This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft
File:                     1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft (raw, json)
Hash identifier:          h/AMtigZBIyxz3A7b87CGFaBjDrdET8JQg0BCCjhioM=
Subject key identifier:   54:E1:99:6B:30:EC:6C:91:EC:C3:81:C2:62:63:23:A5:56:86:97:E3
Authority key identifier: F9:6A:6A:20:32:F9:6D:70:23:72:22:39:C9:FA:5E:DD:55:96:F8:63
Certificate issuer:       /CN=f96a6a2032f96d7023722239c9fa5edd5596f863
Certificate serial:       019AF12EAB8D49320597D2380DAAABFA665F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-WpqIDL5bXAjciI5yfpe3VWW-GM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft
Manifest number:          1735
Signing time:             Sat 06 Dec 2025 01:02:38 +0000
Manifest this update:     Sat 06 Dec 2025 01:02:38 +0000
Manifest next update:     Sun 07 Dec 2025 01:02:38 +0000
Files and hashes:         1: 1-WpqIDL5bXAjciI5yfpe3VWW-GM.crl (hash: gT9oJzRGTJEqYx+JXHSIEoq9VsOXwrb8HG3JE3p9/Vw=)
                          2: RE9prd7FLL4SwOjjJYHPgR-KjRA.roa (hash: Sw7bEXCnPMRdQGTTvTVklNLKC4QRIicMav6wH2FfRDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-WpqIDL5bXAjciI5yfpe3VWW-GM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:ab:8d:49:32:05:97:d2:38:0d:aa:ab:fa:66:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f96a6a2032f96d7023722239c9fa5edd5596f863
        Validity
            Not Before: Dec  6 01:02:38 2025 GMT
            Not After : Dec  7 01:02:38 2025 GMT
        Subject: CN=54e1996b30ec6c91ecc381c2626323a5568697e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:da:ed:08:75:ff:5f:2c:5c:fe:6b:57:cd:e0:
                    ee:bb:47:08:45:2d:1b:51:30:e0:4c:52:64:d0:37:
                    97:d0:a2:e4:52:96:24:cd:63:92:32:ae:c1:63:11:
                    14:37:93:fd:60:aa:94:c2:95:c6:05:da:3e:73:39:
                    d0:88:06:33:d9:6a:6e:e4:67:b6:e5:e7:28:09:1d:
                    03:18:60:ba:92:a4:4a:01:11:82:13:ab:c6:87:41:
                    4c:a3:c6:ca:da:90:61:0f:09:29:57:b7:00:8f:45:
                    8e:f8:d9:03:5e:41:a4:a1:da:d9:3a:f9:a8:84:ac:
                    b9:eb:d9:f7:44:19:2d:6c:3e:fb:e2:2c:97:3b:fe:
                    f7:0f:23:f4:66:82:40:1f:36:7d:a5:d9:71:89:aa:
                    b1:52:f0:26:98:d5:b8:bc:cb:d9:55:be:92:eb:0f:
                    dc:04:30:d6:1a:a1:35:5b:b7:8c:eb:1e:4f:5a:9d:
                    2c:f7:49:4e:4e:29:a0:5f:88:e7:db:d7:cf:d8:a6:
                    42:fd:57:c8:c2:88:4d:1f:de:2c:b7:d8:b4:cb:d6:
                    1d:db:51:7c:b2:c5:59:3a:86:ba:43:3c:44:10:25:
                    19:23:36:a5:69:87:74:32:96:47:0a:64:78:4e:19:
                    c6:ca:71:52:5a:1d:6d:e9:b7:0f:45:ef:6b:ce:5c:
                    15:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E1:99:6B:30:EC:6C:91:EC:C3:81:C2:62:63:23:A5:56:86:97:E3
