This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
File:                     5jGwgNTqb9Bham5wHHyBXW_4fAA.mft (raw, json)
Hash identifier:          yDUQ9gpC9HzX/p6TKO9B2eBpgUKIsp7Eu+nii0NEp+E=
Subject key identifier:   5E:B6:2B:8C:85:87:5D:06:DE:F1:E8:06:2C:0A:59:B9:44:A4:E7:6C
Authority key identifier: E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00
Certificate issuer:       /CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
Certificate serial:       019B69C510817A0A4052B41F017FC50E2619
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
Manifest number:          096D
Signing time:             Mon 29 Dec 2025 11:01:20 +0000
Manifest this update:     Mon 29 Dec 2025 11:01:20 +0000
Manifest next update:     Tue 30 Dec 2025 11:01:20 +0000
Files and hashes:         1: 36JMsnCTZ3dwGq1Ka9Cuddl862c.roa (hash: rxGSLpm5OrdXLa8c65qMAKh6CEoXBb/8Ki3iPQlCtp4=)
                          2: 5jGwgNTqb9Bham5wHHyBXW_4fAA.crl (hash: F2sFT73WZszecK8qTviH+yjUxBvr8dOUR1vrSiMMo4Y=)
                          3: 9qt_AxGF-iefTgTj9gP8JXPuDuE.roa (hash: dzLOUtBgexrBsG0CJE0tpFxhbM0NWc5a6JMvh5ssT/c=)
                          4: Gx61TcX_jg_POohtFk3y578RK3s.roa (hash: cdRA7EEe8Z56qv2cSGc980wpIss1qxURTPJYCEyx71I=)
                          5: LzZkWrTJKB_nRLE2CHcTnYb72Ak.roa (hash: bDGvw/cq/31+ME9ha7pMFsDpy5ZNw/W2wJW0IhefjPs=)
                          6: RnK86UmIAp-Vf8TMZLM03XjM-aE.roa (hash: tadpJcfzMaehdbJngFohNz6vat40laG6LyK588h2pfQ=)
                          7: dVeJBp__tKyi8xuuXGDrr7L9rpA.roa (hash: pavqcGgA7qNjgp+uyhIxt8IASt/7r1r3IBQvQqb7v/c=)
                          8: ekNWlzZ0g1EVh_32gLA32WWdXxs.roa (hash: FsBbx+3eH0FsXCQjISiPgnGqORWsFsAuIIMB8HdC5bE=)
                          9: mJWGLM8T_1at8gmBKfytV80xCsY.roa (hash: nBO32lhSvSUXg7lebbqssrsekQToM8cKNZVTOaKe1bQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Dec 2025 10:15:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:69:c5:10:81:7a:0a:40:52:b4:1f:01:7f:c5:0e:26:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
        Validity
            Not Before: Dec 29 11:01:20 2025 GMT
            Not After : Dec 30 11:01:20 2025 GMT
        Subject: CN=5eb62b8c85875d06def1e8062c0a59b944a4e76c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:22:e2:71:a3:57:bb:2e:01:2d:23:aa:fc:19:
                    2d:4a:89:c2:e0:87:01:9c:cf:1c:d6:bd:a3:18:9a:
                    60:af:2e:b3:1d:6a:d1:70:5b:7e:a0:4c:df:10:7c:
                    8f:60:65:5a:5c:55:1b:eb:9e:6f:90:f3:bd:a8:96:
                    f8:97:06:31:b5:42:0f:62:0c:a0:95:22:e6:0c:3a:
                    11:79:2e:a7:fc:d7:d0:d3:ac:83:d7:4e:7b:5f:dd:
                    5f:25:04:2d:d4:18:3b:bf:2c:ca:09:7b:23:72:77:
                    72:42:8d:45:c9:5b:5b:76:ee:94:fa:78:91:e2:f4:
                    55:45:b2:52:5f:01:d3:39:99:91:2f:27:20:fc:94:
                    37:16:3d:0f:f8:ec:d3:fb:75:d4:f7:e2:34:5b:05:
                    b5:7c:26:50:f3:4e:be:93:f8:c2:bb:7f:76:51:bb:
                    ae:37:8a:4d:f0:4c:c5:6e:46:db:0d:84:ec:31:19:
                    54:ad:88:ed:86:89:ad:f5:ef:03:f7:62:a5:85:93:
