This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
File:                     5jGwgNTqb9Bham5wHHyBXW_4fAA.mft (raw, json)
Hash identifier:          9Jfoe3hGR7GNaD57WmJr2dICX3TMF63evaxOQZ3kvNA=
Subject key identifier:   2A:61:B5:01:46:7F:6D:57:8E:8B:86:BD:41:C7:84:8F:16:AB:8F:74
Authority key identifier: E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00
Certificate issuer:       /CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
Certificate serial:       019B3F7F11E01423DB3703C0A2A86136B18D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
Manifest number:          0957
Signing time:             Sun 21 Dec 2025 06:00:50 +0000
Manifest this update:     Sun 21 Dec 2025 06:00:50 +0000
Manifest next update:     Mon 22 Dec 2025 06:00:50 +0000
Files and hashes:         1: 36JMsnCTZ3dwGq1Ka9Cuddl862c.roa (hash: rxGSLpm5OrdXLa8c65qMAKh6CEoXBb/8Ki3iPQlCtp4=)
                          2: 5jGwgNTqb9Bham5wHHyBXW_4fAA.crl (hash: yNduLhvVLaHV87SR+t5q5U0x/G6FVFxyNX2JEn9XV5I=)
                          3: 9qt_AxGF-iefTgTj9gP8JXPuDuE.roa (hash: dzLOUtBgexrBsG0CJE0tpFxhbM0NWc5a6JMvh5ssT/c=)
                          4: Gx61TcX_jg_POohtFk3y578RK3s.roa (hash: cdRA7EEe8Z56qv2cSGc980wpIss1qxURTPJYCEyx71I=)
                          5: LzZkWrTJKB_nRLE2CHcTnYb72Ak.roa (hash: bDGvw/cq/31+ME9ha7pMFsDpy5ZNw/W2wJW0IhefjPs=)
                          6: RnK86UmIAp-Vf8TMZLM03XjM-aE.roa (hash: tadpJcfzMaehdbJngFohNz6vat40laG6LyK588h2pfQ=)
                          7: dVeJBp__tKyi8xuuXGDrr7L9rpA.roa (hash: pavqcGgA7qNjgp+uyhIxt8IASt/7r1r3IBQvQqb7v/c=)
                          8: mJWGLM8T_1at8gmBKfytV80xCsY.roa (hash: nBO32lhSvSUXg7lebbqssrsekQToM8cKNZVTOaKe1bQ=)
                          9: pRF3BTbDYUa_ffQyg-2yeeGtUgc.roa (hash: JqgKF3wT1++nGHiF2NoLadUCTtZZ7YlbhSHmVbpxh20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3f:7f:11:e0:14:23:db:37:03:c0:a2:a8:61:36:b1:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
        Validity
            Not Before: Dec 21 06:00:50 2025 GMT
            Not After : Dec 22 06:00:50 2025 GMT
        Subject: CN=2a61b501467f6d578e8b86bd41c7848f16ab8f74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e3:5d:63:b3:9a:6f:c5:22:6b:38:07:7f:38:
                    07:2d:c9:0c:e7:b4:37:e5:ec:98:da:d2:62:c5:39:
                    11:d2:c8:86:12:9d:d2:74:e0:ae:f8:d8:58:21:ef:
                    e6:b9:c5:c6:0c:ff:28:1c:98:d8:43:44:48:20:51:
                    fb:0f:c5:7f:c4:32:2c:2b:aa:37:3b:94:ad:f3:2b:
                    a4:ac:dc:0e:e0:a2:22:44:1c:33:06:16:a3:b9:1b:
                    39:9a:e2:83:0e:30:46:6b:03:77:a7:d7:06:08:38:
                    84:65:3e:99:be:8a:ff:2b:82:56:ee:0b:94:8c:df:
                    23:d9:4f:7f:e9:4d:2d:cb:0f:10:77:c0:e2:b2:22:
                    31:58:93:6a:ed:7d:b3:64:96:22:97:3a:93:df:e4:
                    0b:03:c0:7a:33:b3:5c:9c:c5:0d:f5:42:f6:bc:66:
                    46:15:0b:bc:73:fd:bf:f4:d7:95:e7:4d:a8:39:d4:
                    e8:4c:cc:fb:e4:05:99:b6:ac:df:a3:5c:a0:09:81:
                    3d:cd:d5:ea:8a:79:88:a6:ea:6c:48:d0:4a:34:c1:
