This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
File:                     wi1VOyjF0OpbHvYMm84z31C8tJM.mft (raw, json)
Hash identifier:          0thxqweFWGN05S8gDncvCDvP0yM8V2vYG15AJSf5/Z4=
Subject key identifier:   E3:50:36:75:2C:4A:9F:72:3C:03:A5:E5:28:6A:1D:C8:75:AC:7B:74
Authority key identifier: C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
Certificate issuer:       /CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Certificate serial:       019B37C55ECEACF9C444496CF8637D41DB44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
Manifest number:          1082
Signing time:             Fri 19 Dec 2025 18:00:40 +0000
Manifest this update:     Fri 19 Dec 2025 18:00:40 +0000
Manifest next update:     Sat 20 Dec 2025 18:00:40 +0000
Files and hashes:         1: 2if-W7_9B6ndVwa4CXKbXlfYipY.roa (hash: x6w8qlU6igwl5cXDxoZUE8Lr1i8+UZJJXlmem9XWOSg=)
                          2: iNIpA6NRoHEtD1Gdwv0RcZxMEOY.roa (hash: QoWSCTkZW/GH9j1mmy2Sv0c+Jd5oUQpoqRVhrzgy26s=)
                          3: wi1VOyjF0OpbHvYMm84z31C8tJM.crl (hash: 3vCiFfzV/y3GXGEIQ83slgHoJbMp3PC6uyRVwHCX46M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:c5:5e:ce:ac:f9:c4:44:49:6c:f8:63:7d:41:db:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
        Validity
            Not Before: Dec 19 18:00:40 2025 GMT
            Not After : Dec 20 18:00:40 2025 GMT
        Subject: CN=e35036752c4a9f723c03a5e5286a1dc875ac7b74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:47:bb:33:ee:a7:c6:a7:0f:0b:ac:b4:3b:9a:
                    a1:16:a3:21:ce:66:03:eb:fd:24:8b:43:4d:ae:b4:
                    eb:f6:fc:c7:b3:86:a7:be:eb:11:ed:93:2e:61:80:
                    95:59:b1:6d:47:0d:46:78:2b:92:39:02:3d:f1:64:
                    24:aa:32:e8:12:c6:d1:00:e8:2f:87:d7:93:7c:69:
                    05:3b:00:23:4e:6e:29:ca:cd:76:05:56:ac:29:20:
                    6d:b4:3f:fe:4f:7c:35:8a:1c:61:f6:cd:e6:4a:03:
                    3c:cc:7c:24:1e:d2:d5:15:02:4e:04:fa:d5:9c:43:
                    e5:20:fb:5f:a6:2d:d7:ad:22:d7:a7:b3:01:cd:54:
                    15:19:ab:b4:0f:08:d3:67:49:a7:10:6a:d6:a8:af:
                    89:d8:00:0e:26:fa:87:0f:cc:18:f0:55:c8:dd:9f:
                    2e:67:26:43:30:eb:3f:f2:b4:81:7d:1c:8c:72:ad:
                    37:05:ea:03:57:1c:8b:d5:d1:8a:de:db:f0:f6:a0:
                    5f:fb:68:7d:dd:20:30:19:0b:ef:9a:58:a6:b0:19:
                    7b:e6:61:d8:f5:f5:c7:2f:0a:67:e5:49:34:79:32:
                    5c:ea:9f:ea:6e:d7:59:1b:c0:73:cf:fb:f9:ce:93:
                    48:78:f7:f2:ae:60:cc:14:fd:8a:68:65:42:b6:bf:
                    04:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:50:36:75:2C:4A:9F:72:3C:03:A5:E5:28:6A:1D:C8:75:AC:7B:74
            X509v3 Authority Key Identifier:
                keyid:C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:6e:fd:e3:72:6a:df:1c:ed:88:5a:61:aa:dc:08:85:de:b3:
         8b:17:fc:9a:21:7f:79:f5:20:19:2f:dc:1d:97:76:66:7e:e1:
         a8:c9:73:06:8f:a7:98:6e:70:b9:cb:dd:f4:99:7b:d8:9c:05:
         69:d3:59:cc:1a:e8:b9:b9:4a:95:e8:33:fe:11:82:d8:01:d8:
         41:cc:ab:da:07:72:f6:a9:0b:ba:82:b1:b9:3d:d3:ea:24:03:
         3f:b3:72:9c:de:1d:ff:10:20:a6:90:c6:2f:4a:48:b7:52:3f:
         d1:6d:75:43:25:b0:dc:51:27:6c:99:4a:f9:12:ef:a6:b3:7c:
         fa:5e:f3:71:76:74:8c:9a:96:18:1a:ca:01:42:18:f9:fb:55:
         d4:4d:b1:a3:7c:c8:5f:f9:bd:ff:27:4b:30:e0:9c:b5:8c:2a:
         13:74:4e:9a:44:bb:00:ef:7c:70:f0:e3:78:7d:39:49:2d:cb:
         93:77:d6:a4:3d:88:fb:1a:08:bf:a7:df:2b:ad:5e:eb:eb:9a:
         90:7a:c5:b0:6e:be:31:b0:1f:4b:0a:57:c2:bd:d7:7b:3f:ad:
         5b:9f:a1:7d:82:17:b7:91:96:10:0d:0b:58:07:87:04:5e:2e:
         52:af:9d:be:5d:f7:84:75:ba:1d:3b:86:6b:43:5c:4c:ab:fe:
         59:e0:02:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 21:26:25 2025 by rpki-client