This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.blw.moe/repo/AS51087/1/E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.mft
File:                     E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.mft (raw, json)
Hash identifier:          KVQLk1MwDKAvNMAMzPCmXEBeQvxWuswOkVswxyfJT6M=
Subject key identifier:   42:10:91:79:6E:31:C1:02:3D:D3:E6:18:A8:37:DE:F8:05:B6:FB:28
Authority key identifier: E9:25:E8:A9:A2:3F:7F:C5:05:DA:E6:DF:F6:AB:46:AE:47:DA:12:B5
Certificate issuer:       /CN=e925e8a9a23f7fc505dae6dff6ab46ae47da12b5
Certificate serial:       108D74D09F39167DA176B02E85DF797E0F272F41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6SXoqaI_f8UF2ubf9qtGrkfaErU.cer
Subject info access:      rsync://rpki.blw.moe/repo/AS51087/1/E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.mft
Manifest number:          03
Signing time:             Sat 20 Dec 2025 03:15:42 +0000
Manifest this update:     Sat 20 Dec 2025 03:10:42 +0000
Manifest next update:     Sun 21 Dec 2025 05:13:42 +0000
Files and hashes:         1: AS51087.asa (hash: X21QaHTZFlUThEZtGAbEPD7ITdq1PhcSgSjGdI55HPI=)
                          2: E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.crl (hash: E6rlalaKNDQWM1bsjvj5VLm9cWSEv9G7jjaWxSX/zKc=)
Validation:               OK
Signature path:           rsync://rpki.blw.moe/repo/AS51087/1/E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.crl
                          rsync://rpki.blw.moe/repo/AS51087/1/E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6SXoqaI_f8UF2ubf9qtGrkfaErU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 05:13:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:8d:74:d0:9f:39:16:7d:a1:76:b0:2e:85:df:79:7e:0f:27:2f:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e925e8a9a23f7fc505dae6dff6ab46ae47da12b5
        Validity
            Not Before: Dec 20 03:10:42 2025 GMT
            Not After : Dec 21 05:13:42 2025 GMT
        Subject: CN=421091796E31C1023DD3E618A837DEF805B6FB28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:52:d5:b6:9b:e0:cb:de:89:a2:99:c2:5b:e3:
                    0e:72:1c:25:7b:0a:37:c7:70:cc:de:24:a8:14:66:
                    f6:b6:8b:04:80:7c:80:56:d6:60:0e:c4:98:98:f2:
                    b8:2e:cd:ea:7c:3f:18:d6:f1:3b:21:56:ba:8d:eb:
                    2c:b1:a9:92:b5:e6:cd:c4:d5:b7:0b:4b:96:5c:bb:
                    b3:1b:13:a1:fa:10:d4:ba:a0:7b:ae:41:b9:65:06:
                    25:32:db:a9:c8:db:2c:3b:25:b7:fc:13:f8:0c:c9:
                    6b:4c:7b:5e:6b:22:9b:65:62:f0:62:03:45:c0:56:
                    53:d5:7b:7f:48:b0:ea:67:e8:37:f0:84:82:5f:12:
                    54:27:76:85:1e:cd:27:49:c4:6b:bf:51:1d:81:a9:
                    7f:44:03:fb:2e:f0:1f:65:45:20:a4:a7:48:af:86:
                    5c:24:38:eb:53:6e:57:1c:0f:8e:da:dc:d0:b8:1b:
                    e5:4f:e2:e1:e4:79:d2:d9:b5:51:d5:b7:44:90:6c:
                    b8:c9:b5:82:d3:21:0c:2a:16:4c:d0:b0:42:d6:5d:
                    c2:00:0f:8a:c1:f0:ee:36:9a:da:a2:9c:5a:ea:a0:
                    7f:7a:91:b9:3d:ce:51:66:48:4d:e6:e3:e1:db:16:
                    59:79:0c:9b:af:fb:a6:29:14:d8:b5:b0:c7:20:3a:
