This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.mft
File:                     wly3EywZ99UfAC7UrYEa7PWyD1c.mft (raw, json)
Hash identifier:          pd1xQVVjTf6vsT8dFV/5YOfyS/pgDpDc+Q/nrS0oX/k=
Subject key identifier:   84:F6:D5:F9:E4:F4:3F:19:B4:AD:24:B6:87:82:5B:45:59:75:FA:A1
Authority key identifier: C2:5C:B7:13:2C:19:F7:D5:1F:00:2E:D4:AD:81:1A:EC:F5:B2:0F:57
Certificate issuer:       /CN=c25cb7132c19f7d51f002ed4ad811aecf5b20f57
Certificate serial:       019B27E4946688189E0D64D5D149DBAEE51D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.mft
Manifest number:          097A
Signing time:             Tue 16 Dec 2025 16:00:50 +0000
Manifest this update:     Tue 16 Dec 2025 16:00:50 +0000
Manifest next update:     Wed 17 Dec 2025 16:00:50 +0000
Files and hashes:         1: 0yK9CSc1iwH9Ha7iv7t9MQLBMSc.roa (hash: rrGUPdLm/yz0jAaBzRKBfGiiUHE1bJZVAlwYqWnvc2g=)
                          2: Mr7THJO68NohwknMfTQKnqHV-vc.roa (hash: knt9VF7cf9YizkNpPo4OGyLEE0z8MhXR+E+kt4mIdVA=)
                          3: TB6H5V1Ni-tKp6BX2r-SHLcytb4.roa (hash: 0fhq54aZgsVM/k0+CX/b9ZvdCc1x5cY4r3GXAZAMq6M=)
                          4: qFBBKSstVuYlvg1tCU9IRdG8_KQ.roa (hash: woIS65FxXCdUB0qPb1Sk66filHI9SQzJMbXAm2PrCSk=)
                          5: wly3EywZ99UfAC7UrYEa7PWyD1c.crl (hash: 0CJzPbHkwn7nyQvfYOvM6s2XjczPRTZGaA8L2qiBMmM=)
                          6: zSfZVih6hBceUixRgoQRbTOqrPs.roa (hash: azI0MEflNFx/avYXf2xzg+zXEruqyuhKpmbLg+R7a0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 14:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:27:e4:94:66:88:18:9e:0d:64:d5:d1:49:db:ae:e5:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c25cb7132c19f7d51f002ed4ad811aecf5b20f57
        Validity
            Not Before: Dec 16 16:00:50 2025 GMT
            Not After : Dec 17 16:00:50 2025 GMT
        Subject: CN=84f6d5f9e4f43f19b4ad24b687825b455975faa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ec:2f:24:69:02:46:85:63:1b:3b:0d:8c:c9:
                    f4:35:9f:3c:0c:ad:6f:c5:c4:48:e7:b4:a7:00:76:
                    4c:28:01:fe:68:3e:52:08:58:66:ad:61:9a:75:ca:
                    57:2e:b9:f0:e3:43:99:89:76:80:7a:b0:ef:c3:95:
                    53:ff:2d:6b:f4:fc:e0:08:b0:09:37:ec:f9:50:2c:
                    f8:4a:58:2d:19:a7:8f:19:98:08:2a:84:11:9f:42:
                    37:81:c9:c3:bd:30:94:ae:e6:b0:a5:c8:ff:19:5e:
                    46:5d:5e:f6:83:2c:ac:b5:8f:1b:e1:30:df:70:1c:
                    d2:8d:5e:e3:cc:6a:cb:5c:b3:42:b5:99:b5:47:81:
                    7b:61:eb:59:f8:86:cd:6e:97:6e:52:05:80:bd:9d:
                    1c:2f:7a:fb:5a:40:3b:73:03:40:72:3a:02:00:a9:
                    a9:c6:63:f0:4a:26:ab:07:0b:2a:6a:cf:96:a2:ae:
                    b4:3a:f5:dd:ab:99:fb:af:20:79:c3:5d:ef:c9:03:
                    61:cc:38:bb:21:df:1e:21:ef:e3:8b:70:05:41:94:
                    1a:19:0c:13:f0:e5:de:89:9e:26:15:59:ac:2a:7f:
                    47:23:d9:2d:9a:b2:47:e8:51:f7:cd:c4:d5:7c:9c:
                    80:49:fd:6f:d1:3a:dc:43:20:34:13:79:26:2f:91:
                    b5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F6:D5:F9:E4:F4:3F:19:B4:AD:24:B6:87:82:5B:45:59:75:FA:A1
            X509v3 Authority Key Identifier:
                keyid:C2:5C:B7:13:2C:19:F7:D5:1F:00:2E:D4:AD:81:1A:EC:F5:B2:0F:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:8f:f8:42:ed:76:62:0d:8f:6c:8f:32:1c:6f:59:74:60:b9:
         ba:10:e9:4b:ae:f4:af:b7:24:58:bb:c6:06:8d:7e:3b:c5:0a:
         30:5d:f2:cb:dc:70:06:0e:db:21:38:59:5d:68:94:30:c0:d2:
         1a:0d:bc:dc:14:a4:48:28:0b:2e:79:46:7f:21:5a:c2:6e:97:
         93:24:05:55:0c:87:97:b3:57:b7:e4:c8:fb:d0:98:8c:ac:be:
         77:81:a8:ac:ed:c2:aa:8e:14:5a:cb:9f:e8:b8:8f:85:19:d8:
         d7:cb:70:36:c6:78:51:bf:a8:a1:9f:fb:a8:37:88:7f:c9:9d:
         04:fc:e7:73:a4:e1:4f:09:3d:f6:c6:5f:12:4e:d2:33:95:a2:
         06:c6:79:17:85:63:66:b5:15:f1:17:c7:b3:26:be:bc:19:21:
         45:14:f6:e5:84:d9:4c:c9:4c:e3:f1:ba:f7:e8:db:08:45:69:
         3f:a6:81:de:75:5a:cd:cd:d0:39:6b:58:6b:b6:b1:76:d6:05:
         17:20:67:27:d8:53:d8:61:0f:91:e3:6e:3e:f7:15:88:66:e4:
         64:ca:6b:b5:4e:c4:bb:cc:ba:80:81:fd:69:c5:78:1d:76:67:
         72:b1:1e:81:37:e0:9e:c1:35:98:2f:83:d5:e9:2f:46:24:bd:
         b4:03:46:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 21:34:22 2025 by rpki-client