This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.mft
File:                     w6VSge-EuxEeM-zHwAiJSP1KjbI.mft (raw, json)
Hash identifier:          AvBXAUUYSRc3N3o0Xz5/O/brPL/0jUrMMwRYF6dg2bM=
Subject key identifier:   86:EC:3F:E0:13:68:EF:DE:7A:40:98:75:09:CC:D7:16:15:23:80:A7
Authority key identifier: C3:A5:52:81:EF:84:BB:11:1E:33:EC:C7:C0:08:89:48:FD:4A:8D:B2
Certificate issuer:       /CN=c3a55281ef84bb111e33ecc7c0088948fd4a8db2
Certificate serial:       019AF61CE14C7F29E2C18EAAE65D98A31C40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6VSge-EuxEeM-zHwAiJSP1KjbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.mft
Manifest number:          1766
Signing time:             Sun 07 Dec 2025 00:01:19 +0000
Manifest this update:     Sun 07 Dec 2025 00:01:19 +0000
Manifest next update:     Mon 08 Dec 2025 00:01:19 +0000
Files and hashes:         1: w6VSge-EuxEeM-zHwAiJSP1KjbI.crl (hash: As1grud+0cpMS5pKb08lXX689UfNl3VdFuqqejUjl6w=)
                          2: wFiWhGfsPPPiHPKgaPOOOuMQ59k.roa (hash: kPUheiP/1RIkZMjes3RF7D1Dk6VSyteFka8OLwBciXU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w6VSge-EuxEeM-zHwAiJSP1KjbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f6:1c:e1:4c:7f:29:e2:c1:8e:aa:e6:5d:98:a3:1c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a55281ef84bb111e33ecc7c0088948fd4a8db2
        Validity
            Not Before: Dec  7 00:01:19 2025 GMT
            Not After : Dec  8 00:01:19 2025 GMT
        Subject: CN=86ec3fe01368efde7a40987509ccd716152380a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:88:ef:d8:2d:bc:c7:5e:86:d7:e4:ec:c3:00:
                    da:b9:1c:f7:73:f6:db:12:ab:08:8a:30:75:2e:f5:
                    a5:ec:0a:cf:8a:24:80:87:b6:bf:b3:cf:cf:1f:4a:
                    de:28:0f:fe:b3:02:51:88:8e:3e:5a:d6:bd:5f:90:
                    ea:72:8f:4f:ce:73:6d:40:30:75:fa:bd:3a:49:47:
                    f7:21:aa:1d:f0:4e:8d:32:b5:10:ec:c3:1e:56:e2:
                    2c:b9:4a:eb:54:31:86:d5:15:e4:d3:9b:a7:d1:42:
                    98:1c:57:fa:bc:84:5c:6a:0f:a6:ca:d6:56:22:f1:
                    70:9d:93:64:ff:fd:d1:94:57:7a:c2:ca:30:49:a1:
                    c3:88:59:d1:92:8b:8e:19:84:fd:0c:ff:70:fe:ee:
                    1e:16:c9:0b:ea:60:f2:a2:f0:6d:7a:fe:53:cc:99:
                    14:7e:31:b0:0b:5e:d6:04:55:ca:25:72:3b:79:a7:
                    26:7f:23:89:19:44:72:09:ec:13:32:f3:79:7e:32:
                    1a:99:f1:61:90:07:1f:ce:7f:2c:6b:66:10:0b:22:
                    18:a4:a5:bd:ee:63:a3:12:8a:12:d2:9c:63:e0:5d:
                    ea:e9:4f:f2:f1:e1:38:db:96:cc:dd:9d:de:3b:1d:
                    af:ed:09:44:01:c7:b7:90:e6:96:92:f7:39:97:0f:
                    13:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:EC:3F:E0:13:68:EF:DE:7A:40:98:75:09:CC:D7:16:15:23:80:A7
            X509v3 Authority Key Identifier:
                keyid:C3:A5:52:81:EF:84:BB:11:1E:33:EC:C7:C0:08:89:48:FD:4A:8D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6VSge-EuxEeM-zHwAiJSP1KjbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:6b:f5:7f:3b:e8:89:84:f0:03:89:68:54:ae:3b:29:ed:39:
         4a:45:2b:1f:2b:c4:0a:cd:5d:88:e2:b4:56:a9:98:eb:94:6f:
         12:45:a3:73:99:3a:37:f0:9e:35:55:40:e1:2a:7f:3e:1b:d3:
         77:e1:51:77:6c:25:9e:d9:67:2e:a1:00:f6:cd:65:ec:ab:60:
         65:34:92:fd:d4:ad:02:53:fa:52:c6:59:57:b2:42:01:b3:fe:
         80:37:23:da:a9:39:60:15:f7:91:74:7e:a8:07:b9:ed:92:89:
         b2:58:b1:aa:b2:4d:26:49:6a:d9:19:07:52:53:01:76:ae:17:
         8d:79:80:60:6a:60:c4:6b:9e:3b:17:62:12:78:4c:93:5b:31:
         7d:d8:2d:4d:ef:0f:bd:2f:9b:69:e9:f0:19:19:e0:33:ee:8c:
         9c:ed:ae:75:09:26:d8:03:8b:1f:9b:ac:35:98:c5:07:01:8a:
         a1:ee:35:cc:ff:49:63:88:e7:1a:d8:d8:13:8d:48:bf:d2:cc:
         13:08:c5:37:3b:e8:7a:21:eb:4c:60:7a:d7:0c:f7:ce:d6:7b:
         77:95:5c:a0:00:5e:f6:c2:ec:18:dc:c1:6f:bf:c5:80:4f:34:
         50:6a:80:8c:6a:34:3d:dc:76:e7:85:34:9c:96:23:d1:d8:f4:
         97:c9:81:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:58:54 2025 by rpki-client