This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft
File:                     WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft (raw, json)
Hash identifier:          J05acxGanyb0u4vy5/aBGg0mSQQlIu11oJ0V4TVb2qY=
Subject key identifier:   F4:BC:B0:6B:D8:FA:A0:9E:B5:AC:BE:9E:B0:DD:53:A3:65:36:3D:C3
Authority key identifier: 59:91:95:84:03:3C:39:11:A0:09:BD:DE:31:83:F6:C6:0B:2A:FC:CA
Certificate issuer:       /CN=59919584033c3911a009bdde3183f6c60b2afcca
Certificate serial:       019B341FD79C8CC31322DC2F2DFD1F7CE12B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft
Manifest number:          0E2F
Signing time:             Fri 19 Dec 2025 01:01:00 +0000
Manifest this update:     Fri 19 Dec 2025 01:01:00 +0000
Manifest next update:     Sat 20 Dec 2025 01:01:00 +0000
Files and hashes:         1: 3iX2jkkHiD5MWdLtUD1Exzmo13Q.roa (hash: 3QNrKYAXHRyi/BOzLIrAyRHDvtVW/W4+B5tMO6HApyM=)
                          2: WZGVhAM8ORGgCb3eMYP2xgsq_Mo.crl (hash: ItYqGZj9xb3e5BM7v3udio0M1YIhLTnauLwR/fHAjEI=)
                          3: ula9jfoyo-Oxj4oQTJhGSM2DQ5o.roa (hash: +U/LkfnqXi7jglNA2KgxDFsmoz1cp5+KfODGzHBZoUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 01:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:34:1f:d7:9c:8c:c3:13:22:dc:2f:2d:fd:1f:7c:e1:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59919584033c3911a009bdde3183f6c60b2afcca
        Validity
            Not Before: Dec 19 01:01:00 2025 GMT
            Not After : Dec 20 01:01:00 2025 GMT
        Subject: CN=f4bcb06bd8faa09eb5acbe9eb0dd53a365363dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:12:74:54:f5:88:80:b7:1e:28:d0:e5:25:69:
                    49:cd:0d:fa:8d:1f:3e:a3:b0:09:8e:f3:98:cb:10:
                    72:06:83:da:5f:b7:44:13:28:09:a4:2a:26:4c:cf:
                    6a:a3:bf:07:06:1a:3d:9e:4c:3f:0a:7b:ae:61:18:
                    57:61:8c:e7:50:03:7a:21:24:cd:85:bb:02:da:9c:
                    9d:b9:32:d9:0f:0d:e9:34:47:b5:7d:73:31:a7:8d:
                    6f:e9:6b:59:6e:18:43:d7:7e:a0:d2:3d:db:2c:41:
                    13:04:06:06:77:04:62:1e:dd:d0:38:9d:83:03:2c:
                    18:e8:ad:f0:4d:d3:b4:38:5b:15:3b:89:61:19:6c:
                    14:a0:11:18:9c:66:f0:0f:d4:11:03:3b:0c:b8:34:
                    7c:fd:65:f4:03:02:1e:da:c6:b5:f0:25:e9:5c:f5:
                    f5:5c:48:c8:f2:f6:40:2a:f9:ed:4b:01:c8:26:23:
                    84:09:dc:e8:a2:37:26:99:e2:dc:21:3d:b7:12:6b:
                    55:02:01:19:ff:28:5d:3d:23:f0:7b:d2:a0:7f:03:
                    a6:7d:fc:c3:42:9b:86:ca:a9:ed:be:be:01:3d:c7:
                    a4:3f:72:ea:98:5d:3d:07:3f:8c:e6:e0:7b:77:d6:
                    83:8f:d0:39:97:be:42:14:13:13:d3:34:f4:81:a8:
                    1b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:BC:B0:6B:D8:FA:A0:9E:B5:AC:BE:9E:B0:DD:53:A3:65:36:3D:C3
            X509v3 Authority Key Identifier:
                keyid:59:91:95:84:03:3C:39:11:A0:09:BD:DE:31:83:F6:C6:0B:2A:FC:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:e1:8b:07:d3:ea:0e:c1:43:77:f3:16:d7:39:ed:59:e7:8b:
         6a:6d:31:3a:0b:41:f3:cc:de:ba:07:2c:e3:c7:99:3b:7b:d2:
         28:3b:28:01:7d:39:62:d3:8d:1d:ce:1b:4a:bb:c9:94:d4:b3:
         ce:3b:12:c3:9f:26:99:82:fc:01:fb:92:7f:a3:c9:72:64:54:
         36:db:7a:3d:c1:cd:f8:1c:09:b5:cb:30:88:55:a8:a7:4f:e1:
         f1:be:e6:de:ba:47:e2:d4:6d:f8:75:dc:6b:c5:2b:45:58:5d:
         5f:e0:b6:84:a8:4e:5a:40:5e:ea:82:1e:1a:b9:88:be:5b:f4:
         f7:00:13:e5:33:41:e2:96:e2:fa:5a:e8:0e:6e:0c:68:01:6d:
         d1:89:26:41:9f:1a:28:4c:76:bf:b1:10:ee:6b:67:19:11:fd:
         88:04:2b:44:8c:6e:27:26:76:5a:4d:e5:78:4b:e2:a9:bd:b7:
         78:bd:63:e4:e2:de:19:48:1a:07:ba:34:a8:15:95:d3:f6:20:
         7a:8e:79:33:c3:2e:87:3f:c1:c7:9b:4b:ee:32:f2:7f:68:a4:
         2d:b2:b1:33:e8:2b:0b:55:9a:f8:f9:75:2a:40:3d:55:d4:c3:
         70:7f:02:7c:14:56:f0:5d:8a:c3:a9:1c:95:24:17:d2:21:c0:
         38:0b:17:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 10:18:52 2025 by rpki-client