This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
File:                     W3qQXiWk1czLLuvk4tXDkggZdY4.mft (raw, json)
Hash identifier:          /opcj98k0ss57Sfeksvnsf3soF+m4qbfL+6M+GHjBWc=
Subject key identifier:   66:45:9E:DF:39:B5:2C:1D:02:76:11:47:0D:52:7D:70:CC:67:C7:AB
Authority key identifier: 5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
Certificate issuer:       /CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Certificate serial:       019AF31CB04A641C558924BB71D63373E915
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
Manifest number:          1661
Signing time:             Sat 06 Dec 2025 10:02:14 +0000
Manifest this update:     Sat 06 Dec 2025 10:02:14 +0000
Manifest next update:     Sun 07 Dec 2025 10:02:14 +0000
Files and hashes:         1: 4wGntNc85Yvx0ypR88J1OukuDr4.roa (hash: pBVnEWBMMIGiHwfDW8kLnJrA2UUG/riqaCBWB/OBtY4=)
                          2: W3qQXiWk1czLLuvk4tXDkggZdY4.crl (hash: 5cdQq5yM0bi0yjIlS21i6/AhALSCiX9LaLDpmNiJ+tM=)
                          3: e7uWgt7T0lZJq9oaz7pgmz5YCU0.roa (hash: vlPlcyroUG1L25J38Irl5ZjN6BImmzz1Gl5tGlK8/3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 10:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1c:b0:4a:64:1c:55:89:24:bb:71:d6:33:73:e9:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
        Validity
            Not Before: Dec  6 10:02:14 2025 GMT
            Not After : Dec  7 10:02:14 2025 GMT
        Subject: CN=66459edf39b52c1d027611470d527d70cc67c7ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:24:69:e1:93:47:9c:c2:f6:a8:2d:ef:50:a4:
                    1d:ac:c9:66:dd:93:de:44:9f:43:40:68:f0:fe:a1:
                    b3:e8:76:0b:3f:fb:0e:e9:95:4a:12:1f:31:47:df:
                    f9:cb:4e:5c:84:87:e7:f3:32:b4:e6:48:aa:7c:e5:
                    87:6a:c3:fb:e8:e9:d1:8a:22:ad:5b:f2:da:b5:91:
                    46:6e:9f:92:dc:d1:bc:88:36:44:69:67:04:e8:c7:
                    46:21:bf:81:76:6a:39:e1:5c:b2:b3:2d:aa:2c:ad:
                    9a:01:df:de:99:e1:c9:a1:d0:5b:09:d3:78:f8:93:
                    5a:9c:11:01:70:df:4b:93:8c:d4:79:09:51:39:a6:
                    b9:bd:90:fe:56:a4:15:ff:73:ac:fa:2c:71:2e:dd:
                    6f:25:7a:ac:a1:4a:1d:c4:10:69:5a:e1:02:f9:a5:
                    47:bd:2c:66:c4:57:03:c7:68:72:b7:18:a5:95:90:
                    62:e6:88:2f:30:42:7a:f5:cc:a2:1c:e8:73:37:1e:
                    5b:f8:25:37:5b:3e:76:20:1b:e6:f3:90:94:26:9e:
                    c5:28:9b:5b:4f:a3:05:03:8f:b9:68:08:74:57:c9:
                    6e:ce:69:05:d9:3a:0c:02:d2:3b:29:aa:36:24:5a:
                    6f:da:8b:12:12:0b:05:71:e1:5c:eb:af:7f:60:b5:
                    d1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:45:9E:DF:39:B5:2C:1D:02:76:11:47:0D:52:7D:70:CC:67:C7:AB
            X509v3 Authority Key Identifier:
                keyid:5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:95:ae:a5:43:0c:14:60:8d:42:88:68:1a:fe:2f:5c:01:77:
         76:4e:3b:7c:f9:96:73:3e:fa:02:c6:3f:d8:ec:40:cc:bf:02:
         b3:6c:be:25:38:89:f4:3a:b0:12:b4:5f:e4:f2:4e:7b:02:9d:
         87:53:e7:24:17:1a:e3:c2:aa:bb:ce:97:b6:47:6f:2d:f9:93:
         a8:54:b6:a9:dc:8a:c5:0e:0a:1f:f4:13:d1:84:a6:bf:99:ee:
         3a:4a:aa:dc:ae:a3:96:00:64:34:7c:5c:07:c6:64:89:30:84:
         56:20:fb:3a:21:f8:ac:29:bf:7b:cb:46:3c:02:39:bb:24:8f:
         cd:3c:a2:79:82:17:50:aa:6e:a9:b5:68:c2:5d:b7:3a:6c:8e:
         30:3e:da:35:61:14:9e:80:bf:97:27:cd:2f:05:39:27:7d:3c:
         c6:43:cf:2a:bf:3d:dc:eb:9e:d0:2e:6b:2c:ee:67:30:ab:1c:
         ae:88:5b:78:c2:bd:a0:29:0d:b4:c0:fa:41:d7:3c:72:5d:7e:
         4f:6e:28:d1:0d:89:05:96:bb:86:aa:16:a2:b7:72:71:13:cc:
         8b:2a:b1:6f:10:30:a2:58:9b:ad:cc:ef:af:5f:1d:0a:41:08:
         8a:11:8f:cc:d2:d0:80:86:72:d2:9d:99:ff:c1:bb:83:29:f4:
         b9:fe:dc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:25:51 2025 by rpki-client