This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
File:                     r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft (raw, json)
Hash identifier:          1nz6ZUjxwdkc4v2/eHRgM/VPOoslgPNU3IdaS/plP/g=
Subject key identifier:   D9:95:E8:55:90:0E:73:0C:AC:1F:B4:81:7A:16:4E:2D:AD:A0:EF:6F
Authority key identifier: AF:53:16:FC:4A:83:B3:D0:3E:29:75:F8:BE:C2:70:CB:0F:4E:FB:1D
Certificate issuer:       /CN=af5316fc4a83b3d03e2975f8bec270cb0f4efb1d
Certificate serial:       019B397D701B67A37AC90D9ED73DB376A4BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
Manifest number:          0893
Signing time:             Sat 20 Dec 2025 02:01:20 +0000
Manifest this update:     Sat 20 Dec 2025 02:01:20 +0000
Manifest next update:     Sun 21 Dec 2025 02:01:20 +0000
Files and hashes:         1: NYMaFoViX2lAhStZm9x_grA9T18.roa (hash: tWBC4K3jlP5jve6TzPNJrV6Z7ikcoFCQ6oxMffCuxvk=)
                          2: r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl (hash: in2pvHipVxKRmeqJw3P6GcA6sfk6GCFHEgCRrFgDJkw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:7d:70:1b:67:a3:7a:c9:0d:9e:d7:3d:b3:76:a4:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af5316fc4a83b3d03e2975f8bec270cb0f4efb1d
        Validity
            Not Before: Dec 20 02:01:20 2025 GMT
            Not After : Dec 21 02:01:20 2025 GMT
        Subject: CN=d995e855900e730cac1fb4817a164e2dada0ef6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b8:43:be:da:ef:68:9e:10:d6:db:73:41:99:
                    3e:95:64:8f:9e:5f:bb:7b:5a:8b:5d:2c:f3:90:28:
                    06:fc:2b:57:b3:84:05:bc:cf:58:7f:94:a1:0d:a9:
                    2f:62:03:9b:bf:36:c3:4c:43:34:06:85:d1:6c:f7:
                    5e:92:80:92:7e:19:76:52:39:46:24:9e:72:0e:c1:
                    87:00:42:43:d6:9c:3a:79:e7:dd:77:0f:ab:af:6f:
                    fc:1d:f5:35:2c:dc:d0:e4:c9:57:19:5b:cc:73:51:
                    bd:d2:f1:cc:6b:1b:8a:e6:99:47:a0:3c:9e:7a:be:
                    e6:03:3c:0f:a3:e3:87:04:b1:53:ad:4a:3f:c1:bc:
                    b1:8f:8c:9c:8b:4e:1c:14:83:b1:74:af:c8:7f:70:
                    b9:17:bc:46:2a:47:05:7b:39:87:39:20:60:2b:65:
                    b0:35:f7:a1:cb:14:27:49:cf:65:4c:87:87:48:25:
                    af:e1:d1:fb:ec:c6:ce:03:c7:68:8f:43:fd:b7:97:
                    45:36:85:ec:1a:85:cb:3d:56:cc:0b:42:c7:f3:80:
                    92:1c:00:a2:25:60:31:00:c1:14:d6:63:d6:44:27:
                    d1:9d:ac:ed:e5:16:3a:cd:cd:3e:17:53:4e:e9:bb:
                    4b:f0:05:6c:db:0f:73:b3:1a:a7:47:a8:7e:c2:90:
                    2f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:95:E8:55:90:0E:73:0C:AC:1F:B4:81:7A:16:4E:2D:AD:A0:EF:6F
            X509v3 Authority Key Identifier:
