This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft
File:                     BpLF8WMTZTQlvEZxBYdeOil8_5s.mft (raw, json)
Hash identifier:          8OxpZgtipUpmsbfL0f00AE9XgVk0MejwHKaObYoM0nI=
Subject key identifier:   53:7E:14:62:74:92:5A:D8:90:85:F2:50:89:81:48:1E:62:A7:5D:20
Authority key identifier: 06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
Certificate issuer:       /CN=0692c5f16313653425bc467105875e3a297cff9b
Certificate serial:       019B3BA2924BE966F9D0C941C0DA0EB1FD0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft
Manifest number:          0A5E
Signing time:             Sat 20 Dec 2025 12:01:08 +0000
Manifest this update:     Sat 20 Dec 2025 12:01:08 +0000
Manifest next update:     Sun 21 Dec 2025 12:01:08 +0000
Files and hashes:         1: 6m4iBU1uV9OjtT-yI0kHDyi4gLg.roa (hash: N5jGzrk7sta0axX9QvqTjHgaFwV4arIObuPbt2KJNnM=)
                          2: 7tTZk2wCmakp5M5T1YuiU8TuWxw.roa (hash: 8JeqZuwRL8gNhmaq+aEKdQ907Eg7DEpF3/RheOxRpLQ=)
                          3: 84TrX0qs1Y4yZ95W-q51Grc9rH0.roa (hash: sAIYXtIgwoe7qa6SiMh9Mq7V0vDYEf6NPqM5EjqisbM=)
                          4: BpLF8WMTZTQlvEZxBYdeOil8_5s.crl (hash: PN9ba/92SeNaiT1+reIxE+j5UwLGRlQ0sXa4eKfEQHE=)
                          5: DH2KmHptf0XCrxVYDl8SWJ6n_OU.roa (hash: 1p3/Uw0Hzg9UQAF7EIOu+m40aaRU5MBeT7UYxTAJl5M=)
                          6: I0lZ-wnGmJHIeWk4JSccdYLGI-0.roa (hash: LnR75ICh/pu9YTgE61/TkYN/sNwF0ls7eWnRXUdZNeI=)
                          7: Qgkw5GtNRcsOFSShf-z0xF_tI6I.roa (hash: mZ0NWqp/jNCXFtNZo5WbQ6xy8wKTYFTecNdM8OwQcds=)
                          8: ZuApx1lJ6PZTaa1PSofxEZnETW8.roa (hash: i6ZjtL8jp8h1GWVt1Wew7Qku5Nc6QBUB0tBwDCSGXU8=)
                          9: _6aivCsAWH-kqctPZhR5amDxfsA.roa (hash: nWAJSN6GSWrgvbg0VuNNKDg0OVs+juuAy8NmC7uqE34=)
                          10: acXjyXZbDzNfFna5ZWRHDz6K5YE.roa (hash: sm9lkJZIavBC2tJvS1A50JKwZEAycxeog0lweVtHcXM=)
                          11: e31KG_8dad-8ny4PFtbT297H7Sw.roa (hash: GQmunQnH91NAJBx06ug5Vq/w7qs39J3e7sMnlc2OutE=)
                          12: ej-rBCJmnu-miAXBE5PIqlt8TFo.roa (hash: Z10wztRjBSEGOvVc7tXz4TILdxZp89J4+J08gFrTvVU=)
                          13: gcpaoxI47uAbfYR_M1Dl9LctMNk.roa (hash: hG0WyItsQE7UjKos3HOIuobdbMTAqgbbv6pzl/cN/6g=)
                          14: pSbX-PyBbCbb6sLnIu1jAWYX5ak.roa (hash: GoC5K97gl9mRDyYEwiwyowaJojmTfgrX+bjBIRbHQpg=)
                          15: xe-KS40JXwA4DSnnilL2aYekU18.roa (hash: trUq9aYHMLBwRD59FTvYVzHcchsIZi2f2vJplQh7+rM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 09:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3b:a2:92:4b:e9:66:f9:d0:c9:41:c0:da:0e:b1:fd:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0692c5f16313653425bc467105875e3a297cff9b
