This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/051f88-857c-4e4b-bd3d-f1b893887884/1/1-wruDhv4ISwCJeeFs5TwQWuzK7c.mft
File:                     1-wruDhv4ISwCJeeFs5TwQWuzK7c.mft (raw, json)
Hash identifier:          FD+GWGeQc94jiB6enMqpZEqqAT4H4bP0K4H8E1QiTF4=
Subject key identifier:   99:2E:B9:46:08:3B:35:23:F3:C2:AB:9C:90:0B:98:69:5E:AD:36:42
Authority key identifier: FB:0A:EE:0E:1B:F8:21:2C:02:25:E7:85:B3:94:F0:41:6B:B3:2B:B7
Certificate issuer:       /CN=fb0aee0e1bf8212c0225e785b394f0416bb32bb7
Certificate serial:       019B32D6C0AA928BAF30BD08BB23FA8FDF50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-wruDhv4ISwCJeeFs5TwQWuzK7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/051f88-857c-4e4b-bd3d-f1b893887884/1/1-wruDhv4ISwCJeeFs5TwQWuzK7c.mft
Manifest number:          131B
Signing time:             Thu 18 Dec 2025 19:01:33 +0000
Manifest this update:     Thu 18 Dec 2025 19:01:33 +0000
Manifest next update:     Fri 19 Dec 2025 19:01:33 +0000
Files and hashes:         1: 1-wruDhv4ISwCJeeFs5TwQWuzK7c.crl (hash: X5A8oYQM08Y/MZzdDXFclgmfsfiBIw0a8jErv7+7cJ0=)
                          2: 7nXaaVv_V235Zw4BMul2GWZ7xR8.roa (hash: R4Zh1p9XslQWQrmRqKza0m+0LD8N9LPjaGQT5LDiOOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/051f88-857c-4e4b-bd3d-f1b893887884/1/1-wruDhv4ISwCJeeFs5TwQWuzK7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/051f88-857c-4e4b-bd3d-f1b893887884/1/1-wruDhv4ISwCJeeFs5TwQWuzK7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-wruDhv4ISwCJeeFs5TwQWuzK7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 13:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:32:d6:c0:aa:92:8b:af:30:bd:08:bb:23:fa:8f:df:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb0aee0e1bf8212c0225e785b394f0416bb32bb7
        Validity
            Not Before: Dec 18 19:01:33 2025 GMT
            Not After : Dec 19 19:01:33 2025 GMT
        Subject: CN=992eb946083b3523f3c2ab9c900b98695ead3642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0f:2d:8d:97:7c:8c:dc:e5:28:cf:2d:0b:ab:
                    10:fa:dc:d9:63:e7:42:49:32:18:9f:cf:4c:19:69:
                    f5:06:89:b4:c7:d6:86:c0:51:e3:8e:a8:90:1c:fe:
                    38:fa:3d:85:df:1c:f6:ec:f0:6c:34:92:45:51:23:
                    3b:d9:9d:71:89:71:be:19:d1:6d:db:03:ed:34:12:
                    5f:68:3e:73:22:d4:84:43:58:35:1e:d6:60:47:ca:
                    70:f8:a6:4a:79:fa:75:1f:7a:71:1a:b6:6d:e4:1e:
                    24:b4:c3:a0:41:6b:4a:fb:08:b7:46:ca:00:0f:68:
                    66:9a:5f:a0:92:0e:44:dc:19:58:90:a8:e8:c7:10:
                    73:84:68:89:9d:f5:ba:00:3c:d2:c6:d0:02:01:de:
                    e3:83:7d:15:2c:44:4e:dd:3d:5e:26:8f:d2:1a:3c:
                    75:f0:10:86:51:75:ae:88:2b:01:f8:33:7a:97:fe:
                    a3:bc:92:ad:08:72:c9:01:3e:5a:7d:0f:d6:d3:1d:
                    2d:a4:e5:b0:b8:53:11:7e:8d:fc:4a:3a:60:e0:cf:
                    21:54:68:a6:f7:6a:1c:f4:c2:71:4e:cc:e6:6b:b7:
                    bf:a1:46:68:92:61:22:4b:63:60:ff:ea:3b:a8:fd:
                    af:42:e7:55:a8:6b:27:df:77:81:3c:85:34:13:30:
                    9b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:2E:B9:46:08:3B:35:23:F3:C2:AB:9C:90:0B:98:69:5E:AD:36:42
            X509v3 Authority Key Identifier:
                keyid:FB:0A:EE:0E:1B:F8:21:2C:02:25:E7:85:B3:94:F0:41:6B:B3:2B:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wruDhv4ISwCJeeFs5TwQWuzK7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/051f88-857c-4e4b-bd3d-f1b893887884/1/1-wruDhv4ISwCJeeFs5TwQWuzK7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/051f88-857c-4e4b-bd3d-f1b893887884/1/1-wruDhv4ISwCJeeFs5TwQWuzK7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:c9:b1:68:75:67:1a:0e:19:6b:c7:3f:0b:89:13:51:a6:67:
         ed:8b:b5:9b:10:43:09:9b:d3:f2:67:d5:b1:28:8c:b3:29:82:
         79:9f:46:6e:c0:55:15:ea:8a:75:8d:bd:12:cc:69:09:44:ec:
         d8:53:22:96:19:37:8b:ee:20:6a:a8:f2:aa:79:31:0a:7b:7b:
         33:91:64:b9:3a:30:65:44:d2:ab:7e:cd:be:01:e0:03:8c:63:
         8a:81:45:c2:92:0d:69:5b:c7:ea:57:ff:f5:12:f6:eb:3a:e0:
         2b:33:5e:9f:ec:ba:f8:8d:23:f2:ac:84:d8:75:ed:0d:42:3d:
         46:12:b2:8e:1c:4a:36:1d:f6:87:c4:56:35:ce:95:d8:90:19:
         ce:ea:fa:2c:b5:84:c2:2e:86:07:41:02:df:fd:b8:a6:b7:54:
         08:47:34:e4:7d:80:ca:46:a9:12:03:d5:fa:f5:d6:7b:44:d1:
         ec:bf:0e:4e:3c:95:23:df:7b:8f:de:0b:c7:96:29:f1:7e:f2:
         84:3a:4a:75:cd:4c:73:28:a0:a4:fa:ac:14:62:ba:6d:ac:d6:
         76:d8:bc:e8:f3:a0:f8:ae:85:90:fc:d2:a5:9b:91:e9:84:d6:
         d2:9d:ba:9c:f1:87:a9:fd:19:8c:0d:bb:6a:fa:6b:03:2c:bd:
         44:97:a1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 22:36:37 2025 by rpki-client