This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.mft
File:                     1-WoJAryYU7de0tsZaD7i86ImFUA.mft (raw, json)
Hash identifier:          cPuU1BRrzDuckP3dUHFjiwXgUuFKGWxfKstQH9mnCzc=
Subject key identifier:   1F:EB:61:9C:41:53:88:AE:B9:F8:C8:45:A1:BE:2A:55:36:00:C4:6D
Authority key identifier: F9:6A:09:02:BC:98:53:B7:5E:D2:DB:19:68:3E:E2:F3:A2:26:15:40
Certificate issuer:       /CN=f96a0902bc9853b75ed2db19683ee2f3a2261540
Certificate serial:       019B304308486442B8268BEA679167B1FCF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-WoJAryYU7de0tsZaD7i86ImFUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.mft
Manifest number:          07FC
Signing time:             Thu 18 Dec 2025 07:00:57 +0000
Manifest this update:     Thu 18 Dec 2025 07:00:57 +0000
Manifest next update:     Fri 19 Dec 2025 07:00:57 +0000
Files and hashes:         1: 1-WoJAryYU7de0tsZaD7i86ImFUA.crl (hash: D40Pla4k+j2ahtVWCn4bb8F/cRY05iB7CtMqXq/ms3I=)
                          2: 3nfIx05AjEYVNh0f8uhQsoNdvl0.roa (hash: kNmQ6q+KoIWrsskhw+6QTieUtnc2+n6TEwJFoX3Do3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-WoJAryYU7de0tsZaD7i86ImFUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:30:43:08:48:64:42:b8:26:8b:ea:67:91:67:b1:fc:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f96a0902bc9853b75ed2db19683ee2f3a2261540
        Validity
            Not Before: Dec 18 07:00:57 2025 GMT
            Not After : Dec 19 07:00:57 2025 GMT
        Subject: CN=1feb619c415388aeb9f8c845a1be2a553600c46d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5d:f9:a9:9d:43:21:ea:e3:1a:0a:29:aa:06:
                    89:65:15:f6:9c:d7:3d:81:85:a7:23:a1:f9:45:a6:
                    ea:ae:dd:18:44:d4:b1:43:a7:33:19:8a:fb:00:22:
                    0c:e2:f7:eb:d7:f7:29:54:75:0c:92:86:bb:c5:04:
                    be:fe:45:31:e1:1d:1e:28:0c:c8:c9:5f:94:3e:16:
                    8a:5c:4a:05:19:d3:a3:54:84:84:fa:cc:4c:a2:d8:
                    9b:7b:37:01:67:58:e2:00:30:b2:54:af:d5:b9:a2:
                    23:ac:21:b8:8d:8e:15:5c:ac:9a:21:22:7b:86:e6:
                    81:72:f1:3d:f6:24:8d:e8:39:e7:31:e2:32:32:af:
                    88:18:dd:1e:7c:91:2c:96:c1:da:20:db:e6:3a:f2:
                    ce:df:b0:a2:a8:dd:b9:ff:75:3e:83:3e:98:dc:28:
                    10:b3:ac:74:14:43:a4:5f:ba:b3:7b:10:cf:a0:30:
                    f0:85:61:3e:f2:50:86:d4:23:a5:77:70:6d:fd:8d:
                    a7:00:1d:5a:a5:57:2a:b9:d7:d1:ce:2a:6c:e7:49:
                    d5:16:08:f3:63:82:e2:dc:cc:67:85:72:f7:83:c8:
                    f2:07:38:89:55:f4:24:9f:72:5c:5e:3c:6a:ac:43:
                    eb:13:40:16:8b:0a:a9:54:0a:4d:3e:7b:28:39:b2:
                    88:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:EB:61:9C:41:53:88:AE:B9:F8:C8:45:A1:BE:2A:55:36:00:C4:6D