                    7f:78:f7:fa:ac:94:d5:0a:88:91:22:35:6d:17:f7:
                    7f:80:f9:91:d4:cc:53:84:b9:b2:4b:20:4b:d2:2c:
                    42:6d:54:0b:e8:b1:b4:30:e6:2c:bd:d6:10:25:fc:
                    d8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:61:B5:01:46:7F:6D:57:8E:8B:86:BD:41:C7:84:8F:16:AB:8F:74
            X509v3 Authority Key Identifier:
                keyid:E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:29:08:f7:ca:a0:73:fc:eb:36:32:a1:77:c0:e1:2c:c5:5c:
         fa:25:3b:f6:81:7c:79:e8:1c:20:61:86:9a:79:a7:6b:bd:e9:
         f4:88:ad:52:1e:b4:04:94:24:48:b6:48:6e:e5:1a:ec:2e:84:
         61:6f:5e:e5:39:58:c6:96:f0:b5:c7:9a:d3:90:7f:40:51:dc:
         60:5a:62:d7:c6:4e:25:6f:1d:31:a5:3b:52:09:4a:9d:27:8d:
         71:33:58:13:2f:13:b0:ff:58:ff:82:3b:20:58:b2:4b:96:55:
         9a:ff:cd:6c:5b:66:b2:7b:78:dc:9f:be:50:95:c7:83:e9:c6:
         46:aa:83:2e:e3:b3:7d:f1:80:1e:f0:31:a2:df:2e:0b:ee:b2:
         d0:d6:29:de:35:ec:66:69:6d:10:96:b6:a0:75:b6:b9:39:d0:
         61:ef:6b:fa:cd:c3:31:e2:92:6f:65:eb:a2:b3:d4:1f:ce:73:
         c7:5a:cb:ac:e2:b6:64:62:36:50:f2:f1:c7:9a:52:a3:df:00:
         8f:f7:1e:42:36:5a:9c:8c:9d:c7:25:a2:98:19:42:5a:3d:bb:
         71:85:bf:82:e7:76:5a:35:24:dd:8e:5c:50:c2:e3:d5:99:eb:
         8a:8e:93:2a:81:74:15:d9:67:14:91:c6:a3:1a:d8:62:32:04:
         d9:c7:09:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs/fxHgFCPbNwPAoqhhNrGNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MzFiMDgwZDRlYTZmZDA2MTZhNmU3MDFjN2M4MTVkNmZm
ODdjMDAwHhcNMjUxMjIxMDYwMDUwWhcNMjUxMjIyMDYwMDUwWjAzMTEwLwYDVQQD
EygyYTYxYjUwMTQ2N2Y2ZDU3OGU4Yjg2YmQ0MWM3ODQ4ZjE2YWI4Zjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6eNdY7Oab8UiazgHfzgHLckM57Q3
5eyY2tJixTkR0siGEp3SdOCu+NhYIe/mucXGDP8oHJjYQ0RIIFH7D8V/xDIsK6o3
O5St8yukrNwO4KIiRBwzBhajuRs5muKDDjBGawN3p9cGCDiEZT6Zvor/K4JW7guU
jN8j2U9/6U0tyw8Qd8DisiIxWJNq7X2zZJYilzqT3+QLA8B6M7NcnMUN9UL2vGZG
FQu8c/2/9NeV502oOdToTMz75AWZtqzfo1ygCYE9zdXqinmIpupsSNBKNMF/ePf6
rJTVCoiRIjVtF/d/gPmR1MxThLmySyBL0ixCbVQL6LG0MOYsvdYQJfzYHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCphtQFGf21XjouGvUHHhI8Wq490MB8GA1UdIwQY
MBaAFOYxsIDU6m/QYWpucBx8gV1v+HwAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWpHd2dOVHFiOUJoYW01d0hIeUJYV180ZkFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9kY2RhZTYtZDY5NS00MjY2LWJhOWIt
OTNiM2EzNjk2ZDk2LzEvNWpHd2dOVHFiOUJoYW01d0hIeUJYV180ZkFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9kY2RhZTYtZDY5NS00MjY2LWJhOWItOTNiM2EzNjk2ZDk2
LzEvNWpHd2dOVHFiOUJoYW01d0hIeUJYV180ZkFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYykI98qg
c/zrNjKhd8DhLMVc+iU79oF8eegcIGGGmnmna73p9IitUh60BJQkSLZIbuUa7C6E
YW9e5TlYxpbwtcea05B/QFHcYFpi18ZOJW8dMaU7UglKnSeNcTNYEy8TsP9Y/4I7
IFiyS5ZVmv/NbFtmsnt43J++UJXHg+nGRqqDLuOzffGAHvAxot8uC+6y0NYp3jXs
ZmltEJa2oHW2uTnQYe9r+s3DMeKSb2XrorPUH85zx1rLrOK2ZGI2UPLxx5pSo98A
j/ceQjZanIydxyWimBlCWj27cYW/gud2WjUk3Y5cUMLj1Znrio6TKoF0FdlnFJHG
oxrYYjIE2ccJ8g==
-----END CERTIFICATE-----
Generated at Sun Dec 21 13:07:25 2025 by rpki-client