This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
File:                     wq_BTc5FCwXshsfFMHDNa7bbx-4.mft (raw, json)
Hash identifier:          PjCpzXM1bDMgJTSaP1wZ0u+ywdO3W0zRJDewQAPLSAY=
Subject key identifier:   76:C7:E5:92:58:C3:07:33:91:45:7D:C7:F9:E0:C6:28:A3:AD:9F:F9
Authority key identifier: C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE
Certificate issuer:       /CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
Certificate serial:       019B37FC5653ECD3EF14744F607181D0C019
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
Manifest number:          1789
Signing time:             Fri 19 Dec 2025 19:00:42 +0000
Manifest this update:     Fri 19 Dec 2025 19:00:42 +0000
Manifest next update:     Sat 20 Dec 2025 19:00:42 +0000
Files and hashes:         1: 9R7u9NYY_fdGGu9OLtebIHbh-p8.roa (hash: EvXc+WkKL+opgKBNfenegjbhQJ0LX3U13qSmBaz/xEY=)
                          2: L9HnYDWvNpMZS4pIu5zArdvE5v8.roa (hash: 0/PRNPNH9PE5TqzwlxbNtq6foN9oanZ3LsojHdx7xuw=)
                          3: khRg4MYEnETJ2jPimtqut6SDcfI.roa (hash: Nu5ttQZeyOdAqpRtT8J7JzoHpXrE1o2QevNWAJZ6hBk=)
                          4: wq_BTc5FCwXshsfFMHDNa7bbx-4.crl (hash: NThZX2gXG918G0x0qo7rkQPamsLt/dUI8sziOwvSmlo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:fc:56:53:ec:d3:ef:14:74:4f:60:71:81:d0:c0:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
        Validity
            Not Before: Dec 19 19:00:42 2025 GMT
            Not After : Dec 20 19:00:42 2025 GMT
        Subject: CN=76c7e59258c3073391457dc7f9e0c628a3ad9ff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:73:2c:1b:af:ab:b0:bd:d3:d8:52:8e:52:55:
                    a3:ef:ba:f3:dd:b0:44:44:d5:e8:ae:f1:6d:50:d4:
                    2f:a5:24:83:28:eb:77:a4:52:30:9b:57:9f:f7:98:
                    a2:07:3d:ce:83:28:05:2b:e0:84:42:2e:64:af:2f:
                    9e:36:58:58:a0:de:a7:72:03:d8:d2:52:7d:a6:23:
                    6c:e2:15:c4:6c:a4:32:3a:bd:dc:7c:03:87:1f:6a:
                    57:f7:a3:2e:3a:87:63:93:d1:c5:37:73:f2:70:21:
                    ee:32:ca:12:70:af:d4:72:f6:f1:8d:a8:e7:e5:82:
                    1a:83:ea:c6:cd:11:36:50:c2:80:37:7e:af:31:7c:
                    95:53:fc:1b:6a:5c:c4:d2:4a:b8:03:c6:b0:e7:e3:
                    ce:57:e0:c5:36:bf:25:98:f6:ea:4f:da:a0:a4:c3:
                    45:21:2b:44:46:94:89:ef:e9:18:f8:0f:11:ac:5c:
                    e7:fd:4a:c5:91:77:1a:b1:03:b3:0e:5d:ee:dd:b4:
                    7d:9e:94:ef:df:62:16:92:b4:dc:ca:f3:29:ec:7c:
                    ec:a6:6d:3c:d2:d4:93:28:1f:31:a4:ea:31:3a:fc:
                    66:cd:b5:d8:39:ea:75:30:0f:83:76:b9:75:b3:38:
                    e7:ca:99:8c:6e:b7:00:33:02:29:ef:2b:d6:4d:7f:
                    6f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C7:E5:92:58:C3:07:33:91:45:7D:C7:F9:E0:C6:28:A3:AD:9F:F9
            X509v3 Authority Key Identifier:
                keyid:C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:e9:b0:74:61:11:fa:58:eb:7f:ae:78:5d:0d:f1:d0:0d:d3:
         21:5c:83:29:92:e4:2a:33:9c:d3:e2:d8:73:19:68:93:bc:09:
         42:f2:7b:bf:42:ad:9b:6a:65:f3:7a:37:f5:8f:bf:60:f3:a4:
         d6:0b:ac:c0:37:05:5c:c7:31:aa:b5:33:ca:a9:6d:8c:d4:0f:
         80:e5:72:c6:4b:ca:04:9a:fd:21:6b:df:aa:71:b5:82:d5:c9:
         29:21:80:b4:4f:ac:3a:52:bd:eb:ad:98:81:78:72:b1:1f:75:
         fe:28:36:8f:ec:b9:c8:95:97:c9:4d:98:bc:18:42:62:47:20:
         d3:45:a4:52:53:11:d0:1c:4a:c4:27:04:2b:e6:4b:ef:2f:c2:
         01:33:f1:0d:03:15:18:fc:de:dc:fa:b2:16:08:11:d1:09:cc:
         51:51:0f:4e:59:a3:4f:2a:de:4b:e4:c5:a3:c0:c1:c7:7f:15:
         b6:d8:ce:cf:21:27:61:51:bd:73:46:b4:ee:60:18:f2:ba:2e:
         10:bf:26:45:9d:ba:25:94:c3:f5:53:45:a7:6c:88:d2:7b:6e:
         eb:27:97:43:d4:42:db:de:a5:90:08:6b:32:e8:e6:06:35:bc:
         0a:c4:90:9b:68:71:51:6b:41:95:dc:76:7d:63:a4:bc:8a:a8:
         fb:52:32:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:52:06 2025 by rpki-client