This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2548a4-7715-4134-8132-2bf0a3bcc4f1/1/5_moojloMmPnVeEsl9LXpDLQs3c.mft
File:                     5_moojloMmPnVeEsl9LXpDLQs3c.mft (raw, json)
Hash identifier:          DkuhVVGDYB8jSotSa/yUDyidtDjAc9krqOkYbAw4Ens=
Subject key identifier:   A0:F3:1A:CC:BA:A4:69:35:10:64:D8:B7:23:72:19:67:1B:0D:5E:D8
Authority key identifier: E7:F9:A8:A2:39:68:32:63:E7:55:E1:2C:97:D2:D7:A4:32:D0:B3:77
Certificate issuer:       /CN=e7f9a8a239683263e755e12c97d2d7a432d0b377
Certificate serial:       019B2C66CB26764292B5CA4D030FFAF7A580
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_moojloMmPnVeEsl9LXpDLQs3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/2548a4-7715-4134-8132-2bf0a3bcc4f1/1/5_moojloMmPnVeEsl9LXpDLQs3c.mft
Manifest number:          1780
Signing time:             Wed 17 Dec 2025 13:01:32 +0000
Manifest this update:     Wed 17 Dec 2025 13:01:32 +0000
Manifest next update:     Thu 18 Dec 2025 13:01:32 +0000
Files and hashes:         1: 5_moojloMmPnVeEsl9LXpDLQs3c.crl (hash: m61WYL3SDFXA11s0X2j6JyaTuGEn4qUjafaDq7ktCnk=)
                          2: Pe3pszkM2CU3Aqq2LsSWnRdpMXY.roa (hash: 7KOR6sFk9qGqJSuGUx84Vcqp+ySqoAEsvIAFZWSMqGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/2548a4-7715-4134-8132-2bf0a3bcc4f1/1/5_moojloMmPnVeEsl9LXpDLQs3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/2548a4-7715-4134-8132-2bf0a3bcc4f1/1/5_moojloMmPnVeEsl9LXpDLQs3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5_moojloMmPnVeEsl9LXpDLQs3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2c:66:cb:26:76:42:92:b5:ca:4d:03:0f:fa:f7:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f9a8a239683263e755e12c97d2d7a432d0b377
        Validity
            Not Before: Dec 17 13:01:32 2025 GMT
            Not After : Dec 18 13:01:32 2025 GMT
        Subject: CN=a0f31accbaa469351064d8b7237219671b0d5ed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f6:7e:33:ae:93:56:46:f8:c1:fe:57:0a:97:
                    f2:70:15:b3:51:53:38:20:dc:ea:1c:94:98:1c:32:
                    71:18:49:12:ab:f2:b4:0b:b0:97:07:62:49:a7:d5:
                    f5:0d:1c:2e:36:af:9e:96:77:29:8e:2e:e4:01:f8:
                    15:d0:b3:b2:d8:55:fa:e4:ba:d3:7e:26:7c:d6:bc:
                    9f:18:16:e9:5a:21:1e:59:d4:42:43:97:fb:7c:7c:
                    9b:fb:5a:49:e2:ad:b8:cd:4b:db:30:cc:bb:c3:94:
                    79:11:37:67:66:24:fe:c7:39:ff:18:84:f5:5d:70:
                    82:01:ba:91:1a:84:75:a1:c2:a9:34:1f:34:82:7e:
                    9d:8f:f7:dd:4c:04:94:23:09:d5:a8:77:34:6c:ab:
                    d7:8c:44:08:4d:3f:00:15:21:1f:89:18:3d:d5:67:
                    9c:b8:08:e3:1e:ef:40:c8:61:29:0f:aa:92:48:85:
                    6f:59:87:5c:92:60:d7:51:87:f3:69:da:4f:c1:02:
                    1b:fa:70:f2:82:2d:2f:3e:30:1c:ff:04:0d:eb:4b:
                    5a:70:35:55:7d:75:ac:f8:53:5e:1a:99:58:1d:28:
                    be:8d:ed:47:93:b5:95:90:cd:2b:79:52:c9:a7:2d:
                    c6:45:c5:3c:85:96:6a:b3:1b:92:2c:69:b8:30:12:
                    51:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F3:1A:CC:BA:A4:69:35:10:64:D8:B7:23:72:19:67:1B:0D:5E:D8
            X509v3 Authority Key Identifier:
                keyid:E7:F9:A8:A2:39:68:32:63:E7:55:E1:2C:97:D2:D7:A4:32:D0:B3:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_moojloMmPnVeEsl9LXpDLQs3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2548a4-7715-4134-8132-2bf0a3bcc4f1/1/5_moojloMmPnVeEsl9LXpDLQs3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2548a4-7715-4134-8132-2bf0a3bcc4f1/1/5_moojloMmPnVeEsl9LXpDLQs3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:1f:c1:9c:42:6c:ee:fe:f8:db:19:3f:b6:29:42:e0:59:cb:
         cc:45:3f:f5:d7:b9:30:50:38:32:a9:7b:6e:14:e3:bc:82:e7:
         52:ff:97:d5:fc:35:37:56:9a:2e:82:f8:b8:97:39:8e:b3:2e:
         ad:03:52:41:c8:51:7f:6c:56:2c:1b:42:9d:26:79:fa:35:99:
         39:a7:08:ef:e8:28:ca:79:de:61:08:02:ca:02:5e:90:89:91:
         ac:39:6c:4f:a9:83:ed:12:b1:43:2b:3a:ec:73:33:63:5b:9f:
         20:80:1e:c4:c6:5d:b7:79:e1:cf:c4:d9:9e:83:4e:54:80:a6:
         d7:08:5f:55:32:34:45:30:55:d2:fc:b0:6c:ec:dd:ec:0a:ec:
         09:b7:78:a5:3c:1d:ee:2c:aa:8e:80:6f:57:94:8e:aa:d9:b9:
         06:99:4b:60:65:f1:17:96:60:41:f5:5f:7c:f8:f1:9b:1c:73:
         97:b0:d6:49:a6:08:28:2a:2b:80:a5:70:80:28:d7:d6:80:f1:
         6a:13:a9:cb:c3:fd:a6:94:04:6e:41:01:fe:5a:aa:ea:8f:26:
         73:dc:01:d1:64:a6:5b:37:98:07:c6:bd:68:b6:16:75:9c:a6:
         c1:f7:c4:90:c5:21:8a:0a:d8:8d:3d:c7:13:4b:d9:b0:ac:0c:
         54:a6:5d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 19:01:32 2025 by rpki-client