This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
File:                     5QwixmuF-smN6D12HvQkNDerA5M.mft (raw, json)
Hash identifier:          0uioG1ijeC+YDD2W9Oci5fDwdN57Gy9dTf2L3oICqVM=
Subject key identifier:   FE:CE:3F:D4:50:21:03:3C:10:FA:DD:0A:AF:00:DE:B3:44:47:82:73
Authority key identifier: E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
Certificate issuer:       /CN=e50c22c66b85fac98de83d761ef4243437ab0393
Certificate serial:       019B31C36E5077B6C71E5CF3C6EA98CA43BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
Manifest number:          141F
Signing time:             Thu 18 Dec 2025 14:00:49 +0000
Manifest this update:     Thu 18 Dec 2025 14:00:49 +0000
Manifest next update:     Fri 19 Dec 2025 14:00:49 +0000
Files and hashes:         1: 5QwixmuF-smN6D12HvQkNDerA5M.crl (hash: Lqko+4xQFrA23S5+WWrEYOsIHrIr1ukRhh+W4YYSjhU=)
                          2: 5vvZLFuVzrlfVEjgWVSSvDzWzYc.roa (hash: d36pZwdlPn9b+lfJWHYLiYs9ysvYmjF2/rOLd55l7Go=)
                          3: f1b7by6SkYswASAnSv-cgB5XP2Y.roa (hash: x+DctqLC1gEcaYW0QmBitaKdQAwlen0XRAIQGmNrAQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 14:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:31:c3:6e:50:77:b6:c7:1e:5c:f3:c6:ea:98:ca:43:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e50c22c66b85fac98de83d761ef4243437ab0393
        Validity
            Not Before: Dec 18 14:00:49 2025 GMT
            Not After : Dec 19 14:00:49 2025 GMT
        Subject: CN=fece3fd45021033c10fadd0aaf00deb344478273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:41:60:a6:3d:b1:9e:e6:0f:f2:a4:ba:50:73:
                    f5:d6:ce:4b:85:2a:69:77:f9:bb:f7:29:14:1f:ec:
                    ac:a7:bc:ab:b9:49:2f:23:65:8d:32:fa:0c:4c:28:
                    f8:c3:14:f6:35:e2:2b:62:8e:f5:c1:00:48:8d:c1:
                    3e:d3:e8:7b:8a:c0:6a:97:32:ba:77:e1:46:8a:39:
                    bc:36:09:3b:b5:48:5c:65:6c:86:a1:21:b9:1a:b2:
                    95:e4:77:3b:04:b1:a0:ed:22:e7:b6:01:da:d2:56:
                    e2:2f:f3:34:b9:31:9c:09:72:a2:57:59:4b:3e:cf:
                    96:9f:b8:04:da:5c:39:13:9b:28:08:77:a9:9b:5f:
                    45:eb:b7:be:4b:26:9f:69:fe:06:66:a7:2c:e1:f5:
                    15:f6:53:e5:b1:23:a1:72:57:90:ba:00:17:57:c7:
                    4e:a7:0e:07:73:05:eb:72:f4:87:41:e2:a3:da:a3:
                    1e:e3:aa:3e:c5:d0:22:f0:c8:3d:22:73:28:d0:b9:
                    42:c1:93:10:a2:f9:64:ef:17:96:b4:17:a2:39:09:
                    55:a4:60:d9:6e:04:76:19:e3:80:76:44:e2:b1:ab:
                    f7:8f:c9:b7:f8:74:25:ab:13:0b:05:e1:93:da:15:
                    a0:f1:c3:6c:88:bf:ef:92:cc:ab:df:21:af:18:4e:
                    ec:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:CE:3F:D4:50:21:03:3C:10:FA:DD:0A:AF:00:DE:B3:44:47:82:73
            X509v3 Authority Key Identifier:
                keyid:E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:73:7d:14:17:6b:a4:48:ca:bf:77:45:d1:75:d0:ab:67:6b:
         26:a8:f4:e1:85:bd:6e:95:ed:ad:49:5a:90:f8:15:a4:0c:e6:
         67:f6:ad:ec:3e:c4:9f:c6:44:ad:2c:17:ee:5d:fe:15:c7:aa:
         ee:b8:c5:a8:67:5d:30:fc:79:fb:d3:ea:68:c6:3d:c8:e5:f2:
         69:52:56:68:c5:06:53:47:29:7e:e0:f0:b7:c6:39:f4:18:0f:
         5c:9d:a1:42:f6:f1:2f:ee:6f:86:6a:f7:78:66:3c:8d:ba:6a:
         5f:88:f6:34:54:6f:d3:13:44:c7:88:b2:c0:2e:f7:ab:d6:05:
         c2:c2:17:3d:f4:39:76:a0:1b:89:ab:d5:6d:2c:9b:84:ee:91:
         c5:e4:3e:d0:ec:af:fd:3a:98:09:10:1a:57:89:99:fd:7d:db:
         33:35:be:4d:ef:de:71:73:0f:66:69:69:f6:12:93:56:00:70:
         f5:81:a4:be:dd:1f:68:fa:8f:d9:e4:d1:ac:cc:67:48:0a:cd:
         e0:39:a4:5d:db:ee:44:5e:fd:97:94:d6:aa:f0:7b:c0:2a:bb:
         a9:71:cb:b3:dc:c7:ee:1a:1c:ae:e9:ff:1a:6b:f1:e5:36:a2:
         26:5a:f7:58:8d:f4:14:91:5f:f2:ca:fb:ca:82:b0:4b:5b:b6:
         7f:1f:b0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 23:47:12 2025 by rpki-client