            X509v3 Authority Key Identifier:
                keyid:F9:6A:6A:20:32:F9:6D:70:23:72:22:39:C9:FA:5E:DD:55:96:F8:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WpqIDL5bXAjciI5yfpe3VWW-GM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:fb:d3:bd:c3:d3:f6:87:4c:2a:43:17:14:f8:40:ee:37:2e:
         21:57:14:83:5f:f9:77:cf:ad:45:4c:d0:d5:82:7c:c4:b1:95:
         c7:7a:e7:4d:f9:4f:74:3e:4f:57:51:d3:98:10:95:e6:78:f6:
         dc:b0:6c:62:3e:f0:ca:b2:ab:81:6e:45:d8:23:41:72:70:0d:
         2f:cf:6c:be:02:0f:16:b5:40:ab:85:e1:22:17:b7:cb:7a:69:
         00:bf:7a:14:f0:d8:a2:6a:32:53:90:8f:30:66:ba:e3:5a:5a:
         8b:2a:f2:a3:44:14:c2:9e:e3:c0:16:aa:ea:38:14:50:c5:dd:
         c3:f9:e1:23:16:7f:18:fc:ed:d0:d4:61:ef:7f:7c:a7:40:65:
         47:25:65:e1:ef:07:52:5d:69:6b:40:43:f1:70:5a:24:ac:ed:
         42:83:e4:de:29:53:6d:a9:13:7f:39:2d:48:e6:c7:ad:50:c6:
         1e:c2:d1:c9:6c:e7:93:e0:88:7b:3e:59:85:6d:50:30:b0:0b:
         80:77:5d:90:2d:47:54:7a:fa:b9:a7:83:72:49:98:d5:6a:07:
         a4:31:df:1c:a6:af:7c:c7:84:3e:be:3d:57:a9:e8:46:b6:0a:
         8b:3e:c5:49:e9:cc:cb:9e:e5:e8:d0:46:b6:ae:41:78:9a:78:
         a0:be:4f:75
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZrxLquNSTIFl9I4Daqr+mZfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NmE2YTIwMzJmOTZkNzAyMzcyMjIzOWM5ZmE1ZWRkNTU5
NmY4NjMwHhcNMjUxMjA2MDEwMjM4WhcNMjUxMjA3MDEwMjM4WjAzMTEwLwYDVQQD
Eyg1NGUxOTk2YjMwZWM2YzkxZWNjMzgxYzI2MjYzMjNhNTU2ODY5N2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9rtCHX/Xyxc/mtXzeDuu0cIRS0b
UTDgTFJk0DeX0KLkUpYkzWOSMq7BYxEUN5P9YKqUwpXGBdo+cznQiAYz2Wpu5Ge2
5ecoCR0DGGC6kqRKARGCE6vGh0FMo8bK2pBhDwkpV7cAj0WO+NkDXkGkodrZOvmo
hKy569n3RBktbD774iyXO/73DyP0ZoJAHzZ9pdlxiaqxUvAmmNW4vMvZVb6S6w/c
BDDWGqE1W7eM6x5PWp0s90lOTimgX4jn29fP2KZC/VfIwohNH94st9i0y9Yd21F8
ssVZOoa6QzxEECUZIzalaYd0MpZHCmR4ThnGynFSWh1t6bcPRe9rzlwV/QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFThmWsw7GyR7MOBwmJjI6VWhpfjMB8GA1UdIwQY
MBaAFPlqaiAy+W1wI3IiOcn6Xt1VlvhjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1XcHFJREw1YlhBamNpSTV5ZnBlM1ZXVy1HTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvMzc2ZTFmLTk2YjEtNGZlMS04Yjdh
LTEzZmY2YTBhZDQ0MS8xLzEtV3BxSURMNWJYQWpjaUk1eWZwZTNWV1ctR00ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzE2LzM3NmUxZi05NmIxLTRmZTEtOGI3YS0xM2ZmNmEwYWQ0
NDEvMS8xLVdwcUlETDViWEFqY2lJNXlmcGUzVldXLUdNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALvvT
vcPT9odMKkMXFPhA7jcuIVcUg1/5d8+tRUzQ1YJ8xLGVx3rnTflPdD5PV1HTmBCV
5nj23LBsYj7wyrKrgW5F2CNBcnANL89svgIPFrVAq4XhIhe3y3ppAL96FPDYomoy
U5CPMGa641paiyryo0QUwp7jwBaq6jgUUMXdw/nhIxZ/GPzt0NRh7398p0BlRyVl
4e8HUl1pa0BD8XBaJKztQoPk3ilTbakTfzktSObHrVDGHsLRyWznk+CIez5ZhW1Q
MLALgHddkC1HVHr6uaeDckmY1WoHpDHfHKavfMeEPr49V6noRrYKiz7FSenMy57l
6NBGtq5BeJp4oL5PdQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:04:50 2025 by rpki-client