This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
File:                     5BqMQuzom1-_whDce1VMcupPNUQ.mft (raw, json)
Hash identifier:          +MLt4PixhlK6/ltJzqaZRSdJc49GpRua2DbzspabXeE=
Subject key identifier:   12:00:6D:E8:E0:15:7E:CD:B4:70:B1:9B:5C:02:E8:43:00:C7:20:4B
Authority key identifier: E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
Certificate issuer:       /CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Certificate serial:       019B5D53DA39260179F0A43FB760A4FA2099
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
Manifest number:          1799
Signing time:             Sat 27 Dec 2025 01:02:15 +0000
Manifest this update:     Sat 27 Dec 2025 01:02:15 +0000
Manifest next update:     Sun 28 Dec 2025 01:02:15 +0000
Files and hashes:         1: 5BqMQuzom1-_whDce1VMcupPNUQ.crl (hash: HY+a/Z6su5WAbBS2OFltT4GWJIsLxYP47jd5M8OkK60=)
                          2: HK-o-7NfDvPjOf99JzJL3ciySc8.roa (hash: DfwAR936JyRgw/jNJGOSmvyuLlvSXJeaVAPRyL2njSw=)
                          3: HMayfNdgxzPgTIksbOz-A7oqLCk.roa (hash: 3k2Q130datVFrgfiHucYcHqZP3tKnpk1Z1BK3tttEV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5d:53:da:39:26:01:79:f0:a4:3f:b7:60:a4:fa:20:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
        Validity
            Not Before: Dec 27 01:02:15 2025 GMT
            Not After : Dec 28 01:02:15 2025 GMT
        Subject: CN=12006de8e0157ecdb470b19b5c02e84300c7204b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0e:a5:21:37:08:ac:2b:f1:1b:7d:c7:09:29:
                    24:5f:40:fd:6c:23:28:82:30:31:95:c6:6d:61:d4:
                    32:d1:37:87:b6:43:8f:88:1c:a9:4d:ed:76:94:c1:
                    6f:d2:d0:09:cb:12:2c:5e:81:92:8d:96:d4:9c:ca:
                    48:b6:3b:37:7e:fc:9a:0e:a5:89:f7:b6:2a:73:4a:
                    9b:2e:84:d4:cc:22:29:25:05:f4:89:8e:b0:ff:78:
                    48:40:55:7f:0f:37:c6:c6:46:05:cb:5d:c0:c6:a2:
                    6b:70:fe:67:b2:d3:bd:aa:b6:e7:2f:c2:94:ba:81:
                    e1:ce:49:7c:c9:ef:d9:f2:b9:fc:ce:c7:ab:19:63:
                    79:31:39:68:f0:56:77:e8:f1:91:b0:f4:d2:74:a6:
                    cc:a9:43:6d:3a:c3:14:d0:ae:38:e9:3a:bb:a6:7a:
                    47:5f:32:c0:e8:1e:5b:f4:81:06:4f:ef:b8:a1:25:
                    96:30:cd:5e:94:96:69:b8:12:01:6d:7d:65:5f:42:
                    fc:4b:4f:4e:01:fb:53:6a:17:c6:8d:41:6a:a1:d5:
                    58:da:7e:1c:c5:bf:b5:40:df:40:1a:64:a2:63:f7:
                    cd:e4:26:28:8a:03:85:e3:39:43:1d:e7:a5:0d:5d:
                    ee:2b:95:33:87:30:dd:09:47:2a:8c:ec:a8:ea:99:
                    1e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:00:6D:E8:E0:15:7E:CD:B4:70:B1:9B:5C:02:E8:43:00:C7:20:4B
            X509v3 Authority Key Identifier:
                keyid:E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:d8:33:60:5c:d3:01:32:47:cf:17:36:0e:49:91:52:14:df:
         73:41:90:46:3c:c6:8d:64:75:1e:21:c2:81:06:2f:ad:85:54:
         fe:f0:d3:dd:bd:7c:66:f9:53:d6:e6:85:aa:a6:7e:50:cb:d9:
         db:7b:ed:d0:7a:49:eb:de:cb:c0:13:59:7f:29:63:1a:64:d0:
         5d:fa:ac:e0:5d:65:7c:e0:5e:03:72:fd:68:2b:a1:4a:3d:c8:
         87:97:08:88:76:c2:ad:2b:5d:fe:31:5f:06:0a:9b:a6:5a:82:
         a6:a5:2a:2e:da:0b:55:8e:88:0e:ac:74:8a:18:21:ae:a0:41:
         af:e6:de:b6:e9:08:da:3a:6d:f8:f7:37:d6:95:d3:5e:6d:fb:
         12:06:22:b6:f3:21:cc:c8:e3:e1:b9:ac:be:c3:38:00:46:cc:
         e2:ef:9c:be:a1:53:63:97:92:60:96:29:df:70:73:de:dc:ac:
         de:32:90:35:00:c0:b6:c3:01:e7:ac:c2:c5:c7:47:3b:94:ff:
         7a:8e:53:9f:e0:5c:48:b4:3f:d2:37:24:76:bc:9d:7f:c8:b3:
         54:d7:39:dd:0e:29:98:cf:41:a4:c3:eb:0d:f9:ea:61:9a:48:
         9c:8b:e2:bb:ba:56:47:49:b3:9c:be:57:1b:98:2b:7a:6e:b7:
         d1:ef:ed:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 04:51:25 2025 by rpki-client