This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
File:                     5vqg0vXewCAfVeQJecGQm223fDs.mft (raw, json)
Hash identifier:          Djz4fdHt0wQyR4Kjb/2KHoxTxXALMoeJoPWoeWk2hsM=
Subject key identifier:   8B:88:6F:09:BF:0A:5D:0A:54:FE:81:71:32:D9:60:6D:C4:2E:CF:80
Authority key identifier: E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B
Certificate issuer:       /CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b
Certificate serial:       019B3EA395802E14692DF819BBE11A63DFF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
Manifest number:          1791
Signing time:             Sun 21 Dec 2025 02:01:06 +0000
Manifest this update:     Sun 21 Dec 2025 02:01:06 +0000
Manifest next update:     Mon 22 Dec 2025 02:01:06 +0000
Files and hashes:         1: 5vqg0vXewCAfVeQJecGQm223fDs.crl (hash: Xj0uA9EutHBJbdbyM/UJjpSLoqujLZHqcgK1kQ68LTk=)
                          2: 8liaJL0g-7zotMbXe_sm2ys9BE8.roa (hash: 30a8wxGDwl2f7yhZhDFSqSXr3+9jtWYD0pYLCfzDZkQ=)
                          3: Z7wvN9rsMLOoa1Bg9yTdxH6zuKw.roa (hash: yuBTcbFOavPo8wZ9TYtxhcOXRCfelMXNi6bhiA5gPyo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3e:a3:95:80:2e:14:69:2d:f8:19:bb:e1:1a:63:df:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b
        Validity
            Not Before: Dec 21 02:01:06 2025 GMT
            Not After : Dec 22 02:01:06 2025 GMT
        Subject: CN=8b886f09bf0a5d0a54fe817132d9606dc42ecf80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:cb:3c:e6:d0:bf:b5:04:fe:c8:78:71:e4:68:
                    9f:cb:6b:69:be:7b:4a:93:df:27:02:0c:cb:b1:b5:
                    91:ee:13:fc:9b:28:e7:9e:2e:01:5c:d1:6b:41:b2:
                    d5:eb:4e:ca:66:11:a5:91:ea:44:d1:da:6c:6e:5c:
                    d0:5c:d8:6a:eb:82:4b:c1:bb:69:98:25:76:e9:4a:
                    ec:34:8d:12:7b:fc:dd:90:d3:1b:70:cb:1c:65:35:
                    f4:55:2d:e1:5f:c0:2a:2e:4e:b9:70:a9:44:26:37:
                    aa:af:94:55:06:4b:77:e3:6f:ac:57:4e:dd:66:be:
                    7a:08:bf:65:3e:15:66:24:27:6c:af:d3:e6:40:bb:
                    97:31:84:6a:fc:3b:27:23:ee:de:79:de:93:c6:09:
                    4f:c6:01:2d:04:19:f8:56:02:42:5a:89:4e:ed:36:
                    ef:f1:eb:29:4f:78:d5:e3:52:f4:68:8d:c4:fe:7b:
                    16:48:1a:55:a3:aa:70:d4:41:0e:23:1a:b4:68:ad:
                    f9:92:95:55:7c:4c:26:59:15:2d:a8:bb:ad:f8:d8:
                    5c:81:ad:b4:bc:6d:c4:de:45:cb:b0:5c:5b:ea:e8:
                    1b:b3:64:5b:23:b9:48:a7:11:51:0c:2a:be:b2:73:
                    bb:56:6b:96:5b:e2:10:19:0f:3f:33:47:d9:93:be:
                    c6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:88:6F:09:BF:0A:5D:0A:54:FE:81:71:32:D9:60:6D:C4:2E:CF:80
            X509v3 Authority Key Identifier:
                keyid:E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:34:8d:d8:92:60:c4:95:6a:81:9b:ea:dd:45:b9:07:31:a1:
         59:d2:9a:17:63:da:ff:b1:0f:bd:53:f4:6c:ac:eb:dd:4c:bf:
         9b:f0:3b:82:aa:7c:f3:cc:f0:5b:98:1c:d1:1c:0c:43:b5:06:
         6c:3c:21:b7:59:ec:91:c1:a1:52:8f:d1:c2:51:46:de:25:22:
         ce:9f:53:b6:94:a4:e8:6a:90:61:eb:f7:c7:bd:69:92:a1:e8:
         57:2f:52:69:fb:2f:b5:8c:fe:e2:1f:a5:43:d2:9a:c6:f4:c2:
         17:18:a6:13:29:d1:56:21:7d:22:9d:7e:47:43:03:5a:29:0f:
         32:a9:11:c0:0e:b4:93:80:e4:f7:f1:87:8f:64:a9:dc:e4:51:
         98:38:91:4b:bc:3c:02:19:67:94:99:f7:bc:8f:87:cb:46:53:
         4f:90:fd:a9:a1:fb:5a:f1:78:49:aa:b4:e8:86:ab:82:33:e1:
         d2:16:8f:55:62:09:ee:e2:7b:3e:1c:04:fb:ca:cd:51:71:6b:
         73:58:f4:21:c1:23:bb:9a:3f:52:92:d4:f2:0e:19:f3:0f:85:
         1a:a6:d9:dd:07:89:36:6d:01:67:c1:e5:0e:78:32:b0:6f:f7:
         44:ff:ff:5a:ba:c3:40:09:ac:c9:2c:68:95:2b:1a:c1:64:76:
         55:26:c9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:41:56 2025 by rpki-client