This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft
File:                     W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft (raw, json)
Hash identifier:          Q9KYD1RAMJE0l7lJnC6QsHhPaIa8RjF7NEW6knjracE=
Subject key identifier:   34:54:8A:8D:9E:D3:84:44:9B:A9:91:FA:03:8C:97:AB:80:67:8F:5C
Authority key identifier: 5B:F8:14:35:ED:13:78:98:95:F3:75:DC:34:D0:4C:E9:1A:CA:47:44
Certificate issuer:       /CN=5bf81435ed13789895f375dc34d04ce91aca4744
Certificate serial:       019B39464B53F650691DFE051C973072EB0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft
Manifest number:          1080
Signing time:             Sat 20 Dec 2025 01:01:06 +0000
Manifest this update:     Sat 20 Dec 2025 01:01:06 +0000
Manifest next update:     Sun 21 Dec 2025 01:01:06 +0000
Files and hashes:         1: W_gUNe0TeJiV83XcNNBM6RrKR0Q.crl (hash: qmc5yl4zIqF5Y02vGo9XRn7dY0jDs2FfiVqGk93dVKk=)
                          2: c_oc0m8Q0D83TCO_fpBfaVJwNRs.roa (hash: mqb+D/ntHZJvZ/z36Bl1ItrdLaA25yJOk+uY5NUbN8E=)
                          3: h8iTz8AcPNoluNeaeW1XeZ2ZNTU.roa (hash: 6G/ihHpZFbWryvRuqI72FYSOZMMwREr3wb5GAXO7F4Q=)
                          4: pPT9mYyICtb5n_YmE-i-z8FboNk.roa (hash: L1rDzYnw/K/P26JqWUlSKAL88oGG3Ri5ojFqbgYUqu8=)
                          5: slyK1DAB4dbXemNXvoMVu6ZnABY.roa (hash: Rc7vQ1K5O9MgP86008BcYYEvvo1tQ62QMOGFXd3ulqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:46:4b:53:f6:50:69:1d:fe:05:1c:97:30:72:eb:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bf81435ed13789895f375dc34d04ce91aca4744
        Validity
            Not Before: Dec 20 01:01:06 2025 GMT
            Not After : Dec 21 01:01:06 2025 GMT
        Subject: CN=34548a8d9ed384449ba991fa038c97ab80678f5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:36:b8:92:65:6b:b4:33:c7:ad:00:d9:0a:37:
                    71:2b:7b:26:23:d3:9b:d2:d6:66:62:92:da:5d:ee:
                    78:11:09:8f:3d:99:d8:ed:32:41:c2:36:06:a3:3c:
                    60:cd:f2:cb:3f:88:65:59:02:e6:87:f8:cf:19:43:
                    ec:35:63:a9:fa:ac:95:0d:e7:d1:12:af:57:e7:96:
                    ea:a9:b5:ad:2f:40:16:03:67:21:eb:d6:73:5e:48:
                    6d:8c:1a:eb:fe:1a:f2:06:65:1c:ab:e7:b8:5f:88:
                    17:ba:ff:9c:18:22:0d:21:bd:3c:56:1a:8c:51:6c:
                    aa:10:fa:96:5b:cf:a7:7e:4e:70:e7:20:47:62:24:
                    6a:57:da:ff:19:28:82:5a:6e:e8:26:76:ea:6a:1a:
                    39:dd:5e:7e:81:cf:c4:e1:64:9f:e3:c8:b9:31:d1:
                    c1:b4:bb:df:8d:5d:2d:36:5e:18:ae:d1:ed:4d:bd:
                    c3:a1:5a:b8:34:fa:7f:73:2a:92:e3:e3:33:84:98:
                    d5:1b:2a:d0:a5:ea:a3:5f:4a:93:76:c0:69:23:20:
                    ce:5a:48:f6:9f:30:69:6c:af:06:77:01:c8:57:99:
                    f1:55:26:f7:50:e4:98:3c:45:67:b2:1e:62:74:1f:
                    41:1c:42:d2:56:af:3a:11:5b:eb:ba:2b:f6:a1:49:
                    76:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:54:8A:8D:9E:D3:84:44:9B:A9:91:FA:03:8C:97:AB:80:67:8F:5C
            X509v3 Authority Key Identifier:
                keyid:5B:F8:14:35:ED:13:78:98:95:F3:75:DC:34:D0:4C:E9:1A:CA:47:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:bc:55:78:a0:ba:b8:da:37:02:a8:1b:84:4c:4f:d2:a2:90:
         7f:0b:10:4d:6e:66:ff:6b:62:3a:e9:c8:af:8a:63:a6:ee:58:
         b9:15:db:ce:8d:5b:73:5f:7a:bc:ea:3a:8d:41:be:97:1a:9e:
         89:2d:7a:a0:6c:c2:87:61:30:f5:ad:70:9e:92:d5:ee:1b:75:
         db:d6:a5:c2:6c:b3:dc:37:83:73:86:b0:44:03:75:92:fd:65:
         b9:b5:af:2d:ac:a2:47:8a:ec:b4:81:e3:66:1c:1f:b2:ac:06:
         3d:78:b2:b2:b2:19:c9:cc:d3:eb:6d:1a:87:5d:0e:85:52:0d:
         00:9e:f9:6e:59:5b:1d:37:a6:af:ce:a1:2a:7e:0a:ed:aa:9c:
         f1:fe:70:0e:d3:0b:75:ef:f1:b7:45:24:d8:bb:55:47:bc:68:
         94:57:70:6d:f2:da:2d:6c:a5:30:55:20:fc:b1:c4:cf:04:15:
         07:cb:7a:8a:34:83:d9:29:ba:e5:52:ef:85:3c:98:9f:dc:ca:
         18:bc:40:04:7c:40:01:b1:97:6e:47:e5:bf:59:b8:2f:e5:f4:
         d5:1c:a4:5f:fa:f9:81:42:d9:d2:ee:64:78:c1:17:1a:21:41:
         d3:37:49:21:e8:af:55:69:2c:30:3e:25:92:a4:94:aa:7d:14:
         51:1a:2c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:29:55 2025 by rpki-client