This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
File:                     5aJ1VcGlxd3396zIOfpXeqfuepw.mft (raw, json)
Hash identifier:          lU1HMtWitnLklVfZUnxHDjzd5PiCywnYmPRYYcYYXao=
Subject key identifier:   D8:11:48:FD:FE:E2:61:47:71:46:9B:C5:00:81:82:43:89:F0:EA:5F
Authority key identifier: E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
Certificate issuer:       /CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Certificate serial:       019B3DC79915855509AF863FE812371EC3EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
Manifest number:          178C
Signing time:             Sat 20 Dec 2025 22:00:49 +0000
Manifest this update:     Sat 20 Dec 2025 22:00:49 +0000
Manifest next update:     Sun 21 Dec 2025 22:00:49 +0000
Files and hashes:         1: 5aJ1VcGlxd3396zIOfpXeqfuepw.crl (hash: G1pHZ04FAgcbP1B6M/HvWpOarTkjWU6NCJOUglw3lAM=)
                          2: 6UYJYSp_H1qb-Z1ShFc_cXl87FI.roa (hash: 7Wjn3rvrdmK/H1wlwqE+Z2pd0NQT1fwp/AaKLM/IzPg=)
                          3: jISWNsTxPdEjjPdMy-Whzlvb0Ac.roa (hash: La/cVhkJ14UaJXVbjX6BzXzgOteVwnmYx6tdmiaM0OE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 22:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3d:c7:99:15:85:55:09:af:86:3f:e8:12:37:1e:c3:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
        Validity
            Not Before: Dec 20 22:00:49 2025 GMT
            Not After : Dec 21 22:00:49 2025 GMT
        Subject: CN=d81148fdfee2614771469bc50081824389f0ea5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f0:59:eb:ee:f9:9b:d1:51:bd:b3:d9:71:37:
                    65:54:99:c9:cd:2b:33:bc:ae:5e:42:d8:11:99:48:
                    ae:80:a2:4a:d0:44:ef:2c:f7:cb:a4:ef:e5:42:8d:
                    1e:f3:cb:f9:6b:d7:a0:bd:ca:d8:59:27:af:f0:5d:
                    2f:7e:e7:de:46:b1:1a:f7:6d:0e:99:87:81:23:b2:
                    5c:6b:e5:23:69:9e:e9:84:a4:47:0b:17:ae:98:6d:
                    f5:72:75:05:2a:84:9d:bc:14:da:49:ae:f8:a2:1a:
                    30:5e:18:d4:86:bb:14:e3:59:83:70:b2:84:02:30:
                    42:93:f9:8f:c5:7b:da:77:e7:a7:b4:5a:64:17:ad:
                    08:ca:c2:22:fa:36:45:e4:55:9c:09:86:45:07:9b:
                    c8:59:08:94:ac:6d:e3:1a:9b:7c:b5:ed:e4:b7:2f:
                    e9:77:d2:39:4e:a0:c6:29:2f:55:6c:e0:b5:b9:34:
                    18:6f:8b:9b:2c:5b:a4:d4:f7:98:85:e8:66:8e:37:
                    ca:3c:f5:21:d3:1b:48:d5:4c:46:1a:6b:2d:ba:1d:
                    ab:58:24:19:f5:67:68:fd:7d:63:85:76:0f:4f:3d:
                    c0:fb:de:03:5d:ad:c7:31:8c:bf:65:a5:d0:31:a5:
                    ad:d6:96:30:1c:89:d7:44:0f:4e:28:e9:e5:64:1f:
                    f5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:11:48:FD:FE:E2:61:47:71:46:9B:C5:00:81:82:43:89:F0:EA:5F
            X509v3 Authority Key Identifier:
                keyid:E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:a5:5e:ee:b8:c9:ea:4c:55:06:0a:33:12:d3:c9:4e:61:03:
         12:f3:20:00:9d:d5:c2:c7:1c:d7:e5:3b:eb:cd:87:d0:3d:ab:
         a3:74:e6:f8:00:36:f6:14:56:4f:6f:aa:7d:02:0f:10:75:41:
         ed:5c:e2:85:85:65:3e:53:a9:98:9f:47:73:4d:8c:57:65:8f:
         10:79:61:90:d7:1e:c9:51:de:06:10:96:63:17:5f:7c:d8:2b:
         80:8e:07:0c:c4:c5:df:de:f9:dd:38:ad:09:a6:0d:69:79:a1:
         95:8e:bf:27:a3:a6:3f:cd:af:46:23:74:0a:1d:7b:db:fd:1d:
         82:d3:8c:f1:fc:6d:7d:9f:c1:b5:5e:f1:24:be:51:88:e4:d0:
         15:59:6a:10:38:2f:c6:4d:32:4e:87:be:85:55:75:e5:e1:95:
         c7:4d:33:e2:c0:38:67:77:da:65:c2:59:bf:0b:1c:f3:20:f4:
         99:96:03:4e:71:22:3e:48:e9:51:35:15:63:3d:23:eb:6a:84:
         aa:a0:09:9d:7f:cf:8b:55:5a:9a:87:ec:fd:69:ed:eb:f4:6a:
         c7:9b:5e:9a:e4:18:af:34:dc:dd:5d:2e:a3:03:05:18:bd:f4:
         dd:f8:bf:4f:9b:f6:b1:4a:ca:cf:72:f6:b7:d4:50:32:4d:a6:
         34:82:1d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 06:54:28 2025 by rpki-client