This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
File:                     wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft (raw, json)
Hash identifier:          43aHbdDDTEn9JH9UBJfktDeIl3lDGCYGp4fBaEXyMwk=
Subject key identifier:   70:0F:B8:C6:4E:7B:AC:BC:11:27:7E:2E:7F:F6:33:C1:92:F5:26:55
Authority key identifier: C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
Certificate issuer:       /CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Certificate serial:       019B59AC80928AF6FE50C9E24066586F7503
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
Manifest number:          080E
Signing time:             Fri 26 Dec 2025 08:00:35 +0000
Manifest this update:     Fri 26 Dec 2025 08:00:35 +0000
Manifest next update:     Sat 27 Dec 2025 08:00:35 +0000
Files and hashes:         1: 6zfU2J2wR6MMPAQDPcdRmDUSTTk.roa (hash: qvQ90YxdjeGEsA7jHHHCLNHaXx9teWbipOiBvb0hjRc=)
                          2: wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl (hash: XHmQPJvfb6eBXlEbtciQMXEGvPVO0WRRrPzTPbuVgcE=)
                          3: x0gusjZxaAiftvAcjczux1Ius_E.roa (hash: HFa+GGzqn2pKQb0OIJEk/YaY1MmpeAOG1mYH0pjtvqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:59:ac:80:92:8a:f6:fe:50:c9:e2:40:66:58:6f:75:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
        Validity
            Not Before: Dec 26 08:00:35 2025 GMT
            Not After : Dec 27 08:00:35 2025 GMT
        Subject: CN=700fb8c64e7bacbc11277e2e7ff633c192f52655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:49:57:17:07:38:8b:79:d7:14:ea:13:ef:b0:
                    df:73:e6:ee:fb:e3:fb:74:df:ae:b6:29:3d:2d:b7:
                    f0:57:ba:5a:af:a7:48:57:6a:0a:df:74:10:ac:9f:
                    7a:50:36:48:f5:41:7e:14:04:cb:cd:d1:bc:c8:73:
                    32:ed:46:73:d6:85:57:5c:f8:50:54:5a:2f:33:e7:
                    52:b5:2a:40:bc:19:a0:d2:10:c9:67:96:5b:5d:ff:
                    42:3b:9b:48:41:82:92:05:eb:65:2e:23:71:4f:e4:
                    e5:f7:46:03:d5:a3:31:75:c4:45:55:60:2c:5c:ac:
                    6d:44:a0:af:46:c4:d3:bb:09:8c:4a:a0:ef:ac:b2:
                    2e:c1:2d:f4:72:f4:6c:54:51:53:b4:85:af:56:7b:
                    fc:66:7c:a4:13:82:44:60:fc:2a:41:c0:60:c7:98:
                    0f:47:39:4a:db:dc:d6:20:8d:54:df:5b:bb:2c:f9:
                    40:63:58:d8:4a:cb:3b:12:59:df:54:dd:0b:3e:23:
                    c5:3c:26:30:61:28:ec:7e:fd:ef:20:05:43:b0:ac:
                    22:41:52:64:c2:bc:4f:3b:28:5f:6f:7e:a9:d4:ba:
                    0b:02:00:ec:90:85:ba:6c:21:0e:8a:4e:1d:c8:77:
                    be:7f:fc:05:31:0f:b9:2b:42:ec:ff:5e:4b:ec:75:
                    d2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:0F:B8:C6:4E:7B:AC:BC:11:27:7E:2E:7F:F6:33:C1:92:F5:26:55
            X509v3 Authority Key Identifier:
                keyid:C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:c7:1a:dc:f9:05:72:5d:1e:9b:1d:00:4e:0e:52:a9:c5:2a:
         9d:74:33:7a:db:20:71:90:94:47:a0:23:99:0c:38:78:20:47:
         b8:f5:27:65:eb:61:f9:33:61:54:69:d3:1c:48:fa:01:3f:76:
         71:61:0e:d4:33:99:9b:7b:93:76:f7:90:b7:f0:4f:85:4e:56:
         de:d5:62:6f:d1:02:ea:61:c2:0e:dc:ff:85:e2:23:37:7e:7f:
         f5:fe:17:86:83:54:77:28:01:ab:07:b3:d5:5f:36:f5:08:7a:
         06:bb:cd:22:80:b2:ef:0d:c3:ea:eb:e2:38:e5:d6:71:1a:6f:
         5b:6a:cc:89:64:e5:70:a8:ec:25:92:03:bb:31:03:8a:c7:76:
         c4:af:74:b1:ba:66:ab:df:e4:ac:e2:8d:cb:3c:bf:ed:1d:80:
         e7:7e:d4:e8:31:32:6e:7d:ae:d5:42:0d:88:80:5d:01:7f:43:
         76:0c:ea:30:e4:7c:01:1d:7c:d5:f0:b3:69:a9:1c:cd:81:02:
         4c:94:cf:0c:3d:74:e6:4f:28:4b:16:8a:23:83:6c:a6:41:84:
         d0:de:bc:0a:70:bb:3f:10:63:a8:75:74:43:1e:2e:9b:5a:2f:
         9d:18:17:c2:9a:0e:74:ed:ca:7e:a9:2e:46:95:6d:a2:e9:95:
         07:8c:2b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 14:17:28 2025 by rpki-client