This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft
File:                     wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft (raw, json)
Hash identifier:          wtSVGGadOtuZ0IsO4GCm6LRi9NxoYJjc0qlphfDwHuw=
Subject key identifier:   04:A9:97:20:95:EF:F9:18:7A:53:35:CF:01:85:BF:D7:83:31:8C:E1
Authority key identifier: C1:4F:05:BC:18:F5:3B:80:FC:29:C0:AD:1B:28:38:92:BD:FE:36:CF
Certificate issuer:       /CN=c14f05bc18f53b80fc29c0ad1b283892bdfe36cf
Certificate serial:       019B70A39B16A4B0703D3ADAA88A06EA29B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft
Manifest number:          0293
Signing time:             Tue 30 Dec 2025 19:02:08 +0000
Manifest this update:     Tue 30 Dec 2025 19:02:08 +0000
Manifest next update:     Wed 31 Dec 2025 19:02:08 +0000
Files and hashes:         1: _M9B2KOz2UeSzhUegvYxGA2BwYo.roa (hash: D0dhCF5CGV5Me0OwA23AKaMmK0KyGQzZrCqAnO1Fksg=)
                          2: wU8FvBj1O4D8KcCtGyg4kr3-Ns8.crl (hash: CObCN2bYybgKOEItmLqQAW5DA9kCUqDVQmgilvqIIMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 31 Dec 2025 15:21:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:70:a3:9b:16:a4:b0:70:3d:3a:da:a8:8a:06:ea:29:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c14f05bc18f53b80fc29c0ad1b283892bdfe36cf
        Validity
            Not Before: Dec 30 19:02:08 2025 GMT
            Not After : Dec 31 19:02:08 2025 GMT
        Subject: CN=04a9972095eff9187a5335cf0185bfd783318ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:59:a5:47:79:98:0d:6d:6e:9b:9a:bb:74:04:
                    1e:25:f6:5a:3d:97:ec:27:e9:6e:aa:93:3c:93:b0:
                    43:92:44:9f:b8:8b:71:1d:fc:1e:64:84:42:66:84:
                    50:85:a5:a4:2d:ae:77:6f:eb:3a:99:7d:54:1e:45:
                    10:12:70:e9:bc:88:3c:a0:a6:dc:c5:12:ce:4f:10:
                    b5:56:12:04:37:1e:b4:9b:9d:9d:e9:12:52:f2:6a:
                    9c:59:19:4a:f5:e9:32:c7:09:f7:f4:02:c3:b2:a2:
                    b2:7e:84:89:50:19:38:ba:08:52:40:0e:df:3b:ed:
                    ca:76:4f:b7:d2:93:e1:e9:fb:f3:b1:86:be:1f:a2:
                    8f:e8:d4:ce:28:e0:f7:cd:cb:4e:9d:ae:23:e4:39:
                    98:89:9d:51:eb:fc:a6:b9:05:d2:51:5e:a1:8e:c6:
                    92:2e:52:8e:91:a3:7a:0a:48:d2:d3:b2:67:c0:91:
                    fb:76:df:da:fb:9d:40:03:02:67:06:2c:98:ab:06:
                    b8:26:44:67:ac:5f:82:fb:83:b7:63:e7:04:bd:e3:
                    b6:71:ba:1e:df:f1:f9:3f:ba:4e:de:88:a6:fe:7a:
                    a5:2f:54:c1:f9:b5:8c:b6:e8:c7:ba:43:ac:71:9c:
                    cd:d3:bc:68:6a:50:30:5b:11:69:32:3b:c7:c2:ee:
                    85:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A9:97:20:95:EF:F9:18:7A:53:35:CF:01:85:BF:D7:83:31:8C:E1
            X509v3 Authority Key Identifier:
                keyid:C1:4F:05:BC:18:F5:3B:80:FC:29:C0:AD:1B:28:38:92:BD:FE:36:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:7a:69:47:92:33:90:e4:ae:c0:0c:6d:87:52:0f:c6:df:5d:
         b4:31:78:b3:fd:35:63:0a:29:7b:02:4f:43:d0:9b:4f:37:6e:
         ec:6b:a0:1e:06:b5:9b:f3:d2:b2:7d:2e:82:66:61:f1:18:4f:
         aa:3d:0c:76:fd:77:22:5f:ca:ec:f2:57:46:66:58:64:0e:23:
         ee:fd:d5:4b:ab:eb:fa:5b:88:6d:d7:df:70:0f:3f:5c:50:aa:
         27:95:d9:8c:59:8f:7c:af:ed:38:0d:0d:18:63:0a:28:7b:f4:
         e3:87:95:42:70:59:7b:03:23:bb:bc:55:b7:30:4d:ae:98:54:
         f4:7b:88:dd:b3:3d:71:a8:e5:01:ae:1d:87:2e:5c:39:bf:6e:
         a9:ad:d3:c4:5c:d2:e7:8f:f0:89:23:7e:30:15:d1:bf:70:99:
         dd:4f:77:a9:74:e6:d4:2d:49:01:60:09:71:8c:52:5a:d8:82:
         56:6a:e7:2b:6e:21:7d:6f:1e:6f:18:dc:e2:9c:9a:34:b5:24:
         d3:78:60:16:98:37:a0:f8:92:fe:19:5b:69:ec:65:ed:54:19:
         46:fb:36:e0:c4:08:a1:ae:d5:e8:6d:e6:94:37:66:3c:49:c2:
         81:b3:40:a0:80:eb:9f:c4:7d:20:8d:34:45:63:44:32:0f:29:
         09:fc:92:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 00:11:40 2025 by rpki-client