This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
File:                     E5YC73YK3ApbekhYPPv5tg_LcTA.mft (raw, json)
Hash identifier:          JiGf2siHg+3kdOMPJVUxTXtPBg3nUJ/kInAmXO9ZjnE=
Subject key identifier:   5F:85:D5:25:09:49:BE:8D:CE:57:55:E0:87:6C:F9:50:9E:C1:BB:B9
Authority key identifier: 13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30
Certificate issuer:       /CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130
Certificate serial:       019B722312AFD08A3EFC6B990C698C54714A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
Manifest number:          1017
Signing time:             Wed 31 Dec 2025 02:00:59 +0000
Manifest this update:     Wed 31 Dec 2025 02:00:59 +0000
Manifest next update:     Thu 01 Jan 2026 02:00:59 +0000
Files and hashes:         1: E5YC73YK3ApbekhYPPv5tg_LcTA.crl (hash: HBB3EKQ1eHdPW+phRYtB1YZ+zHMdsD8cfj1Kaoj/sBQ=)
                          2: p0QXsp4w5wGQ69G08TDsPy1mPRM.roa (hash: viuANp3uqgANQPYvajNcRDfYwh8Tr9E4g9FS/j0tP9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 31 Dec 2025 23:41:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:72:23:12:af:d0:8a:3e:fc:6b:99:0c:69:8c:54:71:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130
        Validity
            Not Before: Dec 31 02:00:59 2025 GMT
            Not After : Jan  1 02:00:59 2026 GMT
        Subject: CN=5f85d5250949be8dce5755e0876cf9509ec1bbb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:60:07:01:3a:87:13:5d:a0:4e:23:96:8b:cc:
                    d5:99:93:3e:11:75:ba:40:c1:3b:aa:b9:6e:f3:5d:
                    ae:1e:ea:bb:73:f5:bd:27:ad:02:bf:de:ad:e4:7b:
                    4c:68:19:c2:29:76:d1:d6:34:94:40:ba:72:11:61:
                    c8:f4:d7:87:e4:bc:97:d3:c6:b8:7d:30:6b:69:57:
                    84:59:35:74:e3:64:da:7f:b0:02:06:0a:2f:1c:f5:
                    03:08:a6:ce:81:0e:30:f1:d0:8b:ad:0c:d3:05:66:
                    8e:76:b8:95:e2:47:06:b8:20:42:ef:22:98:8f:de:
                    4f:63:82:25:fc:f2:78:fe:34:66:f9:a2:ea:64:c9:
                    dd:9d:45:77:6d:f6:e7:af:f0:0a:a4:58:e5:a9:67:
                    62:27:b3:2d:26:a0:b7:8e:4a:38:52:03:98:a2:ea:
                    01:05:14:5f:04:ee:d9:3f:d3:9e:2c:e6:70:aa:4c:
                    3b:99:6c:2b:12:a4:2c:d9:28:ab:4f:6a:90:54:32:
                    a3:d7:8a:b3:9b:87:d3:af:4f:59:51:0b:5d:2f:9a:
                    05:22:14:d3:b7:1a:46:10:c5:81:2a:8d:47:2b:80:
                    ac:e7:da:35:fb:37:15:c9:d9:33:ef:79:57:10:ba:
                    b7:d8:3a:4a:81:4a:48:f6:40:f0:a7:21:d1:f3:a6:
                    db:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:85:D5:25:09:49:BE:8D:CE:57:55:E0:87:6C:F9:50:9E:C1:BB:B9
            X509v3 Authority Key Identifier:
                keyid:13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:74:6d:78:74:78:3a:f8:d4:a4:72:76:7c:c4:4f:c6:22:7f:
         20:5c:72:43:76:58:75:3d:16:22:20:09:0e:ac:f9:96:b8:6c:
         43:22:0e:39:93:60:2a:6c:33:5a:86:20:0b:68:6c:61:ba:a4:
         44:09:b7:7d:b3:4f:15:2b:be:27:f9:0e:b7:43:11:3e:22:e5:
         d7:66:b6:67:58:ee:1f:7d:53:4c:82:a5:c7:87:b9:0a:9d:16:
         8f:a4:b3:0a:76:7c:40:35:90:00:2c:23:48:be:de:b2:97:5b:
         c7:37:b9:b3:03:02:83:6e:7e:0c:3f:7b:3d:8d:44:c1:dd:d7:
         d8:2a:c3:69:bd:c6:06:64:de:d8:21:ad:c5:b6:3e:93:ce:9f:
         ac:9a:b4:9f:4e:b9:8f:ec:50:79:79:7e:0f:17:1c:31:bb:4b:
         fd:f1:01:1c:ba:54:42:e4:4a:4c:30:90:83:3b:2b:cc:f8:3f:
         8e:1c:19:37:95:5d:58:89:9a:6c:5d:82:e4:78:af:42:52:4e:
         34:f9:0a:26:cb:f8:2a:0d:2a:86:63:9d:6f:2f:19:43:62:35:
         41:a4:ce:15:f7:76:09:5a:ea:5d:81:48:3f:99:5e:28:c6:54:
         59:b3:db:e3:5d:df:9b:88:34:d6:72:ed:ce:02:15:8e:a8:7f:
         ac:ff:22:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 03:46:51 2025 by rpki-client