This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
File:                     t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft (raw, json)
Hash identifier:          PEgGM3DgxF0yo4cjJaFJTVLCdus+jovcisgZnYWTg4Q=
Subject key identifier:   83:B5:31:DF:49:97:DC:AD:A3:DF:C9:2B:9B:4D:4C:8A:53:B4:EE:62
Authority key identifier: B7:9D:E9:45:8D:19:0E:63:43:29:F9:DF:15:03:B5:22:2C:16:24:EE
Certificate issuer:       /CN=b79de9458d190e634329f9df1503b5222c1624ee
Certificate serial:       019B5976A65BFEAFB7994A8F67CF89E570E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t53pRY0ZDmNDKfnfFQO1IiwWJO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
Manifest number:          09A7
Signing time:             Fri 26 Dec 2025 07:01:46 +0000
Manifest this update:     Fri 26 Dec 2025 07:01:46 +0000
Manifest next update:     Sat 27 Dec 2025 07:01:46 +0000
Files and hashes:         1: 33E6U-90LI21C0lkTnzQ6VfaiXI.roa (hash: t0pnwqLcy2OtfvtukL13J3l3uzKc9VJEEKWY4aTDjS8=)
                          2: KTNKEz9B68iNvMGQpqql8Umd6Rg.roa (hash: 4c3WZli6HrqpP5XT4I7aYzD+h8A8/oNoRJSDq9oByhk=)
                          3: t53pRY0ZDmNDKfnfFQO1IiwWJO4.crl (hash: q6ggjFTXYRzszEg2jPuNPQAEnKctbWJRSJkM0lrlsCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t53pRY0ZDmNDKfnfFQO1IiwWJO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:59:76:a6:5b:fe:af:b7:99:4a:8f:67:cf:89:e5:70:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b79de9458d190e634329f9df1503b5222c1624ee
        Validity
            Not Before: Dec 26 07:01:46 2025 GMT
            Not After : Dec 27 07:01:46 2025 GMT
        Subject: CN=83b531df4997dcada3dfc92b9b4d4c8a53b4ee62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bd:39:c2:76:bf:fd:e9:58:73:f2:fa:e0:e0:
                    7e:40:50:0c:52:cd:20:37:53:c2:5b:2e:37:b2:7a:
                    d0:d3:ca:4b:be:31:54:08:fd:b8:ac:08:ec:6e:4f:
                    49:85:d3:8d:53:4a:57:b1:1d:c6:e4:4c:33:2e:d0:
                    ac:cb:d2:ac:11:c1:32:db:ac:b1:80:a7:38:ac:d6:
                    a1:d3:f7:f2:19:16:9a:8d:0c:6c:a3:39:86:1f:e3:
                    99:1f:77:cc:e7:69:44:27:a8:6d:03:f6:dd:8e:a7:
                    db:5b:eb:2b:a3:09:43:30:50:30:b5:40:a7:7a:df:
                    28:02:73:0e:51:9f:65:f7:d5:54:29:bc:1f:6a:d5:
                    d3:1f:4f:1b:83:61:58:39:0a:ce:00:75:9f:64:92:
                    63:df:06:8d:c9:47:09:af:ba:36:6b:41:e8:46:5e:
                    3b:ca:8e:89:eb:91:84:e4:2b:2c:0c:90:e4:81:95:
                    1a:46:b4:a9:01:54:a4:87:13:36:6b:a9:fe:c1:5e:
                    62:72:ed:7a:a3:3f:a7:19:d0:e0:a1:4c:16:cd:71:
                    6d:9c:78:78:6d:1e:86:28:1f:e2:65:83:9f:51:ac:
                    da:bb:e9:5c:39:6b:c7:96:6e:90:df:e7:ba:0d:77:
                    a5:01:fa:31:87:27:c8:bb:93:00:4b:49:52:54:c2:
                    f3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B5:31:DF:49:97:DC:AD:A3:DF:C9:2B:9B:4D:4C:8A:53:B4:EE:62
            X509v3 Authority Key Identifier:
                keyid:B7:9D:E9:45:8D:19:0E:63:43:29:F9:DF:15:03:B5:22:2C:16:24:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t53pRY0ZDmNDKfnfFQO1IiwWJO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:bc:a8:5e:4c:0b:ee:a6:35:c7:3d:a3:cc:7f:6b:a7:43:e7:
         d3:31:0c:98:1c:f4:49:b3:c9:aa:21:fb:d9:11:bb:0d:c5:cd:
         e2:6d:c9:83:92:68:5d:3f:6a:da:e5:e2:25:10:86:f6:9d:ed:
         69:2b:ab:a1:c1:0f:9c:ef:6a:ad:33:e8:60:26:af:e3:5e:40:
         60:ca:44:6a:ee:a8:c5:72:f4:ea:c3:33:2d:0e:36:fb:9c:0d:
         f8:ae:d9:d4:73:27:d7:56:78:df:15:f0:21:2c:bf:9a:8b:5b:
         b2:7d:03:ba:97:4a:6f:45:4d:d0:98:d2:e3:aa:ea:f9:2a:df:
         90:7d:31:f6:aa:01:30:1c:85:28:04:a4:63:69:a9:53:d2:8d:
         db:d1:f1:ee:25:d0:1b:5c:5d:0e:07:8d:77:83:52:5e:a0:ee:
         42:9e:c7:db:3f:fe:a9:a5:4d:5f:a8:83:35:6f:a7:8e:40:90:
         b5:da:5c:43:9a:60:5c:8e:9b:1b:2c:e5:59:24:01:55:4e:79:
         d7:e8:7c:db:b7:d9:33:4c:7e:e7:30:ca:42:89:67:20:cd:a2:
         d2:96:4e:f6:f1:5b:06:ba:87:db:73:60:3b:d2:38:00:c9:c2:
         ef:de:90:e5:66:84:66:11:a6:28:06:9f:fe:dd:be:12:81:7e:
         b1:fe:f2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 16:03:34 2025 by rpki-client