This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
File:                     wur6ows0Ds-BCky5rztRxwJWZZg.mft (raw, json)
Hash identifier:          3oA/Ft3lNI9jeRVwaaCmmluvJ59EH0BrLY8LbMaIY5o=
Subject key identifier:   E8:68:C1:0F:73:55:9A:B9:D3:C1:2B:CF:C7:FC:2D:94:7D:DA:6E:E1
Authority key identifier: C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
Certificate issuer:       /CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Certificate serial:       019B3C46C63B0B5A5255152A2B387C8B0B0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
Manifest number:          1798
Signing time:             Sat 20 Dec 2025 15:00:29 +0000
Manifest this update:     Sat 20 Dec 2025 15:00:29 +0000
Manifest next update:     Sun 21 Dec 2025 15:00:29 +0000
Files and hashes:         1: 1wrmzG8kmHTEu12xzRLuu8ra80I.roa (hash: 9m8Zy/qea1cvB7wZZ6FL+4apCQU2vA1vbBwqJEE2WcE=)
                          2: Keyyj4RlU6KIyfot_42DKFmSfoI.roa (hash: aG5Y9w1gawLE6uq7HjbCvsSXt/o+A+J95s8ApYj0exc=)
                          3: T-zwd3E8gbu-MxAIPetL9QmvKh0.roa (hash: 092w0Bm8URvR9yowFyiwo856iRLSuK3dnjktNqsPJK0=)
                          4: d_5rCXad48L982aV_sE5OcfISCI.roa (hash: 90ZGQ2cxG5cZFWpNWTKz60Bz+Hn3IddK6g3bDQGxBUA=)
                          5: gGm8wU6PjR0-kKuHqRN7q_PcCXc.roa (hash: +FUqo6oVVIQPQjfEDzVpjvPMMimpbMQ9HN9dZbS2tW0=)
                          6: l6z9HEI4-l71_fyVVbYlxZBrbTU.roa (hash: IXu+eQhMV0kh43AST9hCSRwRLiZW/aampQrZSvLeHSo=)
                          7: ulqVIFVosPowykxTM5-oqMzd4Gw.roa (hash: GyWK8Gwo9Zktpx8zDLY/DbSmWK69tqfb6z/bHNQk+aU=)
                          8: wur6ows0Ds-BCky5rztRxwJWZZg.crl (hash: 3TykqgK2AfgTjSpmBnc3kWgGWSM8tkx2RHu2i9hNi40=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:46:c6:3b:0b:5a:52:55:15:2a:2b:38:7c:8b:0b:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
        Validity
            Not Before: Dec 20 15:00:29 2025 GMT
            Not After : Dec 21 15:00:29 2025 GMT
        Subject: CN=e868c10f73559ab9d3c12bcfc7fc2d947dda6ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e4:f7:f5:9e:65:fc:bc:52:bf:7d:d1:36:25:
                    7d:80:1a:3f:e4:4d:d5:99:b3:94:e6:10:0f:e5:5f:
                    5b:cb:2a:eb:1d:78:8a:14:59:22:19:75:05:33:d7:
                    e6:6b:35:ce:e5:00:ac:b5:8a:7e:42:48:7a:84:f6:
                    24:67:c8:2e:2c:6f:0b:1e:4a:97:ee:36:ac:b3:a1:
                    50:a7:9d:f4:85:a0:cb:c5:08:41:59:c6:d1:b4:a5:
                    6d:b9:da:2b:f8:80:9f:81:ee:57:1a:56:32:4f:e7:
                    56:1a:16:c1:c5:59:23:84:89:27:1d:1d:ea:4f:e4:
                    32:4a:6a:1f:29:98:23:91:e4:8d:ab:32:52:77:68:
                    8d:0f:65:7c:83:8d:77:b5:66:f5:2b:51:b6:b0:53:
                    1a:2d:8f:e8:b8:36:6a:c1:30:99:85:45:6e:c3:07:
                    28:3b:59:df:c9:81:9b:54:61:b7:bb:f3:ec:8b:5f:
                    d2:65:34:23:ce:42:ca:c6:52:42:cb:cb:93:6b:f9:
                    ac:91:fa:8a:33:ca:97:af:19:9a:77:13:55:e7:d4:
                    cf:21:e1:fc:5f:6d:b3:4c:46:63:b2:48:fd:77:d4:
                    2d:c3:7e:99:e3:9f:87:c6:25:ec:5c:e5:af:f9:46:
                    83:d5:d7:c8:a3:07:ec:c2:5e:3a:d7:68:5c:d7:46:
                    0d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:68:C1:0F:73:55:9A:B9:D3:C1:2B:CF:C7:FC:2D:94:7D:DA:6E:E1
            X509v3 Authority Key Identifier:
                keyid:C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:90:04:17:8b:d7:68:61:f6:f8:88:04:a3:6a:27:59:3a:0b:
         25:9c:b5:3e:20:e5:f6:81:b8:26:49:56:3d:74:1e:c4:50:70:
         12:1c:33:d6:c0:50:d9:4c:2b:41:60:9d:79:48:68:8a:8a:f8:
         01:73:ed:bc:9a:91:6d:da:71:1c:27:41:77:e9:1a:0c:74:4a:
         0f:cf:1c:8f:92:a8:2b:62:14:d4:14:24:db:b1:ce:53:f1:ec:
         fd:7e:d5:92:f7:e0:2e:be:ff:d5:6b:ca:24:cd:32:5d:96:ba:
         fb:6f:04:79:26:94:0c:3e:bd:14:76:c9:c8:ef:2c:ff:69:1e:
         88:89:9e:4f:b5:3d:fc:02:35:34:52:3c:2d:87:82:09:df:5c:
         f8:c7:c5:9a:4c:3e:71:80:50:7b:96:72:5e:4b:47:62:10:ba:
         3b:f7:16:c4:c1:69:7e:7c:90:5f:d7:95:99:4f:98:ee:a5:ca:
         9f:ca:fa:00:42:d2:00:03:41:56:55:53:a6:ed:8d:ab:4e:55:
         07:c7:3a:28:12:42:16:23:0a:5c:70:61:14:79:50:9c:29:60:
         66:1a:47:ed:ae:ff:ca:2a:f1:06:7c:47:53:d6:2c:3b:6b:62:
         27:f4:76:f5:51:5d:76:88:96:70:63:1e:04:25:5e:da:c3:cd:
         7c:61:a9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:11:39 2025 by rpki-client