This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
File:                     w6iCsQ8bqepLofp3BttkdH5ipBM.mft (raw, json)
Hash identifier:          tba3wLAe+j5I9N2HYnfHnJGiyGXuoMEjqDSnRC90QbM=
Subject key identifier:   7E:31:64:C7:C8:11:99:85:07:08:8A:E2:8C:FD:84:9C:7E:AA:23:11
Authority key identifier: C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13
Certificate issuer:       /CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413
Certificate serial:       019AEF3EAEB33AFAB49DBB72C03FA5F24840
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
Manifest number:          175F
Signing time:             Fri 05 Dec 2025 16:00:53 +0000
Manifest this update:     Fri 05 Dec 2025 16:00:53 +0000
Manifest next update:     Sat 06 Dec 2025 16:00:53 +0000
Files and hashes:         1: a_tI6HP1FzzUH0r0poa89IN3meo.roa (hash: W0Z3kY29z8HP1pU9kcp4FsO8DLdrIX+XsxzLiYSWp8o=)
                          2: n66sSu3oH6YqRjQYMkqXYnUVvGI.roa (hash: oBf8U9TtdYD0BgLgRABjFu+My106UWYSpVHQ13ZhmvY=)
                          3: w6iCsQ8bqepLofp3BttkdH5ipBM.crl (hash: awhPn1yI8mxbFIsgx1cfIAjI9o++aX2r7YFlC/MZ9Ug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 16:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ef:3e:ae:b3:3a:fa:b4:9d:bb:72:c0:3f:a5:f2:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413
        Validity
            Not Before: Dec  5 16:00:53 2025 GMT
            Not After : Dec  6 16:00:53 2025 GMT
        Subject: CN=7e3164c7c811998507088ae28cfd849c7eaa2311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:88:5a:e0:63:26:59:4d:f3:1c:29:61:a1:a9:
                    05:a1:e8:83:89:95:ce:8c:31:1e:54:2f:2b:16:fb:
                    d9:55:5e:fb:32:6e:02:ee:81:c6:dc:83:bd:d3:6f:
                    03:61:10:8c:b2:6e:15:30:01:da:8d:9c:2e:ad:89:
                    97:cf:9f:d5:01:15:6f:bf:ea:34:f3:ca:b2:73:ea:
                    99:e8:a3:0f:ae:9c:8d:40:8a:32:38:b3:63:d3:ee:
                    7e:cf:2a:99:9a:a8:3b:78:c6:74:b8:7e:cc:3c:d4:
                    2f:6e:63:be:74:d7:b9:b5:da:79:f8:6e:b4:d5:cb:
                    4e:06:d3:91:e4:c2:86:c2:90:a0:5b:d9:5f:2e:37:
                    0f:98:60:e7:be:02:d2:b8:b2:cd:e3:cf:7e:de:4d:
                    6f:d9:52:50:93:15:cd:1b:ef:39:be:50:0c:5d:ee:
                    52:3f:4d:6f:8a:01:5b:9a:63:62:32:3d:7f:b2:73:
                    c1:49:82:80:0f:67:ca:b8:f8:e8:93:d8:e0:44:ca:
                    3c:67:fd:af:99:4c:b4:5b:2b:01:64:ba:30:61:19:
                    aa:7b:33:5d:b9:68:4d:6a:56:b5:b2:a0:0a:af:c4:
                    60:57:00:d4:26:ef:b7:f7:bc:6c:b3:c2:b0:36:d4:
                    69:53:c2:a1:ae:e5:5f:a7:f2:a4:31:a2:b1:66:94:
                    a8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:31:64:C7:C8:11:99:85:07:08:8A:E2:8C:FD:84:9C:7E:AA:23:11
            X509v3 Authority Key Identifier:
                keyid:C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:13:89:3b:00:8b:23:72:8d:39:73:77:5a:d1:f4:75:80:ff:
         35:3c:1d:c1:43:fc:9a:99:1c:0d:2f:08:a5:2e:82:b3:ff:4f:
         c9:45:51:a7:6c:88:25:bd:59:e4:03:c8:fd:59:cc:14:28:8f:
         34:22:3e:08:8e:f0:84:27:c7:ea:b1:f2:db:c8:f3:47:04:f5:
         71:00:5e:59:bc:7e:5d:99:6a:25:d9:1d:aa:5e:92:d9:62:c0:
         b2:c4:26:39:48:86:3c:76:80:4f:23:31:1e:7f:d7:fa:cd:f1:
         02:93:95:30:cc:ab:08:bd:a7:92:9a:dc:21:90:04:1a:bc:ce:
         c0:f1:e3:36:38:9e:51:35:38:a3:b4:97:b7:ff:9a:5f:43:6d:
         01:86:9d:5d:eb:47:38:d8:a5:4f:81:1f:3b:ab:88:b8:f7:74:
         5a:74:96:ed:4f:00:a2:09:1f:cd:53:1b:79:c8:48:17:a2:86:
         1a:04:b6:9b:b1:5d:fe:27:27:6c:31:ab:aa:7b:38:cb:5e:26:
         6a:16:73:7f:38:8f:b2:0e:ea:ea:9e:d6:e4:37:60:5e:ea:4f:
         c4:47:1a:54:3f:2e:c3:c4:fc:c9:8f:79:ba:c3:53:7b:63:f3:
         ba:22:3f:14:8d:c7:43:b1:09:9e:0e:d9:39:b6:ed:13:6b:d9:
         55:e1:7b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 23:05:01 2025 by rpki-client