This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.mft
File:                     1-WMkfQ2DufYIz4ZPQnzf6UslKhA.mft (raw, json)
Hash identifier:          uQ4hBKPyH/KoQJqbxAxHuZ3stNabq945agR8U/GhPwA=
Subject key identifier:   BC:13:FA:CB:A9:8E:6F:79:93:E8:91:CF:C8:24:7C:55:3F:22:AB:BE
Authority key identifier: F9:63:24:7D:0D:83:B9:F6:08:CF:86:4F:42:7C:DF:E9:4B:25:2A:10
Certificate issuer:       /CN=f963247d0d83b9f608cf864f427cdfe94b252a10
Certificate serial:       019AF27740DFDF49A71529DCB6CE850FA230
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.mft
Manifest number:          1763
Signing time:             Sat 06 Dec 2025 07:01:32 +0000
Manifest this update:     Sat 06 Dec 2025 07:01:32 +0000
Manifest next update:     Sun 07 Dec 2025 07:01:32 +0000
Files and hashes:         1: 1-WMkfQ2DufYIz4ZPQnzf6UslKhA.crl (hash: C2ijnyo2P48XLRDprj7rpRob4/zGz+OwXfObWvWfQ34=)
                          2: PqTOmFPSGAKNeE2YcblZG_Wl6iY.roa (hash: 8Xr6waKnu+E2qqO+UtOvKWYxqXyjlVupEIsHjk9OnCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:77:40:df:df:49:a7:15:29:dc:b6:ce:85:0f:a2:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f963247d0d83b9f608cf864f427cdfe94b252a10
        Validity
            Not Before: Dec  6 07:01:32 2025 GMT
            Not After : Dec  7 07:01:32 2025 GMT
        Subject: CN=bc13facba98e6f7993e891cfc8247c553f22abbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c2:94:d8:b5:e0:02:3b:5e:89:88:e3:e1:20:
                    c4:ad:10:e1:30:1a:93:a1:8e:ab:40:77:10:b6:8e:
                    30:03:d8:01:57:36:49:f6:10:db:ce:14:df:93:9c:
                    14:01:19:47:ac:bc:fa:e3:b7:06:96:40:0e:59:54:
                    34:18:f7:22:48:a6:0e:9b:e9:04:a2:64:17:d0:88:
                    bf:5b:fc:8c:98:4f:5e:23:d8:7e:ee:bd:38:11:93:
                    f9:58:24:16:88:70:dd:fc:09:5c:2e:86:9a:cd:4e:
                    72:ee:b0:e6:07:97:c1:be:38:9a:eb:5b:47:e9:8a:
                    bc:d3:00:17:3f:0f:46:5d:89:83:ce:47:f6:3d:1f:
                    f4:bc:2c:95:85:32:df:b7:91:5a:3e:29:99:48:d1:
                    e8:ee:71:2d:79:71:00:5d:eb:f0:80:88:bb:60:68:
                    1a:49:d3:f5:90:ff:04:19:cf:41:71:15:a8:65:f3:
                    d9:ce:4d:7f:04:3f:6a:b5:5c:1b:4d:11:32:3e:85:
                    ec:7c:6f:73:b2:66:84:29:3e:e2:fa:9e:5f:90:01:
                    e9:24:63:53:d1:36:c3:7f:e2:18:1c:6b:d7:d7:5a:
                    7c:f5:ca:64:be:bf:f7:66:20:12:ce:20:07:47:25:
                    78:2e:fa:2c:57:ea:a0:a5:bd:e4:61:03:34:a7:eb:
                    d9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:13:FA:CB:A9:8E:6F:79:93:E8:91:CF:C8:24:7C:55:3F:22:AB:BE
            X509v3 Authority Key Identifier:
                keyid:F9:63:24:7D:0D:83:B9:F6:08:CF:86:4F:42:7C:DF:E9:4B:25:2A:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:20:3b:6e:47:2d:fc:ec:79:0d:34:38:f0:85:01:bb:63:80:
         11:2d:98:7f:08:46:52:4a:d6:7d:99:85:97:15:bf:9e:40:24:
         88:b9:84:60:b2:62:9b:50:cc:e5:9c:72:55:5c:a7:94:0c:e9:
         75:6f:aa:7a:87:75:e6:9f:00:ad:58:74:e3:21:52:1f:90:ae:
         20:7f:83:2c:ae:8b:22:24:58:6f:17:8e:14:f5:02:0a:5b:09:
         4a:d8:b4:b6:d4:89:2d:1a:6f:7d:70:f2:be:7f:08:85:bf:48:
         44:ec:2e:95:a8:05:24:54:3d:e8:c0:54:9b:a4:55:c1:3d:08:
         9c:9a:de:bf:98:c7:2e:7a:3f:a5:29:c8:d6:60:eb:60:00:b3:
         70:a7:6d:9a:8d:c3:b1:98:8d:b5:e3:8b:9b:5a:a5:7e:25:8e:
         d8:cd:9c:f5:0d:94:e6:ef:a4:f7:df:91:ef:1d:6b:e5:bf:85:
         13:11:30:15:9f:c0:d8:fe:ca:c6:53:0a:fb:b9:22:8c:74:fa:
         96:95:f2:fe:90:5f:7b:83:09:84:52:8b:cf:a9:d4:96:34:58:
         75:24:45:f3:e3:5d:10:4f:ef:71:ae:06:46:24:4b:14:5d:ca:
         7c:ad:85:3d:79:2d:13:ed:07:cb:37:27:09:0f:96:a3:a7:6e:
         bc:9b:96:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:19:34 2025 by rpki-client