This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft
File:                     wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft (raw, json)
Hash identifier:          1iu72Db+gdkM/yJOfpV8J7+AGx3VXncMfr3EhHgO/m4=
Subject key identifier:   1F:0D:95:3A:8C:EE:37:8D:EA:04:25:B7:AB:9E:C0:D6:01:97:60:37
Authority key identifier: C2:A2:9C:C5:18:01:0F:76:76:35:3F:F2:96:64:4D:9B:D4:A3:55:CB
Certificate issuer:       /CN=c2a29cc518010f7676353ff296644d9bd4a355cb
Certificate serial:       019B34C58DD2C1E5DB674735FBC6ACFE28E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft
Manifest number:          0772
Signing time:             Fri 19 Dec 2025 04:02:00 +0000
Manifest this update:     Fri 19 Dec 2025 04:02:00 +0000
Manifest next update:     Sat 20 Dec 2025 04:02:00 +0000
Files and hashes:         1: ZWfwRz9SdF5HlUEU_xQsfm2pEuc.roa (hash: FPKU4sBZtKV03dopSyyPb4q2mr5BiiBfqidcOPbFyqg=)
                          2: o4qbcCQCij_4lrM4fuG-GZzDpjs.roa (hash: OQOBy/7xXgD89cYeKeQCwe26Q3oYa0ii7bEbJEXvS2M=)
                          3: wqKcxRgBD3Z2NT_ylmRNm9SjVcs.crl (hash: nDG9Do1AcxIrxMqTx6ZSycnMJI/CpQuan/towUe5mTg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:34:c5:8d:d2:c1:e5:db:67:47:35:fb:c6:ac:fe:28:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2a29cc518010f7676353ff296644d9bd4a355cb
        Validity
            Not Before: Dec 19 04:02:00 2025 GMT
            Not After : Dec 20 04:02:00 2025 GMT
        Subject: CN=1f0d953a8cee378dea0425b7ab9ec0d601976037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:88:83:41:cc:dd:58:d2:a3:a8:cc:94:8c:0b:
                    2f:4a:43:3e:36:b8:fb:59:34:47:f1:e0:a1:78:27:
                    e2:e6:f4:1a:78:74:a6:de:73:27:ee:5c:5d:1a:65:
                    36:02:76:06:f3:f9:c7:9d:b0:e9:05:a0:76:da:b3:
                    3a:76:9c:a6:fc:a9:10:a1:5c:c1:9b:fd:4b:dc:ec:
                    65:4f:02:82:77:c5:6a:bd:1a:95:9c:b8:48:10:ad:
                    0e:1a:3e:6b:a7:af:26:50:4c:1e:e1:79:57:cc:e1:
                    26:76:18:f0:6e:16:6d:66:65:b0:c8:83:8d:3a:30:
                    61:dd:e3:95:68:76:27:02:8c:4c:e9:ae:44:b5:c7:
                    97:ff:30:a0:48:a0:94:fd:49:6f:3a:13:2a:e2:ad:
                    38:e0:cb:a4:1f:61:55:c5:ab:bb:e4:cc:70:e0:6f:
                    b0:4c:96:b8:e6:5b:1a:1a:87:c2:f9:af:6c:91:44:
                    9b:fc:30:03:d2:70:aa:f6:bb:a6:27:6a:a5:4e:39:
                    06:2f:dd:ed:f8:b2:ee:f7:ff:63:b1:4d:51:49:ff:
                    12:39:93:96:44:eb:41:66:b5:cf:e7:cd:2a:2e:6c:
                    0a:b9:ff:ee:d7:46:1d:6b:41:ef:c5:58:23:76:49:
                    98:76:a8:0e:54:42:e9:ac:c9:62:23:21:2d:de:64:
                    a0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0D:95:3A:8C:EE:37:8D:EA:04:25:B7:AB:9E:C0:D6:01:97:60:37
