This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft
File:                     0wGZH8ND81jA8u665Vzy2jRSHHo.mft (raw, json)
Hash identifier:          HnBKFpkV/Pn/BhsNdyjIwbou0IqUVF7Qg2CdJZSHjGk=
Subject key identifier:   10:5C:46:86:B2:9C:CF:13:56:35:15:32:14:EF:B2:22:22:95:4E:99
Authority key identifier: D3:01:99:1F:C3:43:F3:58:C0:F2:EE:BA:E5:5C:F2:DA:34:52:1C:7A
Certificate issuer:       /CN=d301991fc343f358c0f2eebae55cf2da34521c7a
Certificate serial:       019AF464AE2ECE1E05B527E0A7249298CDD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft
Manifest number:          1764
Signing time:             Sat 06 Dec 2025 16:00:30 +0000
Manifest this update:     Sat 06 Dec 2025 16:00:30 +0000
Manifest next update:     Sun 07 Dec 2025 16:00:30 +0000
Files and hashes:         1: 0wGZH8ND81jA8u665Vzy2jRSHHo.crl (hash: GAtx0KPT6xM//2jRzmPWNnxzWRmpIQVStlDpAFrLlJo=)
                          2: 8XGnOFo1FHSecbZbo8eEhjcVsfE.roa (hash: andmj5YDiGTGVfrRQg/eep/3FAAkG8C2BqXOT6WzLpo=)
                          3: qRGjLQntvBAqN_Xt7aIS90yUBHc.roa (hash: 2bXJCM8WwuebfGJQ/9C7eiLENqlhXscF/6cLG5KAEvE=)
                          4: wPZZOS9626wM9NhL1Gmz4DC9ME4.roa (hash: Ufx/tGSmBlEgnXkc/x/enBQV+VQVsO+gn674YXeSq9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:64:ae:2e:ce:1e:05:b5:27:e0:a7:24:92:98:cd:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d301991fc343f358c0f2eebae55cf2da34521c7a
        Validity
            Not Before: Dec  6 16:00:30 2025 GMT
            Not After : Dec  7 16:00:30 2025 GMT
        Subject: CN=105c4686b29ccf135635153214efb22222954e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:39:d6:43:b5:10:60:29:27:64:ca:55:1e:8a:
                    30:6e:a6:ff:b1:f6:78:d7:ec:17:c6:ec:18:89:b9:
                    41:07:d7:8e:de:df:02:bc:af:2d:1b:3e:d4:44:58:
                    9f:ae:c0:95:d8:a9:ac:b1:f4:7a:b3:f5:e6:00:3a:
                    41:91:1e:6a:5a:d0:97:a0:1f:94:21:40:e1:8d:73:
                    2b:99:c5:8d:bc:28:e9:35:e4:e4:55:cf:3e:c6:86:
                    59:aa:9e:ca:20:04:37:8c:40:98:da:f6:9b:3c:a7:
                    32:41:98:16:50:60:a0:14:3f:17:e1:4c:60:13:09:
                    6d:c2:4b:dd:aa:b2:78:6d:48:e8:eb:32:ac:02:5b:
                    12:6a:02:b0:e2:cc:b3:64:77:ca:a0:02:a7:f0:d9:
                    5b:91:ef:61:39:01:f0:12:d9:fa:b2:88:9b:60:d4:
                    f9:80:e4:5f:3d:48:0b:e2:a5:e3:03:c7:91:7f:e5:
                    b2:33:7a:9f:4a:5a:46:47:04:8d:8f:eb:32:97:56:
                    87:58:ea:48:4c:74:8e:34:e0:cf:19:1a:a4:a8:78:
                    19:d4:7b:0e:8a:42:f0:a3:74:d4:4d:fb:2d:be:10:
                    b3:62:c4:9c:0d:f6:0e:dd:6a:08:ad:e0:ae:5c:21:
                    14:43:af:39:a9:8d:b8:72:5d:c3:d8:fd:7d:15:ac:
                    48:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:5C:46:86:B2:9C:CF:13:56:35:15:32:14:EF:B2:22:22:95:4E:99
            X509v3 Authority Key Identifier:
                keyid:D3:01:99:1F:C3:43:F3:58:C0:F2:EE:BA:E5:5C:F2:DA:34:52:1C:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:c3:73:55:4b:0e:ac:84:c6:59:3d:86:4e:bf:72:86:50:18:
         ea:b8:01:0a:88:af:28:91:6b:40:87:2e:3a:99:d6:e0:f3:cf:
         91:6b:fc:16:a0:c6:8a:da:a7:ca:6d:b6:76:46:af:8b:67:a8:
         7e:81:01:cc:1d:92:ec:60:c7:d8:f5:20:ee:ba:58:b7:dc:1c:
         b3:f9:23:a0:5b:15:b8:16:58:0c:7c:0c:0c:31:89:80:f8:22:
         03:07:f7:0c:72:0c:f6:e3:92:e2:38:da:33:46:d0:f1:4a:9a:
         c3:ae:d9:cd:95:ab:85:b6:c3:a2:7d:5a:db:d9:bf:03:e2:6c:
         15:a1:bc:11:7a:c9:67:c1:e3:90:ff:16:ef:11:11:a6:69:08:
         57:af:34:89:39:7d:58:ad:06:0c:7d:34:ab:a5:30:ca:fc:c6:
         d5:29:11:db:d6:29:91:55:58:48:6a:24:c9:62:7e:47:1e:c6:
         d9:e1:93:a0:3a:7f:5f:67:37:4f:0d:8c:4d:18:cd:6d:c5:7a:
         6b:55:dd:42:37:13:08:45:3f:1f:1a:1f:ce:a8:66:3e:d5:3d:
         f4:da:8c:cc:9b:ed:0b:78:c1:0a:c9:3a:ac:46:f1:60:19:3e:
         f6:f5:08:bd:e7:d8:2e:54:9c:14:70:6e:0d:80:94:b6:a7:f7:
         ff:52:be:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:53:27 2025 by rpki-client