This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.mft
File:                     1-WMkfQ2DufYIz4ZPQnzf6UslKhA.mft (raw, json)
Hash identifier:          v1YBXNmnEnQcQEi1wrZqpezSZNAf4MxZ3vnB41JaUEM=
Subject key identifier:   48:12:0A:1D:4A:A3:AF:C3:C6:26:5B:73:2F:C2:4F:9B:50:2E:9F:90
Authority key identifier: F9:63:24:7D:0D:83:B9:F6:08:CF:86:4F:42:7C:DF:E9:4B:25:2A:10
Certificate issuer:       /CN=f963247d0d83b9f608cf864f427cdfe94b252a10
Certificate serial:       019B665596F2DAE9B226D240CA9486A2D931
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.mft
Manifest number:          179F
Signing time:             Sun 28 Dec 2025 19:00:43 +0000
Manifest this update:     Sun 28 Dec 2025 19:00:43 +0000
Manifest next update:     Mon 29 Dec 2025 19:00:43 +0000
Files and hashes:         1: 1-WMkfQ2DufYIz4ZPQnzf6UslKhA.crl (hash: u1QV2xGoLixxI92xLqtY+bnpPZp3OrPBjpw/fQJATZU=)
                          2: PqTOmFPSGAKNeE2YcblZG_Wl6iY.roa (hash: 8Xr6waKnu+E2qqO+UtOvKWYxqXyjlVupEIsHjk9OnCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Dec 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:66:55:96:f2:da:e9:b2:26:d2:40:ca:94:86:a2:d9:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f963247d0d83b9f608cf864f427cdfe94b252a10
        Validity
            Not Before: Dec 28 19:00:43 2025 GMT
            Not After : Dec 29 19:00:43 2025 GMT
        Subject: CN=48120a1d4aa3afc3c6265b732fc24f9b502e9f90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6f:80:3f:4b:ed:b5:b1:41:65:6e:35:63:00:
                    dd:cd:86:2a:e9:2e:a7:2b:db:08:72:ef:db:1b:3f:
                    bd:04:e5:d3:76:01:85:42:bb:93:58:b2:be:56:21:
                    44:5b:4c:e4:fe:50:f5:de:c7:95:11:e6:c2:fe:ab:
                    30:53:ea:b2:7c:8b:c5:ea:3e:9c:e7:bc:83:8f:b0:
                    f2:0f:1f:56:ff:8a:a5:c6:14:1d:6b:ea:cd:fa:33:
                    a8:96:a7:c1:2e:e5:9a:62:60:70:0c:30:d7:6e:eb:
                    55:3f:95:41:26:bc:1d:71:00:6e:94:eb:b3:a2:b6:
                    05:0d:ea:5b:a4:ee:f1:cb:d2:9d:d9:d0:c6:a4:e8:
                    d9:a6:90:6b:40:dc:82:d7:30:07:5d:3c:c3:c4:87:
                    b9:0e:e2:e5:97:9c:0f:5a:33:16:26:0b:ea:c4:4f:
                    7e:82:3c:a9:0d:af:5d:ac:b7:4b:a3:4b:1a:07:3c:
                    a4:16:b7:66:e8:3a:c7:04:a8:41:bf:e2:26:03:01:
                    3f:a8:d9:82:35:ff:d5:e0:9d:2e:dc:5e:71:c2:ff:
                    9e:3a:90:67:4b:75:6c:ee:a7:4b:72:6b:11:a1:9a:
                    7d:01:62:e8:6b:46:2f:40:c3:64:43:8b:93:f8:f4:
                    9f:dc:25:22:96:bb:e6:eb:f4:a2:19:37:57:91:75:
                    6f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:12:0A:1D:4A:A3:AF:C3:C6:26:5B:73:2F:C2:4F:9B:50:2E:9F:90
            X509v3 Authority Key Identifier:
                keyid:F9:63:24:7D:0D:83:B9:F6:08:CF:86:4F:42:7C:DF:E9:4B:25:2A:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:81:09:24:93:6c:d0:3b:f0:b6:d8:e8:a0:c6:00:bd:dc:89:
         8b:14:e0:16:c1:b1:8e:59:63:fb:ff:0e:f9:07:05:bc:f5:2a:
         f9:ce:ae:3b:24:66:6f:da:c7:a0:43:38:e4:a3:7c:f5:c5:9d:
         df:06:fa:bd:43:ed:eb:22:e8:e4:bf:34:79:a0:e4:32:2f:23:
         e3:7a:93:65:57:f9:8d:50:e2:88:95:2e:1a:82:b3:b9:8d:c8:
         47:44:0a:cf:22:25:cc:b2:ee:43:06:84:ed:8b:47:80:26:8f:
         01:7a:72:15:1b:6c:3c:7b:9c:e8:85:39:44:73:52:66:04:73:
         93:47:1f:f3:bf:ea:92:0d:14:8f:eb:b3:6b:40:d2:cf:91:08:
         c2:8b:cb:58:83:39:ba:50:e9:45:36:36:a2:3f:db:88:67:99:
         b8:6d:0f:4e:0e:ce:54:4f:39:f4:52:6b:bc:5b:53:98:b8:a0:
         52:41:77:16:d9:fe:1e:1c:95:ac:ed:07:79:46:5f:fa:0a:7f:
         9b:16:01:c4:29:da:80:a3:8b:c4:28:65:91:c9:b0:28:e0:3d:
         34:6a:ea:3d:44:df:cb:f5:fb:d0:58:20:a5:75:b1:52:45:ea:
         d8:8a:60:c2:b3:97:a7:58:c6:16:87:72:e1:0f:4d:6a:1c:33:
         ce:ed:fe:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 20:28:29 2025 by rpki-client