This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
File:                     KwviJiMNQJnO6gpKbPTti5AgE1A.mft (raw, json)
Hash identifier:          X4psHTAhhU3fmbCMFUTehxNvkCJ5A9dkGVQPScxoav4=
Subject key identifier:   32:EB:4B:5F:EB:FF:A0:DA:28:A7:E3:8A:35:03:A8:1D:8C:BA:0E:F2
Authority key identifier: 2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50
Certificate issuer:       /CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
Certificate serial:       019B1D97A55252FA694A9E06BDD0ECF8373D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
Manifest number:          0B85
Signing time:             Sun 14 Dec 2025 16:00:35 +0000
Manifest this update:     Sun 14 Dec 2025 16:00:35 +0000
Manifest next update:     Mon 15 Dec 2025 16:00:35 +0000
Files and hashes:         1: 1-QazRIRPg7ctmvpySXX90ZpNvVs.roa (hash: /R5NiKNiflnBoSvWiTSdWTvgCke/+xxLiQtRLSd2PN8=)
                          2: KwviJiMNQJnO6gpKbPTti5AgE1A.crl (hash: Y8295rHV4ObujK4uvxHIc7dvB5pqhV7cYj3Vufw9oLs=)
                          3: qi0ZqRW6bWCGCBOudyRc_ZU33PM.roa (hash: Y/jI82xosnyON1Rhfs7vCWE2E/8RN3XifMYZrXwc2DQ=)
                          4: st8xnj4jJi6Xuwa7MiNbU3-F0wo.roa (hash: H2Z+tAqzPpLr9TIzWhq27NXaGhJV330iUQnoQkRKlKo=)
                          5: ymk3s2uYAjIifXFebx0Gs2GCpZg.roa (hash: 1iZB8mSVVI0xWBNNoWKTn+58QXVIuSn2YESYam7CY+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1d:97:a5:52:52:fa:69:4a:9e:06:bd:d0:ec:f8:37:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
        Validity
            Not Before: Dec 14 16:00:35 2025 GMT
            Not After : Dec 15 16:00:35 2025 GMT
        Subject: CN=32eb4b5febffa0da28a7e38a3503a81d8cba0ef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:10:11:df:72:53:4a:f1:67:b0:c1:f9:ec:3a:
                    9e:70:26:a6:59:a4:63:d3:37:11:09:66:ae:2a:19:
                    bb:18:30:96:bb:14:c2:ff:a1:b4:4d:61:98:52:13:
                    dd:d7:f8:79:49:70:a3:c8:80:7e:3f:2c:3d:54:25:
                    87:e6:fb:71:04:e1:69:84:2c:e5:e7:1a:d1:f0:23:
                    49:37:46:bf:7e:95:c9:95:e7:79:de:41:71:d7:ff:
                    b0:f6:5e:70:95:7e:21:d5:59:ad:9a:49:89:08:4b:
                    90:48:bb:c5:81:31:27:73:ed:79:23:d0:2a:3b:0d:
                    d9:79:ca:bc:0b:40:ab:55:21:aa:3b:34:40:8f:e2:
                    06:7d:fc:d5:dc:d8:b3:1e:0c:99:bf:54:65:05:65:
                    f5:d8:c3:9e:23:99:c2:3b:51:d8:45:02:18:bf:4c:
                    46:9e:8a:fa:9d:9e:23:ca:e5:e3:7f:fc:e1:3e:e1:
                    6a:80:6e:2d:26:33:f7:bd:73:7a:3f:87:eb:a0:30:
                    b4:05:f2:db:13:84:51:f2:b9:f0:9f:b5:bd:34:35:
                    b5:60:0e:e4:5c:92:a0:be:30:f1:59:1d:64:a5:27:
                    f9:c7:ee:26:11:f4:12:12:5f:89:02:aa:e3:d5:cd:
                    e5:08:89:2b:1e:27:97:03:30:67:d9:86:5f:2d:49:
                    7e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:EB:4B:5F:EB:FF:A0:DA:28:A7:E3:8A:35:03:A8:1D:8C:BA:0E:F2
            X509v3 Authority Key Identifier:
                keyid:2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:e8:61:33:f4:a4:67:68:32:a1:40:43:2a:c5:62:a7:98:9a:
         7a:b2:1a:59:59:87:07:3b:60:d2:68:73:4a:c0:f3:79:be:1e:
         ca:ec:5a:21:0d:a7:48:73:66:7a:5e:35:d6:50:ac:c1:df:21:
         e6:f6:91:3b:eb:39:2e:50:18:66:c0:2e:b9:9e:4e:a1:ff:63:
         88:10:46:42:99:0e:a3:1b:a1:7d:a9:99:99:ba:1a:61:1d:83:
         41:56:a8:4a:95:64:d0:1a:79:64:ff:87:8f:c9:f6:a1:e7:f0:
         b2:8f:56:86:16:f3:2b:64:a7:c4:93:61:91:f0:be:97:cd:36:
         3d:24:bf:60:97:2d:de:da:f4:ba:38:0d:09:ce:f1:96:1d:2d:
         ca:78:95:90:72:03:30:5d:70:20:45:c5:16:2a:b0:69:22:f6:
         55:a9:30:27:f9:53:b8:98:8d:54:af:16:30:cf:33:88:c8:71:
         8b:02:03:f0:9c:37:c4:97:8f:c8:5c:4c:f6:1e:3b:d1:70:4a:
         77:42:f1:e1:9f:ea:99:44:03:49:9e:b2:33:30:f8:9e:63:60:
         5c:ac:9e:f6:86:ab:3a:4f:a5:df:87:84:c3:60:b3:66:e6:a9:
         12:05:c4:ea:be:d1:fa:d5:93:d0:a4:e8:18:d9:4a:0c:07:91:
         af:e9:86:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 00:33:37 2025 by rpki-client