            X509v3 Authority Key Identifier:
                keyid:F9:6A:09:02:BC:98:53:B7:5E:D2:DB:19:68:3E:E2:F3:A2:26:15:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WoJAryYU7de0tsZaD7i86ImFUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:4b:34:a3:9b:e2:bd:e6:db:bc:b4:05:2c:c1:a2:24:fe:17:
         b5:92:78:ed:18:8c:b8:b8:02:05:1e:46:ee:9c:65:71:9f:97:
         76:a4:53:bf:32:54:37:4e:ee:30:7b:e5:3a:8a:0a:d5:90:d5:
         84:79:ce:08:35:b8:eb:db:bf:b0:5c:9f:df:73:62:66:81:b0:
         8a:5d:69:7d:92:c8:54:0b:8c:3c:28:e2:11:c3:d3:0c:6f:33:
         db:62:ff:ff:e7:81:ee:4a:5e:51:ee:1d:45:25:6e:a8:38:bc:
         c2:73:83:5d:e8:1a:d4:c5:93:b5:0c:b4:36:93:49:36:46:71:
         fc:48:0d:2a:9f:35:90:98:16:73:49:c4:91:90:d4:d1:2a:fd:
         ea:14:59:63:71:14:9f:22:43:92:6a:24:d5:9c:e4:d3:19:2c:
         12:30:f7:82:bf:2a:4d:19:0b:de:fc:71:af:c9:87:3a:36:98:
         51:fb:79:4d:01:a5:ec:c2:4e:56:2e:e2:61:aa:f0:5a:b0:9c:
         a8:59:f1:d4:12:a3:66:af:47:53:24:2e:e3:bf:b9:ac:7a:1c:
         48:64:84:0a:f6:9d:69:dd:d5:bf:e7:93:2c:6a:2a:af:61:a6:
         56:c5:c7:14:e5:79:21:84:75:6e:5d:7c:2e:78:66:11:69:31:
         a7:ea:85:fd
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZswQwhIZEK4JovqZ5Fnsfz3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NmEwOTAyYmM5ODUzYjc1ZWQyZGIxOTY4M2VlMmYzYTIy
NjE1NDAwHhcNMjUxMjE4MDcwMDU3WhcNMjUxMjE5MDcwMDU3WjAzMTEwLwYDVQQD
EygxZmViNjE5YzQxNTM4OGFlYjlmOGM4NDVhMWJlMmE1NTM2MDBjNDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArF35qZ1DIerjGgopqgaJZRX2nNc9
gYWnI6H5Rabqrt0YRNSxQ6czGYr7ACIM4vfr1/cpVHUMkoa7xQS+/kUx4R0eKAzI
yV+UPhaKXEoFGdOjVISE+sxMotibezcBZ1jiADCyVK/VuaIjrCG4jY4VXKyaISJ7
huaBcvE99iSN6DnnMeIyMq+IGN0efJEslsHaINvmOvLO37CiqN25/3U+gz6Y3CgQ
s6x0FEOkX7qzexDPoDDwhWE+8lCG1COld3Bt/Y2nAB1apVcqudfRzips50nVFgjz
Y4Li3MxnhXL3g8jyBziJVfQkn3JcXjxqrEPrE0AWiwqpVApNPnsoObKIxQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFB/rYZxBU4iuufjIRaG+KlU2AMRtMB8GA1UdIwQY
MBaAFPlqCQK8mFO3XtLbGWg+4vOiJhVAMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Xb0pBcnlZVTdkZTB0c1phRDdpODZJbUZVQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvZWI2ODY2LWJiNjAtNGM2Zi1hMDBk
LWM0YTc3YzE5MmFmMC8xLzEtV29KQXJ5WVU3ZGUwdHNaYUQ3aTg2SW1GVUEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2ZlL2ViNjg2Ni1iYjYwLTRjNmYtYTAwZC1jNGE3N2MxOTJh
ZjAvMS8xLVdvSkFyeVlVN2RlMHRzWmFEN2k4NkltRlVBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgUs0
o5vivebbvLQFLMGiJP4XtZJ47RiMuLgCBR5G7pxlcZ+XdqRTvzJUN07uMHvlOooK
1ZDVhHnOCDW469u/sFyf33NiZoGwil1pfZLIVAuMPCjiEcPTDG8z22L//+eB7kpe
Ue4dRSVuqDi8wnODXega1MWTtQy0NpNJNkZx/EgNKp81kJgWc0nEkZDU0Sr96hRZ
Y3EUnyJDkmok1Zzk0xksEjD3gr8qTRkL3vxxr8mHOjaYUft5TQGl7MJOVi7iYarw
WrCcqFnx1BKjZq9HUyQu47+5rHocSGSECvadad3Vv+eTLGoqr2GmVsXHFOV5IYR1
bl18LnhmEWkxp+qF/Q==
-----END CERTIFICATE-----
Generated at Thu Dec 18 10:26:44 2025 by rpki-client