This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft
File:                     wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft (raw, json)
Hash identifier:          hX46oUYz4psTnbv2bX7XbpO0gS3mUjuQIE94TspuL2k=
Subject key identifier:   28:88:75:CF:DF:92:E3:66:52:05:17:C8:5A:42:70:D9:0B:19:BD:B9
Authority key identifier: C1:4D:63:D3:97:07:D4:5A:8C:68:3C:B5:2E:47:17:1D:13:6C:E5:08
Certificate issuer:       /CN=c14d63d39707d45a8c683cb52e47171d136ce508
Certificate serial:       019B30431326B56E4E401A76F6681EAC212A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft
Manifest number:          1054
Signing time:             Thu 18 Dec 2025 07:01:00 +0000
Manifest this update:     Thu 18 Dec 2025 07:01:00 +0000
Manifest next update:     Fri 19 Dec 2025 07:01:00 +0000
Files and hashes:         1: VWUmt1-Lc9mwWkzpXFUMDbb2UqE.roa (hash: Tjmb/lxEFBxZz68PrILtJGnl1lSlmzqzB3RT5UoyTR8=)
                          2: wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl (hash: uk/CTPgup722lsSgRx8djfv2wAMKNWlg9bMY2QvN6NQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:30:43:13:26:b5:6e:4e:40:1a:76:f6:68:1e:ac:21:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c14d63d39707d45a8c683cb52e47171d136ce508
        Validity
            Not Before: Dec 18 07:01:00 2025 GMT
            Not After : Dec 19 07:01:00 2025 GMT
        Subject: CN=288875cfdf92e366520517c85a4270d90b19bdb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e3:43:bb:c8:ac:75:8b:de:9d:77:08:0d:10:
                    db:e1:11:3b:0f:9e:91:23:21:ef:90:f6:b9:2a:67:
                    91:96:b9:2a:ee:6b:17:70:0c:67:2c:92:af:35:d9:
                    00:29:dd:66:a1:89:30:71:80:73:aa:a2:5a:10:82:
                    3c:93:6e:48:6a:35:06:94:e4:34:72:33:db:d4:75:
                    68:7b:3d:6b:b1:2d:fd:24:4b:74:82:5b:19:04:40:
                    0f:26:8c:90:9a:bc:11:6c:2e:0c:c8:cf:7c:aa:c7:
                    e7:1e:3f:64:f4:d1:14:5d:41:f1:bb:ec:7c:4e:1b:
                    5f:17:51:bb:dc:f1:fb:cf:f0:98:f3:0a:40:81:34:
                    c8:58:ab:42:36:3d:4d:a9:bf:bd:d5:f1:87:ad:96:
                    12:c2:89:ed:5e:60:5b:5d:36:37:9d:d5:60:a1:59:
                    f3:6d:72:97:84:2a:93:72:61:16:fe:b3:25:94:15:
                    49:ad:8f:3f:f8:67:bf:2d:d2:10:59:5a:b5:d5:8e:
                    3b:4f:ef:bf:12:13:cf:21:e5:25:32:43:3d:34:5e:
                    46:e7:87:5d:4f:56:93:2b:49:dc:14:0d:ee:19:30:
                    e1:06:da:2c:4a:94:13:bf:14:ec:29:21:c1:0a:03:
                    30:b1:7a:70:4c:16:b4:4c:75:c8:7e:77:11:57:4b:
                    3f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:88:75:CF:DF:92:E3:66:52:05:17:C8:5A:42:70:D9:0B:19:BD:B9
            X509v3 Authority Key Identifier:
                keyid:C1:4D:63:D3:97:07:D4:5A:8C:68:3C:B5:2E:47:17:1D:13:6C:E5:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:a7:98:28:2c:7c:7c:81:90:61:61:73:c5:6e:1f:64:86:c3:
         46:aa:08:2a:14:34:ad:60:b0:e6:ec:56:83:8b:d5:b0:64:ea:
         73:d4:29:3b:27:61:9f:9f:1a:6a:37:81:09:89:85:31:61:96:
         7f:f0:c3:65:8b:a4:76:ee:53:4a:fe:e1:f9:18:23:1a:c9:60:
         08:4c:ed:3d:d3:af:b7:49:0a:1c:93:60:52:26:43:a0:83:14:
         c6:8f:a6:a9:ba:79:71:be:de:b2:f4:27:d7:8b:e3:b7:1a:2e:
         77:55:85:1b:03:8f:b6:65:fa:5b:23:4b:d1:80:6d:30:a0:f8:
         ee:0c:c9:7f:dd:d6:d2:d7:99:76:da:f5:72:96:db:b4:93:18:
         e1:43:d0:ce:26:88:e7:ce:c0:cd:74:ba:3b:3d:be:0c:8a:f7:
         cc:bd:a6:ea:c0:e9:9a:4b:d9:5e:59:bb:f4:12:7e:0b:e5:1f:
         59:70:09:f7:cf:47:e4:d3:49:0a:fc:35:66:d4:d5:01:58:6e:
         fe:fe:df:d8:6f:56:9a:8e:fd:e3:69:08:8d:7c:89:d3:f9:fc:
         da:b2:0d:59:7f:bb:2e:3c:39:a8:33:b8:44:2b:dc:c6:cf:e8:
         2f:0a:61:be:b1:d2:1d:65:f2:3d:b5:f2:3d:b1:fa:f4:1c:83:
         9c:c7:47:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 09:57:58 2025 by rpki-client