This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
File:                     wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft (raw, json)
Hash identifier:          uV2kW5t2mW65c91bBZbzUKSobm8L58Gcdaj2uB1GXKs=
Subject key identifier:   1B:01:D9:3F:BC:6C:6B:3E:B9:37:C7:32:7D:5E:5B:9E:83:D4:FD:55
Authority key identifier: C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
Certificate issuer:       /CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Certificate serial:       019B3CB530C255684DF30C9D816621FF265A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
Manifest number:          07FF
Signing time:             Sat 20 Dec 2025 17:01:05 +0000
Manifest this update:     Sat 20 Dec 2025 17:01:05 +0000
Manifest next update:     Sun 21 Dec 2025 17:01:05 +0000
Files and hashes:         1: 6zfU2J2wR6MMPAQDPcdRmDUSTTk.roa (hash: qvQ90YxdjeGEsA7jHHHCLNHaXx9teWbipOiBvb0hjRc=)
                          2: wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl (hash: O7ZgXums3j9hqNEOWPx7Ih9LmtXKTiaGW692OPqwdcY=)
                          3: x0gusjZxaAiftvAcjczux1Ius_E.roa (hash: HFa+GGzqn2pKQb0OIJEk/YaY1MmpeAOG1mYH0pjtvqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 10:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:b5:30:c2:55:68:4d:f3:0c:9d:81:66:21:ff:26:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
        Validity
            Not Before: Dec 20 17:01:05 2025 GMT
            Not After : Dec 21 17:01:05 2025 GMT
        Subject: CN=1b01d93fbc6c6b3eb937c7327d5e5b9e83d4fd55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6f:64:d9:60:7f:ec:12:0b:5e:97:9f:8e:40:
                    0a:79:35:2e:51:05:af:30:8b:d3:5e:ce:09:b2:59:
                    e7:14:b9:73:80:f4:ba:60:97:1a:04:7b:f1:f4:9a:
                    42:d5:ce:f8:4b:1f:44:7d:34:b0:3d:b3:9d:3a:b4:
                    2e:8f:db:4e:9f:b1:23:1c:2c:ca:e0:09:3a:8b:1b:
                    7b:aa:e9:3b:de:d0:6a:56:68:e3:a5:e6:b8:8d:5c:
                    78:8d:72:01:f8:c4:fc:91:0f:79:30:4b:1d:3f:d8:
                    e2:a9:01:e1:c1:2c:33:ee:a9:95:f0:61:66:20:5d:
                    bf:b0:cd:5f:94:75:fd:85:63:25:4c:d3:e8:f0:8a:
                    04:85:36:96:63:9c:c2:0f:67:15:43:90:cd:10:b2:
                    89:81:3c:4a:5d:7b:c9:05:b6:e1:8c:81:f3:c0:86:
                    ad:bf:82:12:a9:6b:c8:d3:f5:bb:2b:d0:1e:f0:c9:
                    82:46:c8:b4:6e:cd:3d:26:0c:05:70:c7:73:d8:32:
                    f5:ee:55:4d:4f:43:64:e2:6c:f0:fd:f6:81:d1:00:
                    59:68:bd:6c:3e:aa:71:76:f4:ee:de:50:54:06:37:
                    0f:18:d4:4a:e9:c2:77:9b:84:97:d1:e2:7d:88:6e:
                    81:06:ad:42:62:99:a5:cf:40:d4:d1:9f:16:45:33:
                    dc:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:01:D9:3F:BC:6C:6B:3E:B9:37:C7:32:7D:5E:5B:9E:83:D4:FD:55
            X509v3 Authority Key Identifier:
                keyid:C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:c9:31:f2:06:67:8f:73:1d:0c:37:37:15:67:ef:e0:a6:10:
         d0:18:f6:6f:82:43:7a:cc:18:a7:53:10:f0:f8:ab:6f:c9:89:
         44:8f:0f:dc:7d:ea:6f:e8:5e:a7:82:f6:fa:09:d5:d9:d7:ff:
         e3:7f:25:b7:b6:c4:e2:ae:7d:72:b4:2c:57:80:9b:93:cc:c0:
         07:6a:f6:bc:3a:b2:42:96:13:b8:e1:dc:06:96:50:90:f2:b7:
         f5:5c:6d:0c:7d:9f:35:e0:87:f0:aa:17:6c:57:e4:b2:37:cf:
         c6:fe:25:12:16:7a:fd:fd:9a:e5:04:93:43:61:e3:bd:55:da:
         90:0b:24:10:ac:36:70:e3:8e:41:a1:4a:2c:5a:41:10:c9:a6:
         28:2d:36:1b:5a:33:90:08:72:bf:18:60:e6:4d:08:29:85:6f:
         01:e8:b5:89:b6:d6:4b:2a:46:97:8f:07:05:77:04:63:ae:9f:
         b6:95:d9:33:b4:0c:5a:28:a5:4d:82:7e:74:58:25:0d:3d:d0:
         41:f1:a6:50:a9:18:38:3f:4a:84:a0:fa:1e:a1:7a:ef:a9:16:
         7b:b2:55:b1:ad:f7:64:48:ea:00:23:40:d7:6b:1c:0c:63:5f:
         66:cd:ad:fa:43:8a:50:22:9f:d7:56:59:7e:06:48:12:5e:f4:
         0b:7f:5d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:54:37 2025 by rpki-client