This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/SV5QAUnOjXG5YEtYngwy_qB6mLg.mft
File:                     SV5QAUnOjXG5YEtYngwy_qB6mLg.mft (raw, json)
Hash identifier:          rchFJLausZUy8ArsPUAkgr9lVEXsxl4lvdRaFJegxAA=
Subject key identifier:   CC:13:1E:DF:91:CD:29:BB:47:66:AD:E8:0C:2A:AF:B4:82:AD:03:14
Authority key identifier: 49:5E:50:01:49:CE:8D:71:B9:60:4B:58:9E:0C:32:FE:A0:7A:98:B8
Certificate issuer:       /CN=495e500149ce8d71b9604b589e0c32fea07a98b8
Certificate serial:       019B36E97D1F126D3CF1D37305D43789E8A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SV5QAUnOjXG5YEtYngwy_qB6mLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/SV5QAUnOjXG5YEtYngwy_qB6mLg.mft
Manifest number:          06C7
Signing time:             Fri 19 Dec 2025 14:00:30 +0000
Manifest this update:     Fri 19 Dec 2025 14:00:30 +0000
Manifest next update:     Sat 20 Dec 2025 14:00:30 +0000
Files and hashes:         1: SLaZNAjxImfT9EGvzPi0i7_1Yj0.roa (hash: 82hv0vYxLgPvo/8wkECNbefCFSwFm1NfG9R8MJN+I0g=)
                          2: SV5QAUnOjXG5YEtYngwy_qB6mLg.crl (hash: a0Civvg4v35X5ALmyMGb8oGrn50gMo6x1mJO1SopXUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/SV5QAUnOjXG5YEtYngwy_qB6mLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/SV5QAUnOjXG5YEtYngwy_qB6mLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SV5QAUnOjXG5YEtYngwy_qB6mLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 14:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:36:e9:7d:1f:12:6d:3c:f1:d3:73:05:d4:37:89:e8:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=495e500149ce8d71b9604b589e0c32fea07a98b8
        Validity
            Not Before: Dec 19 14:00:30 2025 GMT
            Not After : Dec 20 14:00:30 2025 GMT
        Subject: CN=cc131edf91cd29bb4766ade80c2aafb482ad0314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2d:ea:9c:f1:b6:e1:38:7c:29:5a:5e:1b:09:
                    ba:03:4d:b5:c3:5e:00:7a:72:51:d4:1a:e6:26:ff:
                    33:20:6e:e5:f0:1a:24:15:da:07:74:33:f3:df:bd:
                    5b:26:19:13:69:05:c5:b1:7d:06:40:a6:a6:db:33:
                    28:03:10:ab:c6:6b:8d:e7:e4:24:cb:60:cf:26:33:
                    0e:b2:19:f6:79:8d:c1:d1:08:44:ab:9d:ad:92:e8:
                    9b:5f:68:74:b2:5f:44:4c:4a:fc:61:a3:ca:9c:c0:
                    64:90:1f:fc:aa:d7:96:f0:e7:7f:23:e5:70:21:ed:
                    fd:3c:ba:2b:79:c2:bb:97:40:49:dc:12:fe:bd:77:
                    13:2b:d1:2b:cc:64:89:fe:70:95:da:f9:f3:e1:3e:
                    df:99:0e:19:f1:cf:5d:65:53:2b:ba:9d:3c:2c:97:
                    f1:7e:9d:1c:c2:96:9c:40:98:e6:44:14:3d:ff:6c:
                    dc:b5:27:91:21:d2:f9:6d:97:94:26:ca:6f:c1:5a:
                    72:a3:8c:8a:68:60:52:9a:52:b9:ed:33:07:a1:07:
                    36:c6:17:27:85:39:50:b6:e3:1a:a8:45:cd:2f:1a:
                    64:15:4b:7e:11:de:4c:64:de:03:31:71:8e:44:c4:
                    89:d7:90:fd:45:9d:08:dd:b8:a6:18:e4:f7:a7:0e:
                    f4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:13:1E:DF:91:CD:29:BB:47:66:AD:E8:0C:2A:AF:B4:82:AD:03:14
            X509v3 Authority Key Identifier:
                keyid:49:5E:50:01:49:CE:8D:71:B9:60:4B:58:9E:0C:32:FE:A0:7A:98:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SV5QAUnOjXG5YEtYngwy_qB6mLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/SV5QAUnOjXG5YEtYngwy_qB6mLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/SV5QAUnOjXG5YEtYngwy_qB6mLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:8d:b5:4d:6e:31:00:0f:41:7d:eb:14:e6:11:2b:de:16:12:
         6a:75:cc:6a:5a:ed:83:ef:4e:32:ab:9d:4d:a0:ab:bd:d3:ab:
         69:ee:56:ee:b0:f6:cc:32:09:e6:b0:f0:ce:9a:4d:f7:2a:19:
         46:7b:6e:32:ec:b7:94:5a:eb:56:7d:a7:ad:64:3a:f8:b8:fa:
         9b:62:0f:b7:fe:b7:7b:51:93:05:03:fc:ee:dd:f0:cf:5c:ea:
         a4:84:f2:d5:fa:42:09:32:05:5a:a2:4d:2e:c2:10:47:03:a3:
         8d:28:78:46:cf:8a:09:5d:32:d7:80:a3:78:34:9f:e9:0b:4f:
         89:dc:64:19:4e:9f:98:e1:ae:6f:cc:ae:1a:b5:d0:c6:cc:ba:
         50:36:78:13:b4:19:93:20:2b:4e:9e:4b:d1:8e:65:ea:73:a0:
         c0:9f:ac:87:78:1d:5c:af:bd:74:95:2f:dc:b4:19:8d:3e:08:
         fa:93:17:c6:92:08:83:d5:1e:25:94:47:4e:14:b5:2d:4e:2b:
         ef:74:45:55:98:15:fb:ef:3e:38:e5:99:12:c5:93:d1:84:8c:
         3d:95:d7:86:1a:36:ef:cb:45:cc:8d:b1:34:ef:a5:3c:68:64:
         a4:b2:8c:3a:e8:d4:a5:b9:91:4b:f2:fb:b1:9b:c8:81:05:8c:
         a8:5d:28:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:23:34 2025 by rpki-client