This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/5p5FpEgUVhSOLgA0nYeqV8VrJKA.mft
File:                     5p5FpEgUVhSOLgA0nYeqV8VrJKA.mft (raw, json)
Hash identifier:          h3w9oZ5NcreW65MEytDee9Cg2RpMY2hwRZxYlhf3wyg=
Subject key identifier:   86:DF:57:BF:FC:37:93:AB:E7:77:AB:B2:CA:89:AD:85:69:4F:D6:75
Authority key identifier: E6:9E:45:A4:48:14:56:14:8E:2E:00:34:9D:87:AA:57:C5:6B:24:A0
Certificate issuer:       /CN=e69e45a4481456148e2e00349d87aa57c56b24a0
Certificate serial:       019B42EED184F669292D067FB134E22C008D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5p5FpEgUVhSOLgA0nYeqV8VrJKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/5p5FpEgUVhSOLgA0nYeqV8VrJKA.mft
Manifest number:          1370
Signing time:             Sun 21 Dec 2025 22:01:46 +0000
Manifest this update:     Sun 21 Dec 2025 22:01:46 +0000
Manifest next update:     Mon 22 Dec 2025 22:01:46 +0000
Files and hashes:         1: 33WNZjFbjtJ5lS8ee8EqtFrBl9Y.roa (hash: MHz9Wm40aTd30R9oY5UfuEITTKjrVq2m7D0NN/b/e7I=)
                          2: 3y0yAsA1Ant0h9c-rZLPfvvobgA.roa (hash: 8KRmqzCONzP8OtumafBRNftRxCWZFMMwcSzGlA+ay1A=)
                          3: 5p5FpEgUVhSOLgA0nYeqV8VrJKA.crl (hash: lQc/97IDTX5NYUY8lBQoivwcyteIy1pkuq2pw3itkq8=)
                          4: itCPu8Htj_DCrNIT9SPGnSWcfyQ.roa (hash: KyXawd2wxUAMnyBE6VKJohT9NeVAA5nhSGjZmO+RO28=)
                          5: kc25BoJspPKTOOkNnEplO6IRLo4.roa (hash: RtdZTGgpc5NlcoTD91UKpw5ujr0ISlSCALvjRZoHuQU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/5p5FpEgUVhSOLgA0nYeqV8VrJKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/5p5FpEgUVhSOLgA0nYeqV8VrJKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5p5FpEgUVhSOLgA0nYeqV8VrJKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:42:ee:d1:84:f6:69:29:2d:06:7f:b1:34:e2:2c:00:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e69e45a4481456148e2e00349d87aa57c56b24a0
        Validity
            Not Before: Dec 21 22:01:46 2025 GMT
            Not After : Dec 22 22:01:46 2025 GMT
        Subject: CN=86df57bffc3793abe777abb2ca89ad85694fd675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cc:77:24:77:20:59:d6:4b:54:02:21:c0:79:
                    11:f8:52:42:60:c0:4b:1a:c1:b2:47:b2:cb:36:b8:
                    22:32:12:27:0d:dc:3e:01:b6:c7:ee:40:d1:f9:ca:
                    01:c2:d6:67:c4:49:5d:23:4a:c6:83:65:53:ea:65:
                    e4:68:3c:fd:7f:ca:92:1a:0c:3c:ba:a6:80:32:2f:
                    16:a1:4c:dd:d9:57:5c:f9:fc:d1:d9:76:0c:0e:ee:
                    60:ed:e0:cd:5d:fc:a1:3e:c7:2e:43:64:df:34:36:
                    2c:2c:20:a4:2d:8d:73:56:8c:c3:c1:c2:3d:1d:c0:
                    01:6b:63:dc:75:d9:97:4c:76:f1:ec:4e:8d:5e:8c:
                    e0:42:6c:28:ea:97:97:ac:e1:48:88:55:da:42:d6:
                    6c:31:48:d0:a1:f0:8d:39:ea:46:06:7b:04:a5:60:
                    c5:a7:8a:33:87:d0:ed:c7:49:e8:a7:37:72:d4:44:
                    dd:ff:ea:92:2d:16:69:30:98:8e:cc:c2:b2:eb:fe:
                    80:0e:98:73:1d:42:6b:b7:f6:4d:4b:91:df:08:ee:
                    2c:1c:cc:66:e6:63:fd:ee:de:f6:03:26:c4:5b:0d:
                    28:81:bc:47:63:46:51:15:5d:eb:ed:cf:cc:40:01:
                    5c:2c:3d:a8:22:b3:67:80:14:13:5e:e8:58:c0:b1:
                    e4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:DF:57:BF:FC:37:93:AB:E7:77:AB:B2:CA:89:AD:85:69:4F:D6:75
            X509v3 Authority Key Identifier:
                keyid:E6:9E:45:A4:48:14:56:14:8E:2E:00:34:9D:87:AA:57:C5:6B:24:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5p5FpEgUVhSOLgA0nYeqV8VrJKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/5p5FpEgUVhSOLgA0nYeqV8VrJKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/5p5FpEgUVhSOLgA0nYeqV8VrJKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:7c:98:c9:92:58:a1:28:bd:f2:3f:b9:85:6a:0e:26:22:0c:
         0f:a3:6c:81:93:9d:9d:86:87:69:eb:5b:97:26:39:09:c5:3e:
         4b:ad:6f:94:e2:26:a7:0d:6d:a5:47:03:1d:25:39:22:a0:7e:
         35:df:8b:64:95:e6:9e:58:ba:8f:27:53:45:d3:51:51:c9:d3:
         16:1c:43:ad:6b:99:7b:53:7f:51:30:49:a4:cf:4e:8a:88:e0:
         1c:8e:8f:a9:14:ea:43:5e:50:78:e4:7b:fa:01:91:22:28:53:
         03:96:01:f4:7c:a2:44:aa:58:39:df:1d:18:b4:21:17:8f:34:
         6d:0c:09:6b:bb:d4:de:78:2a:e0:25:76:7d:86:30:b2:f8:50:
         14:5e:f5:42:7c:d1:ea:81:04:1b:a3:fb:94:b9:28:cb:f4:fb:
         3a:52:43:d9:8e:67:15:06:e9:4a:08:eb:5c:bd:9a:1a:fa:1f:
         ae:60:85:9b:d6:da:98:8d:76:b4:05:b5:55:bd:73:76:10:3a:
         e4:99:8a:a0:e8:46:82:85:b5:b3:b6:eb:0a:56:fc:80:3e:45:
         b0:93:cc:2f:bd:d9:2e:13:ed:bb:19:61:c6:5b:98:7a:87:c1:
         38:77:ad:de:94:69:c8:15:b7:96:3c:e9:a3:45:9c:3c:82:42:
         5b:f0:12:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 01:45:04 2025 by rpki-client