This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
File:                     wcIPvEj6WafY3qV5CPNQobl0Wd8.mft (raw, json)
Hash identifier:          uqf0AU2fCf7GHkhTMT1IwWfJviU3m9dgNrIPE3eBA9A=
Subject key identifier:   08:59:D4:31:39:73:CD:3A:A3:B2:FC:A1:D9:F7:87:2D:F7:F4:5A:BE
Authority key identifier: C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF
Certificate issuer:       /CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df
Certificate serial:       019AABDDB984C7C1335D3859ED1E17F41004
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
Manifest number:          1557
Signing time:             Sat 22 Nov 2025 14:00:26 +0000
Manifest this update:     Sat 22 Nov 2025 14:00:26 +0000
Manifest next update:     Sun 23 Nov 2025 14:00:26 +0000
Files and hashes:         1: 1FW1XbyYUs66xbKImXHkiZU-xAA.roa (hash: DA26l55wpmFxpEPwr1TEVKDAhIdZwBFIGz/j/ljF/kM=)
                          2: rQGBYURhHxIS2gUjxgxhWlf8G-M.roa (hash: d90EC3mny7b2jkfAqHp6/1/Pw4XbnGm5shftI7zAdH4=)
                          3: wcIPvEj6WafY3qV5CPNQobl0Wd8.crl (hash: E04J4I+Z8OJLlc1o6HR5r6RwgmRlKQ0xPwMiEiKKAbo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Nov 2025 12:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ab:dd:b9:84:c7:c1:33:5d:38:59:ed:1e:17:f4:10:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df
        Validity
            Not Before: Nov 22 14:00:26 2025 GMT
            Not After : Nov 23 14:00:26 2025 GMT
        Subject: CN=0859d4313973cd3aa3b2fca1d9f7872df7f45abe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b9:c6:bf:e2:32:4f:67:c7:fa:b0:8e:5c:52:
                    38:12:95:0a:94:f4:84:32:e1:97:7e:36:4e:10:6d:
                    d6:4f:b2:9a:a2:4a:58:91:52:13:51:59:5a:7f:49:
                    88:d5:9b:d3:f1:13:47:82:c2:18:18:fc:51:95:e8:
                    e8:6b:b7:21:b8:a4:00:08:ac:9f:e9:c8:96:85:33:
                    4d:5c:e4:a9:ab:dd:30:1a:68:3a:ff:d2:d3:3d:9a:
                    70:5d:02:0f:4e:49:66:25:0d:97:c8:e9:0a:37:3b:
                    93:d6:f9:62:8a:3c:e7:91:21:11:b1:7b:50:70:c0:
                    b4:c5:3a:f5:47:c8:58:6d:d3:fc:38:48:fb:61:b6:
                    af:c3:19:a5:61:21:60:94:3a:52:c5:05:6f:4e:72:
                    bc:5c:c7:4c:1b:da:c5:ef:23:7e:11:a7:95:cc:7b:
                    3d:27:9b:db:d3:6f:e5:e6:35:ce:74:5d:e8:83:16:
                    24:ce:a5:2e:1c:87:ad:ff:34:f4:12:e6:67:07:c3:
                    e9:ef:c7:69:35:58:20:fb:0a:bd:be:f2:c8:76:5c:
                    13:aa:cb:11:21:5a:b1:99:39:f4:81:a6:b4:52:ed:
                    ad:2a:cc:b6:8a:8d:66:22:33:14:d8:2d:6a:bf:9f:
                    ca:4f:74:17:c1:fa:4e:c4:34:d3:04:c6:ac:6a:c8:
                    71:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:59:D4:31:39:73:CD:3A:A3:B2:FC:A1:D9:F7:87:2D:F7:F4:5A:BE
            X509v3 Authority Key Identifier:
                keyid:C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:6f:eb:21:f4:5c:df:7c:fb:9b:bc:c9:f4:90:ae:9b:3d:45:
         ee:60:c4:62:54:b8:cb:f3:a2:f2:cd:7f:bf:db:a6:a3:40:9a:
         d9:53:61:7d:ba:7f:71:c6:c5:f5:00:cb:5e:1c:54:10:98:73:
         4d:40:06:2a:6a:09:b0:9a:5d:c9:11:bf:81:7d:6c:8a:1c:cd:
         bf:c9:3d:a3:72:58:fa:8c:8f:4f:2a:b2:d9:87:f8:cc:15:c1:
         7a:3a:9a:23:72:94:f2:86:4f:c3:75:4e:e1:3f:09:48:77:3c:
         eb:e6:59:40:9d:45:d6:54:73:43:0d:44:75:37:51:b9:78:a2:
         e0:b9:38:c8:39:4b:53:54:6d:ae:b8:91:93:96:43:e6:6c:4f:
         e3:34:a6:2a:16:60:6b:96:18:bc:18:5b:b7:99:a0:de:79:f7:
         04:71:11:79:fd:ee:7c:40:c7:9c:ac:58:37:27:44:44:66:ed:
         ae:03:f9:6f:f8:66:49:fb:85:8b:2c:57:37:95:37:fe:cd:95:
         56:be:86:6f:f6:1a:a6:b6:b5:1e:3b:e6:95:fa:36:30:57:9e:
         db:07:b8:59:5d:95:3b:f7:a8:a4:71:6b:37:d3:e9:d6:1e:29:
         4a:ab:03:27:33:4a:72:1c:6d:2e:51:4d:a4:09:55:22:34:f6:
         76:bc:bf:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:53:51 2025 by rpki-client