This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
File:                     5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft (raw, json)
Hash identifier:          7g2lw8+NydKVf+aZT3x2w1NoEbL8RvA2p5vwIkUIloM=
Subject key identifier:   FF:CD:23:68:77:82:9C:BA:23:6A:51:70:DE:53:63:4B:A9:73:C7:CC
Authority key identifier: E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93
Certificate issuer:       /CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
Certificate serial:       019B35D7680BB0764D9973F0286394A947C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
Manifest number:          0B74
Signing time:             Fri 19 Dec 2025 09:01:07 +0000
Manifest this update:     Fri 19 Dec 2025 09:01:07 +0000
Manifest next update:     Sat 20 Dec 2025 09:01:07 +0000
Files and hashes:         1: 5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl (hash: ag+HdU71L3UzuzWdKVTkri6zgGw4JrnKxuYOIT9TkiA=)
                          2: U7WmqwgzCWSQVYIP4iyJRPVZecM.roa (hash: SLg4xo0u6ifhrG98ql5m+cWpgwWKcpHx5npLC6zXj4Y=)
                          3: qOUiptvnquwLum7BmuZWax2v-e8.roa (hash: jmPVQ2WH4XMTQXLE07r7foOrUdpp6hND+pptpQWP7JQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 09:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:35:d7:68:0b:b0:76:4d:99:73:f0:28:63:94:a9:47:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
        Validity
            Not Before: Dec 19 09:01:07 2025 GMT
            Not After : Dec 20 09:01:07 2025 GMT
        Subject: CN=ffcd236877829cba236a5170de53634ba973c7cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a0:5b:f8:ef:19:52:5e:94:22:87:62:18:75:
                    63:28:e6:3a:5f:e2:a0:29:12:e9:68:da:31:74:e8:
                    a8:d4:39:6a:a6:15:9a:15:1d:8a:6c:9d:fb:3b:3f:
                    bd:77:5f:6e:df:1c:0e:09:00:68:0d:df:7d:72:f3:
                    44:60:72:be:f5:ca:57:83:26:4a:ae:cb:a5:a1:48:
                    ed:b4:57:b5:8c:44:b8:04:49:8e:47:1d:d1:24:53:
                    3d:cb:d3:32:68:38:d3:9b:26:4e:1a:e7:36:bd:ec:
                    5b:14:ae:b0:76:30:d2:8e:a6:fe:d1:fb:2b:f5:5a:
                    27:6e:0b:a5:62:08:10:6a:12:93:d6:40:75:a1:2c:
                    d9:c8:b2:9f:1c:57:23:90:d7:65:b2:8f:ef:ea:f0:
                    99:27:9d:db:6f:c3:00:23:b8:ca:7e:64:a1:60:ba:
                    50:96:15:36:fd:61:98:00:44:78:a3:af:10:ae:79:
                    21:93:29:6c:c7:ae:fb:14:ce:41:ea:0d:e4:b7:16:
                    a1:95:43:39:9a:71:4d:5b:6e:92:a1:59:d5:b9:a0:
                    4c:b0:69:9c:f8:53:a4:2c:84:32:29:d2:aa:88:56:
                    c7:88:09:2b:30:c8:dd:de:66:74:52:e8:ec:04:12:
                    47:98:42:f6:7c:6f:7a:27:5f:fb:47:99:1d:f6:fe:
                    d7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:CD:23:68:77:82:9C:BA:23:6A:51:70:DE:53:63:4B:A9:73:C7:CC
            X509v3 Authority Key Identifier:
                keyid:E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:9c:c7:02:c8:65:2d:f0:03:6d:a3:d6:d1:bc:2c:87:cc:25:
         e9:9b:b7:c8:01:ae:8b:62:10:b2:ab:eb:fb:52:5b:d9:bb:a4:
         8b:91:7d:6c:f9:48:4f:96:ff:39:8d:83:ed:dc:06:98:82:47:
         21:30:2d:42:e2:bd:01:f4:d7:38:50:6f:43:a2:72:a0:9a:3d:
         b9:cb:46:ef:15:a6:69:42:88:3a:bb:b1:46:05:ad:e9:49:8a:
         0d:8a:fa:ac:ea:ea:ef:fb:df:d8:c0:0c:de:70:e4:cc:ca:f4:
         83:df:31:d7:fd:01:12:9a:30:8f:46:0d:d2:0d:3c:3d:3a:04:
         d9:ea:c4:6f:60:ae:56:b6:94:0b:b6:ad:1d:9f:c6:81:64:d7:
         22:24:50:b7:8f:80:ba:04:0b:6c:37:de:b7:7c:67:22:85:a6:
         97:69:65:e2:e2:4e:4f:a4:f5:52:33:20:60:69:8d:f0:c0:41:
         ab:bb:17:43:43:b5:c4:bb:9b:64:06:72:dd:8d:c4:83:7e:9e:
         92:56:d9:fe:64:55:1b:ae:0d:0b:90:17:a0:5e:83:7a:13:db:
         f0:4a:aa:94:92:cf:26:e5:57:f5:64:ce:33:69:5e:0c:b2:9b:
         89:85:ca:f5:f6:79:2b:52:8f:dc:98:f8:51:09:1c:f0:4f:fb:
         2d:a9:aa:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:01:24 2025 by rpki-client