This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/07cdaa-99ff-441e-8050-b2d2a2f0c782/1/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.mft
File:                     wDeVgIO2QbdzEjzq2nvvJ1WOWUA.mft (raw, json)
Hash identifier:          LX84qkjFcfuRQMIw6U8oKT1rHf36El4h1K9yBxq3Xto=
Subject key identifier:   1E:3C:62:E9:0D:B5:34:EA:38:79:CB:71:DA:A5:15:86:0F:DD:5E:EF
Authority key identifier: C0:37:95:80:83:B6:41:B7:73:12:3C:EA:DA:7B:EF:27:55:8E:59:40
Certificate issuer:       /CN=c037958083b641b773123ceada7bef27558e5940
Certificate serial:       019AF1D238166C3C1D33C0CC594C81CA9792
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/07cdaa-99ff-441e-8050-b2d2a2f0c782/1/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.mft
Manifest number:          1762
Signing time:             Sat 06 Dec 2025 04:01:17 +0000
Manifest this update:     Sat 06 Dec 2025 04:01:17 +0000
Manifest next update:     Sun 07 Dec 2025 04:01:17 +0000
Files and hashes:         1: G04lQHkrBdpuXzaWHZ8TU8JabhU.roa (hash: Pf3n2aY4cgJyph0KOBPCn/jMgorMxrNstlYjIBjVB/Q=)
                          2: wDeVgIO2QbdzEjzq2nvvJ1WOWUA.crl (hash: o2RftVSU919MbA1VcBl7tEI+Kj/KD3hvj75gup/V8pI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/07cdaa-99ff-441e-8050-b2d2a2f0c782/1/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/07cdaa-99ff-441e-8050-b2d2a2f0c782/1/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 04:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d2:38:16:6c:3c:1d:33:c0:cc:59:4c:81:ca:97:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c037958083b641b773123ceada7bef27558e5940
        Validity
            Not Before: Dec  6 04:01:17 2025 GMT
            Not After : Dec  7 04:01:17 2025 GMT
        Subject: CN=1e3c62e90db534ea3879cb71daa515860fdd5eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:6f:8e:64:19:e8:77:f6:73:8d:94:8b:49:34:
                    60:1f:4c:21:4d:63:9b:c4:58:6f:db:a2:f5:6b:8d:
                    02:f7:13:11:88:f2:cf:da:36:d5:fa:7e:19:de:29:
                    84:11:4c:10:fb:9b:6f:b6:87:c3:72:f3:1f:89:77:
                    84:82:27:6f:10:6c:3e:fd:11:47:16:d6:ca:21:24:
                    05:7f:a6:08:c2:b8:91:0a:35:3d:07:ce:5c:8f:e9:
                    2c:a2:61:db:a4:1b:a5:d2:e8:8e:d1:f6:6d:85:71:
                    98:b8:c7:db:b1:5c:1b:8e:f8:7e:e9:04:fb:1c:80:
                    c7:ed:9a:c4:a8:50:b4:15:72:68:91:81:e2:39:ea:
                    bf:e5:30:4b:e2:15:9a:55:15:6c:ad:c4:f3:98:93:
                    49:9d:54:9a:30:34:64:36:40:a9:01:3e:5f:d0:c6:
                    1b:68:c6:17:a7:ae:cd:8a:69:b3:66:6c:e5:04:f1:
                    0d:10:d4:5c:d7:33:3d:46:19:bc:52:47:1e:1d:a2:
                    6a:7a:b9:d7:89:0b:27:79:81:e0:56:5e:fd:af:b6:
                    b0:bc:b6:98:44:fc:e3:53:dd:a7:19:f1:92:2f:f1:
                    dc:27:e5:84:0f:f4:fc:c8:df:f7:60:1b:48:c6:13:
                    c3:94:68:fd:a2:1f:4f:88:1f:36:cc:b4:02:67:9c:
                    ae:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:3C:62:E9:0D:B5:34:EA:38:79:CB:71:DA:A5:15:86:0F:DD:5E:EF
            X509v3 Authority Key Identifier:
                keyid:C0:37:95:80:83:B6:41:B7:73:12:3C:EA:DA:7B:EF:27:55:8E:59:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/07cdaa-99ff-441e-8050-b2d2a2f0c782/1/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/07cdaa-99ff-441e-8050-b2d2a2f0c782/1/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:44:d5:a4:d3:ee:ac:65:ae:ab:00:e8:ab:a0:ff:90:22:46:
         39:e2:9c:ce:09:cc:19:de:43:73:35:d3:40:90:7d:63:da:ce:
         68:25:40:9a:bd:9a:d7:d5:6a:d6:35:b4:69:70:65:44:81:35:
         be:32:89:d9:9f:3a:8d:38:47:02:3a:d9:6d:1a:af:75:6f:b7:
         d7:36:dc:e5:cd:bb:cf:23:83:78:fd:b1:cc:f8:5e:ca:e9:a7:
         f1:cc:c7:fb:3f:08:aa:0f:22:c0:62:aa:5c:f3:44:ba:2c:b7:
         88:63:6e:38:54:f9:ac:4c:a3:82:38:43:73:72:1e:33:b0:c5:
         ff:20:18:24:75:ca:82:b0:ff:59:45:93:a9:1c:f8:5a:01:0c:
         4d:5b:a9:a2:0b:a6:3f:ed:b2:ed:22:d9:c3:1f:26:8f:f7:7a:
         3a:23:07:0b:a7:ab:71:0a:76:a4:a7:c6:fd:6f:d4:5e:95:fe:
         bd:18:a3:be:71:49:fb:07:4f:05:39:7d:72:73:53:e3:65:b1:
         85:10:76:d3:05:46:96:8b:ff:d9:b0:27:97:c2:af:5e:e1:fd:
         9d:22:b7:8b:ad:0c:88:f8:ee:ae:e8:ad:3d:46:50:8c:6a:06:
         ec:e0:3a:e6:03:9f:c3:ce:fa:87:03:b3:65:a3:57:e6:d7:e6:
         8a:3f:ac:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:27:57 2025 by rpki-client