This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft
File:                     0wGZH8ND81jA8u665Vzy2jRSHHo.mft (raw, json)
Hash identifier:          3mDmgtgOo5sKc4AYj3oWY3iu1wLaDVzk7EeD2l2Xo8Y=
Subject key identifier:   0E:E0:2F:0D:35:BC:36:7C:67:C5:BA:14:42:0E:3B:DF:17:AC:79:1B
Authority key identifier: D3:01:99:1F:C3:43:F3:58:C0:F2:EE:BA:E5:5C:F2:DA:34:52:1C:7A
Certificate issuer:       /CN=d301991fc343f358c0f2eebae55cf2da34521c7a
Certificate serial:       019B115C93A3D6B54BA266CE893765797728
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft
Manifest number:          1773
Signing time:             Fri 12 Dec 2025 07:00:38 +0000
Manifest this update:     Fri 12 Dec 2025 07:00:38 +0000
Manifest next update:     Sat 13 Dec 2025 07:00:38 +0000
Files and hashes:         1: 0wGZH8ND81jA8u665Vzy2jRSHHo.crl (hash: IGdUa5ytZsO+CI+YPrUgGXoQj3OHswn/tzXxlEkgt8s=)
                          2: 8XGnOFo1FHSecbZbo8eEhjcVsfE.roa (hash: andmj5YDiGTGVfrRQg/eep/3FAAkG8C2BqXOT6WzLpo=)
                          3: qRGjLQntvBAqN_Xt7aIS90yUBHc.roa (hash: 2bXJCM8WwuebfGJQ/9C7eiLENqlhXscF/6cLG5KAEvE=)
                          4: wPZZOS9626wM9NhL1Gmz4DC9ME4.roa (hash: Ufx/tGSmBlEgnXkc/x/enBQV+VQVsO+gn674YXeSq9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Dec 2025 07:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:11:5c:93:a3:d6:b5:4b:a2:66:ce:89:37:65:79:77:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d301991fc343f358c0f2eebae55cf2da34521c7a
        Validity
            Not Before: Dec 12 07:00:38 2025 GMT
            Not After : Dec 13 07:00:38 2025 GMT
        Subject: CN=0ee02f0d35bc367c67c5ba14420e3bdf17ac791b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:23:3d:78:42:9e:2e:c8:b7:17:de:f2:8f:e5:
                    18:58:cf:c2:42:3c:df:7f:9c:d0:17:23:09:48:c7:
                    38:51:a4:b3:33:4e:22:73:ba:09:c6:7d:34:07:ee:
                    75:d2:bb:2d:da:7f:af:0f:a3:15:b9:fc:15:18:97:
                    c7:e7:2b:c4:3c:0d:87:18:3d:9a:bd:64:be:57:ba:
                    14:2c:e2:be:ce:3f:73:12:d4:2b:06:b1:ea:81:59:
                    7e:56:a8:6d:94:98:23:1c:fb:ca:3a:fc:e8:c7:9c:
                    ac:54:16:52:a0:5f:32:ca:f1:1c:1f:41:97:7a:db:
                    90:24:9f:3b:24:65:fd:15:17:63:05:0d:56:81:e3:
                    2f:bb:64:5f:0c:9e:ff:23:08:73:f1:01:a8:d2:80:
                    84:5d:61:19:9a:16:e1:2a:03:ec:3b:b0:ff:4e:43:
                    99:8a:82:6c:63:f8:2f:e0:d3:c6:13:3c:76:28:ea:
                    fe:3a:2d:b6:a6:f1:8c:08:f3:3d:07:ec:5c:c2:de:
                    48:7c:b9:40:89:b8:25:1b:85:da:ee:07:62:a7:66:
                    43:09:67:a3:69:cf:84:6a:85:3c:64:d5:e2:db:78:
                    7b:05:4d:47:4d:f5:e9:95:e3:4e:34:c5:a4:f0:dc:
                    14:52:cc:72:9e:da:e8:d7:49:dd:37:1f:dc:33:93:
                    5a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E0:2F:0D:35:BC:36:7C:67:C5:BA:14:42:0E:3B:DF:17:AC:79:1B
            X509v3 Authority Key Identifier:
                keyid:D3:01:99:1F:C3:43:F3:58:C0:F2:EE:BA:E5:5C:F2:DA:34:52:1C:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:36:a5:ab:58:d3:01:94:20:d9:b5:f0:74:44:b8:60:67:a7:
         11:c0:72:8e:4a:8d:dc:65:9d:c5:5c:c7:0c:24:da:5d:c0:ce:
         0c:5b:06:d0:2c:5c:34:91:68:30:aa:e1:fc:24:34:87:33:87:
         d7:37:ae:6e:0e:14:f9:63:e4:20:e1:32:e3:96:cc:9e:19:66:
         30:3f:4c:2b:42:7b:e9:58:1e:c4:c4:e0:fd:34:0d:88:17:16:
         4e:ff:42:f2:9e:29:8a:51:ae:d6:ae:33:d3:17:41:05:f2:9f:
         77:ed:97:e5:3f:e1:3c:6b:1f:c7:66:5d:34:97:51:e6:07:81:
         5c:11:43:5d:b0:50:7d:fd:75:cf:81:0f:23:2a:b3:5d:1e:ec:
         c0:e0:d7:e7:96:c6:64:98:a8:0f:aa:39:49:52:e6:97:b6:8a:
         76:98:ab:02:f9:c6:8f:97:16:08:ce:08:a5:56:22:f4:52:95:
         34:91:89:32:15:5f:17:74:14:43:36:6a:87:2c:55:a6:59:6b:
         b7:31:96:e7:bd:49:8e:02:ed:cc:44:5b:fb:07:4b:cb:a5:60:
         4a:50:8c:96:dd:e3:f6:a1:c3:bb:99:ad:ab:a4:3c:db:51:1e:
         78:87:47:e0:5f:fc:f3:8d:3a:4c:d4:23:1a:47:a3:ac:02:0f:
         de:80:b5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 14:01:00 2025 by rpki-client