This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
File:                     wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft (raw, json)
Hash identifier:          bE5YCpckOXI5q/SdaPR9Aypyw2T+It+BRGcbwVqBb9c=
Subject key identifier:   8B:EC:C9:43:8C:8D:6B:44:27:B8:B2:98:58:F9:10:25:97:F1:3D:DF
Authority key identifier: C2:91:93:34:AD:2A:D5:36:16:C3:4F:EC:E9:6C:E2:92:30:F8:63:49
Certificate issuer:       /CN=c2919334ad2ad53616c34fece96ce29230f86349
Certificate serial:       019AACB95342FD8F01675BEC0BBDCECEF3BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
Manifest number:          070E
Signing time:             Sat 22 Nov 2025 18:00:17 +0000
Manifest this update:     Sat 22 Nov 2025 18:00:17 +0000
Manifest next update:     Sun 23 Nov 2025 18:00:17 +0000
Files and hashes:         1: RSjnM6zCvAOEItwpVtC0m6KUGtw.roa (hash: 63Mz4fOoq8b9mEgPpq4X77Rjr3X+uaQbsoHZFlRZzdY=)
                          2: b800M8UQE_ndSkfHQhV3cPUcjPM.roa (hash: MbkUQn3Ix8UmF2oKyZjDZOrZVxkNdqgLjfIY0GRvAPU=)
                          3: wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl (hash: gTiTmPIEzZYpL2uo8/EQlx9dg6hvUpUbDY9cpSJd9xw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Nov 2025 12:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ac:b9:53:42:fd:8f:01:67:5b:ec:0b:bd:ce:ce:f3:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2919334ad2ad53616c34fece96ce29230f86349
        Validity
            Not Before: Nov 22 18:00:17 2025 GMT
            Not After : Nov 23 18:00:17 2025 GMT
        Subject: CN=8becc9438c8d6b4427b8b29858f9102597f13ddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:da:cf:c2:dd:68:4f:a7:39:62:37:ce:4b:c4:
                    79:a3:9d:a9:62:2c:68:96:d7:ea:d9:74:72:30:5e:
                    e6:65:2e:de:43:6e:9f:87:70:e4:0e:da:12:06:22:
                    c0:d6:60:55:a0:75:df:8a:f9:b5:43:e9:8b:de:51:
                    2c:9b:ce:00:53:d2:5f:2b:50:aa:62:36:f0:b6:67:
                    85:9a:ee:e6:e4:af:95:11:c7:de:f4:e0:51:1a:70:
                    23:b3:6c:81:d8:c6:0d:03:bd:2e:d3:9c:52:60:31:
                    ac:43:b9:e7:2b:e4:52:fb:a2:92:64:7b:cf:79:8b:
                    f1:8c:5b:6c:a2:1e:92:6d:84:c7:c7:75:0d:8e:a4:
                    24:5a:c0:d5:f1:79:7e:a0:c0:2d:80:64:47:04:82:
                    2f:b0:cf:19:5c:eb:22:e4:80:97:4e:f5:90:38:33:
                    38:f6:00:2a:62:ce:c8:87:45:4a:97:a6:0e:69:5f:
                    d8:16:db:08:ff:98:63:4d:f2:e7:d2:b2:57:5a:df:
                    6a:fb:48:3e:88:19:99:c7:91:23:bf:9b:1f:98:6b:
                    71:d8:39:f5:f5:4b:5d:b1:fa:53:92:6d:90:1c:0d:
                    ae:f1:c0:e3:ff:32:9c:0b:b4:5c:ee:89:c8:53:0c:
                    8b:9a:39:b6:a5:3a:cb:01:35:7a:35:96:8d:29:ae:
                    b1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:EC:C9:43:8C:8D:6B:44:27:B8:B2:98:58:F9:10:25:97:F1:3D:DF
            X509v3 Authority Key Identifier:
                keyid:C2:91:93:34:AD:2A:D5:36:16:C3:4F:EC:E9:6C:E2:92:30:F8:63:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:36:1f:98:f6:2d:65:fa:72:fd:25:e3:7d:8b:94:d1:d8:61:
         84:79:1e:51:ca:ad:56:94:7b:56:46:2e:0a:db:19:23:f9:2e:
         ec:62:98:37:a9:fd:a3:df:07:c2:18:28:a2:e2:c6:99:cb:7f:
         ff:3e:0c:cc:ce:c7:ed:48:e4:9b:85:4a:6a:53:67:4d:c7:2e:
         90:b4:58:11:23:93:d4:32:09:0f:a4:28:7e:ae:b2:e9:57:c0:
         eb:78:f7:92:d3:16:0a:15:a2:44:d9:a1:87:c2:8f:88:c3:10:
         d3:1f:2c:b0:7d:3a:e4:d5:2d:73:c5:56:99:6e:3d:22:90:a9:
         43:49:74:7a:81:5a:b2:a3:71:14:6a:8b:73:7d:39:03:d8:2f:
         0b:ac:ca:62:fd:04:e8:f6:2f:f3:22:82:2d:5e:84:80:17:fb:
         9b:5c:8c:27:f2:2b:55:57:cd:16:f2:7d:50:ec:db:ee:85:5b:
         b3:5c:a0:1f:8c:78:d6:a7:0f:69:e2:5e:75:9a:67:47:e3:9b:
         e7:14:81:3a:2d:ed:09:86:77:33:7c:05:7f:ba:31:d5:aa:90:
         f0:3f:9a:0b:ad:60:a6:ed:04:00:cb:d6:0b:37:90:d8:ba:14:
         3e:7d:32:96:de:c0:db:56:27:eb:a2:09:dd:b5:01:ee:4a:08:
         d2:bb:bf:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:42:52 2025 by rpki-client