            X509v3 Authority Key Identifier:
                keyid:C2:A2:9C:C5:18:01:0F:76:76:35:3F:F2:96:64:4D:9B:D4:A3:55:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:ee:4b:58:15:5e:36:36:8b:3b:99:15:a9:fd:30:1b:df:81:
         22:51:3b:10:18:99:71:53:2d:bb:9a:14:64:fd:ea:ff:5b:0e:
         74:fe:29:25:ce:1f:fe:11:f0:16:6b:4c:82:78:86:98:1d:dd:
         bf:a3:d5:d1:6b:fa:d2:82:bc:ff:ad:a7:16:cf:3a:ce:9e:f4:
         bf:70:c0:c7:62:51:a3:c6:62:2f:f1:d9:52:9f:5c:b8:a0:83:
         eb:d0:50:68:4c:1d:76:b1:10:74:91:8f:ba:14:66:e5:2a:8f:
         62:07:2e:d2:1a:85:c0:00:86:27:0f:1f:14:b7:1d:ef:a4:8f:
         cc:c2:53:80:c7:71:30:03:cc:ad:cf:e9:70:56:d1:8c:fd:e0:
         a3:30:cd:16:34:7d:4b:d0:97:2a:98:9b:34:17:43:87:35:8b:
         ad:1e:0a:22:02:5b:dd:6b:70:56:22:f2:b6:a1:77:98:e5:0b:
         32:84:b7:57:10:da:49:90:67:fb:b2:34:08:bd:d1:d7:7d:ba:
         80:11:d2:f1:e7:b4:f9:98:6f:ec:cc:8d:b3:22:f6:aa:f1:94:
         a9:8e:73:04:73:d5:4d:29:eb:21:c4:47:9d:c9:cc:18:57:b5:
         21:ca:9b:fc:1b:89:b7:10:54:52:9e:e3:2f:d6:06:19:70:cf:
         f5:fa:ca:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs0xY3SweXbZ0c1+8as/ijmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYTI5Y2M1MTgwMTBmNzY3NjM1M2ZmMjk2NjQ0ZDliZDRh
MzU1Y2IwHhcNMjUxMjE5MDQwMjAwWhcNMjUxMjIwMDQwMjAwWjAzMTEwLwYDVQQD
EygxZjBkOTUzYThjZWUzNzhkZWEwNDI1YjdhYjllYzBkNjAxOTc2MDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6YiDQczdWNKjqMyUjAsvSkM+Nrj7
WTRH8eCheCfi5vQaeHSm3nMn7lxdGmU2AnYG8/nHnbDpBaB22rM6dpym/KkQoVzB
m/1L3OxlTwKCd8VqvRqVnLhIEK0OGj5rp68mUEwe4XlXzOEmdhjwbhZtZmWwyION
OjBh3eOVaHYnAoxM6a5EtceX/zCgSKCU/UlvOhMq4q044MukH2FVxau75Mxw4G+w
TJa45lsaGofC+a9skUSb/DAD0nCq9rumJ2qlTjkGL93t+LLu9/9jsU1RSf8SOZOW
ROtBZrXP580qLmwKuf/u10Yda0HvxVgjdkmYdqgOVELprMliIyEt3mSguwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8NlTqM7jeN6gQlt6uewNYBl2A3MB8GA1UdIwQY
MBaAFMKinMUYAQ92djU/8pZkTZvUo1XLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3FLY3hSZ0JEM1oyTlRfeWxtUk5tOVNqVmNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zOWVkZTEtYmZlMS00NzJlLTg3NGMt
N2MxZjBjZGZjZTc3LzEvd3FLY3hSZ0JEM1oyTlRfeWxtUk5tOVNqVmNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8zOWVkZTEtYmZlMS00NzJlLTg3NGMtN2MxZjBjZGZjZTc3
LzEvd3FLY3hSZ0JEM1oyTlRfeWxtUk5tOVNqVmNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdu5LWBVe
NjaLO5kVqf0wG9+BIlE7EBiZcVMtu5oUZP3q/1sOdP4pJc4f/hHwFmtMgniGmB3d
v6PV0Wv60oK8/62nFs86zp70v3DAx2JRo8ZiL/HZUp9cuKCD69BQaEwddrEQdJGP
uhRm5SqPYgcu0hqFwACGJw8fFLcd76SPzMJTgMdxMAPMrc/pcFbRjP3gozDNFjR9
S9CXKpibNBdDhzWLrR4KIgJb3WtwViLytqF3mOULMoS3VxDaSZBn+7I0CL3R1326
gBHS8ee0+Zhv7MyNsyL2qvGUqY5zBHPVTSnrIcRHncnMGFe1Icqb/BuJtxBUUp7j
L9YGGXDP9frKhA==
-----END CERTIFICATE-----
Generated at Fri Dec 19 07:48:09 2025 by rpki-client