This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
File:                     wtKiNOIkv4eZby8N9Vnq2IL55lE.mft (raw, json)
Hash identifier:          6S8kfdLS21YWwYqnmWzrUjBs9MEEKIfGR5d/oZfi3vA=
Subject key identifier:   A1:3A:50:AE:3F:73:0A:A6:BE:EB:BE:4C:17:E8:32:CA:CE:79:69:02
Authority key identifier: C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
Certificate issuer:       /CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Certificate serial:       019B3A90F67B86C5829467365D6DC107B2AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
Manifest number:          1796
Signing time:             Sat 20 Dec 2025 07:02:17 +0000
Manifest this update:     Sat 20 Dec 2025 07:02:17 +0000
Manifest next update:     Sun 21 Dec 2025 07:02:17 +0000
Files and hashes:         1: 2oAVyU2seJGTQFfvnoLEW0LxBMw.roa (hash: ZURqts9j5VKp8XJN1Pz3dvi3R29PhjPq43deEFPHUGM=)
                          2: AT0dJX8We-n1OQnzvfJggA9FrB4.roa (hash: 9UAeHkptLtx/0ySMZUXtLEVDmGoLUOk5U9+no/9RFDk=)
                          3: wtKiNOIkv4eZby8N9Vnq2IL55lE.crl (hash: mcLjh+C6ojvdA7rpMCBYuGmCqc8I/SHWlub0O3BMi50=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 07:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3a:90:f6:7b:86:c5:82:94:67:36:5d:6d:c1:07:b2:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d2a234e224bf87996f2f0df559ead882f9e651
        Validity
            Not Before: Dec 20 07:02:17 2025 GMT
            Not After : Dec 21 07:02:17 2025 GMT
        Subject: CN=a13a50ae3f730aa6beebbe4c17e832cace796902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ae:f5:10:6b:80:da:ab:e4:85:70:a7:2b:c0:
                    72:79:66:bc:3b:a3:5d:e8:72:98:5d:1e:d6:8d:a2:
                    b3:00:c7:95:8a:19:c5:f9:64:a3:41:57:01:22:46:
                    19:1a:a2:3c:ec:50:86:89:a4:6f:1f:b8:09:61:7e:
                    2f:4f:84:21:ba:12:dd:93:5b:f3:0e:03:2e:e5:f1:
                    96:23:9c:b6:b2:a1:42:17:13:ae:d5:52:be:9d:78:
                    e6:fc:77:47:13:81:b7:12:5e:25:8a:b0:8d:01:72:
                    5f:54:86:99:08:c2:e1:7f:74:dc:8d:b3:1c:f6:95:
                    48:27:5f:cf:b4:2f:15:af:41:2d:4f:a1:dd:1e:72:
                    1e:7d:0f:15:76:e9:34:f8:da:52:aa:82:60:f7:7e:
                    7f:7f:b0:24:53:16:4d:74:24:24:8a:0a:d1:0b:31:
                    fd:d8:6d:41:20:71:b9:77:74:f5:24:ec:83:c0:b3:
                    0c:3c:48:bd:5f:39:03:69:2b:2f:c0:0a:48:e6:10:
                    f1:49:3d:a9:3b:d1:23:9d:c8:b9:9d:ce:6d:1e:16:
                    84:ee:78:e2:e4:7a:7e:29:e6:cb:d3:5c:86:18:d3:
                    45:e2:4c:f5:de:40:a8:4d:a2:1c:b7:63:0e:c8:fa:
                    e8:4d:31:76:67:42:a2:36:3b:ab:ca:0b:a3:65:19:
                    1e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:3A:50:AE:3F:73:0A:A6:BE:EB:BE:4C:17:E8:32:CA:CE:79:69:02
            X509v3 Authority Key Identifier:
                keyid:C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:90:0e:e4:1e:bc:1a:0f:a4:8b:51:9f:97:65:ed:ba:91:40:
         c8:34:0b:98:34:88:fa:24:76:49:54:fc:3e:58:6d:e0:cc:b1:
         3d:26:1f:2d:bb:23:93:d9:1c:6a:95:39:34:f0:50:2a:e4:c7:
         1b:36:0e:a1:1f:01:f5:5d:2d:ad:4a:04:9b:32:92:f1:6f:d5:
         d4:63:cc:89:8f:04:3a:28:cd:2f:5c:e2:d5:e0:9c:a2:00:d3:
         23:ef:64:8b:57:25:40:c7:28:95:c2:87:f1:63:a6:ac:7b:97:
         6a:a8:9b:e0:32:92:95:95:47:66:a9:c6:d9:1b:e9:b2:a3:06:
         e7:35:28:fb:c8:71:0d:fb:ed:7c:a5:86:16:fd:4e:3f:46:a4:
         92:71:a7:4b:09:9b:7e:cf:9c:47:56:21:85:52:88:c5:57:fa:
         5b:e4:45:d7:ca:9e:22:67:6a:99:a5:1c:68:9a:a1:98:f1:bc:
         2e:1c:a0:cd:4b:13:73:6b:f5:40:49:96:60:02:58:96:43:0a:
         95:f2:cc:2b:4e:c1:75:99:1b:5e:01:eb:0d:74:4e:e4:18:91:
         7f:cc:c5:c3:a7:d7:d7:b4:2c:23:44:59:43:d7:d7:40:a4:32:
         55:44:e9:29:9c:55:c9:1b:51:e1:85:03:4c:03:93:b8:df:cc:
         a9:e5:ac:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 16:15:25 2025 by rpki-client