This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
File:                     fWReWE8e-aiB8fu8TSejQj3j3_E.mft (raw, json)
Hash identifier:          BwkPn+r7DgSiPFS4Gtk7mLklXhKrstGpXAI+gXwzZeY=
Subject key identifier:   1D:BD:A6:2D:C3:7E:6F:29:A5:9E:B1:AF:52:23:A3:46:8D:22:E5:27
Authority key identifier: 7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1
Certificate issuer:       /CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1
Certificate serial:       019B337B48AA55AFD1E9E9FE932F49428333
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
Manifest number:          1785
Signing time:             Thu 18 Dec 2025 22:01:16 +0000
Manifest this update:     Thu 18 Dec 2025 22:01:16 +0000
Manifest next update:     Fri 19 Dec 2025 22:01:16 +0000
Files and hashes:         1: QHrCJn-3TWWMCJDQELy3q8dJt_4.roa (hash: DTg0RQCOqWT4OxprKyTz2OGsk5mW9uMRzOSYKDRAWp0=)
                          2: dvNIb3T0U0mU22w-yMo6gNRu98k.roa (hash: KB6r0yPVxOXp/PVpdxcqc3971j0F/zVlsLjdreh6UUk=)
                          3: fWReWE8e-aiB8fu8TSejQj3j3_E.crl (hash: /ILLfNZTQMcceGUPimtNK5lfBSwkGW29PmOGdf6DjjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:33:7b:48:aa:55:af:d1:e9:e9:fe:93:2f:49:42:83:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1
        Validity
            Not Before: Dec 18 22:01:16 2025 GMT
            Not After : Dec 19 22:01:16 2025 GMT
        Subject: CN=1dbda62dc37e6f29a59eb1af5223a3468d22e527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f5:02:0f:46:3f:54:c9:f3:a9:5a:dc:e7:05:
                    29:dc:b3:dd:53:cf:b3:40:9d:b6:9a:3b:7c:43:e1:
                    4b:6e:25:a8:a6:96:14:4a:0e:b2:db:2f:44:38:78:
                    40:2c:a4:46:5f:ed:46:7e:8a:e0:8f:3a:5a:b5:1f:
                    2e:49:7a:ca:4f:85:98:6a:e4:25:67:19:26:9f:7d:
                    12:be:ac:4b:f0:88:40:89:ac:2b:e4:8d:1c:15:57:
                    57:55:62:4e:04:50:bb:52:b2:a5:85:d7:4a:1d:be:
                    d6:07:00:dd:84:0e:70:8b:ef:c7:c2:32:b2:dd:56:
                    63:c3:aa:81:09:b5:f8:45:72:91:75:58:95:5c:9c:
                    34:f9:1b:b3:a3:a5:1b:24:22:29:98:b5:3a:03:d1:
                    6e:e9:a3:6f:d9:6a:e3:c0:0e:2e:80:de:b4:2f:6d:
                    36:06:9e:14:52:6c:e7:ec:e0:f6:18:2a:17:9a:a0:
                    db:54:af:18:ca:28:9f:a1:32:ab:74:9b:25:fb:39:
                    a2:58:3b:81:83:34:bf:dc:4b:ab:2a:3a:5d:f7:4f:
                    96:20:3c:de:32:aa:f7:09:ae:04:ff:28:45:c7:bc:
                    f2:19:cf:e3:09:7b:14:54:02:06:28:2b:84:46:3c:
                    dd:df:cb:87:b0:18:01:d5:d3:ce:50:c5:02:f1:c6:
                    75:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:BD:A6:2D:C3:7E:6F:29:A5:9E:B1:AF:52:23:A3:46:8D:22:E5:27
            X509v3 Authority Key Identifier:
                keyid:7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:57:85:82:a0:48:e2:fa:cf:92:1c:a7:ed:e1:b2:a5:33:26:
         3a:8e:18:09:18:96:11:33:73:99:82:8f:66:42:56:60:da:e5:
         d0:f0:81:4f:f5:a9:25:ec:97:af:fd:18:5c:0e:df:dd:0b:d8:
         29:16:04:69:5f:ca:a6:d0:af:fa:5b:0f:4b:d8:b9:cb:50:a0:
         f3:99:2c:28:e7:9c:06:f8:51:db:c9:f2:cd:80:e3:0d:fa:14:
         84:df:88:9c:e0:26:2f:11:d5:e1:f2:27:f6:2d:6a:24:c2:01:
         b4:93:ac:1f:41:8f:60:40:de:1d:92:99:ce:40:21:49:c2:a2:
         f9:4d:5c:6d:8f:09:1b:ec:20:3b:ca:5a:16:e1:89:2f:6b:7f:
         cb:8f:a2:28:6c:dd:a7:8a:f9:81:39:6e:96:70:95:f6:74:99:
         4f:03:15:c8:17:3c:2f:af:97:b8:ea:81:27:87:c9:b9:ef:99:
         80:04:5f:af:f3:31:31:9d:1e:d3:ce:a1:70:ce:dc:fb:19:98:
         6f:27:48:79:c8:f5:b6:8b:65:9e:bb:25:f8:68:77:6c:70:e2:
         32:e7:8f:cf:7e:c9:7d:b6:18:f6:8e:25:0a:23:b2:2d:d9:cf:
         fa:64:1c:5d:b9:49:08:c4:0b:d9:97:2a:c0:bc:88:83:b1:82:
         20:6e:70:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 04:14:32 2025 by rpki-client