                keyid:AF:53:16:FC:4A:83:B3:D0:3E:29:75:F8:BE:C2:70:CB:0F:4E:FB:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:5e:46:f4:fe:22:d0:4d:53:ea:e9:16:1a:61:44:66:1b:78:
         87:a9:81:12:9c:f6:bb:1f:58:2e:20:97:7d:b9:1e:f2:21:82:
         d0:7c:dc:1b:6b:51:71:f0:bd:07:2c:0b:fa:7f:05:d1:db:d6:
         3c:1d:26:4d:5c:99:48:17:3a:4e:2e:8b:23:cd:cd:88:bf:cf:
         c5:77:c8:94:79:69:e4:fb:2d:ed:86:32:c9:ad:cb:84:d4:f1:
         59:dc:44:41:e7:75:0c:ba:7d:a1:dc:3d:76:06:c5:1e:9e:76:
         39:2e:bc:95:7d:73:2f:a3:07:2f:4e:52:31:41:bc:de:3e:be:
         db:d7:d7:99:32:73:07:a3:99:0d:db:59:f2:f7:60:27:c2:85:
         9c:9e:df:d1:90:51:48:78:c2:00:92:9c:38:98:ac:d2:28:fb:
         9e:cc:23:bf:7a:34:c6:73:98:47:ec:99:6d:28:c5:db:ce:f6:
         24:01:4e:d8:f2:26:d3:02:a4:84:13:fd:86:eb:5b:ad:0d:a3:
         d9:fa:48:62:0c:47:8d:f6:69:6b:26:08:0c:67:9d:5b:70:22:
         62:49:72:3b:22:aa:8c:a0:e8:23:79:2a:ff:23:a5:e2:70:0d:
         75:ea:93:a6:c6:00:65:29:8d:dc:d7:63:d8:15:3d:99:9d:79:
         19:f5:0a:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs5fXAbZ6N6yQ2e1z2zdqS6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNTMxNmZjNGE4M2IzZDAzZTI5NzVmOGJlYzI3MGNiMGY0
ZWZiMWQwHhcNMjUxMjIwMDIwMTIwWhcNMjUxMjIxMDIwMTIwWjAzMTEwLwYDVQQD
EyhkOTk1ZTg1NTkwMGU3MzBjYWMxZmI0ODE3YTE2NGUyZGFkYTBlZjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7hDvtrvaJ4Q1ttzQZk+lWSPnl+7
e1qLXSzzkCgG/CtXs4QFvM9Yf5ShDakvYgObvzbDTEM0BoXRbPdekoCSfhl2UjlG
JJ5yDsGHAEJD1pw6eefddw+rr2/8HfU1LNzQ5MlXGVvMc1G90vHMaxuK5plHoDye
er7mAzwPo+OHBLFTrUo/wbyxj4yci04cFIOxdK/If3C5F7xGKkcFezmHOSBgK2Ww
NfehyxQnSc9lTIeHSCWv4dH77MbOA8doj0P9t5dFNoXsGoXLPVbMC0LH84CSHACi
JWAxAMEU1mPWRCfRnazt5RY6zc0+F1NO6btL8AVs2w9zsxqnR6h+wpAvAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmV6FWQDnMMrB+0gXoWTi2toO9vMB8GA1UdIwQY
MBaAFK9TFvxKg7PQPil1+L7CcMsPTvsdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjFNV19FcURzOUEtS1hYNHZzSnd5dzlPLXgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9jOTBkNWQtY2E2MS00NDY0LTg5OWEt
ZDEyMDVlMGMwY2NlLzEvcjFNV19FcURzOUEtS1hYNHZzSnd5dzlPLXgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9jOTBkNWQtY2E2MS00NDY0LTg5OWEtZDEyMDVlMGMwY2Nl
LzEvcjFNV19FcURzOUEtS1hYNHZzSnd5dzlPLXgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjF5G9P4i
0E1T6ukWGmFEZht4h6mBEpz2ux9YLiCXfbke8iGC0HzcG2tRcfC9BywL+n8F0dvW
PB0mTVyZSBc6Ti6LI83NiL/PxXfIlHlp5Pst7YYyya3LhNTxWdxEQed1DLp9odw9
dgbFHp52OS68lX1zL6MHL05SMUG83j6+29fXmTJzB6OZDdtZ8vdgJ8KFnJ7f0ZBR
SHjCAJKcOJis0ij7nswjv3o0xnOYR+yZbSjF2872JAFO2PIm0wKkhBP9hutbrQ2j
2fpIYgxHjfZpayYIDGedW3AiYklyOyKqjKDoI3kq/yOl4nANdeqTpsYAZSmN3Ndj
2BU9mZ15GfUKtg==
-----END CERTIFICATE-----
Generated at Sat Dec 20 03:54:27 2025 by rpki-client