This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
File:                     5hvX3R-KyLQZK6eKWSNItd0KGmY.mft (raw, json)
Hash identifier:          VhHwlKW/WXcNgCm/U5cDUQVpUlyK7AxJbTRb2E4LlDA=
Subject key identifier:   7B:F1:83:64:9E:24:AB:91:73:D0:D7:7F:B0:F3:23:09:1B:C3:66:52
Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
Certificate issuer:       /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Certificate serial:       019B3AC68C5E7092BDC5625A3B7D0A6DAEE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
Manifest number:          1435
Signing time:             Sat 20 Dec 2025 08:00:49 +0000
Manifest this update:     Sat 20 Dec 2025 08:00:49 +0000
Manifest next update:     Sun 21 Dec 2025 08:00:49 +0000
Files and hashes:         1: 0ShDfOH1Ac9e6vvkpUZXgh0BNC0.roa (hash: BD8JCJierHp2LDaazEE6kGlqOyEpFiqAEwABUcVamkE=)
                          2: 1-gxOhCZj8nS37sWsUDKlmcK-Rw8.roa (hash: /+5YDb/LdEiV9iy+qGtaTiI/QdW15m+uapnwWEACL9w=)
                          3: 4Pfo6dr7-737k8tyVTjGVmWtq04.roa (hash: q2tjhHYa3ywzq75oRuuLup6rX2uYWNVGvc0AQBtWN4U=)
                          4: 5hvX3R-KyLQZK6eKWSNItd0KGmY.crl (hash: FiUsqS71t6+4XYoEw+MgMHF7Bbhg0GojA2rpPH6vHrc=)
                          5: JBj8FsplA-MBUc0zqf4_NLYuJ-Q.roa (hash: ecVjlw+CLQrBEbrHY/WkvclcM5Zgixit06zD/ClEBGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 08:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3a:c6:8c:5e:70:92:bd:c5:62:5a:3b:7d:0a:6d:ae:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
        Validity
            Not Before: Dec 20 08:00:49 2025 GMT
            Not After : Dec 21 08:00:49 2025 GMT
        Subject: CN=7bf183649e24ab9173d0d77fb0f323091bc36652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:74:ab:94:18:1d:1f:f8:19:cb:a8:76:f4:5b:
                    50:a4:73:d6:c0:0f:03:8f:b3:67:6e:84:38:85:18:
                    64:b4:62:bf:4e:7d:9b:54:61:20:d3:4a:25:a2:24:
                    b7:65:5f:72:61:ce:49:f5:dd:f7:1a:9b:47:d0:ca:
                    f4:85:ff:75:22:96:5f:92:b0:74:4e:c7:30:34:dd:
                    cb:6c:78:1d:3b:51:15:ac:14:99:c8:15:31:dc:9f:
                    78:35:7b:5b:84:b3:45:ba:8b:39:60:42:4a:4d:c7:
                    19:36:8d:e8:97:2b:cb:83:f1:92:6b:75:22:54:f2:
                    35:ef:e2:b0:ed:ad:b3:de:8c:8f:f8:06:f2:a4:55:
                    1b:f4:ff:db:ee:97:c1:75:84:4c:e2:56:48:c1:4b:
                    a9:4d:94:2f:5a:39:b8:dc:5b:cc:e3:db:e6:67:bd:
                    f3:41:40:2c:a8:3d:e6:ce:55:9f:68:f7:27:1e:1f:
                    4f:c7:15:a7:15:fe:18:8d:5c:ed:18:e4:d8:d3:5d:
                    bf:9c:ea:7b:44:a3:02:0f:7a:b8:6a:a0:d5:d4:ec:
                    32:ad:98:f8:59:1d:c1:1a:5c:93:a4:38:5e:75:22:
                    f0:7d:21:8e:12:d1:8f:70:22:83:e6:ef:b6:9b:57:
                    35:43:99:9e:ba:34:ad:cb:8a:17:29:ad:4a:bd:17:
                    bb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F1:83:64:9E:24:AB:91:73:D0:D7:7F:B0:F3:23:09:1B:C3:66:52
            X509v3 Authority Key Identifier:
                keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:d9:e8:5e:e6:58:8e:dd:8e:5c:4b:b4:f8:14:3f:76:3b:6f:
         16:5e:13:f4:ed:a8:60:ea:37:d7:fc:6e:b0:5b:16:78:c3:8f:
         3f:3c:b5:37:71:bc:9c:cc:2f:e7:01:21:8a:e9:9d:0b:86:7b:
         0d:bf:52:b0:e4:5a:f6:7d:fd:3d:a1:7e:04:68:c9:4f:82:e1:
         6f:8a:6b:43:d8:5e:85:8c:5b:f3:f8:87:0a:a3:e3:8b:f2:9b:
         af:21:db:2c:6a:ef:d2:66:dd:64:69:35:e3:d4:c9:a2:d5:29:
         f9:39:34:86:ef:8b:06:34:e3:bd:8b:9f:b6:2b:47:79:dc:69:
         6d:b6:33:67:d3:48:37:c5:2d:f2:be:d5:ea:24:6d:f6:2e:44:
         43:5a:2f:3e:c9:f6:48:84:7b:9f:6f:6b:3d:bd:6d:26:4b:39:
         56:88:74:55:19:45:46:4d:ef:18:0c:19:7b:8c:cb:c3:1a:3e:
         21:56:18:41:54:cd:14:ea:82:1c:8e:f3:77:5f:02:48:80:74:
         a9:16:18:43:c6:e0:42:4b:53:5c:ff:50:c0:8b:6e:df:1f:a7:
         5b:28:38:db:05:31:2f:77:d2:a6:b5:e8:35:82:85:cb:52:f9:
         da:13:79:21:1d:a0:d9:60:7e:37:db:64:14:32:ef:f1:bf:b9:
         a3:4a:a2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:16:00 2025 by rpki-client