This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
File:                     0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft (raw, json)
Hash identifier:          K1+7/aoQEBrMU4++F0ic6afCgBjcw+h56cvzcmrIQcg=
Subject key identifier:   7F:AF:DA:59:1A:43:7B:9C:5C:05:8D:D1:0E:9E:A7:2D:96:93:52:17
Authority key identifier: D1:6B:DF:54:38:1F:63:07:4A:DF:9A:1B:D9:77:78:77:A7:20:04:6C
Certificate issuer:       /CN=d16bdf54381f63074adf9a1bd9777877a720046c
Certificate serial:       019B3569C014ACAB2799F73F0117F1BAF958
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
Manifest number:          0479
Signing time:             Fri 19 Dec 2025 07:01:21 +0000
Manifest this update:     Fri 19 Dec 2025 07:01:21 +0000
Manifest next update:     Sat 20 Dec 2025 07:01:21 +0000
Files and hashes:         1: 0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl (hash: zgG/NfYdecVbOM7QokGzS9VXiIj+TjyF9iHzN+F+Eeo=)
                          2: fMqs9FskGDIW9ZbaQwk0qUEC3ks.roa (hash: CtgaQ4J8AgrMFT4kVvGV6ADv6GPEnX8MMv9l/y32iWU=)
                          3: idiMTHuxguw5KJd3P5FoGJbinyo.roa (hash: n+9BnqU/yI6WzHcfhLc6mXo8IOBS4JMkN/uhkjIXEGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 07:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:35:69:c0:14:ac:ab:27:99:f7:3f:01:17:f1:ba:f9:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d16bdf54381f63074adf9a1bd9777877a720046c
        Validity
            Not Before: Dec 19 07:01:21 2025 GMT
            Not After : Dec 20 07:01:21 2025 GMT
        Subject: CN=7fafda591a437b9c5c058dd10e9ea72d96935217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bf:ce:d1:dd:ee:c5:87:f4:ac:e7:c9:c5:e1:
                    52:87:76:e3:4c:af:dd:b8:d1:c4:56:41:32:34:fc:
                    00:af:83:42:5d:11:94:00:62:54:bc:b3:4f:73:11:
                    30:20:81:f0:ba:65:68:5f:74:58:e9:db:fe:8d:1a:
                    46:51:58:54:0f:0c:d4:4a:b3:66:73:bd:2f:e7:8f:
                    06:cf:eb:d3:f4:38:9e:5a:4b:bd:de:9c:65:61:c9:
                    c1:12:79:d6:55:5c:ab:1e:e0:4c:06:a2:0d:3d:9f:
                    75:31:31:89:f3:c9:82:44:d5:65:cf:51:d9:9f:4f:
                    00:ff:6f:c3:e4:56:46:bb:12:a0:73:b7:40:ee:f7:
                    25:2d:7b:f5:67:e5:b9:d1:de:87:90:62:8b:69:93:
                    53:61:43:44:ea:8c:fa:e1:18:20:e1:92:be:48:d6:
                    bc:c9:26:3f:ac:b8:15:d5:92:cc:f9:27:0c:46:b4:
                    01:92:c3:be:53:fa:be:32:79:82:b2:e7:f1:1e:03:
                    1d:bd:7d:53:16:ba:9b:a1:46:60:fc:d2:63:dc:bc:
                    7b:45:b8:c5:b3:2c:c2:40:7f:42:f5:3c:e8:c3:e6:
                    6f:05:a4:f6:79:2b:37:dd:a3:63:60:81:4a:c9:5a:
                    d2:6d:48:11:fb:ce:9a:33:ec:d4:c2:a0:e3:19:9c:
                    2e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:AF:DA:59:1A:43:7B:9C:5C:05:8D:D1:0E:9E:A7:2D:96:93:52:17
            X509v3 Authority Key Identifier:
                keyid:D1:6B:DF:54:38:1F:63:07:4A:DF:9A:1B:D9:77:78:77:A7:20:04:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:46:f2:f9:ce:e1:28:e3:e9:2c:f6:7b:48:0e:cb:5b:8a:56:
         e2:97:e0:83:99:3e:09:da:3a:a2:83:d4:08:c9:46:c8:ca:eb:
         55:ed:e8:31:cd:30:de:6b:95:38:06:c0:97:31:b0:68:74:b0:
         71:8d:b8:7f:fb:03:93:0f:23:21:4e:06:e2:c9:2c:ff:34:96:
         de:ea:b6:03:47:14:29:6d:ef:50:82:0f:3c:f7:ee:46:4c:d8:
         be:59:37:bf:67:f0:e0:4d:35:2a:55:3b:5d:80:03:05:bc:fc:
         cb:b9:c8:5c:d5:55:b0:69:10:a1:86:92:fc:6f:db:1d:d8:73:
         d0:d2:27:6a:da:89:c6:a4:18:c6:c6:c3:79:6e:98:94:d7:75:
         f8:5c:3d:66:a2:f3:64:8b:aa:db:73:8b:35:f0:40:e4:55:21:
         d6:f1:0a:50:9f:8b:27:79:22:9a:b6:c9:09:bc:7b:c9:8d:84:
         5c:8c:21:e5:95:e4:a8:93:f4:94:6e:65:7a:81:62:5d:ac:2b:
         bd:57:cc:27:60:92:75:68:65:17:07:91:80:97:74:09:25:6a:
         53:52:7b:15:d5:31:df:a9:78:4b:69:2e:a1:25:ba:1f:47:bb:
         9a:f2:6d:b6:5c:57:a5:88:94:d7:61:bc:84:9f:a2:cf:7e:0d:
         39:b1:72:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:24:16 2025 by rpki-client