This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft
File:                     wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft (raw, json)
Hash identifier:          66+4trvO2rYbtei2BEyD+7n0TdP1PoNN2qvLdfH8B00=
Subject key identifier:   01:F2:B7:17:24:7B:3F:AB:00:57:BD:D5:27:48:DD:A4:96:A2:AA:14
Authority key identifier: C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86
Certificate issuer:       /CN=c09fc8a067fa6d2476bdce24afffad17131d9e86
Certificate serial:       019B38D8182ED0576452FDB008F09C20AAD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft
Manifest number:          131E
Signing time:             Fri 19 Dec 2025 23:00:44 +0000
Manifest this update:     Fri 19 Dec 2025 23:00:44 +0000
Manifest next update:     Sat 20 Dec 2025 23:00:44 +0000
Files and hashes:         1: QFMNSaA1AgOll9Rhq3-mt61hLMk.roa (hash: +xD5AYj4TTeFCJ4bmxTQKDayuztzAdCF4gvCsORl2KQ=)
                          2: bqo8i7e61pUqD5FEzLFkWy1XymQ.roa (hash: vjG4lCHF0gVIg6PrqwyEnNN05XaS1Wdmc8r5NDC7CZY=)
                          3: uY6_dW7xllxNNLI9RxIMLVNoRps.roa (hash: xCs8EcZmjDS5ljwpI6+s80NCHhYZur9SyNXNWQL3yKA=)
                          4: wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl (hash: VqlbRCKFxpBR2SmoXVlTTd6o6Jeuzxpf3WsTHNyGilE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 23:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:38:d8:18:2e:d0:57:64:52:fd:b0:08:f0:9c:20:aa:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c09fc8a067fa6d2476bdce24afffad17131d9e86
        Validity
            Not Before: Dec 19 23:00:44 2025 GMT
            Not After : Dec 20 23:00:44 2025 GMT
        Subject: CN=01f2b717247b3fab0057bdd52748dda496a2aa14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c3:c1:27:cc:e6:3b:c8:c2:f3:d7:94:52:82:
                    90:82:6c:aa:fa:e0:c3:11:64:82:58:18:59:0b:87:
                    df:25:85:5f:8b:6d:53:c6:53:d7:c4:c7:88:e5:61:
                    59:2a:79:1e:e0:98:8c:d6:a5:5e:29:98:44:8b:d1:
                    9d:d7:4b:5a:e4:24:51:ff:3b:f0:1f:7f:f1:31:be:
                    d8:4b:73:94:20:a7:20:11:d3:55:b3:f4:0c:3e:c3:
                    92:68:2f:20:8f:ad:32:ce:c4:d7:74:9f:2a:e7:81:
                    ec:5c:ee:61:46:c2:e7:32:b8:cc:40:02:cb:06:d8:
                    f0:95:90:2a:23:99:c4:f0:92:41:3d:bc:71:15:f5:
                    dc:5a:41:16:17:02:3e:05:c5:76:a6:03:dd:85:be:
                    f0:49:af:35:d0:18:d5:5e:6d:f6:45:ad:1c:be:c4:
                    be:96:8a:ca:23:da:6c:e3:5b:0e:6f:13:25:23:56:
                    b9:7f:20:d2:1d:77:16:c1:a4:e9:3c:e9:04:a5:ab:
                    e9:50:27:88:81:2f:a5:f7:08:a6:f6:ff:a4:5c:44:
                    fb:14:e3:4d:3e:8a:e9:a8:22:16:f9:b2:54:34:7d:
                    9b:e0:2e:1d:c5:16:14:75:a6:86:6f:7a:4b:71:08:
                    e7:a2:b7:9d:b6:15:3f:ff:9e:af:dd:20:d5:84:ae:
                    81:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F2:B7:17:24:7B:3F:AB:00:57:BD:D5:27:48:DD:A4:96:A2:AA:14
            X509v3 Authority Key Identifier:
                keyid:C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:ee:dd:cb:f0:08:1c:37:5a:e0:f6:af:2a:60:6c:b5:3f:d7:
         49:c9:60:25:0b:80:0a:5f:27:f0:cf:96:b4:0e:59:41:ca:9d:
         2c:5f:cc:51:05:01:2a:98:c2:1e:7a:9b:ee:a0:b3:ef:18:79:
         fa:fc:74:bd:29:fc:07:a3:35:47:dc:16:cd:a7:03:c8:89:4b:
         2c:ac:a1:60:d9:dc:e0:14:36:04:7a:32:c5:8a:84:aa:7b:64:
         97:45:c9:f4:7a:f6:97:e2:db:35:b5:0b:23:15:9e:20:81:76:
         69:d7:0c:d5:28:1a:c8:4a:49:56:14:73:c3:ad:1f:b5:69:4c:
         c1:54:89:68:ab:8a:78:0f:78:1f:c8:f4:fd:ed:4a:92:d6:4b:
         c1:00:37:7b:84:bd:36:a5:53:fc:61:41:2c:49:92:85:ad:8f:
         ba:c2:aa:08:d9:26:87:39:5e:52:01:3d:87:83:cd:5a:85:e0:
         d4:91:16:78:37:fe:e9:7d:63:a0:58:67:8b:94:9f:48:a8:31:
         f1:4d:a4:d5:74:41:b8:41:83:80:18:20:b2:d1:ab:5e:ed:94:
         5a:ff:d0:ef:2d:7b:a6:36:b0:d2:c4:3c:55:c9:ee:11:e6:bd:
         d5:7c:64:90:fb:4b:b4:eb:eb:fe:54:ec:10:5a:b9:19:64:15:
         e0:e7:77:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 08:54:33 2025 by rpki-client