This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
File:                     dw0111Zu5yRuTSEzy95Ip3RCPHc.mft (raw, json)
Hash identifier:          ZvkurSd0Kxg4awkvl1GGcY/3yzpEWytG8AlRGnZ8ZFQ=
Subject key identifier:   E1:07:38:4E:67:97:9A:BA:F3:38:82:EF:43:4E:85:E0:1A:88:91:DB
Authority key identifier: 77:0D:35:D7:56:6E:E7:24:6E:4D:21:33:CB:DE:48:A7:74:42:3C:77
Certificate issuer:       /CN=770d35d7566ee7246e4d2133cbde48a774423c77
Certificate serial:       019B589A43A31B5039066E1CFF1F4F4F3D77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
Manifest number:          0B7A
Signing time:             Fri 26 Dec 2025 03:01:03 +0000
Manifest this update:     Fri 26 Dec 2025 03:01:03 +0000
Manifest next update:     Sat 27 Dec 2025 03:01:03 +0000
Files and hashes:         1: SOT0W2XrP7CCow7oMidVP0WeTQc.roa (hash: LK/wr/vv637+E1XEkLAUiLeI/zSDn9f20e+XXEbQLBM=)
                          2: ZHw9z1FJzdvIzznM9dzN2O5C56I.roa (hash: bAuKlmhtwV1RMYb3UiAoj3013/bGmnUu7vNpvbyFAaw=)
                          3: dw0111Zu5yRuTSEzy95Ip3RCPHc.crl (hash: ewPwADDgaikslkCMV2UL3eaJlSESpRTRs6TGbj+my9E=)
                          4: kb1hhl4VhznPe9ar0pe3UEE3K-I.roa (hash: smgbn2o+yW8NSkrB4nhx/ecIptLt+NRlqrEvEJN1ma8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 03:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:58:9a:43:a3:1b:50:39:06:6e:1c:ff:1f:4f:4f:3d:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=770d35d7566ee7246e4d2133cbde48a774423c77
        Validity
            Not Before: Dec 26 03:01:03 2025 GMT
            Not After : Dec 27 03:01:03 2025 GMT
        Subject: CN=e107384e67979abaf33882ef434e85e01a8891db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:73:9b:9b:18:3f:3a:90:c8:70:a9:30:df:36:
                    6b:b8:57:97:81:60:01:f8:3f:7d:30:83:14:e0:07:
                    c0:f5:f9:bc:aa:24:24:c2:7f:2a:3f:c7:2a:0f:25:
                    6f:7f:35:f6:ef:fc:20:b9:25:9c:9d:fd:8f:97:fe:
                    c8:f9:b0:5e:f3:ed:a4:dd:87:16:97:be:db:50:2e:
                    cc:57:73:c4:f7:84:f7:e5:6f:b9:eb:d7:0c:99:fa:
                    97:89:e1:89:dc:00:bc:bb:d0:ae:83:16:fb:2b:33:
                    71:eb:e6:81:9a:ec:d7:d2:3b:80:e9:5e:8f:40:82:
                    42:7b:cf:71:95:43:d1:db:a8:24:59:70:e7:08:5a:
                    3e:53:a3:01:7c:3e:c0:17:41:b7:e3:d7:83:73:08:
                    15:ce:06:cd:97:73:11:a4:94:93:3d:6f:72:82:3b:
                    5b:52:36:0b:54:00:b7:24:6e:b6:92:81:54:83:a7:
                    e0:80:dc:c1:b6:19:d4:63:9f:c8:a4:2c:7a:91:db:
                    e4:a4:61:56:ca:ea:4a:72:50:8b:9c:03:f1:e9:b7:
                    3f:35:41:b5:de:62:cd:88:91:4a:c1:af:85:c4:c6:
                    14:48:19:b0:59:54:32:78:64:6a:4f:a2:97:8d:ed:
                    a4:da:df:91:c6:a6:53:98:3d:1c:d9:63:38:41:83:
                    25:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:07:38:4E:67:97:9A:BA:F3:38:82:EF:43:4E:85:E0:1A:88:91:DB
            X509v3 Authority Key Identifier:
                keyid:77:0D:35:D7:56:6E:E7:24:6E:4D:21:33:CB:DE:48:A7:74:42:3C:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:82:e4:00:c9:2a:d6:23:a9:d5:1c:ff:e2:bf:f1:ed:d1:9b:
         d1:da:30:1a:91:e4:c6:55:67:ee:24:79:53:65:b8:94:8d:72:
         cb:36:19:29:24:04:95:2a:d5:01:27:d3:d8:30:fb:d9:ea:49:
         07:5e:ac:be:f4:12:4f:46:ec:d9:ae:ca:5e:d1:33:42:ce:9b:
         9c:83:ec:d5:23:c1:6e:66:c4:54:2a:a4:d3:9c:85:1e:f0:08:
         58:e4:ce:8f:17:55:ee:11:1a:16:25:97:dd:00:14:79:62:03:
         f9:7b:02:bd:76:df:12:7c:47:0d:e3:df:c0:c8:47:88:34:84:
         09:1c:83:7b:19:ed:94:c8:2d:93:e5:34:46:0f:ff:c3:50:54:
         4e:fa:48:a6:18:a8:5d:a8:02:af:ff:88:d5:2c:22:6c:49:61:
         2a:e7:ea:69:94:b9:78:22:0b:2f:4c:fc:8a:54:7f:49:8d:a5:
         6f:98:60:63:69:d5:72:da:04:65:81:32:fc:85:4a:99:99:80:
         a5:e4:de:97:63:11:d3:2c:b6:2c:99:9e:cf:e9:93:92:d8:4a:
         4b:73:a5:72:96:27:b8:b1:dd:83:33:60:6c:87:5f:6f:fd:34:
         12:76:66:92:4c:76:5a:3f:a6:a4:f6:8d:c9:bc:9e:af:6a:a0:
         9c:c1:a5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 11:03:11 2025 by rpki-client