This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
File:                     w0CQmuwyCowu4cq84TAsu31OBIY.mft (raw, json)
Hash identifier:          IyR2kFPTc56uuqRMjM9BDmkvyO29g6MxSLrqp1STFgk=
Subject key identifier:   77:DC:AB:C9:78:37:72:63:97:E9:32:99:E6:E3:16:53:18:1F:C4:8C
Authority key identifier: C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86
Certificate issuer:       /CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
Certificate serial:       019AF68A1B82E83BBFAB4346EFE2F1577E4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
Manifest number:          13F6
Signing time:             Sun 07 Dec 2025 02:00:37 +0000
Manifest this update:     Sun 07 Dec 2025 02:00:37 +0000
Manifest next update:     Mon 08 Dec 2025 02:00:37 +0000
Files and hashes:         1: 1JRmPjjw2eEyAEj7-d9EaoFd8tQ.roa (hash: qUFNGxht8SatseV7uTcgdf36n0Wje2HhZXA6lIEPzt8=)
                          2: jb-zD-QZseypOhoYrz7-lEkthR4.roa (hash: NVATDU2rQowVsA5kxCOsDlRv1YWlJaECqpg6RYlVt8g=)
                          3: w0CQmuwyCowu4cq84TAsu31OBIY.crl (hash: cRBc/e1hubrIB+txjOom9Ve/3HqLJGMwPO2F2jNBSR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f6:8a:1b:82:e8:3b:bf:ab:43:46:ef:e2:f1:57:7e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
        Validity
            Not Before: Dec  7 02:00:37 2025 GMT
            Not After : Dec  8 02:00:37 2025 GMT
        Subject: CN=77dcabc97837726397e93299e6e31653181fc48c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:82:4f:60:67:bb:06:86:f3:83:6c:e1:31:92:
                    04:78:03:15:0a:2a:50:a3:c9:39:67:f9:b8:db:ef:
                    46:e8:38:2a:17:5e:0d:fb:fe:52:6d:24:76:47:b6:
                    22:ca:55:c3:f1:3a:db:13:79:ea:e3:ef:2e:95:c5:
                    cf:75:b6:c6:d7:7f:6f:9f:01:c8:9a:85:79:1f:eb:
                    78:d0:95:43:d0:97:87:57:11:b5:d7:67:d7:e8:22:
                    b9:78:fd:df:fd:2b:d7:f4:6f:28:fb:d2:f2:14:f0:
                    5e:3d:5f:75:df:05:27:fe:a5:d4:f5:89:40:65:e5:
                    6f:8a:9c:b1:74:14:f3:c4:b8:9d:6d:b9:d2:9e:d6:
                    5d:d9:32:e6:c9:42:3b:54:e3:a2:a8:47:28:d0:1b:
                    77:f3:be:c5:43:74:88:c8:39:e4:2d:98:bc:c6:d6:
                    07:79:bb:b2:79:6f:ac:4b:d6:09:4b:60:fd:f0:70:
                    f4:48:9f:23:ca:3a:bf:0f:72:48:0c:78:84:19:ba:
                    e4:0e:76:37:be:f9:f1:3c:64:80:47:62:38:d0:04:
                    e4:5f:36:4b:47:67:22:da:c2:6a:df:bc:d8:81:86:
                    c1:dc:48:45:8b:32:26:a4:33:a2:42:b7:97:df:e2:
                    d2:7d:31:f0:71:12:4b:c7:4a:76:84:9b:1c:92:f2:
                    3f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DC:AB:C9:78:37:72:63:97:E9:32:99:E6:E3:16:53:18:1F:C4:8C
            X509v3 Authority Key Identifier:
                keyid:C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:fd:ef:fb:70:7b:81:20:a3:75:1b:fb:2a:04:0e:19:c0:0a:
         40:9c:d3:08:26:70:f6:0e:e8:8e:83:9c:d7:6d:26:aa:4d:4b:
         6d:bc:16:0b:0d:65:eb:4b:d6:30:b3:7d:6e:c3:55:6e:db:4c:
         63:93:e2:b8:c1:fa:5c:cc:93:c5:b2:a4:f8:19:a2:74:7b:db:
         b8:76:7d:0c:f1:ec:ff:ea:a3:ab:ae:c8:a2:be:21:8c:82:7d:
         4f:71:3e:7f:d1:b5:53:81:78:e6:06:2c:bc:a8:ff:c9:47:64:
         17:00:9a:17:95:27:06:cb:c2:d1:d4:31:34:9b:56:71:fb:4e:
         b9:28:a4:09:b6:79:f1:49:c4:14:14:21:b6:64:ff:35:be:28:
         e9:42:35:8d:ee:38:f0:89:7b:37:1c:7c:3b:50:4e:ae:3a:6c:
         69:92:f3:2a:dc:ed:d6:fe:8f:0d:2b:34:23:f1:a0:1b:86:fd:
         3c:4d:5a:a4:80:c2:33:93:86:b6:7d:5e:4d:a6:ca:3a:62:b2:
         65:50:bc:98:8c:c0:c3:31:5c:0e:18:99:54:6b:9b:0b:b3:1e:
         a2:f6:22:29:56:1f:11:6f:6f:fd:38:1a:88:82:45:f3:45:37:
         7b:60:8e:42:14:e2:00:6e:4b:ae:69:e0:86:ba:64:6c:f1:96:
         80:ef:09:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:02:41 2025 by rpki-client