This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          nXXAl0P1NpR1qvPMNB+6tdnPD1CWs4tJz/pFKSvCOBE=
Subject key identifier:   A0:4D:FD:A0:EB:22:2E:94:C2:00:9E:10:23:1D:1D:06:05:8B:1A:7F
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       019AC5679C5D15B3D37982329B06F9A375B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          0F7B
Signing time:             Thu 27 Nov 2025 13:01:32 +0000
Manifest this update:     Thu 27 Nov 2025 13:01:32 +0000
Manifest next update:     Fri 28 Nov 2025 13:01:32 +0000
Files and hashes:         1: CJ2ClG_JdfjMlY4Z6z_RGPwGBQA.roa (hash: hDhd3vstthEFV1qbikUvxMAn4J2gEu+fzCJOKi1wsv4=)
                          2: Q2-iT_0Zjzv9GH02ya8YtILj8aY.roa (hash: w4dI7huh81K1h/L8FZLaE05OH1acBhhl3bfSdimUZDw=)
                          3: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: Qcj0avRAq28HAMToFmmQuqgphJ4EZGcrR2zK9fJAvB8=)
                          4: ijeoYWWuQU7RZMBbxRTbMcXGHJ0.roa (hash: EhlVkFVVdh4wazceOuNOkG+gmIkWhBrp+b57IZ5gdpU=)
                          5: k1igTi7iZQMlav5Y7S_wTES9NGE.roa (hash: reAmBAdhL4k6jWeenp5pL/cImyoZKtn+193ineXgFP4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 28 Nov 2025 11:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:c5:67:9c:5d:15:b3:d3:79:82:32:9b:06:f9:a3:75:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Nov 27 13:01:32 2025 GMT
            Not After : Nov 28 13:01:32 2025 GMT
        Subject: CN=a04dfda0eb222e94c2009e10231d1d06058b1a7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:36:ce:54:f5:44:82:fd:37:64:45:77:17:95:
                    48:28:1c:f2:de:d9:f0:df:22:77:24:ca:a0:0a:ec:
                    a0:f7:e8:d9:ff:c8:14:df:26:c9:2d:75:36:e6:91:
                    7f:8a:2a:e1:a7:6b:80:84:a8:87:bd:93:94:cc:21:
                    c8:15:0f:e7:14:5f:2a:5c:cd:a8:15:49:a5:25:7b:
                    13:f5:1e:dd:19:c1:62:6f:4e:90:54:40:c8:cd:fa:
                    46:80:f9:16:96:51:d0:63:b4:2f:8a:92:53:10:05:
                    dd:aa:ac:92:89:a9:60:ba:cd:aa:54:46:87:d6:33:
                    e8:5c:79:dc:15:45:e9:ba:2f:c2:32:c1:5e:db:38:
                    96:0c:0d:81:f8:e3:be:8c:ba:26:c1:f2:07:47:69:
                    d0:a4:66:0d:86:c5:88:3d:e5:d5:f6:3b:8b:9a:07:
                    9c:38:4f:44:02:fd:d6:2a:46:a7:89:03:26:38:fa:
                    73:15:db:cc:b2:a9:6e:0d:4a:81:d7:68:c5:1f:37:
                    d2:6e:9b:5c:7b:ef:93:d8:58:ad:ec:31:23:27:ae:
                    99:5b:c2:78:72:ac:a6:73:48:e1:78:97:58:51:e7:
                    7c:c7:fb:d6:ab:72:78:59:0d:c7:eb:cb:8f:89:b9:
                    f2:d3:49:13:2f:b7:32:93:c5:b2:82:f0:8e:ac:0b:
                    02:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:4D:FD:A0:EB:22:2E:94:C2:00:9E:10:23:1D:1D:06:05:8B:1A:7F
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:23:b2:70:14:a8:6a:09:03:b3:7b:1d:d5:c5:cc:46:ae:a3:
         66:e9:55:fe:b8:46:d0:8a:d0:86:c2:4c:92:3b:ee:ab:a8:d4:
         84:62:27:44:2c:b3:3c:73:42:1e:c1:c6:2e:0b:72:77:d1:1b:
         c5:15:c9:5d:ab:ab:a1:2e:94:ec:fb:16:10:97:b0:83:2d:09:
         59:bc:a3:b2:78:41:22:c1:a2:4a:f6:e4:7e:a5:62:f8:01:90:
         cf:72:ef:82:67:89:5a:93:27:ec:ec:1f:de:42:81:a6:f1:a4:
         ce:49:f4:4e:81:1f:f5:8f:25:8d:49:cb:59:6f:7a:b9:fd:a7:
         89:73:f3:ac:1b:6e:6f:5b:bd:46:64:dd:20:e4:f2:5b:74:67:
         83:6a:b4:48:d3:69:25:e8:4e:cc:8c:5c:02:35:87:43:9d:af:
         17:18:f8:ac:ef:58:0d:ef:4c:7b:2f:49:73:26:e0:4a:9f:79:
         3a:40:51:1d:7b:98:a9:38:a3:25:9e:ab:7f:03:66:f2:c2:ed:
         4f:78:1a:d5:e8:44:f6:c5:f9:44:6e:65:c8:64:ce:9c:29:3f:
         97:e2:d8:a7:3d:60:30:5d:3c:94:77:58:1e:d8:b6:75:51:f1:
         c1:db:44:cd:11:6f:1a:11:17:84:67:62:85:b5:3b:8d:6a:4c:
         70:5f:b0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 27 19:25:17 2025 by rpki-client