This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft
File:                     w0CU4yNtzRyDURN5Gjgk2ilz35s.mft (raw, json)
Hash identifier:          CL5aYA7aiLqYukeaX9ZmjDqJdvbIgCPwSUbx/fXkAH4=
Subject key identifier:   EC:C3:73:59:2C:ED:36:66:10:15:70:81:2C:19:6F:20:01:70:77:3F
Authority key identifier: C3:40:94:E3:23:6D:CD:1C:83:51:13:79:1A:38:24:DA:29:73:DF:9B
Certificate issuer:       /CN=c34094e3236dcd1c835113791a3824da2973df9b
Certificate serial:       019B367BCDA81E383C35BA7CE40E29515C2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft
Manifest number:          011F
Signing time:             Fri 19 Dec 2025 12:00:41 +0000
Manifest this update:     Fri 19 Dec 2025 12:00:41 +0000
Manifest next update:     Sat 20 Dec 2025 12:00:41 +0000
Files and hashes:         1: 4RPSqbfmeC-IC3WR5JrPY-ti6aQ.roa (hash: egyP6+hpVOsfhjTSw14Ho98ZzzCiujpdZ4z2/ZYR+NI=)
                          2: E1huK4lRaNqnfDwjhKC7S27samY.roa (hash: 5eWDICwAkK513LsxaFUCZCYFQIVOjrg6WQ+rcwXWfbg=)
                          3: V7FxeBgowMJ9uzRZi_USZCw6XMI.roa (hash: tBwxfUXaS851zDbs0JMu4PFLXBxOjlI4hBYncc4yuPg=)
                          4: w0CU4yNtzRyDURN5Gjgk2ilz35s.crl (hash: iG20c7dmbcjHixCAxBZQe2a4Vqi+hdLHtY20K4vkzkU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 12:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:36:7b:cd:a8:1e:38:3c:35:ba:7c:e4:0e:29:51:5c:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c34094e3236dcd1c835113791a3824da2973df9b
        Validity
            Not Before: Dec 19 12:00:41 2025 GMT
            Not After : Dec 20 12:00:41 2025 GMT
        Subject: CN=ecc373592ced3666101570812c196f200170773f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:92:15:f8:eb:ab:dd:ba:2c:39:e5:9b:d8:73:
                    71:3d:00:b8:00:f7:10:27:7a:92:09:2c:87:15:9b:
                    a2:4f:43:35:52:8e:f4:18:b3:17:56:b6:5e:f2:08:
                    25:8c:83:df:de:79:fc:d6:10:9f:02:59:4e:53:71:
                    ac:77:6a:15:1e:90:0d:77:26:f9:39:4e:8e:99:b7:
                    99:39:f2:22:a4:9f:f1:54:32:59:46:ef:b5:ea:e2:
                    16:4e:fe:48:c5:a7:92:0e:dd:ac:fa:89:ce:47:b8:
                    37:89:cd:ef:ab:9a:ae:42:06:c2:8c:e8:f2:eb:f1:
                    e9:fd:ee:2e:f0:32:fb:02:a3:79:7d:9f:5c:73:af:
                    b2:ba:a0:51:a5:bd:a3:95:8b:2b:61:08:d8:13:9b:
                    04:07:7a:64:1e:c4:56:b0:4c:25:bd:29:bc:93:5e:
                    f5:16:a7:88:40:b2:52:f8:0c:6b:c0:b2:54:aa:87:
                    58:3a:f2:74:ff:c8:b5:f7:23:01:e4:e2:ff:5c:c6:
                    53:40:45:84:3d:14:9d:2d:18:ed:c0:f1:59:0d:b4:
                    37:1a:7b:b7:fa:d8:1d:c3:10:2d:bf:7c:91:58:1d:
                    1a:2e:ed:37:d8:aa:a9:44:ca:b0:14:a2:ed:81:39:
                    cb:f6:c1:ae:92:46:ef:38:6c:d1:b9:32:4b:42:60:
                    4d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C3:73:59:2C:ED:36:66:10:15:70:81:2C:19:6F:20:01:70:77:3F
            X509v3 Authority Key Identifier:
                keyid:C3:40:94:E3:23:6D:CD:1C:83:51:13:79:1A:38:24:DA:29:73:DF:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:04:17:e1:c9:b7:f9:9a:6e:63:7b:82:c2:d5:b9:0e:e1:f4:
         53:dd:4e:27:93:22:62:08:f6:6b:42:d4:d6:24:77:fe:ee:c5:
         e1:6e:43:a4:62:92:72:96:d2:13:24:d4:7d:76:b3:42:32:bf:
         15:7b:fa:a9:e8:2b:28:8c:ff:66:d8:b5:c9:e2:59:de:10:c3:
         24:0b:84:ce:db:c3:0b:fa:bb:f7:18:2c:b5:31:5c:3d:86:b8:
         49:86:91:0d:cc:18:49:5e:40:05:45:47:7c:1b:1d:f2:d9:d4:
         92:97:82:cb:c9:7f:2e:8d:a0:11:b4:d4:6e:74:79:b9:e1:92:
         69:2d:a2:06:92:2e:77:4a:ec:c7:73:d4:7c:f9:ff:59:e7:ac:
         ed:3e:0d:0f:7b:4c:53:a9:2b:3c:f9:ee:e9:97:03:6f:05:39:
         f4:04:9b:88:36:33:ed:48:3b:58:81:96:5e:d0:4e:dd:52:92:
         7c:57:d0:71:ff:2e:8d:6f:8f:b0:8b:5c:6d:83:cd:d5:18:6c:
         55:0e:fa:af:ce:01:5d:43:54:f1:2d:23:db:ec:7c:06:01:0f:
         d5:17:2c:e4:97:df:1c:6a:27:e4:00:ca:9c:d0:dc:14:e1:23:
         ba:19:9e:83:c8:ce:bf:48:58:64:00:86:c0:60:99:e9:84:10:
         fb:be:60:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 21:28:44 2025 by rpki-client