This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft
File:                     ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft (raw, json)
Hash identifier:          BOXOmYh00zznd/h7oMmJVTx5JDlW5HUlTo5ghKJ9RYg=
Subject key identifier:   1E:B7:3D:DF:65:12:20:74:9B:81:20:25:47:41:8D:59:82:C2:31:84
Authority key identifier: C3:0D:03:E6:46:76:E7:20:A4:FF:55:17:9E:19:6F:EC:65:91:88:6B
Certificate issuer:       /CN=c30d03e64676e720a4ff55179e196fec6591886b
Certificate serial:       019B20D0062244157E484AAEF28176291152
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ww0D5kZ25yCk_1UXnhlv7GWRiGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft
Manifest number:          05E2
Signing time:             Mon 15 Dec 2025 07:01:02 +0000
Manifest this update:     Mon 15 Dec 2025 07:01:02 +0000
Manifest next update:     Tue 16 Dec 2025 07:01:02 +0000
Files and hashes:         1: O_SKclTWbwMrHuJ-wu_A_gUlj98.roa (hash: wqqIe428dBMOphAjwqG0MbbSQPuyl8AVjDeCz3ynOtk=)
                          2: ww0D5kZ25yCk_1UXnhlv7GWRiGs.crl (hash: mHkUiaLYwGSwmENL/yw1hqCSxPtuLMJXoyKIjU5BTwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ww0D5kZ25yCk_1UXnhlv7GWRiGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 07:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:20:d0:06:22:44:15:7e:48:4a:ae:f2:81:76:29:11:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c30d03e64676e720a4ff55179e196fec6591886b
        Validity
            Not Before: Dec 15 07:01:02 2025 GMT
            Not After : Dec 16 07:01:02 2025 GMT
        Subject: CN=1eb73ddf651220749b81202547418d5982c23184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:03:2b:1b:f9:0e:73:f7:df:4a:02:d0:f1:d8:
                    95:1b:24:e6:3d:ba:c3:d5:0b:84:50:84:1a:f6:52:
                    ff:07:be:27:56:fa:0c:07:62:0f:59:3c:b3:a4:64:
                    23:bd:dd:a5:86:93:73:61:9f:55:36:4a:02:b4:50:
                    72:00:fe:54:3f:97:97:33:d9:b5:37:3f:73:f0:43:
                    ed:ce:06:21:23:d7:60:f5:6c:6a:62:cb:ce:10:27:
                    4d:5b:7f:70:55:bb:01:09:76:16:7e:74:93:d3:d6:
                    ac:84:f9:e5:22:d6:b4:5e:46:aa:8a:d5:0b:be:94:
                    a5:56:41:3f:e7:6c:bb:40:b2:e4:46:02:73:e1:42:
                    4f:88:71:b2:d9:e6:07:d6:e1:be:a6:f0:94:93:74:
                    79:ae:29:b2:a7:8e:50:a0:90:40:64:81:44:dd:b7:
                    b7:54:ca:7f:71:bf:c8:b9:7d:df:36:6f:fb:ed:5c:
                    9f:65:41:67:e9:2a:e2:0d:31:00:05:94:d3:a5:fb:
                    17:3a:5d:0c:45:ae:e0:2d:9f:e5:b8:7a:eb:99:3c:
                    85:b3:79:8f:09:39:71:4e:66:3e:aa:87:4c:8d:1c:
                    23:fc:cd:cf:93:d1:c8:ab:9f:0a:2b:01:b1:95:fb:
                    ba:81:95:53:6e:bb:1e:12:9b:e0:e4:58:1b:f7:ec:
                    e7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B7:3D:DF:65:12:20:74:9B:81:20:25:47:41:8D:59:82:C2:31:84
            X509v3 Authority Key Identifier:
                keyid:C3:0D:03:E6:46:76:E7:20:A4:FF:55:17:9E:19:6F:EC:65:91:88:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ww0D5kZ25yCk_1UXnhlv7GWRiGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:a3:5e:4e:16:3b:6b:47:44:d8:72:c5:20:bf:07:59:57:66:
         0c:72:d9:42:da:ad:59:59:16:f5:91:fa:4f:8c:08:8d:ed:2d:
         64:88:bf:7c:d0:ed:95:c4:ae:d0:b3:ce:a8:24:9c:b9:eb:f4:
         1a:76:97:96:cc:89:37:dc:c1:88:d7:5e:6b:b9:8f:dc:9d:5b:
         b6:4a:aa:fd:db:a2:d5:75:ac:40:7f:08:ed:6d:54:3f:1e:7e:
         de:34:d0:bc:4a:a1:b9:09:72:5b:52:41:f8:df:4d:7e:80:3e:
         06:c8:0f:c2:41:57:cb:ee:47:c9:cb:1b:14:12:df:5f:4d:bf:
         e6:6b:5d:6d:f1:0a:af:33:4f:69:95:0f:3f:e4:6b:5e:04:e1:
         3d:f2:54:d8:af:43:0c:c7:fa:7b:27:dd:26:ae:9b:d4:f5:f2:
         0e:d2:1f:89:4f:d0:78:3e:95:5f:5a:fb:f9:5f:c7:a3:3c:82:
         f2:0d:88:ab:3c:da:9d:86:85:ab:6b:92:a5:01:30:09:bb:d5:
         28:20:72:bc:58:7a:96:af:7e:ac:81:41:59:52:a9:5c:cb:aa:
         d5:d3:89:d3:64:01:f4:07:ca:62:89:e0:86:bd:1e:a9:48:fa:
         1b:15:01:81:a4:a2:82:8f:7c:fa:f0:03:8b:b3:fa:32:21:68:
         42:81:09:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 12:05:14 2025 by rpki-client