This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.mft
File:                     wdNp5mzb4w17Ov9ggfIMF6mP3Fs.mft (raw, json)
Hash identifier:          T941cudFM69DJxKKm6mTnA+0ayPbQ2KCfzX/LtgO9/k=
Subject key identifier:   21:3F:E7:1A:AD:E5:11:02:80:A1:FF:D8:C6:C8:53:05:5A:BC:14:C8
Authority key identifier: C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
Certificate issuer:       /CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Certificate serial:       019AF352A9F5F997334CE1785BF3E005EB89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.mft
Manifest number:          06AE
Signing time:             Sat 06 Dec 2025 11:01:12 +0000
Manifest this update:     Sat 06 Dec 2025 11:01:12 +0000
Manifest next update:     Sun 07 Dec 2025 11:01:12 +0000
Files and hashes:         1: jCuekCPh6g90jDUSnVtU0yB_8I4.roa (hash: /aSvnGLFqDSV6uliZ1Qk2d4iygDw3fLdob6CNavVz+M=)
                          2: jpALgIEFPnjeiiFW4ySQMUfXTX0.roa (hash: rD/k2wW2+CQT2x2BcYEEoeLlAgB9t08idfGX3CSZeyY=)
                          3: oKTTmFz2VZLi967tcSvZmIIs2AY.roa (hash: SfR3zp3XTbq1jCi7MDggmywX++xqnyV6ropCvUGTIV0=)
                          4: wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl (hash: JXJ8ORaMybNh4cpmIfAFM35huo86Px4h80+xlN4a2QE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 11:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:52:a9:f5:f9:97:33:4c:e1:78:5b:f3:e0:05:eb:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
        Validity
            Not Before: Dec  6 11:01:12 2025 GMT
            Not After : Dec  7 11:01:12 2025 GMT
        Subject: CN=213fe71aade5110280a1ffd8c6c853055abc14c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:21:40:7d:ef:eb:00:6f:62:5d:cb:b1:ab:c1:
                    0f:d6:c0:58:fc:69:d8:3b:d8:4b:b6:1f:f3:3d:f3:
                    33:9d:b5:19:f8:50:9e:08:3f:26:c8:af:13:72:3f:
                    b7:db:3e:d0:fe:3a:ec:c4:fb:5c:1f:41:78:c4:5e:
                    18:e2:97:8a:a1:51:ed:2a:61:70:2e:17:74:e3:cb:
                    27:b8:9f:5b:3d:52:31:9c:43:50:bd:6a:b5:d4:1c:
                    99:ad:23:a0:90:a7:fa:3b:b9:99:18:84:fd:a0:6e:
                    2f:d0:48:f7:75:5d:6d:d0:de:17:26:fd:ce:5a:67:
                    9f:01:fb:ed:cd:8b:85:cc:bf:a4:8f:d5:47:45:bb:
                    41:87:b2:dd:29:21:76:de:5a:0b:27:15:eb:bb:25:
                    8f:f4:66:fd:b3:26:fa:b5:81:fa:10:b1:6b:d0:91:
                    66:e3:a8:ec:30:b4:88:90:39:ac:62:2e:0f:fe:37:
                    99:29:24:07:bb:ea:0a:65:55:94:4b:f4:2a:5a:80:
                    5f:5e:8f:bf:38:3a:d8:96:fc:9b:6d:d9:80:e0:02:
                    be:94:3d:96:06:dd:95:1c:b2:c2:c7:97:c6:a1:bf:
                    c9:6e:ae:ac:5d:2a:78:3b:32:ce:85:b3:b2:a9:c7:
                    d8:fb:49:7f:47:a7:53:bf:d1:db:01:7b:e7:50:61:
                    07:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:3F:E7:1A:AD:E5:11:02:80:A1:FF:D8:C6:C8:53:05:5A:BC:14:C8
            X509v3 Authority Key Identifier:
                keyid:C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:b2:aa:d0:a6:ee:f1:a7:67:4d:d7:d4:4e:09:39:f6:79:ee:
         39:9a:ff:a3:44:4c:04:a7:c9:98:7a:97:19:96:07:1a:1c:b4:
         7c:57:47:6b:28:f8:b2:db:62:2a:6c:b2:e6:62:ef:2e:27:a6:
         96:0f:e1:dc:28:8d:9f:00:75:60:b3:d1:20:70:3c:d3:ac:83:
         00:c3:19:e0:19:fc:cb:63:a4:19:b0:be:1f:38:26:39:89:54:
         4a:e4:96:81:a5:fe:6c:e0:3e:78:03:3d:a1:3a:64:20:a3:ae:
         19:9c:71:b3:d0:da:1e:d0:47:16:c2:30:90:42:16:18:fa:0f:
         04:fb:36:fb:8f:67:e0:2b:84:21:08:d1:ec:db:f1:38:3f:81:
         89:01:30:41:87:99:83:8e:cb:13:f3:84:89:ec:f4:63:c2:ba:
         34:ec:6a:63:4f:1c:ad:8c:ca:cf:1e:e0:14:09:25:d1:f2:58:
         ec:35:e8:d9:2b:80:f9:4b:8a:91:a1:db:66:9c:90:75:36:0c:
         84:41:3a:ba:d0:cc:e0:d3:1c:20:14:38:d8:30:d2:d8:11:78:
         c9:e8:ea:76:d8:36:c7:43:15:17:0a:18:c2:17:81:ae:42:8e:
         44:88:0c:9a:cc:29:90:ee:9a:fa:e9:50:ea:e7:5c:24:a3:68:
         1a:b7:20:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:33:19 2025 by rpki-client