This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
File:                     wQTNffhMMZ0ZrzWxEE8XProsbb0.mft (raw, json)
Hash identifier:          sZYNqNr4CbTyNYaoNXxnyCsbaCEzLq+JXD9vK2u9abY=
Subject key identifier:   F3:57:D9:AF:7D:E7:B4:D9:7C:DB:0A:28:10:E8:F2:6A:6F:1F:89:9D
Authority key identifier: C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
Certificate issuer:       /CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Certificate serial:       019B59E3E0B6E47E417D0517950E939BE150
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
Manifest number:          09C0
Signing time:             Fri 26 Dec 2025 09:01:04 +0000
Manifest this update:     Fri 26 Dec 2025 09:01:04 +0000
Manifest next update:     Sat 27 Dec 2025 09:01:04 +0000
Files and hashes:         1: 1-XP7SSYynpJIZg4ibI0Wpm_d7y4.roa (hash: LOYh8aPG/hc+f2Wb/Cw6QofBs2xxLo7hf2Lj5w8CzgE=)
                          2: wQTNffhMMZ0ZrzWxEE8XProsbb0.crl (hash: xqXIEeIMXGqUWXg02cZ/Ot6vG2/XguJzuyYuby8g8MM=)
                          3: wtdVCL_vW5DHi-a_XtUsZ9JKKCw.roa (hash: JT8633z6qqiHZIgSN23W3yJc2J/8lJJEZ1oYIJiRcWs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:59:e3:e0:b6:e4:7e:41:7d:05:17:95:0e:93:9b:e1:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
        Validity
            Not Before: Dec 26 09:01:04 2025 GMT
            Not After : Dec 27 09:01:04 2025 GMT
        Subject: CN=f357d9af7de7b4d97cdb0a2810e8f26a6f1f899d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:40:3b:6c:f3:b0:c0:10:a0:bb:39:b3:9b:16:
                    53:12:b0:d1:9e:72:78:10:8b:b8:29:d8:79:75:6b:
                    38:90:a9:8c:b6:28:0d:a8:9b:11:2b:0d:3f:c9:31:
                    78:ca:02:ec:19:57:50:8a:63:32:4b:b3:dc:2f:db:
                    d5:f1:60:34:36:c4:1e:4c:f4:6a:e9:37:fd:57:42:
                    df:28:96:b6:0b:f6:e7:69:b3:db:ad:2a:20:11:46:
                    40:eb:a3:23:b4:56:a7:8f:2b:80:11:85:7b:d0:8a:
                    3d:4e:e3:f3:a7:51:db:93:3c:14:f0:22:c6:f2:21:
                    d4:35:55:40:1d:02:60:86:d5:4e:56:60:dd:5c:f7:
                    9e:3e:fe:76:33:4b:06:a9:5a:68:76:c9:78:a1:5b:
                    c9:58:8f:b1:b9:5a:87:ec:91:57:64:3a:2d:87:76:
                    20:4b:85:1b:3b:28:6a:50:80:96:4f:3b:39:bd:38:
                    de:ff:10:23:79:e0:42:45:1f:d3:98:4d:b4:24:67:
                    1b:d4:65:55:b0:16:20:28:87:7e:94:25:b5:d4:31:
                    b1:98:8b:a9:d6:42:9e:1e:42:0f:30:53:ad:c1:81:
                    e5:ec:bc:70:e5:4e:d0:bf:be:44:35:a6:49:df:9a:
                    70:e7:7b:34:2e:c4:06:b3:66:66:a8:09:b2:e1:de:
                    d8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:57:D9:AF:7D:E7:B4:D9:7C:DB:0A:28:10:E8:F2:6A:6F:1F:89:9D
            X509v3 Authority Key Identifier:
                keyid:C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:ae:66:16:e2:fd:e6:01:83:2b:8c:38:ed:56:11:76:d9:2c:
         97:68:74:36:c6:21:59:41:dd:6a:ed:8b:44:e3:94:b1:ac:2e:
         e4:c0:a5:c5:a2:dd:c4:f8:51:df:be:20:6a:48:3d:1a:84:cd:
         7b:29:60:80:94:e4:0f:ea:a7:83:54:f2:c9:d7:9d:6c:91:de:
         1c:e0:d4:6c:a0:7e:58:2c:f3:a2:cc:83:03:1e:33:cc:c5:d8:
         f1:67:cb:a1:10:f7:89:26:4d:7e:bb:92:05:e4:39:b2:ab:ee:
         f8:3c:83:4b:16:d1:a9:3b:c9:91:86:9e:0d:a8:e7:56:ad:3d:
         5f:39:2c:d3:49:56:3a:16:e3:83:ef:2d:f1:58:04:1f:93:db:
         0a:23:bf:31:22:bb:cb:3f:30:35:77:e1:fa:cf:8e:be:3c:50:
         f3:ea:c1:c9:a3:5b:22:b1:dc:7c:b4:19:32:ef:a8:38:d0:68:
         9f:9f:9c:47:8b:11:14:07:84:71:6a:48:e3:5a:71:72:87:b7:
         a7:d3:34:4b:88:38:14:a6:48:59:09:24:32:e0:29:0e:dd:f8:
         a5:61:57:eb:b4:15:38:ef:aa:ed:39:39:5b:2c:6f:dc:92:33:
         94:54:66:0b:b9:35:31:4d:8f:45:e2:10:88:3b:fa:5b:7f:df:
         ee:39:83:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 15:47:25 2025 by rpki-client