This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
File:                     wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft (raw, json)
Hash identifier:          c4Ff7/YZaa3qGaYQPldS+l+2ICoqLcAEpkmKecIdsWM=
Subject key identifier:   10:E0:7B:57:47:2A:07:84:28:49:2C:68:05:BB:80:C6:AB:CD:AE:D8
Authority key identifier: C1:3B:90:FA:AC:5E:FC:F9:31:95:61:9D:A1:6F:3A:47:EF:FE:99:FE
Certificate issuer:       /CN=c13b90faac5efcf93195619da16f3a47effe99fe
Certificate serial:       019B3343EA2CA2CC37FAC37FF0422E6461BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
Manifest number:          1782
Signing time:             Thu 18 Dec 2025 21:00:47 +0000
Manifest this update:     Thu 18 Dec 2025 21:00:47 +0000
Manifest next update:     Fri 19 Dec 2025 21:00:47 +0000
Files and hashes:         1: iyuy2kmWqZNHXuAfcuh0lwdEN5U.roa (hash: 80r40j4f0TX0nXOpgOJuceIx9IUXe6MHRj3CO+H5lVg=)
                          2: wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl (hash: /POGQpetcxuAIB81iN1Xp54hNaDrWWXZuc0aKoCW4Xw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 20:16:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:33:43:ea:2c:a2:cc:37:fa:c3:7f:f0:42:2e:64:61:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c13b90faac5efcf93195619da16f3a47effe99fe
        Validity
            Not Before: Dec 18 21:00:47 2025 GMT
            Not After : Dec 19 21:00:47 2025 GMT
        Subject: CN=10e07b57472a078428492c6805bb80c6abcdaed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:51:fc:de:34:eb:3e:48:40:aa:d7:50:fd:fb:
                    1a:f0:03:b6:75:5a:b9:f7:40:c6:09:35:4a:97:93:
                    85:9e:94:d2:a6:54:15:2e:cc:f3:f8:b5:d9:18:4d:
                    40:11:19:26:ac:d6:3f:7a:30:4a:6b:cd:9f:ca:7b:
                    d8:18:36:cb:b9:fc:18:cf:0c:1d:99:39:49:fb:a5:
                    7e:78:56:01:47:89:7e:53:66:cb:99:96:8b:0b:1d:
                    8b:26:b4:aa:33:59:27:2b:12:d1:9d:2d:44:7a:89:
                    10:08:30:60:33:f4:66:15:b8:02:20:ee:cd:86:ff:
                    fc:cd:00:60:72:e5:5d:a2:c2:ae:63:b5:2d:75:34:
                    53:2a:ce:a9:ec:9f:f3:7a:84:79:09:b3:9f:1e:99:
                    b5:7e:8d:be:0c:6b:8f:5b:cc:24:3f:b0:04:b2:74:
                    e4:e6:80:0d:9e:2c:3b:d5:32:d9:7b:fa:7e:a6:8d:
                    cf:f7:16:2a:b3:e2:05:a3:a1:b7:72:89:4e:f1:ea:
                    cc:89:9a:1f:68:d5:7e:9c:88:01:05:8f:20:04:32:
                    f2:38:5e:58:b9:10:cd:1e:96:61:e8:63:5e:62:e9:
                    7f:31:ed:e6:69:9e:79:d9:e2:cc:26:7a:3e:6c:36:
                    b3:b4:2e:ab:ee:68:d2:72:23:43:60:67:6c:2d:52:
                    7e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E0:7B:57:47:2A:07:84:28:49:2C:68:05:BB:80:C6:AB:CD:AE:D8
            X509v3 Authority Key Identifier:
                keyid:C1:3B:90:FA:AC:5E:FC:F9:31:95:61:9D:A1:6F:3A:47:EF:FE:99:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:eb:d6:9f:ae:da:68:c1:f9:9f:f5:48:9c:83:6d:ba:79:27:
         01:e0:2f:24:96:e9:6a:04:53:fc:5e:f2:e2:61:af:8f:e5:05:
         d9:63:95:09:15:a1:4f:50:2b:41:4d:38:1e:c3:16:08:b3:82:
         ae:fd:e9:64:54:3d:23:d6:59:4c:2a:23:f8:0c:f8:67:ab:96:
         0e:25:ad:dd:7f:5d:ee:61:6c:55:06:8d:7b:12:ff:ad:50:11:
         fd:d7:58:59:af:8b:13:aa:03:e4:1d:7b:e0:e5:ec:76:fe:80:
         92:4e:6b:5b:cb:e0:6c:5a:c2:14:7b:5a:cf:fb:b7:db:00:fd:
         d2:04:e0:ad:a2:59:5f:6a:f6:5d:7f:0f:25:af:b5:40:6e:2a:
         e5:65:83:b6:24:d3:82:62:af:cd:89:b2:3f:ae:1d:bf:cf:8c:
         48:cf:a7:3d:17:bf:98:f3:b7:a1:58:0d:e1:11:bf:c7:87:f6:
         6b:d3:f1:20:97:48:c4:9c:fe:9f:ed:8b:a0:26:ec:cb:7f:6b:
         71:8a:d0:fa:b3:42:25:b2:d8:5c:40:fc:49:00:2f:09:f2:6a:
         7b:35:00:a0:03:21:db:69:82:56:94:38:8c:62:75:00:e9:c4:
         47:e8:1c:d3:97:7a:47:35:c6:8b:8c:cf:f5:00:66:dc:19:b4:
         59:fb:72:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 01:25:55 2025 by rpki-client