                    02:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:10:91:79:6E:31:C1:02:3D:D3:E6:18:A8:37:DE:F8:05:B6:FB:28
            X509v3 Authority Key Identifier:
                keyid:E9:25:E8:A9:A2:3F:7F:C5:05:DA:E6:DF:F6:AB:46:AE:47:DA:12:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.blw.moe/repo/AS51087/1/E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SXoqaI_f8UF2ubf9qtGrkfaErU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.blw.moe/repo/AS51087/1/E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:2e:35:c8:88:d4:ff:fd:5b:ac:48:13:10:31:dd:57:66:0b:
         b1:33:92:d2:27:0d:29:79:ee:67:db:a1:33:3e:a1:2f:ef:61:
         7f:49:8d:29:fd:9d:6a:c8:7c:94:5a:86:84:ea:15:1b:62:7d:
         40:e8:d4:8f:5f:f7:14:18:0f:cd:e6:bf:33:a9:cd:39:5f:22:
         d7:f4:5b:dc:30:63:47:17:51:5d:4c:6c:30:2d:56:ec:6b:64:
         51:d6:a1:5c:76:49:d3:35:52:7c:e3:9a:34:cf:2f:1f:de:f2:
         9f:8e:96:79:ad:c6:18:b5:2a:5f:69:2a:03:3f:6b:c1:10:a5:
         63:e8:57:d1:a7:ca:ce:0c:7b:12:1f:33:4b:77:39:92:29:39:
         3b:5d:bb:5a:96:11:93:d4:02:e4:06:c0:06:4e:28:cb:0e:84:
         7c:86:18:c9:23:f7:e3:76:41:9a:36:5a:24:e2:5a:70:0e:f9:
         5e:63:82:52:67:52:69:af:4e:0a:8b:c3:8b:38:bb:11:16:13:
         ab:f8:54:18:63:92:24:73:1b:90:79:3c:fe:2b:0b:f5:ce:fa:
         61:fc:3e:2c:c0:ad:44:95:e9:0b:a3:ed:e9:eb:01:03:be:f8:
         ab:19:d6:b6:3d:af:be:fc:c1:a8:e3:18:47:db:d1:44:06:b3:
         05:3f:99:20
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgIUEI100J85Fn2hdrAuhd95fg8nL0EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTkyNWU4YTlhMjNmN2ZjNTA1ZGFlNmRmZjZhYjQ2YWU0
N2RhMTJiNTAeFw0yNTEyMjAwMzEwNDJaFw0yNTEyMjEwNTEzNDJaMDMxMTAvBgNV
BAMTKDQyMTA5MTc5NkUzMUMxMDIzREQzRTYxOEE4MzdERUY4MDVCNkZCMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmUtW2m+DL3omimcJb4w5yHCV7
CjfHcMzeJKgUZva2iwSAfIBW1mAOxJiY8rguzep8PxjW8TshVrqN6yyxqZK15s3E
1bcLS5Zcu7MbE6H6ENS6oHuuQbllBiUy26nI2yw7Jbf8E/gMyWtMe15rIptlYvBi
A0XAVlPVe39IsOpn6DfwhIJfElQndoUezSdJxGu/UR2BqX9EA/su8B9lRSCkp0iv
hlwkOOtTblccD47a3NC4G+VP4uHkedLZtVHVt0SQbLjJtYLTIQwqFkzQsELWXcIA
D4rB8O42mtqinFrqoH96kbk9zlFmSE3m4+HbFll5DJuv+6YpFNi1sMcgOgKPAgMB
AAGjggHfMIIB2zAdBgNVHQ4EFgQUQhCReW4xwQI90+YYqDfe+AW2+ygwHwYDVR0j
BBgwFoAU6SXoqaI/f8UF2ubf9qtGrkfaErUwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraS5ibHcubW9lL3JlcG8vQVM1MTA4Ny8x
L0U5MjVFOEE5QTIzRjdGQzUwNURBRTZERkY2QUI0NkFFNDdEQTEyQjUuY3JsMGQG
CCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvREVGQVVMVC82U1hvcWFJX2Y4VUYydWJmOXF0R3JrZmFFclUu
Y2VyMGwGCCsGAQUFBwELBGAwXjBcBggrBgEFBQcwC4ZQcnN5bmM6Ly9ycGtpLmJs
dy5tb2UvcmVwby9BUzUxMDg3LzEvRTkyNUU4QTlBMjNGN0ZDNTA1REFFNkRGRjZB
QjQ2QUU0N0RBMTJCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw
BKACBQAwDQYJKoZIhvcNAQELBQADggEBAC0uNciI1P/9W6xIExAx3VdmC7EzktIn
DSl57mfboTM+oS/vYX9JjSn9nWrIfJRahoTqFRtifUDo1I9f9xQYD83mvzOpzTlf
Itf0W9wwY0cXUV1MbDAtVuxrZFHWoVx2SdM1UnzjmjTPLx/e8p+Olnmtxhi1Kl9p
KgM/a8EQpWPoV9Gnys4MexIfM0t3OZIpOTtdu1qWEZPUAuQGwAZOKMsOhHyGGMkj
9+N2QZo2WiTiWnAO+V5jglJnUmmvTgqLw4s4uxEWE6v4VBhjkiRzG5B5PP4rC/XO
+mH8PizArUSV6Quj7enrAQO++KsZ1rY9r778wajjGEfb0UQGswU/mSA=
-----END CERTIFICATE-----
Generated at Sat Dec 20 20:05:00 2025 by rpki-client