This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft
File:                     5cveddU26RsoojRpNJ0c8ouISjs.mft (raw, json)
Hash identifier:          sJ0bxvJJskVKVvdx23bD04rIzeFjnMN2TABC9uXCrsA=
Subject key identifier:   8F:6F:C5:A2:05:E3:1B:44:93:D2:3A:D0:46:B5:6B:6E:85:4E:9B:FD
Authority key identifier: E5:CB:DE:75:D5:36:E9:1B:28:A2:34:69:34:9D:1C:F2:8B:88:4A:3B
Certificate issuer:       /CN=e5cbde75d536e91b28a23469349d1cf28b884a3b
Certificate serial:       019B3A9087209BCD5A4D67F5EC54842F184D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft
Manifest number:          16B0
Signing time:             Sat 20 Dec 2025 07:01:48 +0000
Manifest this update:     Sat 20 Dec 2025 07:01:48 +0000
Manifest next update:     Sun 21 Dec 2025 07:01:48 +0000
Files and hashes:         1: 5cveddU26RsoojRpNJ0c8ouISjs.crl (hash: byz4xOgIwKqNdQkka+vNupjVBtykavRDGEwVIhQvwvQ=)
                          2: 8vBjC53BVW8zj4fBkE3UHTZwiNk.roa (hash: 1PeNucpAjZUP2ujHYN11UYlssoeYcm9jeCslEET3UiI=)
                          3: 9SKc1OPZn-eLWfpLDmHLKp6N8Ss.roa (hash: aMPoo7LYnaS7eWYIaQDX/Es2RSQYrk3CqkkwnLvbGQ8=)
                          4: UwHwc4Sk_hCRAHef6n3CUGRPGkk.roa (hash: KrGL3wXFY6k1GlYSZENHPy6IRLA8cwbf0xkJCypiFE8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 07:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3a:90:87:20:9b:cd:5a:4d:67:f5:ec:54:84:2f:18:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5cbde75d536e91b28a23469349d1cf28b884a3b
        Validity
            Not Before: Dec 20 07:01:48 2025 GMT
            Not After : Dec 21 07:01:48 2025 GMT
        Subject: CN=8f6fc5a205e31b4493d23ad046b56b6e854e9bfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:cf:72:59:a7:8a:7e:e3:69:0e:d4:7d:33:77:
                    23:41:59:75:92:c8:f9:ef:c7:17:0b:f3:34:0e:0f:
                    b8:ef:78:b1:cc:23:5e:c1:d5:57:36:99:58:0f:9a:
                    c1:77:fc:32:89:65:ff:70:aa:33:e3:42:e0:8e:00:
                    8d:9c:52:0c:80:f3:b9:08:bc:61:f1:5b:f6:8e:3c:
                    ec:2f:d7:40:73:4e:95:17:c9:ca:15:69:ba:5a:88:
                    9b:78:48:7e:59:91:99:24:b2:5f:81:54:a7:00:d8:
                    84:0e:dd:bf:9c:96:55:96:78:25:b3:63:f5:75:91:
                    ce:67:f1:5a:bb:80:e1:24:ab:7f:5e:77:00:bf:e5:
                    08:fa:51:d4:ca:ee:c0:c3:a9:6f:ae:71:39:51:be:
                    ec:39:3d:5a:15:0f:d4:d9:c8:0e:1e:f9:8c:67:17:
                    54:af:75:ad:06:a3:98:1d:a6:34:11:00:09:ea:52:
                    4e:a5:32:a4:ad:2c:30:ed:e7:a0:90:cb:2f:37:0d:
                    82:fb:e1:f1:4a:3e:0f:12:19:ac:fa:09:31:e2:0e:
                    e8:3e:43:9c:bc:e1:fb:06:39:3d:6a:7b:7c:6e:d1:
                    aa:37:9c:b4:3c:9e:ad:fe:45:81:3e:b7:df:c7:cd:
                    3a:19:2f:81:98:86:02:8b:be:eb:9b:a6:ca:44:81:
                    0a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:6F:C5:A2:05:E3:1B:44:93:D2:3A:D0:46:B5:6B:6E:85:4E:9B:FD
            X509v3 Authority Key Identifier:
                keyid:E5:CB:DE:75:D5:36:E9:1B:28:A2:34:69:34:9D:1C:F2:8B:88:4A:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:e8:27:f7:4d:7f:fb:5e:c2:bf:b6:35:94:77:b5:4a:24:71:
         71:e5:d1:80:67:4a:a8:d4:f7:9c:4f:6e:69:07:0b:32:b6:1b:
         b7:60:2d:fb:97:78:07:15:bc:dc:b1:67:ae:ae:c1:bd:10:f1:
         01:e9:34:88:8a:17:de:f2:ce:48:29:37:a4:16:32:a2:fa:f2:
         9b:15:b0:09:10:74:ee:55:9a:b2:82:4a:f2:82:1b:2b:5c:82:
         8d:0b:99:64:98:df:f7:d0:af:a7:a3:ce:e8:02:f4:df:69:df:
         ca:7e:df:c3:55:32:7b:91:07:fc:2a:03:09:11:a0:3e:7e:44:
         af:4b:34:75:73:d0:c6:8b:eb:6f:8f:be:d5:e0:e1:9e:6e:d4:
         e9:e9:a8:a9:fc:08:c8:b4:8c:21:71:d7:58:ee:f5:f9:e2:ec:
         cd:d8:12:c1:96:bf:69:eb:04:4b:44:43:df:01:e5:4c:20:08:
         33:27:74:b8:1a:f7:64:f0:58:e1:1c:30:f3:65:c8:1c:4c:df:
         80:4f:22:f0:2f:b3:60:d9:c3:2d:fa:47:71:28:bd:c3:ba:10:
         76:6c:e6:57:e3:b1:41:fd:0b:b9:d2:c7:8b:82:f8:12:75:3b:
         d7:50:c2:9f:9c:2b:93:89:77:d3:10:64:21:35:ef:1f:a3:39:
         c9:01:78:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:07:58 2025 by rpki-client