                    e6:15:49:2c:0d:91:ec:df:ec:63:e2:cc:80:8b:28:
                    73:c2:88:b5:6c:e4:5a:9b:8c:30:ff:60:e8:ed:1c:
                    62:a2:bb:8a:dd:b6:bf:79:c2:33:d2:1f:ae:4d:21:
                    d5:33:d5:bc:2c:79:a7:2a:80:02:39:bc:16:33:f5:
                    17:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B6:2B:8C:85:87:5D:06:DE:F1:E8:06:2C:0A:59:B9:44:A4:E7:6C
            X509v3 Authority Key Identifier:
                keyid:E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:41:64:92:43:a3:84:45:c4:90:ea:d2:77:79:33:a8:82:b6:
         ab:e7:4c:20:f3:1d:4c:e8:88:02:32:ec:f8:0f:fa:88:0e:17:
         e7:bb:4c:40:56:df:49:9c:c2:3a:27:eb:70:75:78:55:30:e9:
         c1:7d:24:e4:02:93:4c:72:01:52:10:64:c0:75:57:9b:9e:7c:
         d3:49:fb:77:b5:22:a8:51:19:e7:5d:21:67:11:93:6b:53:08:
         3d:37:2c:80:62:bb:31:e9:13:c5:05:90:8a:8c:ba:89:25:b3:
         70:38:2d:1a:24:b6:24:77:78:26:ac:fe:0d:93:ea:03:c0:18:
         52:cc:bb:cf:22:25:fe:5e:6a:0d:fe:a7:09:8a:d0:41:4d:db:
         5d:b2:17:c8:f5:45:ae:bf:6b:d1:22:11:76:6c:64:be:b7:32:
         43:fd:a6:41:af:24:0a:4f:92:e0:0c:2c:76:dd:11:bf:d5:ba:
         a5:ee:fd:7b:ee:a4:4e:b5:c0:b5:c3:e0:f9:41:6e:bf:51:f0:
         41:c7:11:05:c9:f9:50:f9:a2:6b:a6:fe:7a:ad:26:b1:48:0e:
         a5:ba:0b:94:e8:75:99:34:d7:fc:93:77:be:ea:80:e5:dd:d3:
         94:39:e8:ca:ee:07:cc:08:cd:fa:37:97:54:f5:22:c8:54:dd:
         fe:23:43:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtpxRCBegpAUrQfAX/FDiYZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MzFiMDgwZDRlYTZmZDA2MTZhNmU3MDFjN2M4MTVkNmZm
ODdjMDAwHhcNMjUxMjI5MTEwMTIwWhcNMjUxMjMwMTEwMTIwWjAzMTEwLwYDVQQD
Eyg1ZWI2MmI4Yzg1ODc1ZDA2ZGVmMWU4MDYyYzBhNTliOTQ0YTRlNzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CLicaNXuy4BLSOq/BktSonC4IcB
nM8c1r2jGJpgry6zHWrRcFt+oEzfEHyPYGVaXFUb655vkPO9qJb4lwYxtUIPYgyg
lSLmDDoReS6n/NfQ06yD1057X91fJQQt1Bg7vyzKCXsjcndyQo1FyVtbdu6U+niR
4vRVRbJSXwHTOZmRLycg/JQ3Fj0P+OzT+3XU9+I0WwW1fCZQ806+k/jCu392Ubuu
N4pN8EzFbkbbDYTsMRlUrYjthomt9e8D92KlhZPmFUksDZHs3+xj4syAiyhzwoi1
bORam4ww/2Do7RxioruK3ba/ecIz0h+uTSHVM9W8LHmnKoACObwWM/UXwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF62K4yFh10G3vHoBiwKWblEpOdsMB8GA1UdIwQY
MBaAFOYxsIDU6m/QYWpucBx8gV1v+HwAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWpHd2dOVHFiOUJoYW01d0hIeUJYV180ZkFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9kY2RhZTYtZDY5NS00MjY2LWJhOWIt
OTNiM2EzNjk2ZDk2LzEvNWpHd2dOVHFiOUJoYW01d0hIeUJYV180ZkFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9kY2RhZTYtZDY5NS00MjY2LWJhOWItOTNiM2EzNjk2ZDk2
LzEvNWpHd2dOVHFiOUJoYW01d0hIeUJYV180ZkFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVUFkkkOj
hEXEkOrSd3kzqIK2q+dMIPMdTOiIAjLs+A/6iA4X57tMQFbfSZzCOifrcHV4VTDp
wX0k5AKTTHIBUhBkwHVXm55800n7d7UiqFEZ510hZxGTa1MIPTcsgGK7MekTxQWQ
ioy6iSWzcDgtGiS2JHd4Jqz+DZPqA8AYUsy7zyIl/l5qDf6nCYrQQU3bXbIXyPVF
rr9r0SIRdmxkvrcyQ/2mQa8kCk+S4Awsdt0Rv9W6pe79e+6kTrXAtcPg+UFuv1Hw
QccRBcn5UPmia6b+eq0msUgOpboLlOh1mTTX/JN3vuqA5d3TlDnoyu4HzAjN+jeX
VPUiyFTd/iNDlQ==
-----END CERTIFICATE-----
Generated at Mon Dec 29 13:23:25 2025 by rpki-client