This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
File:                     W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft (raw, json)
Hash identifier:          Sz8rN8PO8oyFciP0exA/zg01AJfTgAInDcrVpVr/Vjg=
Subject key identifier:   83:7A:59:BE:08:17:E4:D0:7D:79:49:9F:B5:28:2F:58:04:A3:02:17
Authority key identifier: 5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
Certificate issuer:       /CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Certificate serial:       019B57888F6B4079E72DD14C5E88B8F87C65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
Manifest number:          1795
Signing time:             Thu 25 Dec 2025 22:02:05 +0000
Manifest this update:     Thu 25 Dec 2025 22:02:05 +0000
Manifest next update:     Fri 26 Dec 2025 22:02:05 +0000
Files and hashes:         1: Dojs8PEQnvulcYqgM4rdKOxunu0.roa (hash: dLJI4qVjVKlBypD5DT2hbIXIp/KqABCIFpos5VZ0K94=)
                          2: W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl (hash: rN3Y+b2mSNJC3cNSlQGZSK3/BWAeBO+muWlWT9rvALA=)
                          3: ZHpRRkh9oiRLBNkKdSMUtdYZ7o4.roa (hash: G5aCOLk/4QhatU9joqPbjeRwSGccuFt7GUatcEniztQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Dec 2025 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:57:88:8f:6b:40:79:e7:2d:d1:4c:5e:88:b8:f8:7c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
        Validity
            Not Before: Dec 25 22:02:05 2025 GMT
            Not After : Dec 26 22:02:05 2025 GMT
        Subject: CN=837a59be0817e4d07d79499fb5282f5804a30217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2b:b1:2c:5b:00:6e:55:ca:d0:93:09:3e:9b:
                    9e:7d:98:73:b6:b1:bd:f8:22:49:30:72:4f:27:6c:
                    50:15:49:f2:d9:04:68:65:15:b7:52:b0:e5:ef:5e:
                    a3:d6:0a:38:c3:80:45:59:bc:b8:5b:8f:61:37:3f:
                    47:b6:b9:aa:cd:03:57:9a:40:38:88:d2:7a:7c:10:
                    48:4c:9c:bd:7c:98:93:e0:f6:05:28:d7:ad:4a:0f:
                    b2:d9:88:16:ac:48:30:18:b0:91:c2:2c:8c:14:cd:
                    6c:80:87:24:90:12:4e:cc:df:23:cc:2e:5c:d4:e7:
                    03:4d:80:15:d2:b8:e4:90:d0:51:d4:d3:c8:da:d9:
                    d4:34:2e:c3:4b:ca:b0:ff:35:01:4f:a3:ad:7c:0a:
                    ce:54:e2:d7:0c:9d:05:87:c2:02:c3:5e:9d:3f:d1:
                    a6:d6:96:f4:eb:32:b3:80:4e:c5:60:65:04:10:09:
                    5a:c5:43:db:e1:03:02:17:85:be:9c:37:97:cf:e2:
                    21:78:d1:60:7d:16:3b:b0:c6:6d:fb:e1:bf:49:6d:
                    f0:93:76:4f:11:d8:c6:35:da:3e:a0:e9:cf:97:5d:
                    75:f6:95:5b:cd:fa:5f:46:c9:53:79:bc:b5:18:5a:
                    a3:b5:45:36:07:68:3a:11:e4:59:8e:94:2d:3f:19:
                    ce:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:7A:59:BE:08:17:E4:D0:7D:79:49:9F:B5:28:2F:58:04:A3:02:17
            X509v3 Authority Key Identifier:
                keyid:5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:e5:6b:c2:a1:ce:7f:1e:a9:b2:74:02:6d:9d:33:93:07:93:
         3f:26:d1:bd:2b:16:10:2c:14:31:16:64:07:46:6b:ca:77:b1:
         f7:89:bc:11:4c:c3:a3:40:2c:1c:e7:55:92:ae:f8:9b:d4:40:
         2c:b7:ad:21:e2:5f:4e:e6:00:33:94:db:d7:2d:12:e4:56:76:
         02:ed:d6:e1:d8:cf:c1:c7:b6:35:89:91:66:21:81:a0:da:63:
         b7:8d:ed:21:17:d1:14:6d:07:08:06:3f:fa:fb:1b:81:1e:c9:
         63:a4:a3:8e:4b:e6:c4:fe:2a:9d:53:18:66:60:2a:15:d3:6e:
         6a:44:1d:e0:4b:6c:1e:b9:38:31:5b:02:17:b4:4f:65:93:cf:
         36:52:d8:54:69:64:13:96:89:8f:0e:3d:2a:ae:ab:73:b2:78:
         a2:c0:aa:ab:52:94:ec:3f:97:0d:67:54:e5:53:b2:75:d2:46:
         8c:ea:e6:b7:af:f8:63:34:84:ca:99:1f:59:20:b4:c7:d6:2e:
         98:21:ac:50:e9:f9:d0:a6:76:fb:a1:d1:4a:57:92:36:de:f4:
         a7:a7:96:e8:10:5c:68:39:c5:5e:ec:a8:11:d9:73:07:4a:89:
         8b:f9:4d:ef:da:34:84:aa:9f:6f:bc:1d:bc:e3:fc:fe:37:c5:
         0b:6a:7d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 23:07:23 2025 by rpki-client