This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          Ex43QffTKBp2nhI4WxU1zcC+zQAcpnMhmoOAL2biIRY=
Subject key identifier:   4D:77:33:4F:1F:46:39:BA:E5:11:DE:82:C4:61:34:FC:04:37:3A:88
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       019ACB326D113876B5899A1C4E026249CBD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          0F7E
Signing time:             Fri 28 Nov 2025 16:01:10 +0000
Manifest this update:     Fri 28 Nov 2025 16:01:10 +0000
Manifest next update:     Sat 29 Nov 2025 16:01:10 +0000
Files and hashes:         1: CJ2ClG_JdfjMlY4Z6z_RGPwGBQA.roa (hash: hDhd3vstthEFV1qbikUvxMAn4J2gEu+fzCJOKi1wsv4=)
                          2: Q2-iT_0Zjzv9GH02ya8YtILj8aY.roa (hash: w4dI7huh81K1h/L8FZLaE05OH1acBhhl3bfSdimUZDw=)
                          3: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: 1nCRGT9fn+DRIkELffdg3qgRbrVRC3OhVOc/bQIgPjQ=)
                          4: ijeoYWWuQU7RZMBbxRTbMcXGHJ0.roa (hash: EhlVkFVVdh4wazceOuNOkG+gmIkWhBrp+b57IZ5gdpU=)
                          5: k1igTi7iZQMlav5Y7S_wTES9NGE.roa (hash: reAmBAdhL4k6jWeenp5pL/cImyoZKtn+193ineXgFP4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 29 Nov 2025 14:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:cb:32:6d:11:38:76:b5:89:9a:1c:4e:02:62:49:cb:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Nov 28 16:01:10 2025 GMT
            Not After : Nov 29 16:01:10 2025 GMT
        Subject: CN=4d77334f1f4639bae511de82c46134fc04373a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:15:94:f8:17:75:75:b2:cb:a2:a6:5e:53:32:
                    a1:cd:43:11:8f:6d:8a:58:20:29:e6:88:b9:71:dc:
                    36:92:c6:a1:f8:14:d2:68:cd:55:41:db:ca:09:79:
                    b6:13:89:b0:ec:46:0d:7f:fc:c7:ed:f3:ce:a5:59:
                    fd:75:2c:c9:23:36:36:b1:6a:39:d4:20:60:69:2d:
                    22:2a:99:32:9b:59:7c:8a:e5:7b:2d:4f:ed:fb:a3:
                    15:61:2a:df:d6:9b:cd:13:9d:86:ba:50:fc:ab:63:
                    6d:87:a3:2a:26:8d:78:1a:20:6e:a0:ca:b0:93:99:
                    bc:a9:06:75:77:24:4e:15:74:c7:da:59:b4:56:05:
                    cb:79:2d:2c:7c:0a:47:8c:1c:85:96:63:3e:17:5f:
                    6b:97:fb:08:5a:db:2c:2c:4b:10:5b:fa:1a:fb:9b:
                    0f:2e:27:66:d4:0f:a5:d9:e4:44:d4:67:86:e1:61:
                    62:a3:47:86:f1:97:ea:e8:48:e5:f6:16:1d:c6:f1:
                    10:e1:bf:95:52:a0:bf:3a:ae:46:ba:b8:6a:f0:bf:
                    3a:59:c4:70:93:0f:f0:25:f4:8a:22:b3:18:77:6e:
                    09:d8:33:9b:ce:30:7d:eb:77:6f:37:20:fa:c3:e1:
                    fc:b6:de:f5:c1:2b:7a:b5:d5:bd:1d:02:54:32:01:
                    f2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:77:33:4F:1F:46:39:BA:E5:11:DE:82:C4:61:34:FC:04:37:3A:88
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:e2:f8:12:87:91:da:60:f7:86:86:57:fc:e1:84:2d:87:50:
         73:a3:3d:6f:eb:a3:f0:d7:29:b3:af:37:3c:a2:50:38:d3:bc:
         ac:b5:1c:ca:7d:fb:ff:ca:96:01:16:fc:4f:fb:9a:04:f3:ec:
         bb:e2:6d:c2:59:9f:70:5d:af:9f:d4:e4:0b:85:65:79:b9:60:
         4b:a3:ae:6b:ab:f2:bb:ae:e9:34:87:c9:c6:fb:f2:4e:7e:97:
         9e:4f:a2:61:fe:21:a5:38:2b:e6:3d:16:2e:9a:2b:fd:23:42:
         a2:e7:30:21:f3:4e:31:d5:55:0c:6c:9b:1c:53:fb:70:ae:f0:
         2c:f6:be:0f:ed:b7:e7:09:0b:6a:e4:f8:6b:16:35:22:87:00:
         99:69:eb:cb:2d:7e:b5:16:0a:b2:91:f3:75:74:96:a6:08:8d:
         08:61:0e:5d:ae:96:a5:3c:5e:a3:a4:b9:df:a0:2c:2f:cd:8d:
         a5:bf:42:66:b7:10:01:3a:fc:fe:ef:ab:0a:79:fc:73:ce:5e:
         5e:47:6b:56:4c:ac:12:64:c1:fa:31:f7:6c:f2:08:43:bf:50:
         81:c0:b1:a0:65:5d:2d:5a:ec:f3:a4:95:39:53:32:d8:e4:56:
         cb:8a:98:39:04:c1:72:62:7d:ca:66:e8:0c:04:37:6b:bd:2b:
         60:42:55:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 19:15:02 2025 by rpki-client