This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
File:                     1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft (raw, json)
Hash identifier:          7VTUoNSSz5OvIjPU1PUotLBU9AyZheq8FhBIspJWelc=
Subject key identifier:   8E:8F:DA:12:C4:A8:F1:B3:2D:50:95:ED:0C:62:F2:F7:A8:57:78:89
Authority key identifier: D7:03:CE:AC:90:6D:07:F7:4C:A9:4C:44:63:03:D9:54:66:6B:58:3A
Certificate issuer:       /CN=d703ceac906d07f74ca94c446303d954666b583a
Certificate serial:       019AF209895ADF0A1572B246C1280CCB68B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
Manifest number:          1762
Signing time:             Sat 06 Dec 2025 05:01:42 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:42 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:42 +0000
Files and hashes:         1: 1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl (hash: mcp+G0leJcAGPKOVRTw7mi+UyOkeZ/5FFk+af6ZruQs=)
                          2: FkDDEmYYETOpVMpWkL7RuuEpqTY.roa (hash: kK3s8Vv/PXYJJP7bWNTiE/RHQRNUSZAURtLuU/aMQ6g=)
                          3: _X7C7V6gpKHfD2GzsHWwwqpaOyU.roa (hash: YNwkjNTaSE+wVt7Z8QQHUfLIQalMph9DlkM4NPeZKPI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:89:5a:df:0a:15:72:b2:46:c1:28:0c:cb:68:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d703ceac906d07f74ca94c446303d954666b583a
        Validity
            Not Before: Dec  6 05:01:42 2025 GMT
            Not After : Dec  7 05:01:42 2025 GMT
        Subject: CN=8e8fda12c4a8f1b32d5095ed0c62f2f7a8577889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:08:06:79:e4:ba:6e:90:d7:da:c0:1b:2e:e8:
                    b8:81:4c:8f:84:a2:15:eb:37:9f:20:c8:91:40:fb:
                    f4:6c:fd:2b:7c:94:2e:da:39:65:cc:7a:bf:81:2c:
                    32:66:b4:75:1e:52:1e:23:5e:07:d0:4d:97:85:76:
                    6e:39:69:a5:de:eb:c2:c8:01:c3:8f:c2:e0:89:64:
                    a3:53:98:fa:45:fa:64:a4:db:93:24:25:32:b6:31:
                    d4:77:95:89:93:59:a9:47:f5:54:34:ea:b5:a2:14:
                    a9:64:17:d8:8d:b2:4f:0e:30:0e:2d:4b:4e:62:8c:
                    92:15:a7:09:67:99:e4:55:a2:b3:93:a3:7a:88:e8:
                    56:11:16:d4:2d:15:d1:28:3c:6f:ca:72:cf:42:26:
                    bf:b2:55:57:01:37:26:ca:f3:3d:87:3e:28:d3:1c:
                    7c:91:50:dc:5b:f1:4d:66:20:cb:b2:20:11:9e:0a:
                    b1:7e:a7:34:82:31:43:f2:59:35:86:33:ee:b8:9c:
                    53:fe:d6:a4:4f:62:4f:ff:ef:5d:c9:93:01:db:64:
                    00:90:59:54:15:c4:68:70:92:f2:ab:0d:6b:2a:e4:
                    b7:62:ad:25:10:55:49:0a:95:94:58:58:b6:67:63:
                    cc:17:1d:16:cb:0b:b1:c3:07:d5:d8:1a:ac:65:67:
                    ba:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8F:DA:12:C4:A8:F1:B3:2D:50:95:ED:0C:62:F2:F7:A8:57:78:89
            X509v3 Authority Key Identifier:
                keyid:D7:03:CE:AC:90:6D:07:F7:4C:A9:4C:44:63:03:D9:54:66:6B:58:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:f3:39:b7:40:53:71:f7:83:ff:14:a7:c8:71:f3:2c:05:ae:
         04:33:e9:09:c8:1d:16:d9:f8:ed:3f:5c:df:56:97:b0:2e:3d:
         c0:8d:30:1f:0a:fd:98:8a:0d:3b:ae:ed:f1:d6:5c:17:45:0f:
         e9:b1:33:8a:ff:1b:2e:cb:a5:d4:d1:7e:d0:c0:96:ff:34:ef:
         61:64:3d:ea:20:cc:2f:c7:11:9e:a8:26:c2:8f:c3:4c:9b:af:
         72:62:b3:67:e9:f7:54:5e:4f:be:f7:14:20:40:f8:c9:ae:57:
         6b:02:1a:00:e8:69:6a:f0:4b:c3:ec:7d:c9:53:f3:dc:82:fb:
         09:88:20:df:4c:69:2c:9c:36:c4:4e:2a:9f:31:07:ea:2a:7c:
         56:2b:c0:a2:e9:af:2f:6d:1d:99:77:e0:9d:80:9e:a9:d7:e0:
         fd:d5:d7:76:95:80:f2:a1:f5:d2:d0:a8:31:84:81:5a:09:a7:
         e6:ca:01:9b:99:ad:20:f6:10:10:03:d5:99:22:ad:4a:b4:1b:
         e1:4a:3f:87:95:00:7a:9d:e1:02:f5:dd:1b:14:3e:96:92:e6:
         1c:df:1e:65:0f:d4:b1:21:a9:03:85:e8:0f:9d:04:6f:66:f8:
         51:78:de:17:ca:e4:81:92:4f:54:20:32:a0:3f:90:ba:2e:ec:
         9f:24:05:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:08:33 2025 by rpki-client