This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
File:                     wNKohFzfZXbejrARGAir1l_YvEQ.mft (raw, json)
Hash identifier:          cmQcy7a9X2wpEACG8eEct+bCoMq/rp2C3daI9+qhv7E=
Subject key identifier:   09:D9:43:FB:77:A6:FA:46:B4:3C:19:8B:95:0B:C4:6C:74:E0:51:42
Authority key identifier: C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44
Certificate issuer:       /CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
Certificate serial:       019B10137A855E855E2117897F6DDDFDB6AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
Manifest number:          1771
Signing time:             Fri 12 Dec 2025 01:01:10 +0000
Manifest this update:     Fri 12 Dec 2025 01:01:10 +0000
Manifest next update:     Sat 13 Dec 2025 01:01:10 +0000
Files and hashes:         1: OmgVAw8ZHFFpHCyw7LOehrOM8KA.roa (hash: 6CbGQ8M2p8DqUv4lPi9kJg+A49OPSohIvq46VoGyAHM=)
                          2: iB80sjC3FaeKn3w8-_wDD7I9eLg.roa (hash: J8k5oGXUl2TYImVeWDD/bvu/zaBz6UEfFHiKZd9EJV0=)
                          3: wNKohFzfZXbejrARGAir1l_YvEQ.crl (hash: 8xTYnTQWvRHvA804c4gI74g77Y542LLGmZW9KHq+v5E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 19:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:10:13:7a:85:5e:85:5e:21:17:89:7f:6d:dd:fd:b6:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
        Validity
            Not Before: Dec 12 01:01:10 2025 GMT
            Not After : Dec 13 01:01:10 2025 GMT
        Subject: CN=09d943fb77a6fa46b43c198b950bc46c74e05142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7d:3b:de:45:a4:bc:47:a6:86:14:2e:33:30:
                    f4:ed:15:96:e0:c4:e7:1d:c6:3b:07:97:1f:54:20:
                    1c:70:6b:40:a8:f3:a0:f2:5b:f8:8b:26:78:3b:a7:
                    97:d0:7e:a6:d9:7b:20:50:18:25:93:34:46:8c:4a:
                    f6:fc:0b:74:bb:89:a8:af:65:11:e7:80:93:51:b7:
                    81:fc:30:4d:ff:9a:de:f9:93:91:f9:74:0c:52:5e:
                    81:6b:7d:e8:df:b7:be:39:f4:c6:95:75:ec:4a:92:
                    23:8f:e0:41:a3:72:fd:00:8d:91:a4:4c:78:ca:64:
                    47:54:ff:db:b4:31:32:64:d9:78:3e:a9:07:ee:0b:
                    9c:90:2c:c0:87:25:dd:bb:ee:b1:0b:5b:11:24:d1:
                    d8:68:02:04:77:93:29:88:be:4b:3b:3b:2f:da:eb:
                    05:e0:1e:26:18:a0:a3:7f:fd:de:22:9b:08:c1:7e:
                    c5:7a:3d:48:c5:6c:85:aa:29:ea:24:7d:51:25:9b:
                    74:88:b5:60:2e:7b:3d:a0:72:cd:c2:bd:17:62:e4:
                    8f:c9:d6:0c:c0:75:fc:c0:88:ca:df:14:1b:0a:af:
                    7d:b6:ff:e5:f0:ce:75:07:45:5c:8c:8a:e8:33:ed:
                    00:df:b0:68:93:50:5e:36:e2:c1:55:54:cc:e8:0b:
                    a0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D9:43:FB:77:A6:FA:46:B4:3C:19:8B:95:0B:C4:6C:74:E0:51:42
            X509v3 Authority Key Identifier:
                keyid:C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:6d:6e:4c:9c:ef:cc:3b:e3:e0:1b:7e:be:58:25:f8:81:96:
         11:c4:26:08:6b:77:b4:d1:6d:91:5c:e3:52:95:dd:33:9a:6f:
         5a:19:91:21:4f:0c:7e:84:34:5a:ec:f1:c4:67:02:61:17:89:
         fc:6f:7e:7c:a2:f7:49:0c:45:4f:06:7e:2b:b3:c3:78:91:c7:
         00:af:f9:ee:09:2a:50:53:08:fe:c8:6a:8a:30:dc:31:df:0c:
         72:7f:02:21:6e:ad:17:ca:0e:45:85:80:56:5e:2b:17:a4:29:
         43:bd:26:69:4a:45:62:5a:e4:a3:b6:e1:1e:7a:4f:19:f1:00:
         85:a3:ec:9d:1a:58:8c:79:3c:3d:96:0b:0d:d0:db:9d:07:73:
         ff:94:2f:24:65:0f:1f:d4:02:21:f3:b3:2e:48:43:7a:69:09:
         03:0b:db:db:fd:cc:01:ae:f8:5f:4d:ff:b4:cf:a9:7e:32:16:
         fc:c9:cf:35:5f:59:67:4b:a0:a5:69:9f:aa:79:67:08:8f:c2:
         f1:c6:74:e3:c2:56:e2:89:34:9f:8b:95:02:2c:e2:45:e9:b0:
         64:30:00:90:55:3b:68:cf:9f:68:29:56:e4:63:6d:0e:83:a9:
         eb:57:82:7f:0e:b3:71:5b:30:69:e8:99:6d:95:4a:bc:ba:c5:
         be:df:e1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 02:45:31 2025 by rpki-client