This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.mft
File:                     b5jR-Z44M-9AHUY0juyLdSCIxV0.mft (raw, json)
Hash identifier:          uv+C9sDFfVIEBYSCMJrALkM0aZH0SyuH/LRrFnwQF50=
Subject key identifier:   27:15:60:F1:3C:CB:0C:82:9E:B4:DC:1F:9A:EF:10:C6:54:B6:D6:04
Authority key identifier: 6F:98:D1:F9:9E:38:33:EF:40:1D:46:34:8E:EC:8B:75:20:88:C5:5D
Certificate issuer:       /CN=6f98d1f99e3833ef401d46348eec8b752088c55d
Certificate serial:       019B53AADDA17652A4A522C20062BA379B73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b5jR-Z44M-9AHUY0juyLdSCIxV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.mft
Manifest number:          1796
Signing time:             Thu 25 Dec 2025 04:01:05 +0000
Manifest this update:     Thu 25 Dec 2025 04:01:05 +0000
Manifest next update:     Fri 26 Dec 2025 04:01:05 +0000
Files and hashes:         1: AK8oH-hdcdWqkx1j19Sg4WRGU6k.roa (hash: UL0wVMMPQ6seHx9+E4jjcivFpYmeRRoPs0aDR4HKrBk=)
                          2: WtT0iRRNWOEnnJNbpojOaIceMDQ.roa (hash: GuNBmImvmC1qMkMAYPrdjYcM0SGHFORb2IyKWp/uvJM=)
                          3: b5jR-Z44M-9AHUY0juyLdSCIxV0.crl (hash: Gky5giG/1KRBBxwClPSEfsp8gKGzPFzoDhhnFcj0o5k=)
                          4: j7Ttn2BWFaDhab7ZDneYB8Izk6w.roa (hash: k9js+BE4RFtwEtbQ/V0azAY+xGWrWmclJFMU8tYRWW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b5jR-Z44M-9AHUY0juyLdSCIxV0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Dec 2025 01:21:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:53:aa:dd:a1:76:52:a4:a5:22:c2:00:62:ba:37:9b:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f98d1f99e3833ef401d46348eec8b752088c55d
        Validity
            Not Before: Dec 25 04:01:05 2025 GMT
            Not After : Dec 26 04:01:05 2025 GMT
        Subject: CN=271560f13ccb0c829eb4dc1f9aef10c654b6d604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9d:ce:4f:3f:3d:b5:7a:b4:9f:14:25:4b:30:
                    0d:f9:a0:61:53:6a:03:bb:68:14:aa:05:70:85:f3:
                    73:cc:59:87:07:73:e6:fa:e0:dd:6f:9f:54:04:7e:
                    1e:09:9f:55:35:25:27:b3:fe:2a:16:c6:8b:80:bb:
                    53:86:18:bd:5c:a6:5a:25:d2:21:e4:7b:7a:21:52:
                    86:f7:b9:82:ea:79:5e:1c:52:55:4e:43:96:3f:77:
                    30:50:9d:37:49:5f:1f:07:ee:04:cd:8b:e2:c7:06:
                    cc:97:04:08:c8:e8:f7:3c:f7:f3:ae:43:28:20:41:
                    41:d3:54:0f:31:a8:17:7f:d3:5f:6e:79:15:a5:e6:
                    24:dd:d7:f0:34:a0:be:90:3a:d5:a5:8e:a7:c5:ee:
                    66:f8:92:fb:f4:d2:e5:2e:72:30:bc:f7:58:d3:01:
                    9a:70:17:68:0c:cf:22:46:20:28:aa:97:49:18:d8:
                    a1:3d:a9:6a:88:d8:48:2d:34:ed:bb:80:f6:6c:4d:
                    92:4f:0a:b7:a3:5b:a4:a7:b2:3c:27:9f:5a:de:00:
                    f6:ed:0d:6b:ec:07:b8:ce:ae:23:c7:00:f3:75:8c:
                    90:ce:69:e2:0c:08:a8:e0:a1:ba:d3:73:48:09:c5:
                    8f:41:6c:07:60:e8:aa:cf:27:93:cb:82:8b:7d:3a:
                    26:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:15:60:F1:3C:CB:0C:82:9E:B4:DC:1F:9A:EF:10:C6:54:B6:D6:04
            X509v3 Authority Key Identifier:
                keyid:6F:98:D1:F9:9E:38:33:EF:40:1D:46:34:8E:EC:8B:75:20:88:C5:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5jR-Z44M-9AHUY0juyLdSCIxV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:e5:93:aa:c2:30:38:f0:93:8d:bf:0d:b9:ba:28:c0:88:6b:
         b8:a7:d9:cd:9d:11:e6:76:9f:9b:1c:49:35:ed:28:4b:76:36:
         c1:32:65:a5:a5:77:64:79:7a:07:63:d5:9a:2c:e0:c3:fe:9c:
         87:e4:82:5a:2b:ec:2c:54:14:da:8a:5f:98:4e:18:2c:ce:bb:
         44:ca:93:87:eb:2f:82:87:cf:4a:0b:d3:a0:ea:ff:93:66:ac:
         a2:f7:10:09:5b:ce:cc:fe:50:8a:23:7b:0b:73:8a:46:a5:e2:
         cb:8b:d3:14:de:65:f5:59:72:95:d3:55:7f:03:7f:e2:03:ce:
         f6:f4:67:3e:e8:4e:fe:1e:df:96:e9:0b:f2:20:e3:e9:ae:31:
         35:71:40:bb:52:9b:5e:4d:f6:4a:7e:cd:29:46:81:0d:ce:ea:
         d5:9f:c9:c5:87:5d:f4:0d:f4:8a:95:f8:62:a9:59:d8:ea:43:
         b7:a2:c7:56:3a:2f:f6:c3:85:2d:e7:69:81:d4:a6:36:36:48:
         33:7f:48:3f:52:a2:71:91:e6:9c:d5:f9:27:66:61:5d:88:08:
         2f:9f:05:92:d6:4e:8a:28:73:4e:48:31:6e:97:29:c6:c1:ca:
         f0:55:28:6e:bf:22:07:dd:8a:7f:f4:2f:20:05:79:87:48:38:
         bf:8c:cf:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 06:34:40 2025 by rpki-client