        Validity
            Not Before: Dec 20 12:01:08 2025 GMT
            Not After : Dec 21 12:01:08 2025 GMT
        Subject: CN=537e146274925ad89085f2508981481e62a75d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:79:ad:c6:63:5c:84:5e:b5:33:61:90:30:79:
                    32:d7:64:30:94:e6:0f:d4:74:0c:b1:19:ff:e5:58:
                    ed:ed:e3:3b:86:2e:54:ba:a2:53:ae:2d:ae:64:47:
                    4b:1f:40:66:1c:dd:bb:53:b6:4c:8a:66:f7:b4:7e:
                    9a:88:83:c3:09:ec:6c:b1:56:61:fd:c6:1c:4c:14:
                    0d:09:cb:f6:70:39:7d:ec:4f:58:b0:70:0b:0e:37:
                    7e:6a:fd:02:df:2d:ae:30:0d:5e:75:58:fa:06:c7:
                    23:ee:fe:2d:da:42:61:84:04:92:da:fd:42:d9:98:
                    69:01:8b:b3:84:95:7b:c1:96:9d:ae:2e:0c:30:49:
                    2b:c4:eb:5a:a1:72:5e:9f:7c:07:87:47:09:95:51:
                    c2:01:4c:2c:ef:84:0a:2d:e8:bc:a3:31:6c:eb:8e:
                    77:c7:ba:0a:6b:61:4a:4d:ea:9c:0d:69:6e:a1:58:
                    52:38:71:7e:c1:66:60:7a:06:4b:74:55:77:4b:22:
                    b0:a4:13:6a:76:ee:0c:3a:5d:13:15:18:4e:e1:9a:
                    2d:f9:da:c2:da:f1:fc:6a:49:d0:38:1f:bb:3d:16:
                    bd:36:b2:0f:39:2f:91:02:80:c9:85:fb:ca:05:45:
                    61:3f:3f:99:9f:33:eb:2a:3c:ff:8f:6f:f0:9a:fa:
                    7e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:7E:14:62:74:92:5A:D8:90:85:F2:50:89:81:48:1E:62:A7:5D:20
            X509v3 Authority Key Identifier:
                keyid:06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:45:94:98:8e:c5:6e:2d:ad:b8:62:aa:9d:12:8a:c5:9d:20:
         13:7e:d4:f8:a6:55:fa:5f:a4:88:80:6a:ab:8a:86:b0:19:01:
         a1:50:fb:07:ca:ef:a2:b6:bd:65:10:c9:ab:eb:f5:5b:bf:63:
         21:24:cf:7e:62:8b:e7:38:53:b8:4a:85:cc:e9:97:32:72:17:
         d9:ee:53:83:df:77:e9:41:99:61:89:aa:78:a8:e9:f9:17:e4:
         c2:4b:ee:5d:4a:3e:2d:f4:85:37:92:bb:5c:77:9b:0c:6a:88:
         a9:14:69:a9:00:1a:9e:a0:f1:36:9a:e3:03:ec:6c:07:e2:02:
         02:34:c2:f4:56:aa:5e:02:1f:a6:d5:8e:33:6c:a3:5d:b4:90:
         df:e7:53:a7:29:0f:ac:4c:e2:2c:89:a8:07:d3:97:3e:6e:f3:
         6f:2a:9d:91:81:74:c4:e4:6b:f3:27:3a:71:8e:4e:a6:5e:97:
         52:6a:c4:b0:bc:9d:70:4e:8d:21:f9:ac:26:e5:be:59:fa:84:
         da:21:bd:07:d5:8e:b0:5e:5e:98:0f:5d:50:47:57:b4:96:e8:
         a8:40:5d:46:45:27:c3:de:ac:fc:68:f4:3e:e4:d3:99:4a:d8:
         bc:02:ef:51:81:43:72:fa:7d:2f:51:4f:1a:5a:7d:ea:e2:d8:
         4c:7e:aa:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 15:14:01 2025 by rpki-client