This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
File:                     v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft (raw, json)
Hash identifier:          v7x4fVCZWMBTA48xlGhCONDWeJDMJ7VFJ3tTrLGlyQc=
Subject key identifier:   BE:42:E8:12:DD:5C:83:D2:3E:B7:54:DD:94:92:64:FB:6D:2C:6D:C3
Authority key identifier: BF:55:99:C2:67:55:F4:A4:D4:F5:40:E2:FF:D7:B7:4A:39:05:3D:A3
Certificate issuer:       /CN=bf5599c26755f4a4d4f540e2ffd7b74a39053da3
Certificate serial:       019B20CFEE025A0FF618327CEFB9E9C813AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
Manifest number:          0ED5
Signing time:             Mon 15 Dec 2025 07:00:56 +0000
Manifest this update:     Mon 15 Dec 2025 07:00:56 +0000
Manifest next update:     Tue 16 Dec 2025 07:00:56 +0000
Files and hashes:         1: Fuwpc4A-TRfgVPSV8ewciJSWczY.roa (hash: Y0uk9yq3kYnde4ofaqo2ePCwnF8vYGybwjzGM4J+Glo=)
                          2: v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl (hash: K5d9lnEpKx+rQVg+DqeVoYIeTHUYP9PENqTfn6Zq3TA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 07:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:20:cf:ee:02:5a:0f:f6:18:32:7c:ef:b9:e9:c8:13:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5599c26755f4a4d4f540e2ffd7b74a39053da3
        Validity
            Not Before: Dec 15 07:00:56 2025 GMT
            Not After : Dec 16 07:00:56 2025 GMT
        Subject: CN=be42e812dd5c83d23eb754dd949264fb6d2c6dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e3:13:dd:3d:34:94:23:f6:fd:96:50:28:4d:
                    62:01:da:b7:c4:6c:29:b7:fe:81:2e:b4:3a:f5:92:
                    03:0e:6e:0a:f5:50:a9:24:d0:ef:0d:0d:3a:6e:85:
                    b7:c1:5e:3b:22:7b:f4:75:5b:06:42:6a:b8:b3:65:
                    e7:00:2a:3e:de:6a:7e:f1:ae:83:78:af:4b:65:68:
                    f2:ba:a2:f8:91:4d:cf:d2:b7:8d:4a:e5:4a:8a:a2:
                    2b:cf:17:69:80:62:28:54:f5:aa:77:8e:57:b3:60:
                    7b:47:bf:16:06:2c:86:8e:bb:30:8a:ec:58:06:d5:
                    6d:3e:1e:4f:8a:72:f1:38:e0:86:c8:b1:d4:1d:76:
                    1e:e6:8a:5d:69:f7:a8:d6:5d:9d:30:4c:6c:d8:83:
                    a7:ae:d1:d4:52:46:b8:63:45:df:4a:bd:9f:a4:0a:
                    aa:c6:3e:fb:bd:86:6e:76:c3:62:93:c9:ae:60:8c:
                    b8:98:cf:c5:56:f7:6e:2e:52:6a:3d:78:6f:b9:88:
                    ea:55:9b:66:64:e6:44:32:c6:6f:20:ec:7b:5a:e1:
                    c8:f3:c3:ab:a7:c7:07:b7:e9:8a:a2:a8:0b:d0:03:
                    2c:5c:bd:77:e3:d7:12:29:c1:80:88:5a:12:72:e4:
                    da:74:25:0a:c7:32:3f:1f:4c:ae:e9:99:de:3c:73:
                    c7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:42:E8:12:DD:5C:83:D2:3E:B7:54:DD:94:92:64:FB:6D:2C:6D:C3
            X509v3 Authority Key Identifier:
                keyid:BF:55:99:C2:67:55:F4:A4:D4:F5:40:E2:FF:D7:B7:4A:39:05:3D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:98:28:bb:34:d0:e1:1b:0c:e3:a1:d0:7c:0a:ef:1e:b7:66:
         fc:98:f0:d2:58:f7:18:10:d4:42:92:bd:f8:4d:fc:66:ad:22:
         d7:cd:26:b0:a7:7c:17:0d:8d:8c:4a:35:ef:88:28:41:d0:33:
         29:f0:ee:7a:b6:d3:d2:86:ee:9b:92:2d:49:5d:64:d4:51:5e:
         e0:6a:1e:8b:da:ab:9b:ed:80:cd:b5:95:2a:41:94:2c:ec:30:
         27:eb:ae:8b:f0:8a:ca:de:92:99:1d:29:95:d3:ce:1c:53:1e:
         8f:d5:95:31:f5:90:f6:5f:45:70:bb:07:d6:15:25:d8:d7:7c:
         52:3d:6d:1d:ab:ae:97:6b:8f:b6:b7:e2:90:9d:f9:61:5b:b1:
         86:53:73:77:70:2e:5a:a6:f7:6c:06:6b:b1:de:b5:b4:da:6a:
         af:23:51:85:d7:09:61:61:b2:e8:b0:02:19:d4:15:ff:4b:a0:
         43:07:2e:1d:03:ec:aa:ea:fb:a4:7d:f6:cb:45:eb:58:64:c1:
         7c:3c:24:c9:9d:d6:59:b1:17:26:18:f9:5b:37:15:7e:43:72:
         68:aa:f1:6b:22:00:74:d8:69:aa:c6:ea:ea:b9:08:a5:f3:f7:
         33:e6:67:3b:22:70:47:1c:bc:d0:5d:71:5a:d3:7f:7a:89:22:
         af:1e:c6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 16:51:18 2025 by rpki-client