This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
File:                     E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft (raw, json)
Hash identifier:          qPtn2gSaE+FfcnN0sJ3w9nUBtL+2zh6SsijhUaa/mus=
Subject key identifier:   E5:E5:E6:26:F8:39:6E:87:6F:02:BD:03:2F:AA:8A:42:2F:5A:E4:B6
Authority key identifier: 13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47
Certificate issuer:       /CN=13764a52c85e07e33749743d23a5a24d096df147
Certificate serial:       019B330D1A169D6584C3959CD9C0FA6A951F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
Manifest number:          1782
Signing time:             Thu 18 Dec 2025 20:00:55 +0000
Manifest this update:     Thu 18 Dec 2025 20:00:55 +0000
Manifest next update:     Fri 19 Dec 2025 20:00:55 +0000
Files and hashes:         1: E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl (hash: a1nK7cvCxIm//BkH4davN5XXvq1Hq3bUhqFtaduOBUc=)
                          2: QCvbSuskCQwLxFQrUoOouHi3diY.roa (hash: sXGvHwha1X8v4xaWgUMHB+2ZrDbhHWTJfZknYl2gSe0=)
                          3: dWbs3GSCk40VoHUjYwOcmy7b-Zk.roa (hash: B1PLAXt5mt+DEIRs6h0vcjXyP629Yb4hYyTjCDjQz0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 20:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:33:0d:1a:16:9d:65:84:c3:95:9c:d9:c0:fa:6a:95:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13764a52c85e07e33749743d23a5a24d096df147
        Validity
            Not Before: Dec 18 20:00:55 2025 GMT
            Not After : Dec 19 20:00:55 2025 GMT
        Subject: CN=e5e5e626f8396e876f02bd032faa8a422f5ae4b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0f:57:50:a6:1e:3e:11:7c:eb:9e:46:23:e6:
                    05:82:06:65:0f:b4:c6:ed:52:8e:5b:06:a8:e8:94:
                    3c:14:cc:2f:fc:3d:32:5f:5a:82:53:97:b5:fd:7f:
                    36:9a:1f:7b:cf:7e:38:c3:66:f0:8a:7a:da:c3:65:
                    02:60:c1:e3:ad:f0:5e:04:3b:2c:96:81:00:fe:67:
                    69:d7:e5:6a:6b:ce:bd:1d:be:f9:14:86:9e:4e:6e:
                    01:9f:91:fb:55:e1:c1:93:65:8b:1c:c8:77:48:a7:
                    af:e8:38:f0:76:68:5a:7a:47:56:05:b7:d2:4c:bc:
                    23:14:40:cf:a2:9f:0c:0c:7a:60:a1:22:9f:44:30:
                    ee:99:90:95:83:e9:3b:f9:14:e0:2c:b1:c9:55:d6:
                    35:ce:97:ea:77:46:0b:b1:f8:20:67:e4:0d:71:c0:
                    0c:c4:b7:4c:4e:3c:b1:53:11:04:5b:8a:36:60:4f:
                    f7:8f:bd:15:e4:68:91:6e:f2:e8:5f:73:04:51:02:
                    4f:b0:01:8c:0e:8b:d8:e8:61:22:67:d4:69:24:7e:
                    ef:86:dc:8a:e6:dc:bb:42:95:b2:0e:b8:06:a4:0d:
                    b7:f9:74:fb:a0:81:83:f6:5d:1d:64:2d:03:28:64:
                    cf:48:0e:a9:8a:5c:89:0b:e5:d8:ec:1f:8b:4d:ea:
                    e9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E5:E6:26:F8:39:6E:87:6F:02:BD:03:2F:AA:8A:42:2F:5A:E4:B6
            X509v3 Authority Key Identifier:
                keyid:13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:45:ca:45:83:4d:5e:6b:30:7b:eb:5b:bd:20:b8:7b:6b:71:
         9d:24:bc:b8:62:a7:74:c7:68:fb:2e:5f:56:7c:5a:d2:b6:c8:
         06:50:ea:dd:55:54:52:fc:34:31:91:ef:f2:4e:e5:81:74:39:
         fc:30:0b:a1:08:0c:67:46:ee:bd:46:96:a0:5d:81:1d:25:89:
         8e:e9:6f:0e:3c:15:70:a1:1b:bb:24:bb:0b:bf:4b:03:d1:bc:
         d3:26:8e:46:78:c7:6a:89:7d:fa:e9:51:55:6b:98:c2:59:17:
         b8:6c:6c:73:47:da:3a:0e:d8:16:81:80:47:19:00:11:68:33:
         04:c0:8f:59:81:eb:d9:14:06:d9:bd:a3:cf:5f:a0:26:8b:e5:
         f0:b2:fb:05:5a:9f:96:d5:e8:94:52:e6:71:97:fd:2d:84:4f:
         b8:da:9a:ab:f5:40:10:26:c0:6c:26:72:f4:a2:be:ec:26:69:
         81:67:76:26:84:44:88:4d:40:6e:52:2d:ae:81:88:b4:4e:04:
         02:eb:c1:0f:1c:b4:a4:0b:2f:7c:20:c8:5a:a7:a8:0c:fb:eb:
         85:1e:10:2c:8f:80:a5:e3:da:a3:90:1a:c7:5c:ec:36:0d:4e:
         c0:65:5b:57:61:0c:bf:81:2d:88:05:f0:72:19:fc:75:f8:e9:
         1c:56:c1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 04:55:11 2025 by rpki-client