This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.mft
File:                     wtgszwyN6n1_atcujmJGLXviDVY.mft (raw, json)
Hash identifier:          t8mqNfK6o/mqE5mzS4SUid8FrUUbNOr061JSerty4fY=
Subject key identifier:   4D:13:44:0C:71:64:21:84:F6:86:47:26:F1:00:85:84:46:A9:E8:AA
Authority key identifier: C2:D8:2C:CF:0C:8D:EA:7D:7F:6A:D7:2E:8E:62:46:2D:7B:E2:0D:56
Certificate issuer:       /CN=c2d82ccf0c8dea7d7f6ad72e8e62462d7be20d56
Certificate serial:       019B4A39F9CF45DEFF079E82C2B80664BF46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.mft
Manifest number:          1797
Signing time:             Tue 23 Dec 2025 08:01:12 +0000
Manifest this update:     Tue 23 Dec 2025 08:01:12 +0000
Manifest next update:     Wed 24 Dec 2025 08:01:12 +0000
Files and hashes:         1: 56E2eRNFxzpXqTECZSNhq9NrPOQ.roa (hash: kVqvgKF+nZSGal/AwDKY90LYsegDO41+Dxp8TZ0XdP8=)
                          2: JtbkknZoz-ZpYkGR5Faik_dT6m8.roa (hash: CKgz0QGH5sNSVcZST2h0jpMtQH08uuEFFd8ZyzC9G3o=)
                          3: ltRYivrHDrWNdxne_A9FIv1LJlY.roa (hash: qB1Eut1IyAFg4Lz5YzqH97WbuLNnEkbs/hF3c3T/wFo=)
                          4: wtgszwyN6n1_atcujmJGLXviDVY.crl (hash: WiY7ui813S+3WXH8B5VRptlQSsa1dZPUm1y0iSDO/R8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Dec 2025 08:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4a:39:f9:cf:45:de:ff:07:9e:82:c2:b8:06:64:bf:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d82ccf0c8dea7d7f6ad72e8e62462d7be20d56
        Validity
            Not Before: Dec 23 08:01:12 2025 GMT
            Not After : Dec 24 08:01:12 2025 GMT
        Subject: CN=4d13440c71642184f6864726f100858446a9e8aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0f:48:6a:46:87:24:ac:28:10:e8:dc:63:44:
                    41:0a:e2:a7:dc:ba:a7:d1:da:b3:d9:9a:26:14:83:
                    8c:ce:e5:60:f5:6b:07:6a:49:3d:7f:4d:93:d1:ce:
                    2c:20:2c:89:7e:43:30:43:d7:7e:8a:fa:68:3c:86:
                    21:42:9d:9b:b1:0c:1f:98:b4:46:ec:d0:6f:e5:58:
                    0f:ce:90:b8:76:73:3d:83:76:4e:bc:34:f4:97:ce:
                    a3:18:e9:0c:16:a9:90:dc:eb:d7:78:90:69:9a:00:
                    3a:a3:3b:57:c6:7f:e8:70:71:14:7f:f2:7e:b9:6b:
                    da:96:40:d1:36:d5:82:5e:d8:a9:6d:4d:f1:08:ec:
                    0c:25:ce:04:f2:99:c9:34:8d:a8:91:a6:a2:3e:fb:
                    99:ef:39:68:58:40:29:c0:b6:18:98:de:7e:13:b9:
                    5d:5f:92:fe:96:df:fe:e2:d5:0e:c5:4d:0f:58:2c:
                    9c:22:5a:57:a2:24:27:ce:a9:53:72:29:b3:7b:05:
                    40:c7:47:7e:8e:78:89:45:aa:f4:95:2a:9c:6b:28:
                    f0:4f:3c:ef:be:76:fd:33:05:e0:16:95:b4:ae:10:
                    62:47:51:a3:a8:e8:63:b9:d1:a4:b3:db:b0:56:03:
                    45:aa:af:0e:93:9c:1e:49:41:2d:ff:3c:77:54:cd:
