This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
File:                     wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft (raw, json)
Hash identifier:          IAnDksCpNM6EdmjPlA1elIPtb31HhhX2Vd39gyyYiEE=
Subject key identifier:   B5:0C:55:5A:C8:CF:A4:36:EA:8E:8E:79:DE:CB:89:27:B5:5A:E7:8A
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Certificate issuer:       /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial:       019B2D0B91C27D22EFAC9E8663EDF407CD33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
Manifest number:          11FD
Signing time:             Wed 17 Dec 2025 16:01:31 +0000
Manifest this update:     Wed 17 Dec 2025 16:01:31 +0000
Manifest next update:     Thu 18 Dec 2025 16:01:31 +0000
Files and hashes:         1: 0kvVQcd2e4SnQh3xLN4W9Ie4suY.roa (hash: dfbeFrG20UF3jAoNCZUQnOLXn1JG2r7gMGzts7DU6SI=)
                          2: Jsb0BR9UN-dcyjDsxkaO3-Yvltw.roa (hash: mF6vNbBQIU1GWKkIg2h8rHabqCIgbySUD4lzazj7BZI=)
                          3: L1zaQrOyYMyhb-vjYsccEQ0rOGs.roa (hash: h8hWAA3iPsZGpLorxG9VKCzAf/rtjUUbjPF4osJaSgE=)
                          4: pU_eB5rSsUS6EVPfiP0TBGNtCcY.roa (hash: rx92LY3LSKSOciZBDpqfQO1j0HB6jcKddcqiSbdXBt8=)
                          5: q-t_1WqymI8_4-N5vyOqSXLqB8E.roa (hash: +mnwG2T/ttYD50bIkNl9fQet4+x7wi91GV5NfLA79rs=)
                          6: wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl (hash: S+lc2/Rq1wwW9E58DFtEkZQFdhM+AqRqjsj5VffZwYA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 16:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2d:0b:91:c2:7d:22:ef:ac:9e:86:63:ed:f4:07:cd:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
        Validity
            Not Before: Dec 17 16:01:31 2025 GMT
            Not After : Dec 18 16:01:31 2025 GMT
        Subject: CN=b50c555ac8cfa436ea8e8e79decb8927b55ae78a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:11:86:c5:e4:e2:f7:cc:75:fe:a6:1b:d4:6e:
                    89:f3:06:1e:8e:b6:9e:85:9e:c2:a5:03:5c:0b:b5:
                    64:39:92:a7:94:cc:1b:08:76:fe:fd:00:06:1a:79:
                    81:3a:37:af:4f:91:1c:47:e6:15:92:d1:39:63:36:
                    15:28:72:8b:29:30:69:4d:86:c1:fa:e2:b5:7c:e4:
                    9a:d2:3f:18:3c:ee:75:4f:75:ff:4c:75:df:62:ba:
                    b1:2d:f0:0d:21:64:2e:1c:f5:e9:0d:a0:c5:b1:e7:
                    49:f0:ef:0b:b7:a0:f3:da:5f:09:c9:20:90:68:f6:
                    6c:5c:35:35:23:76:cd:db:e2:f9:fb:6b:15:cf:4a:
                    09:09:23:42:be:99:d4:f7:62:0e:58:18:d4:bc:a1:
                    89:95:3f:8f:dc:89:6e:41:ac:23:ab:be:17:ff:30:
                    d8:33:a4:f9:d6:1b:a7:d4:0f:b2:f7:71:1f:49:a2:
                    67:cb:0c:e9:64:81:e4:3b:e4:e7:5f:cb:f3:35:d4:
                    6a:41:13:c9:e1:75:d0:2a:3e:9c:40:44:64:60:a3:
                    ca:aa:bf:49:06:f1:34:ac:2f:35:64:fa:aa:f4:55:
                    2c:ec:1b:7f:37:4c:cc:0e:87:40:e2:da:4c:66:3c:
                    73:a1:24:fb:2c:2f:ad:fb:a3:97:cf:65:83:d4:3e:
                    02:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:0C:55:5A:C8:CF:A4:36:EA:8E:8E:79:DE:CB:89:27:B5:5A:E7:8A
            X509v3 Authority Key Identifier:
                keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:2d:eb:23:02:63:a1:79:4c:56:ca:19:e2:ae:76:c1:23:66:
         99:0a:4c:62:b1:54:89:9c:97:ff:78:29:91:67:50:52:49:a0:
         f5:2e:5d:b4:ee:1d:20:c4:88:c5:8c:3f:bc:43:aa:04:92:0c:
         99:11:88:dd:9f:f0:2f:30:aa:44:14:c3:8a:17:f7:90:a3:0f:
         e3:1f:89:21:4d:bf:be:1e:36:f7:6e:43:eb:91:0e:c5:da:17:
         47:4f:8b:ef:05:ba:af:3a:6b:93:d4:21:71:3a:60:fc:2e:a0:
         81:f0:76:9d:a7:c0:fb:1e:f1:d7:fc:5a:17:74:3b:0d:35:0f:
         07:0f:0e:47:a3:84:c7:ff:e4:ad:71:9a:54:49:e3:7b:d3:b7:
         50:8c:64:f1:9e:ce:42:6e:8b:70:a9:45:90:15:fb:fc:2b:0f:
         09:66:fd:b8:f8:98:88:26:9c:fd:37:c8:da:f8:8d:1c:16:f2:
         62:bd:15:d7:23:4f:93:5c:18:c4:4e:02:4b:5d:c1:15:a4:bd:
         ba:92:09:0a:6e:0e:09:20:b7:9a:7f:32:e7:62:ac:db:1a:70:
         78:55:52:3b:f5:29:e2:9d:af:a1:64:a0:46:df:23:64:01:95:
         e8:2b:56:8c:bc:51:99:76:6a:18:18:7a:fe:85:a5:ba:6d:88:
         6d:30:07:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 20:45:56 2025 by rpki-client