This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
File:                     wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft (raw, json)
Hash identifier:          Mmf5M+BZcmn+Ma8U8Z7vZ/XgDqPLuA8RqJMzykqjS7Q=
Subject key identifier:   B3:29:46:8E:9B:99:5C:7B:93:B7:57:33:B4:DA:6E:40:A9:C4:D1:68
Authority key identifier: C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
Certificate issuer:       /CN=c1dc2f85026158cbd9ff49da15db225f053074ac
Certificate serial:       019B5298D450ED265497C4F97E4E79B001EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
Manifest number:          1795
Signing time:             Wed 24 Dec 2025 23:01:46 +0000
Manifest this update:     Wed 24 Dec 2025 23:01:46 +0000
Manifest next update:     Thu 25 Dec 2025 23:01:46 +0000
Files and hashes:         1: Hz0_dopdOcTkQoi-4Q3mO6vS7ig.roa (hash: b8veFauUO102FVzcJY91NJg1d1nr7MA++Qf08FQhoiA=)
                          2: UnNAY2Ug9GVCcRKfH683OrLARtI.roa (hash: ZNLzC1DICXd5qw96hU96BotIt+MMzxMspSwOQt7KMEQ=)
                          3: wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl (hash: C6KOt+n69VHQF1vJMIh6GWFUjyJW4VkTHyPi2yTGYrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Dec 2025 18:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:52:98:d4:50:ed:26:54:97:c4:f9:7e:4e:79:b0:01:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1dc2f85026158cbd9ff49da15db225f053074ac
        Validity
            Not Before: Dec 24 23:01:46 2025 GMT
            Not After : Dec 25 23:01:46 2025 GMT
        Subject: CN=b329468e9b995c7b93b75733b4da6e40a9c4d168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:eb:3f:6d:16:ca:46:c8:9e:cf:ab:f4:af:3c:
                    89:65:19:6d:26:04:72:d5:07:54:97:59:dd:59:8f:
                    a0:50:e8:7e:02:8f:27:c7:63:71:26:27:80:20:31:
                    50:81:6b:71:be:58:27:28:86:cf:6d:57:0f:75:7c:
                    1f:6e:37:9b:ee:ea:ae:ef:6f:c2:44:a9:78:91:1a:
                    f3:e0:bc:c0:8e:1d:ce:87:ef:8a:6f:3f:d2:4c:af:
                    21:04:8c:98:bf:67:5e:01:5c:26:58:de:02:7b:02:
                    a8:fb:87:df:7a:18:b5:b2:3f:67:c3:0d:58:b0:73:
                    ab:5b:d1:26:75:f8:8a:02:fc:ab:54:45:ff:c7:6a:
                    51:09:8e:9c:5e:e0:5c:32:70:0c:17:f8:db:07:95:
                    33:22:ed:91:cf:cc:b2:f9:3e:13:6a:84:07:ee:07:
                    f2:8a:0e:a2:62:12:a2:68:52:37:fa:af:6f:10:1f:
                    36:82:79:db:cf:92:52:88:0b:20:c9:1c:1f:c5:5e:
                    21:c5:56:11:69:9d:e0:16:30:aa:92:b2:a3:8c:41:
                    ac:1f:5c:5e:2f:c6:22:53:b4:d9:f7:13:aa:63:19:
                    31:44:b2:be:a4:cf:4a:39:66:15:3a:88:12:19:4c:
                    76:26:9a:b6:9f:8f:3c:cd:23:e3:75:d2:c5:9d:e4:
                    64:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:29:46:8E:9B:99:5C:7B:93:B7:57:33:B4:DA:6E:40:A9:C4:D1:68
            X509v3 Authority Key Identifier:
                keyid:C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:1b:d9:8a:5d:62:77:ef:d1:f1:55:60:45:1e:2b:2a:86:61:
         ac:33:37:19:8e:7d:7a:26:27:c1:3f:08:a6:eb:41:60:68:ad:
         b9:ae:58:ce:e3:0d:49:d1:20:71:11:b8:81:b3:a5:2d:0c:2c:
         2d:09:f2:16:13:d7:8a:e0:46:b6:7b:10:05:fb:42:eb:82:43:
         12:13:a3:c6:90:dd:9d:e6:e5:64:9b:83:59:68:f6:b2:b6:71:
         33:5a:2e:2e:a3:52:c9:56:c7:56:b1:96:9d:30:e5:9d:30:14:
         82:2f:04:78:07:d1:40:75:3f:1b:8c:2e:62:8b:2b:09:68:df:
         1d:3a:b8:c7:22:48:43:bc:1b:d9:75:e2:73:fd:d3:1f:ce:94:
         f7:06:d4:4e:2c:ec:d3:67:41:d8:cb:36:92:16:b3:ab:a1:c5:
         ff:9b:4a:29:8b:ce:15:a2:76:ac:67:ab:db:23:47:e6:bd:f1:
         9e:6a:75:9b:eb:31:32:ee:aa:1d:63:d0:bb:75:a1:2e:e8:84:
         32:b9:92:cb:01:d7:b2:41:b8:c9:2b:78:40:eb:a6:c4:ce:b2:
         39:34:d8:b1:bb:1d:79:8a:8c:36:b1:c3:e9:07:88:3d:14:07:
         eb:97:22:52:59:20:8c:f1:12:57:f2:49:e9:d7:e4:22:cf:59:
         5b:84:8b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 03:35:19 2025 by rpki-client