This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
File:                     CjMvWtwEaVM7vdz86JV-ruWL_WA.mft (raw, json)
Hash identifier:          c67hOkyGVVW9qcHXW6LCiPZssKPTx2+a5ZhAwXqFWHA=
Subject key identifier:   85:B2:81:BE:0F:16:A8:15:E7:13:9F:D6:55:38:5D:87:E9:FC:91:A7
Authority key identifier: 0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60
Certificate issuer:       /CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
Certificate serial:       019B2FD548DBEAAF00AF51E9150BB8E23262
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
Manifest number:          1786
Signing time:             Thu 18 Dec 2025 05:01:05 +0000
Manifest this update:     Thu 18 Dec 2025 05:01:05 +0000
Manifest next update:     Fri 19 Dec 2025 05:01:05 +0000
Files and hashes:         1: CjMvWtwEaVM7vdz86JV-ruWL_WA.crl (hash: iCzr8Rew3Hsl6l7g7YnCeLGEDgZOxsdlwIcMoC6cG6g=)
                          2: GONoBaS0nACGnEjc-yHuqDoDlew.roa (hash: eVcWG363H9IPwj/aWLR4h7Mq2fdRg0ul16LrmgLPOaU=)
                          3: kSa4_sqr5-NiqBRmmF4fkyu-chg.roa (hash: nw6nn6yk21XAzxXJuVEoChD6KrMH42rDNZdSGxHsW0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 01:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2f:d5:48:db:ea:af:00:af:51:e9:15:0b:b8:e2:32:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
        Validity
            Not Before: Dec 18 05:01:05 2025 GMT
            Not After : Dec 19 05:01:05 2025 GMT
        Subject: CN=85b281be0f16a815e7139fd655385d87e9fc91a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:12:5d:8a:02:13:45:85:d7:d6:4c:62:8a:7d:
                    68:22:27:ba:e8:01:71:8f:c4:32:75:8e:99:27:36:
                    87:71:53:32:34:14:a0:a5:37:f9:3a:0b:b9:25:bb:
                    77:9d:e1:1c:a2:72:83:b2:98:2b:d8:cb:12:dd:aa:
                    56:8e:70:cc:83:31:de:85:fd:40:ce:84:d5:95:d2:
                    e8:75:e1:b2:e9:16:0d:3d:35:24:a1:d0:af:65:3c:
                    ec:f6:1e:8a:47:58:16:32:e0:02:92:b2:e2:1c:db:
                    64:05:4b:1f:2d:8b:93:42:40:4b:9f:66:9d:54:6d:
                    c8:30:c8:70:48:6b:a3:8f:eb:30:1c:96:cf:d9:d3:
                    85:70:92:77:65:99:96:5a:36:9a:10:6d:9f:1a:0e:
                    17:07:63:91:e8:6b:e0:06:30:77:66:0c:42:53:17:
                    11:ba:32:4a:5b:33:2e:f0:f1:e9:14:d2:9d:7d:ce:
                    bf:b0:6b:4a:a7:00:6e:c0:04:45:8f:c2:c1:f4:bd:
                    85:09:29:5a:66:f2:d6:14:c3:0f:8f:0b:9e:be:1d:
                    52:6d:c1:7a:10:ba:38:01:9f:ed:b7:7c:85:e7:8a:
                    3c:12:31:27:78:e5:d8:e5:9b:ab:e6:00:e2:09:8e:
                    d7:9a:40:d5:6e:08:22:f7:d4:15:07:f2:ca:a1:37:
                    7e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B2:81:BE:0F:16:A8:15:E7:13:9F:D6:55:38:5D:87:E9:FC:91:A7
            X509v3 Authority Key Identifier:
                keyid:0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:c8:91:85:b3:eb:58:7d:94:1f:c9:85:39:db:7f:0d:d2:ef:
         ff:5b:1e:4a:50:53:72:a9:35:3f:d1:13:10:22:67:c5:3f:d9:
         3c:38:54:82:08:e7:c1:f9:ab:05:34:40:ae:99:9b:22:45:7d:
         9c:13:a8:b0:4b:8c:f0:33:a7:af:6b:f1:63:e1:46:2c:58:a1:
         9b:6a:ea:1d:1c:0d:92:79:f0:62:40:47:2f:3e:d3:1b:cd:44:
         5a:03:75:10:5b:64:a0:27:62:4a:ce:65:48:cf:84:fc:eb:c9:
         e5:12:78:37:68:40:b2:36:67:e4:05:19:18:e2:cb:00:6b:f7:
         1e:49:d2:0f:3f:48:d3:7d:48:5b:c3:f4:af:0e:45:31:86:d5:
         09:6f:f8:e5:d2:f1:4f:77:e7:6c:d6:f0:9a:6a:64:0c:ee:1c:
         b9:2a:5e:92:cb:83:1a:e7:72:78:1d:7a:39:49:ef:c9:58:33:
         50:ea:0e:91:94:6c:3a:ad:c0:8a:9c:44:86:16:81:72:af:45:
         3e:d9:40:4e:f3:b8:56:14:8e:49:ee:e4:78:59:d4:63:56:f3:
         c8:6f:2d:8e:d3:78:74:41:08:4c:6d:55:96:c0:0f:fe:98:fd:
         8e:41:e4:2d:dc:3c:b6:d1:61:98:54:9f:55:d2:b6:5a:4f:8d:
         d5:a7:6d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 07:06:05 2025 by rpki-client