                    94:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:13:44:0C:71:64:21:84:F6:86:47:26:F1:00:85:84:46:A9:E8:AA
            X509v3 Authority Key Identifier:
                keyid:C2:D8:2C:CF:0C:8D:EA:7D:7F:6A:D7:2E:8E:62:46:2D:7B:E2:0D:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:ad:4d:59:8a:46:ba:97:ac:2f:c5:3d:09:70:89:78:75:02:
         f5:ca:94:43:73:37:2a:38:a4:6a:f9:4f:0f:8c:25:db:1a:0a:
         f4:9f:f4:92:f1:23:5e:42:08:36:70:65:f9:b8:08:a1:2e:f8:
         3e:e6:76:8f:8b:b0:55:18:86:3c:28:e3:32:e2:92:e3:97:e6:
         9a:6a:0b:ea:ce:46:07:33:bf:fb:81:d6:fd:34:bb:94:a6:7b:
         7b:93:5c:f3:c1:92:8c:fc:81:69:4c:93:88:3f:97:99:f9:00:
         59:05:b0:37:2c:93:94:a7:cb:2a:be:af:06:cf:a4:f8:d2:bc:
         2c:23:32:c6:09:a7:dd:9e:3c:3e:1f:1d:0f:62:e5:28:85:13:
         8c:e7:d1:ad:e4:06:90:cc:65:b3:32:49:bc:fd:84:c0:e0:9d:
         79:6a:4c:c5:e8:15:e7:41:a6:c1:f4:5e:41:d0:46:4c:af:65:
         04:fe:54:41:0b:69:c4:cb:33:80:1f:52:84:af:4f:fa:3f:f0:
         62:13:8d:c8:fe:51:37:1b:0c:58:94:74:de:16:bb:ad:c1:7d:
         f0:2e:3f:b7:73:ff:4f:ef:98:2a:21:b8:4d:25:f8:79:cf:0e:
         94:59:6b:be:7f:f9:00:49:41:b4:6a:1a:e7:ef:13:3a:26:53:
         b8:db:95:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtKOfnPRd7/B56CwrgGZL9GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZDgyY2NmMGM4ZGVhN2Q3ZjZhZDcyZThlNjI0NjJkN2Jl
MjBkNTYwHhcNMjUxMjIzMDgwMTEyWhcNMjUxMjI0MDgwMTEyWjAzMTEwLwYDVQQD
Eyg0ZDEzNDQwYzcxNjQyMTg0ZjY4NjQ3MjZmMTAwODU4NDQ2YTllOGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvg9IakaHJKwoEOjcY0RBCuKn3Lqn
0dqz2ZomFIOMzuVg9WsHakk9f02T0c4sICyJfkMwQ9d+ivpoPIYhQp2bsQwfmLRG
7NBv5VgPzpC4dnM9g3ZOvDT0l86jGOkMFqmQ3OvXeJBpmgA6oztXxn/ocHEUf/J+
uWvalkDRNtWCXtipbU3xCOwMJc4E8pnJNI2okaaiPvuZ7zloWEApwLYYmN5+E7ld
X5L+lt/+4tUOxU0PWCycIlpXoiQnzqlTcimzewVAx0d+jniJRar0lSqcayjwTzzv
vnb9MwXgFpW0rhBiR1GjqOhjudGks9uwVgNFqq8Ok5weSUEt/zx3VM2U1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0TRAxxZCGE9oZHJvEAhYRGqeiqMB8GA1UdIwQY
MBaAFMLYLM8Mjep9f2rXLo5iRi174g1WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3Rnc3p3eU42bjFfYXRjdWptSkdMWHZpRFZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zMjc5NTItNGM2Ni00Yjk1LWI2ZGUt
NDMxMThlNDk2ZDQwLzEvd3Rnc3p3eU42bjFfYXRjdWptSkdMWHZpRFZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8zMjc5NTItNGM2Ni00Yjk1LWI2ZGUtNDMxMThlNDk2ZDQw
LzEvd3Rnc3p3eU42bjFfYXRjdWptSkdMWHZpRFZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsq1NWYpG
upesL8U9CXCJeHUC9cqUQ3M3KjikavlPD4wl2xoK9J/0kvEjXkIINnBl+bgIoS74
PuZ2j4uwVRiGPCjjMuKS45fmmmoL6s5GBzO/+4HW/TS7lKZ7e5Nc88GSjPyBaUyT
iD+XmfkAWQWwNyyTlKfLKr6vBs+k+NK8LCMyxgmn3Z48Ph8dD2LlKIUTjOfRreQG
kMxlszJJvP2EwOCdeWpMxegV50GmwfReQdBGTK9lBP5UQQtpxMszgB9ShK9P+j/w
YhONyP5RNxsMWJR03ha7rcF98C4/t3P/T++YKiG4TSX4ec8OlFlrvn/5AElBtGoa
5+8TOiZTuNuVJA==
-----END CERTIFICATE-----
Generated at Tue Dec 23 10:59:25 2025 by rpki-client