This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
File:                     5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft (raw, json)
Hash identifier:          OyVA69C4IuETje/P2356aSpJFusmjoR2QCVpje+6uDo=
Subject key identifier:   A1:7E:77:8F:E1:03:DC:F8:69:DB:54:96:C6:93:0D:A5:13:28:F5:7E
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Certificate issuer:       /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial:       019B43C9ED50029E2A784740B826485E3EC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
Manifest number:          17A2
Signing time:             Mon 22 Dec 2025 02:01:05 +0000
Manifest this update:     Mon 22 Dec 2025 02:01:05 +0000
Manifest next update:     Tue 23 Dec 2025 02:01:05 +0000
Files and hashes:         1: 53Sw43oc54bFdYl3J8aYgPuTq1A.roa (hash: F/vDAf5IclENw5iT+CZVjqI+jpZyrwkuo7GV9LGXD0M=)
                          2: 5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl (hash: zJIk8tHiHYl5ZFr2rUj84phGmUS2o5pWRD3QVyIsdkE=)
                          3: 5ZP4elvUNRXzjNjwomfmX04GBdQ.roa (hash: YR80JqOL0QlReW0oAqdT62tW37GZp6htoO/zykr39rI=)
                          4: 7Qai7_3OG9tOZhZIU3UmjJ8mcfE.roa (hash: l40PCQmVBuUDSbMih4mk4bv9fMlho26r3dPLXTZdNaw=)
                          5: 9Xnf0_RPB7rW94Ti4f7tLJoLt5Y.roa (hash: 6HzGHL3rDmh0KnGoCjxpw3uQutKsEpK/x9u0157VNyI=)
                          6: 9k_MDSQs7BBKZwPQ5l8KXbKP51c.roa (hash: 4YYsz7HxvO65J1xOpw7vJruRDseol9rdP+KpjvLKx14=)
                          7: KDN_6FFPENk8-bDnIrfpP21-8VE.roa (hash: RLkioT2IjSMiI+bndKsLWNSNLlPwCFxgUoWcDB4O4GA=)
                          8: L9WBYojbvLbnk987LNP8zQZEzQg.roa (hash: 2vRXimXnDZGXHdopycsq1UqK3u4zkQKmcrWliNbOkFI=)
                          9: S5tOJLlP_fO4AuDKQ8_gge5ko6o.roa (hash: v1IqdqgiinrLaFWkomMQNKh2wkRHR0/kvJk++V8a1GU=)
                          10: U0jLu9ql5SdWIQT76CBH027LVAA.roa (hash: PMh+5OCLPKe8/WakcVuCjjuQ331xyUdKEkuwBGpmve4=)
                          11: WOy4XXuLEMlJp9KBWwhDiF407tA.roa (hash: 6fZWXR6YTfGld6EIK4/PHGRBk1q4g1SRUcUmJfhoCkw=)
                          12: ZpjDQL4nsFw5QzvH0G3r2a1GNlk.roa (hash: CAm7uW2+Hk0sF/LHF5dzV4+B9Tz215MhOa+XlD6Ei5U=)
                          13: _KM3VWtbdBYw-7ONqWep42LzJbM.roa (hash: e0kdHEeKs2calKvQRylwRCnRtRK5mFt57DwvVj7HLtU=)
                          14: cVKkCDaARUtvYDXoV4X9N2Ey2ZE.roa (hash: QIVK0slO8PFSnaXnlK3EvRckSMInnvVoSayFBWoxzeo=)
                          15: j9WZYSGRdVfvzLNu1mDZtYatwaY.roa (hash: nUy51L/tmtGCGiZiltuVFci4bpVMC+ZdBO8uYz2YP0g=)
                          16: o_4WpooR2o68mC2wEWl2MvZBybM.roa (hash: 4FHJqgyudIjKxPmy2ppPrc08/tIIXWaBsvzrgtw4zOw=)
                          17: p-0-WRExyZV5USsnbA07oLLM0Dk.roa (hash: TpKQK+Apn7tf7RflC4lVp209f1NDxfhMP5jeUnHBKic=)
                          18: qepQI1x3-VZdN4tY2IgS2Qt0QxA.roa (hash: bg52ywo15jKHz/Ym+vNWwgmJcwLyfvK3SRvTyb5JixQ=)
                          19: rXg2JiPJpfAU79JRlEbsnp3pLc8.roa (hash: MQVzfSubZdxq5yFhe68zUL+Rr+rpOcHAqeIz000zyLw=)
                          20: wOkwYSKo61Flj6OlnF30ahd8nW8.roa (hash: WgGsoRYFSdjHSyBGiJcCIcGq3nxJnFx7v2dIi32zWdI=)
                          21: wf1azGdbs6KejpsvGDcmKSTTHpQ.roa (hash: q5SxtkKD9yNoBx9Nh1XxgTUv7m8d3XBZq8krtOYc6Wk=)
