This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
File:                     N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft (raw, json)
Hash identifier:          ZnMkwy/O1dePHrjAR5idfl72z87PIb1LlqDVQQHW+FU=
Subject key identifier:   23:8D:AF:5F:03:B8:22:31:4D:13:69:63:53:1A:D0:4C:6D:42:D2:BB
Authority key identifier: 37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
Certificate issuer:       /CN=379cd67c0c18959239358553229e91f543cc5a5f
Certificate serial:       019B6543749174C12E1DFDC0E508469D59D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
Manifest number:          1780
Signing time:             Sun 28 Dec 2025 14:01:17 +0000
Manifest this update:     Sun 28 Dec 2025 14:01:17 +0000
Manifest next update:     Mon 29 Dec 2025 14:01:17 +0000
Files and hashes:         1: N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl (hash: tdGTPBwCEItHVsj2e+hC+UFcA8ULS6/CDVoeW9NodI8=)
                          2: _OMF5Nl70k5FI6dZyBbjhO75Whc.roa (hash: 9Vx2B9Q4z5L6Kqh9xs9MrJDUwmGHBM33p0J4623FkWI=)
                          3: rWytEJ3FiAYVl_Gh2eAbgXCpgnc.roa (hash: N2Jpj3ow/5rvsnHjtA7tEJKRTrNoSnYmSjGqItrSpc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Dec 2025 14:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:65:43:74:91:74:c1:2e:1d:fd:c0:e5:08:46:9d:59:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379cd67c0c18959239358553229e91f543cc5a5f
        Validity
            Not Before: Dec 28 14:01:17 2025 GMT
            Not After : Dec 29 14:01:17 2025 GMT
        Subject: CN=238daf5f03b822314d136963531ad04c6d42d2bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9e:27:f9:de:11:df:44:cf:73:ff:b2:b8:f7:
                    3b:fa:13:71:d7:e9:c3:9b:56:43:99:6f:3e:c8:18:
                    68:44:9d:16:c1:6c:59:7f:c2:2d:20:86:07:69:45:
                    0a:08:8f:70:36:eb:67:0f:03:a6:88:1e:e5:08:47:
                    40:28:a3:f1:24:7b:8e:44:b8:ed:f5:61:e4:97:ce:
                    b6:de:a2:6a:a3:09:84:ff:d3:39:24:e6:7e:fa:43:
                    85:9a:b2:15:e3:09:8c:3a:52:5f:48:b4:a0:5f:07:
                    27:d7:15:1c:a3:dc:f0:95:64:c8:7b:f2:b8:ad:5e:
                    97:96:82:12:b5:03:15:86:14:74:42:e3:99:5b:0d:
                    b1:2e:17:39:07:36:28:29:e2:35:5a:8e:0d:ba:7a:
                    5d:d6:c5:1d:fb:ff:ed:4f:2c:95:fd:58:92:a6:57:
                    fb:75:a6:db:63:91:45:38:71:d2:51:a6:69:86:ad:
                    bd:69:fd:2b:7b:d9:a7:ce:12:60:ae:d5:24:0d:b7:
                    ec:76:59:ea:0a:a7:76:4b:32:69:26:b0:d5:b5:11:
                    11:ed:42:54:88:91:b7:b0:31:c4:6b:c9:d5:74:8f:
                    ba:24:63:db:c4:21:f9:04:40:a2:b5:79:ad:47:cb:
                    b3:a1:56:b1:a5:b1:cd:40:14:e6:fd:3a:49:1b:2b:
                    77:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:8D:AF:5F:03:B8:22:31:4D:13:69:63:53:1A:D0:4C:6D:42:D2:BB
            X509v3 Authority Key Identifier:
                keyid:37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:ec:ce:73:74:51:a4:a1:2b:fc:82:1b:79:7e:b0:76:fc:2f:
         85:2d:ca:5b:bd:75:27:fc:0a:95:9c:f0:56:58:7b:65:dc:01:
         8e:83:c7:a8:e9:ac:2f:72:82:a4:46:28:67:f1:f2:70:97:6d:
         ae:b0:f5:95:80:0a:58:42:d9:48:7f:40:8d:47:b0:52:3e:cd:
         aa:e6:b0:bc:18:77:21:aa:b4:91:91:0b:78:63:63:01:a5:05:
         ad:0c:4a:86:c0:38:fe:28:82:d2:90:e3:f1:a6:bc:19:49:91:
         82:f4:9b:0f:2f:d0:8e:11:bf:40:82:6d:13:ed:4c:d4:6e:4b:
         34:c8:7d:ad:d0:4d:b1:73:89:67:64:62:ac:b8:38:3c:0b:ee:
         10:8f:53:04:7b:58:6d:81:97:b9:4a:59:9e:71:85:fa:13:52:
         72:f4:f6:9f:85:81:35:73:dd:42:39:d0:6f:8d:fd:5b:e5:d2:
         09:bc:cb:1f:3e:dc:07:1f:bb:5e:ca:8d:73:22:7a:42:5e:9e:
         8a:2c:bc:6f:01:08:53:db:c4:12:8e:78:0b:e6:3e:ed:fa:9b:
         5e:63:16:bf:c4:50:b5:ff:28:87:e6:93:8b:ab:02:f5:8c:6e:
         65:ed:55:f9:8d:d6:aa:0b:d2:37:6b:56:71:b9:86:a6:9a:56:
         7d:ec:81:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 22:13:22 2025 by rpki-client