This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
File:                     RWF9LghjWN2nvbDcRmyhyG7U_so.mft (raw, json)
Hash identifier:          T1eh1Ohc7I0vVhOVHiMwA29m5iLvF7FThEsEm0ZCBw8=
Subject key identifier:   23:08:0B:13:1E:53:02:C3:EC:18:09:F4:8E:A8:6F:3D:3D:FC:13:D2
Authority key identifier: 45:61:7D:2E:08:63:58:DD:A7:BD:B0:DC:46:6C:A1:C8:6E:D4:FE:CA
Certificate issuer:       /CN=45617d2e086358dda7bdb0dc466ca1c86ed4feca
Certificate serial:       019AF1D22AE04A76C556BDB6FD30EC4B83C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
Manifest number:          16F5
Signing time:             Sat 06 Dec 2025 04:01:13 +0000
Manifest this update:     Sat 06 Dec 2025 04:01:13 +0000
Manifest next update:     Sun 07 Dec 2025 04:01:13 +0000
Files and hashes:         1: Kp8YOETyXn_CJNlkKRcjiHTajds.roa (hash: pE4tiu3XHnbIpJeimbwG8Yyb4EwnGUv1VJS0J7muojA=)
                          2: RWF9LghjWN2nvbDcRmyhyG7U_so.crl (hash: cOdCcfCBlBx/0LrFhLZTS0DIVzGLxjpDmtRy4yGShbk=)
                          3: opT_I9F9NlBeldQr0GrqFI_DCW8.roa (hash: MFWRH48M0sUB0KCZQGPrxKIdCpAK4ygrD33P9KlMNcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d2:2a:e0:4a:76:c5:56:bd:b6:fd:30:ec:4b:83:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45617d2e086358dda7bdb0dc466ca1c86ed4feca
        Validity
            Not Before: Dec  6 04:01:13 2025 GMT
            Not After : Dec  7 04:01:13 2025 GMT
        Subject: CN=23080b131e5302c3ec1809f48ea86f3d3dfc13d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:46:de:08:84:1e:36:2e:ce:e8:52:cc:69:1a:
                    fa:7b:44:fb:c0:21:2c:58:82:92:51:00:0c:3a:c7:
                    5d:3d:39:ab:5c:5c:61:cf:8f:7c:e8:63:8c:3d:6c:
                    e0:df:41:02:0c:01:57:b3:59:2f:6d:b1:83:a1:25:
                    7d:24:31:2e:85:46:e6:ca:35:31:77:10:b2:c4:3d:
                    6e:d5:66:a7:3a:d1:c7:c6:db:8f:7f:81:a1:56:3d:
                    19:d0:23:d2:72:c4:2f:df:21:ad:c9:1f:49:56:ea:
                    19:01:49:80:6c:30:dd:c6:fe:24:82:6a:19:4b:0f:
                    83:2c:a4:bc:ba:25:b4:26:cc:6f:a2:bf:e8:b9:b5:
                    45:61:18:6a:54:1b:d6:ca:9b:74:a8:f8:ed:ca:60:
                    2c:2b:ab:7a:ce:69:a8:6b:d3:8d:08:02:c3:01:50:
                    e0:74:d3:48:4e:be:c8:d7:32:78:8e:19:9a:4c:d7:
                    45:31:e3:81:36:da:28:70:89:44:1a:cd:07:c6:3d:
                    d0:74:40:3f:a8:73:1b:8b:f5:41:92:98:bf:90:8b:
                    51:4f:f5:ae:94:fb:ee:c4:4d:9d:16:08:b7:46:3e:
                    51:64:0a:db:8a:77:40:6b:9e:eb:4e:bf:88:ba:f6:
                    d0:28:2c:50:47:05:ca:50:2c:4e:3c:ae:47:41:ee:
                    1f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:08:0B:13:1E:53:02:C3:EC:18:09:F4:8E:A8:6F:3D:3D:FC:13:D2
            X509v3 Authority Key Identifier:
                keyid:45:61:7D:2E:08:63:58:DD:A7:BD:B0:DC:46:6C:A1:C8:6E:D4:FE:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:5e:86:e4:cf:f0:e7:af:63:ef:4f:ac:8f:52:ca:9f:fa:b5:
         c3:96:c4:1a:59:9e:7b:63:1b:5f:c0:9e:dc:83:b0:b6:40:bb:
         4e:21:3e:df:78:8b:4c:8e:18:70:01:83:a6:a1:38:dc:e6:99:
         dd:b1:69:68:53:b3:b8:b7:dd:da:f4:b1:61:57:63:8b:26:f4:
         6f:c4:35:97:24:f2:28:c2:ec:64:f5:55:18:c2:76:06:a4:29:
         b4:cd:1d:25:22:0a:5a:95:f6:81:f5:11:09:9a:31:59:bd:f7:
         17:26:78:eb:c1:37:bb:d7:08:63:a5:15:61:25:db:b0:34:5b:
         ee:68:f1:4b:b8:9c:16:07:67:39:e6:f6:42:bd:84:7d:d0:5a:
         61:a5:a6:fb:7e:37:79:72:e9:f1:42:8d:ed:60:d9:21:2a:96:
         a9:0a:97:60:93:c3:9c:e1:16:1f:43:a3:bc:ed:3b:53:bc:23:
         62:28:c2:9f:9c:52:5f:e2:df:03:97:e0:c9:40:40:4c:05:2d:
         2f:81:1b:6b:1d:c4:9e:3b:3b:9b:36:3d:30:b4:d8:27:f3:50:
         f0:2f:5d:4b:4f:27:d5:2e:ca:a7:f0:52:89:ad:e4:63:c6:3d:
         3c:c3:c3:09:c0:7e:03:46:86:04:97:21:eb:7e:31:1c:78:2b:
         d8:e6:37:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:23:12 2025 by rpki-client