                          22: xLOovb_V_553mPyCa2MPaJ6AL4o.roa (hash: N6NgzmGF9X7Oq9bKLoPjt2ok22T8qTteZuv/qrOneTE=)
                          23: yQ-AQ94E1D9Tv3q18wm7Fve1ObI.roa (hash: H8VQOZeeUDRGGEzlonPzEMZCTDLV4o0msTIPImbqpx8=)
                          24: zF0FOxu0Hh7wSLuHPdPJLYpjGsw.roa (hash: NXCihtn3RZQnpwCFP6jPcZN83HiIf+eHwsx+XPMrrQQ=)
                          25: zmQcXGUtGhS1_tiNEBK-z0ub5Is.roa (hash: w9Y2nBHc4Olve6gCgm/MbgZTbOJSTsJeyEW3ubYEBD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:43:c9:ed:50:02:9e:2a:78:47:40:b8:26:48:5e:3e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
        Validity
            Not Before: Dec 22 02:01:05 2025 GMT
            Not After : Dec 23 02:01:05 2025 GMT
        Subject: CN=a17e778fe103dcf869db5496c6930da51328f57e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ab:12:bf:b2:3d:b6:3e:81:5f:db:b8:e5:96:
                    a4:d5:61:e6:58:43:4e:14:1b:56:7f:5e:77:5d:be:
                    ae:df:ee:6f:42:c8:d7:14:36:b0:44:6c:ea:c4:0b:
                    e8:40:08:4c:38:4f:b9:b1:c6:a1:eb:43:ef:47:b3:
                    d0:a3:46:8e:df:33:6c:03:28:24:5b:61:61:9a:7b:
                    5c:b2:96:27:8a:af:91:03:6a:13:95:45:89:48:ab:
                    c1:06:9f:44:ec:da:7e:c0:cc:88:5a:6f:98:0e:15:
                    49:cd:c4:7b:e9:aa:12:89:cd:3b:c4:4d:77:c4:8a:
                    08:a4:f1:64:98:cd:07:fe:ad:56:98:6b:80:9e:87:
                    c9:70:fe:c3:ca:f8:54:74:ac:fc:f2:2b:47:2e:9c:
                    70:25:bf:b2:8c:69:2e:1a:66:5f:4d:46:aa:1d:b0:
                    b3:0a:c5:14:89:30:2f:85:5f:e5:58:14:f1:38:4c:
                    51:fa:39:55:f0:8f:bf:7c:74:8d:7a:31:47:7c:77:
                    42:89:8c:82:8c:20:48:ed:c6:70:f9:81:75:12:22:
                    42:ff:30:04:f5:87:b3:ba:e5:ba:69:7e:df:bc:dd:
                    1d:f4:b1:4d:f0:84:b7:af:19:32:a8:17:f5:5b:d6:
                    14:40:e1:61:c8:4f:84:03:03:b9:7d:ac:c3:43:11:
                    3a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:7E:77:8F:E1:03:DC:F8:69:DB:54:96:C6:93:0D:A5:13:28:F5:7E
            X509v3 Authority Key Identifier:
                keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:c9:17:b6:a5:1a:ac:77:da:b0:99:ba:2f:d5:5f:f7:2e:8d:
         a5:89:fe:ac:72:91:a8:08:29:8b:a1:54:fe:ce:ba:02:f3:71:
         cb:d7:45:d9:1d:eb:80:c8:fc:0e:98:da:1b:12:75:5e:99:8d:
         59:fa:45:12:d2:64:d0:4e:72:2f:f8:69:ff:e6:bb:d9:4b:58:
         06:1b:38:d1:6d:db:40:d0:08:aa:34:3c:25:3c:72:73:4e:bd:
         4b:39:2a:0b:0a:2e:7e:c8:f4:55:05:6e:24:d9:46:f4:35:c5:
         63:70:a6:91:68:31:14:62:42:22:a5:79:ff:c7:cc:0c:12:61:
         d7:bc:e0:80:9e:4e:d7:de:ea:3e:4d:b8:da:69:25:19:7c:75:
         fc:65:74:de:0f:b5:3f:5b:12:d0:96:ca:d4:08:c8:4d:dc:47:
         cf:00:26:94:0e:b0:4e:d6:c9:d4:9f:12:cf:68:2c:28:16:73:
         6d:94:48:ce:c4:1b:1e:bc:56:ba:9c:7a:e5:28:f3:1d:63:af:
         8f:43:f7:40:d1:50:90:ff:bc:0e:cd:84:da:45:d0:f8:e4:d4:
         04:f8:af:52:ab:03:da:ac:53:19:56:24:bb:a2:d6:60:bc:a1:
         6e:bc:6f:87:15:e4:52:01:dd:f8:fe:0f:f1:5b:f4:bf:40:d1:
         ce:19:bd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 06:26:02 2025 by rpki-client