This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
File:                     w0CQmuwyCowu4cq84TAsu31OBIY.mft (raw, json)
Hash identifier:          6DoFK0l4Kh/dG3r4DjIGl3YNrhicpVJsTCaqLW7lCyQ=
Subject key identifier:   37:3D:A6:D3:11:AE:34:79:F6:51:8E:7E:3C:B2:2E:4B:D8:87:0D:22
Authority key identifier: C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86
Certificate issuer:       /CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
Certificate serial:       019B3A21947C8A4F6E2B7E819B8E87AE4053
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
Manifest number:          1419
Signing time:             Sat 20 Dec 2025 05:00:37 +0000
Manifest this update:     Sat 20 Dec 2025 05:00:37 +0000
Manifest next update:     Sun 21 Dec 2025 05:00:37 +0000
Files and hashes:         1: 1JRmPjjw2eEyAEj7-d9EaoFd8tQ.roa (hash: qUFNGxht8SatseV7uTcgdf36n0Wje2HhZXA6lIEPzt8=)
                          2: jb-zD-QZseypOhoYrz7-lEkthR4.roa (hash: NVATDU2rQowVsA5kxCOsDlRv1YWlJaECqpg6RYlVt8g=)
                          3: w0CQmuwyCowu4cq84TAsu31OBIY.crl (hash: liGJb0lq61BXXZEJsdur1E7uBG2sOfnH7qAUHAQUnLg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3a:21:94:7c:8a:4f:6e:2b:7e:81:9b:8e:87:ae:40:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
        Validity
            Not Before: Dec 20 05:00:37 2025 GMT
            Not After : Dec 21 05:00:37 2025 GMT
        Subject: CN=373da6d311ae3479f6518e7e3cb22e4bd8870d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d5:06:91:e9:b9:4c:08:1d:04:bb:81:59:87:
                    be:e2:59:f8:b1:27:95:9a:0d:8e:15:9f:91:77:34:
                    95:1b:ce:7d:58:87:e7:c8:99:6c:89:16:9f:12:9e:
                    15:31:8e:d4:74:1f:d0:bf:ce:90:56:fe:92:67:c4:
                    79:f0:8e:52:11:69:c0:0f:0e:58:47:39:f7:ec:c7:
                    79:31:9a:38:48:e8:15:71:c0:24:2b:e5:f6:7a:1f:
                    51:0f:03:73:30:4b:a2:6e:4d:44:55:2a:64:59:03:
                    dd:52:2c:85:61:94:ac:e1:bd:49:4d:ef:29:4c:09:
                    86:50:72:c8:ab:67:7c:02:63:a8:c2:d7:19:14:00:
                    69:93:1b:e1:63:1a:59:91:d7:97:d5:1c:1f:b2:9e:
                    01:d3:bc:5c:a5:0f:ee:c7:99:1c:e7:30:6a:dc:60:
                    96:a4:6d:20:d4:77:bd:8e:71:37:f9:2c:ba:fb:8f:
                    55:a7:49:68:1e:65:9a:3c:c4:10:5b:49:e1:f6:d7:
                    4c:99:1b:40:67:bf:67:2c:9e:bb:05:28:85:b9:e2:
                    8a:ce:7f:3e:9e:fc:76:8e:98:cc:0a:eb:2a:2d:19:
                    43:26:cf:30:cf:a7:1d:e5:df:f6:a5:4c:58:75:66:
                    cf:b9:8c:10:fb:1b:e5:b5:08:b7:81:2e:6b:b5:6b:
                    f3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:3D:A6:D3:11:AE:34:79:F6:51:8E:7E:3C:B2:2E:4B:D8:87:0D:22
            X509v3 Authority Key Identifier:
                keyid:C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:78:d6:65:e9:f7:0c:2b:49:66:28:bc:62:5c:35:e1:c3:e8:
         1a:97:67:c4:ea:68:0e:a8:dc:50:9d:64:bc:1d:e1:f8:d6:58:
         e7:39:23:38:a8:5c:d9:f6:55:6f:63:99:8e:9f:51:c4:91:2b:
         14:f4:bf:ca:3b:a4:af:cb:85:ad:de:6d:a5:7f:e9:5a:52:72:
         6e:01:44:69:c8:e8:fd:4f:d1:6a:40:ca:9e:9f:c9:fa:dc:90:
         42:99:3b:7d:72:ad:af:05:46:d7:5f:82:bf:11:b1:ea:09:c8:
         a8:26:e2:e4:1b:fd:52:fd:de:cd:5b:86:0e:bc:7f:7c:a2:b3:
         e1:9f:c1:59:99:d6:78:5c:80:b8:08:5b:51:75:72:3a:93:81:
         43:93:34:b0:31:eb:6e:28:10:59:01:61:16:91:48:8b:eb:d1:
         aa:de:19:a2:61:66:08:81:f7:23:2b:b5:08:7d:90:7e:19:3b:
         c2:98:0f:ad:81:64:6c:af:38:31:61:0c:f5:86:9c:b6:67:75:
         57:bc:8f:88:0d:31:c6:ec:73:17:b9:7b:cd:2c:04:30:49:11:
         1a:fa:b1:7f:f2:a9:4e:50:57:cb:94:ea:6f:fa:20:21:6f:63:
         9d:75:e1:2a:85:e3:d4:bf:ac:b7:85:25:16:2d:d6:45:7f:5e:
         ca:24:14:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:31:34 2025 by rpki-client