certificate issuer:       /CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Certificate serial:       019B1E068C71C92A02370913BEA0719BF727
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
Manifest number:          05E1
Signing time:             Sun 14 Dec 2025 18:01:44 +0000
Manifest this update:     Sun 14 Dec 2025 18:01:44 +0000
Manifest next update:     Mon 15 Dec 2025 18:01:44 +0000
Files and hashes:         1: O5tzYrtFkkmA82WUY-iM9I4npFQ.roa (hash: NAkRuZlLqZ6QGa6dyEO9WBh2M5GYWwb6X+60cj2kmSQ=)
                          2: UpM_9nRhN5sEo1jLWob4fYkRieQ.roa (hash: 1KbxTVWk0iQIjrJWGCs4uRw+yTwWoVCpGhtFHqc3mxE=)
                          3: l8S83VMS-KfDPeS311wVtMu8Hdo.crl (hash: XdGx1zAqOwgJvp+DF1Z9QRveMrq+C0HSZYOTLAZ3Fuk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 18:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1e:06:8c:71:c9:2a:02:37:09:13:be:a0:71:9b:f7:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
        Validity
            Not Before: Dec 14 18:01:44 2025 GMT
            Not After : Dec 15 18:01:44 2025 GMT
        Subject: CN=e5626f5f77b9eb938eed59b5517c05dc0936357b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4d:8b:c4:48:48:87:b5:32:c8:f7:0f:a6:02:
                    64:11:11:1d:c7:2f:a1:a2:e7:40:e0:ed:c0:3c:0b:
                    78:d8:ae:09:82:c5:d8:c5:e8:3d:fe:cf:d7:fb:13:
                    3a:08:2a:03:06:c1:f7:ae:a1:58:af:91:da:93:7c:
                    28:c7:17:76:b2:57:19:44:f8:fc:8f:43:ac:e6:9c:
                    8d:ec:d0:3a:03:70:7d:eb:62:c7:9f:54:9d:15:55:
                    97:0c:b6:86:8b:fd:6a:e0:cf:5d:3d:d7:96:43:10:
                    71:72:32:36:a3:d4:c9:e9:c0:2f:c4:37:31:be:1a:
                    db:30:d8:bd:76:df:c0:6f:03:e0:11:da:c8:b5:98:
                    8c:68:c9:15:2f:9e:d6:7f:d4:1b:c7:b3:ac:8f:94:
                    7f:4b:33:a6:98:8d:2e:e7:e8:e4:f8:48:2e:13:cb:
                    f5:50:86:0b:4e:7b:2b:d7:03:17:73:b0:de:80:ee:
                    8d:32:1b:34:27:32:12:67:30:93:40:06:8f:cc:05:
                    90:1b:0b:84:22:9f:b2:e2:e9:a0:88:11:61:78:4d:
                    26:0d:20:a1:13:a0:0a:72:a4:3c:38:4c:54:a2:65:
                    7b:43:1f:fd:d4:3b:1b:d3:1c:8f:84:13:c8:35:42:
                    32:bb:b3:13:bb:97:3c:c5:c6:f7:39:c9:ef:fe:a0:
                    61:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:62:6F:5F:77:B9:EB:93:8E:ED:59:B5:51:7C:05:DC:09:36:35:7B
            X509v3 Authority Key Identifier:
                keyid:97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:90:bc:ef:92:76:e1:90:ab:f6:c0:f5:96:f5:1f:fc:42:d4:
         00:38:41:99:e7:82:04:f1:51:79:90:be:ad:74:42:34:97:95:
         93:28:41:8e:32:ca:ab:e4:c3:58:76:a9:96:e3:18:08:b2:46:
         f7:30:af:b2:ba:e3:85:a6:67:4b:c3:ad:cb:ba:61:35:5a:07:
         e2:55:ac:c5:b9:d8:9d:f5:c9:9a:27:0d:d6:d0:4c:ea:66:42:
         b1:7d:e5:33:9a:de:af:bd:ef:c6:de:5e:7e:7c:e6:ff:57:de:
         27:83:f5:bf:8a:42:56:b9:c1:a8:c7:3a:2e:09:75:50:ec:5b:
         da:21:ae:e3:98:d7:c4:37:aa:ed:6d:36:ce:fe:ea:3a:05:4a:
         6d:d0:9d:8f:09:0c:2e:24:4d:8e:c4:0d:a6:8c:7b:cc:df:63:
         2e:d0:9d:2c:7b:6a:d1:5e:d6:71:ee:c5:6c:89:a9:27:8f:8a:
         ea:a9:c8:2a:7a:ed:2a:9f:de:23:6b:97:0b:10:5b:e8:29:dc:
         bb:2f:b8:cb:1b:2c:e5:d1:75:ca:f9:b1:3a:1e:55:f2:53:cd:
         94:c5:c2:28:59:88:54:cc:15:ba:ea:f8:cc:58:93:b6:6b:15:
         88:c8:df:d2:1e:ea:53:fe:59:3d:1b:3e:35:5f:fb:01:82:bf:
         6e:12:1c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 04:51:20 2025 by rpki-client