This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
File:                     b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft (raw, json)
Hash identifier:          miWpBi7+husv80J1+3Oll2ci95hBLOlJpNqH1kgMjSg=
Subject key identifier:   FA:70:F9:6A:E4:32:B3:5D:C0:9A:FD:36:DF:D6:DD:59:2B:7A:80:DC
Authority key identifier: 6F:93:06:98:73:3B:AD:33:C0:81:71:9C:7B:68:BD:19:72:3A:5A:77
Certificate issuer:       /CN=6f930698733bad33c081719c7b68bd19723a5a77
Certificate serial:       019B378EA1BC14842AE1A8A1A7709F3A3496
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
Manifest number:          0A68
Signing time:             Fri 19 Dec 2025 17:00:52 +0000
Manifest this update:     Fri 19 Dec 2025 17:00:52 +0000
Manifest next update:     Sat 20 Dec 2025 17:00:52 +0000
Files and hashes:         1: b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl (hash: JNxgovU8wUPumk9v0TvgboWQymGzGPYEAwtWqmQkDWk=)
                          2: eC2MphkCG1tQ_l_Eef-rvB7MGJg.roa (hash: oipT2bxgVMIIjaLCh5p0XGkacdhDbfRQ9fsmYqX5jVM=)
                          3: qgdTTthzOjRLa7QV75nMnKkp5w4.roa (hash: F0+rz8Lam1NmL6Yk8x5fjqey+/+WuThLB5gD8xHNDd0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:8e:a1:bc:14:84:2a:e1:a8:a1:a7:70:9f:3a:34:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f930698733bad33c081719c7b68bd19723a5a77
        Validity
            Not Before: Dec 19 17:00:52 2025 GMT
            Not After : Dec 20 17:00:52 2025 GMT
        Subject: CN=fa70f96ae432b35dc09afd36dfd6dd592b7a80dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6a:e8:12:37:6a:09:2c:f6:1a:2a:2e:b8:73:
                    07:0c:11:c9:30:e4:be:aa:ba:30:50:d8:6b:0b:98:
                    63:b7:af:41:92:e1:0c:7d:4a:e1:78:6e:c1:62:64:
                    b8:bd:05:fb:38:8e:11:86:de:69:e3:08:da:eb:0f:
                    34:9a:6f:31:56:c1:73:9d:67:4a:20:84:27:fa:99:
                    a6:00:61:f5:c0:86:ba:7e:a5:22:40:08:a2:39:2e:
                    3a:48:f4:73:11:6c:80:74:b1:63:1a:f8:5f:97:84:
                    ba:a2:99:61:ff:11:af:f6:26:42:bc:18:8d:c2:71:
                    2b:2c:24:98:aa:69:66:8a:9b:28:9f:95:64:f6:74:
                    b5:19:d1:e0:f4:e8:a9:ec:13:bb:2a:9d:58:21:70:
                    fd:27:10:c1:72:83:57:be:ba:88:a9:f8:1a:9f:cb:
                    81:22:37:bf:d9:e3:ba:d0:3c:d0:14:88:c0:53:82:
                    fd:98:99:21:08:fc:13:a9:1c:a7:b2:f4:71:d1:b8:
                    c2:d6:74:10:6d:54:f6:20:5d:83:20:0a:84:51:ab:
                    a2:fc:55:36:82:6f:30:d6:cd:78:86:c9:58:23:65:
                    ad:7d:8f:c6:1f:d3:d7:e5:94:72:53:59:48:d0:af:
                    8f:2c:ab:2b:e2:10:a9:c4:93:ea:46:4e:80:e7:77:
                    d1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:70:F9:6A:E4:32:B3:5D:C0:9A:FD:36:DF:D6:DD:59:2B:7A:80:DC
            X509v3 Authority Key Identifier:
                keyid:6F:93:06:98:73:3B:AD:33:C0:81:71:9C:7B:68:BD:19:72:3A:5A:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:d6:1f:b7:1c:70:bf:37:4f:14:b0:ae:86:7f:46:cd:32:d9:
         14:22:ca:e1:c1:40:18:21:c8:78:9b:c0:d5:4f:c3:4f:cb:bf:
         4a:be:8a:0b:5f:04:2a:11:19:3b:08:07:a9:55:0a:45:1c:0c:
         43:d8:96:86:d4:0e:63:62:d5:11:f6:6b:ab:c8:cc:e6:e6:db:
         02:98:8a:65:b9:1e:9e:6a:a1:f6:22:85:2c:bc:fe:07:50:bc:
         aa:81:81:1c:3f:9d:83:c9:13:66:9a:92:31:47:7c:9f:45:53:
         58:98:ca:5d:0e:c9:6a:12:a1:f5:04:7f:01:e9:bb:c6:b0:87:
         2b:a6:37:a4:ff:d8:f8:ea:13:11:b1:12:5b:4d:c4:83:75:88:
         b9:c0:39:31:e2:25:3c:81:54:f8:32:b3:12:33:b3:96:37:5e:
         5b:18:6a:ae:2b:c4:70:51:d2:a7:49:0b:03:75:1f:5b:33:6f:
         9b:75:f3:d0:77:7f:66:b3:77:ee:26:53:d9:1d:05:cd:0d:75:
         ac:d6:0b:99:f4:6f:52:a8:ef:df:d3:63:a7:ae:32:a8:8a:df:
         56:76:65:fc:6b:96:f1:d8:c0:65:13:ed:a5:e6:5f:52:72:d7:
         96:8b:ce:80:e2:94:d8:94:ee:30:13:15:ef:f3:77:a1:c1:60:
         da:ce:13:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:49:28 2025 by rpki-client