This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
File:                     wi1VOyjF0OpbHvYMm84z31C8tJM.mft (raw, json)
Hash identifier:          E6AYp1GXu+JiHymJiQpGIed6U3XIGVQvkAG/GXvjqJ0=
Subject key identifier:   92:18:D1:96:F3:4F:37:8F:21:5E:53:AB:66:A3:68:0F:76:87:84:8D
Authority key identifier: C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
Certificate issuer:       /CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Certificate serial:       019AF42E2F9F3666AF2B580B543713235EC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
Manifest number:          105F
Signing time:             Sat 06 Dec 2025 15:00:58 +0000
Manifest this update:     Sat 06 Dec 2025 15:00:58 +0000
Manifest next update:     Sun 07 Dec 2025 15:00:58 +0000
Files and hashes:         1: 2if-W7_9B6ndVwa4CXKbXlfYipY.roa (hash: x6w8qlU6igwl5cXDxoZUE8Lr1i8+UZJJXlmem9XWOSg=)
                          2: iNIpA6NRoHEtD1Gdwv0RcZxMEOY.roa (hash: QoWSCTkZW/GH9j1mmy2Sv0c+Jd5oUQpoqRVhrzgy26s=)
                          3: wi1VOyjF0OpbHvYMm84z31C8tJM.crl (hash: zOYcGaCJqZvX7+lc68H9cDc6jAkI7QqDKMpPulY5oD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:2e:2f:9f:36:66:af:2b:58:0b:54:37:13:23:5e:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
        Validity
            Not Before: Dec  6 15:00:58 2025 GMT
            Not After : Dec  7 15:00:58 2025 GMT
        Subject: CN=9218d196f34f378f215e53ab66a3680f7687848d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8e:d6:51:4c:e2:ac:7a:21:9c:ce:7d:18:34:
                    3d:5d:47:2f:ef:02:37:7f:e3:a9:27:7d:c9:99:fa:
                    81:f7:d1:6f:c6:97:e4:1c:e2:3e:de:de:b2:9c:9e:
                    c0:a8:9e:21:54:83:85:e9:67:4e:66:d9:72:5e:03:
                    9a:12:79:86:89:07:7f:4f:7b:63:88:09:9c:ef:19:
                    5c:c3:2c:f1:c1:84:3a:58:14:e6:89:d6:38:ff:4e:
                    ed:6e:78:d1:c4:e2:17:95:b8:5e:ab:a7:e8:b0:47:
                    2e:1b:9f:7f:4b:eb:83:dc:2b:47:8e:d6:d4:5d:f9:
                    db:78:d2:07:c6:aa:6c:75:61:15:16:f4:c2:1a:64:
                    f5:f6:e5:a2:2e:44:6d:d0:87:72:ca:b0:7e:26:1e:
                    3d:65:6c:4c:d7:e4:5c:be:c9:99:de:ac:0c:41:bf:
                    ca:38:12:c1:35:6e:27:71:fb:89:cd:22:ae:05:a4:
                    cd:cf:f4:2a:3c:35:0d:36:20:84:7f:c8:3c:11:d4:
                    b4:fa:eb:13:03:0d:49:e2:89:aa:90:f5:0f:b2:61:
                    79:a5:83:e9:a9:8a:3b:1f:70:27:37:e5:43:1c:bb:
                    93:5e:0f:bd:bf:62:2b:65:f1:fe:d0:09:a9:f5:05:
                    51:e5:25:a4:ae:1b:bf:af:e3:b3:6a:0e:60:c0:2d:
                    30:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:18:D1:96:F3:4F:37:8F:21:5E:53:AB:66:A3:68:0F:76:87:84:8D
            X509v3 Authority Key Identifier:
                keyid:C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:e7:a1:1b:a0:64:21:af:1e:c1:0e:a8:89:90:4c:30:b5:cf:
         b4:bf:85:9c:a0:80:3f:91:5a:a8:65:68:af:80:12:81:69:4c:
         77:c0:a6:2c:93:2d:5d:38:ac:aa:8e:84:f8:ea:3a:c2:47:6d:
         9f:89:d7:f2:91:d9:a6:ef:c7:ae:59:13:41:76:55:3d:d1:94:
         85:2c:2a:ea:11:62:82:08:56:ce:85:92:8a:c9:61:19:25:1f:
         eb:bb:68:23:a6:03:20:97:70:06:4f:ff:20:59:a4:cd:6b:fd:
         d7:84:60:e6:37:c0:2a:2d:72:f5:30:7f:50:8b:45:d4:22:10:
         da:b8:29:d2:96:03:9a:2f:63:6f:21:27:4f:80:a3:b9:ec:56:
         b0:e1:e6:f1:29:43:68:f1:36:c6:db:bd:6d:a0:3a:90:aa:fb:
         a8:eb:0b:e2:0c:e3:2f:b2:70:b0:68:64:ec:c2:72:bb:d9:78:
         33:45:5f:23:1b:4e:ef:c1:99:72:f5:e3:0e:e6:0b:a1:d9:59:
         c0:44:55:e7:aa:db:9c:a4:98:62:ea:6e:f8:d8:14:ae:c3:da:
         cf:b3:5e:95:8d:18:3c:42:75:38:3a:6f:b7:f2:be:76:0a:cc:
         47:0b:6b:04:09:b6:4c:98:56:a8:f2:aa:a8:14:1b:c0:69:18:
         5c:14:22:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:14:11 2025 by rpki-client