This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.mft
File:                     w6VSge-EuxEeM-zHwAiJSP1KjbI.mft (raw, json)
Hash identifier:          DRyejWc+Cx6S241WHQF4bLFUlIhN1YBPBEBO8/Zz1OE=
Subject key identifier:   BE:47:C6:35:35:7B:B2:02:C8:52:ED:03:81:48:46:DC:6C:7F:44:95
Authority key identifier: C3:A5:52:81:EF:84:BB:11:1E:33:EC:C7:C0:08:89:48:FD:4A:8D:B2
Certificate issuer:       /CN=c3a55281ef84bb111e33ecc7c0088948fd4a8db2
Certificate serial:       019B4B15490C5A68BA2AABE5B51570022D83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6VSge-EuxEeM-zHwAiJSP1KjbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.mft
Manifest number:          1792
Signing time:             Tue 23 Dec 2025 12:00:44 +0000
Manifest this update:     Tue 23 Dec 2025 12:00:44 +0000
Manifest next update:     Wed 24 Dec 2025 12:00:44 +0000
Files and hashes:         1: w6VSge-EuxEeM-zHwAiJSP1KjbI.crl (hash: 5NdfUA4HBzFTIxm4vfWhyooIdTuT3ouwPXpqDI6lE/M=)
                          2: wFiWhGfsPPPiHPKgaPOOOuMQ59k.roa (hash: kPUheiP/1RIkZMjes3RF7D1Dk6VSyteFka8OLwBciXU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w6VSge-EuxEeM-zHwAiJSP1KjbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Dec 2025 12:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4b:15:49:0c:5a:68:ba:2a:ab:e5:b5:15:70:02:2d:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a55281ef84bb111e33ecc7c0088948fd4a8db2
        Validity
            Not Before: Dec 23 12:00:44 2025 GMT
            Not After : Dec 24 12:00:44 2025 GMT
        Subject: CN=be47c635357bb202c852ed03814846dc6c7f4495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2b:25:e1:fd:e2:6e:27:c6:37:d3:2a:5a:fb:
                    2c:3d:ab:c1:36:6d:a2:42:60:ca:3b:9a:7e:d3:36:
                    73:9d:02:ae:62:f4:e3:7e:33:94:a9:31:21:15:e6:
                    a0:77:f0:c7:4e:ed:18:e9:df:f8:37:49:07:94:b2:
                    27:6a:de:50:e7:c5:1f:ca:ee:b4:97:bb:65:4e:13:
                    2b:70:1f:fa:cc:a3:49:85:d8:d6:2e:f0:52:94:ef:
                    4d:1b:a8:d9:e8:af:27:cb:37:02:3b:8d:ab:f8:3f:
                    6a:0f:37:cc:0c:9b:8d:d5:1f:03:10:71:93:0e:a4:
                    c8:b5:b2:f9:03:ae:db:f5:48:d9:25:2d:38:98:1d:
                    92:65:59:43:76:66:c9:7d:2e:62:14:fb:95:f1:9c:
                    c5:68:0b:35:90:9e:bf:ee:fe:f3:2a:2b:fb:29:d3:
                    89:0f:8c:fb:b0:68:f7:68:e7:20:b0:3a:2f:23:5a:
                    45:07:f3:7e:b3:2b:f2:97:db:ce:85:53:d3:f5:4a:
                    59:97:65:09:d9:b0:15:dd:87:20:51:9f:5d:fe:65:
                    a9:c7:45:cd:4a:0a:56:39:08:2f:bf:9e:0b:91:ec:
                    e8:08:05:64:58:20:ab:04:e9:cd:17:9a:8d:d0:2c:
                    77:ef:34:c2:25:5f:f8:00:92:b6:ef:e2:6a:96:9d:
                    ca:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:47:C6:35:35:7B:B2:02:C8:52:ED:03:81:48:46:DC:6C:7F:44:95
            X509v3 Authority Key Identifier:
                keyid:C3:A5:52:81:EF:84:BB:11:1E:33:EC:C7:C0:08:89:48:FD:4A:8D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6VSge-EuxEeM-zHwAiJSP1KjbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:f7:f0:7c:75:6b:b6:e2:e1:7e:e0:f8:e6:e2:2e:0d:c6:4d:
         83:d9:48:bb:38:7e:73:0e:0a:55:b2:1e:e0:3c:07:2f:fe:68:
         f2:9e:9b:53:8e:34:ec:a1:04:f0:d1:a5:96:69:2e:fe:98:e5:
         97:48:f0:fa:d5:68:4c:0e:12:4e:5d:0e:1c:e6:16:2c:58:9e:
         bb:4a:5d:71:30:c7:ae:98:df:3c:af:15:de:c9:be:09:4e:8f:
         6d:26:c3:9a:ba:c2:a5:5d:db:d1:e1:ba:60:ba:b7:06:0b:b9:
         87:0f:49:d7:f8:d5:88:56:56:96:91:80:00:da:2f:f9:8b:22:
         3d:98:69:ac:67:a9:74:51:95:66:78:ef:90:93:d6:95:a1:6f:
         f3:cd:10:07:c5:70:19:c1:33:4e:81:9d:97:21:f2:60:32:7e:
         be:0d:b9:3f:f0:75:4e:d4:57:11:bb:ef:1f:d5:24:9d:8f:d3:
         a4:30:bb:1e:e6:c7:53:4e:44:ee:06:7c:fd:c2:a3:62:ec:23:
         61:f9:07:40:bb:94:da:c5:39:d2:47:1c:ae:a8:5c:74:04:89:
         28:2a:1d:23:32:38:9e:c9:bc:fb:a7:d6:dd:40:2d:98:e4:a1:
         70:3b:56:50:02:f0:5b:7a:4a:96:84:a1:52:bd:20:2c:a8:26:
         b4:02:e4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 15:50:03 2025 by rpki-client