This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.mft
File:                     W-qBqpshl9kSe0QlJRAP-qNuDVI.mft (raw, json)
Hash identifier:          KaCxKj390SFpbK5w/3co0vs1gqZQenf6WfPC+rdjpG4=
Subject key identifier:   10:BE:85:39:94:6B:D5:54:72:70:8D:2E:72:05:82:71:4C:2A:92:15
Authority key identifier: 5B:EA:81:AA:9B:21:97:D9:12:7B:44:25:25:10:0F:FA:A3:6E:0D:52
Certificate issuer:       /CN=5bea81aa9b2197d9127b442525100ffaa36e0d52
Certificate serial:       019AF23F67994BAAFB63C5E3757E1493E63C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W-qBqpshl9kSe0QlJRAP-qNuDVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.mft
Manifest number:          176B
Signing time:             Sat 06 Dec 2025 06:00:32 +0000
Manifest this update:     Sat 06 Dec 2025 06:00:32 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:32 +0000
Files and hashes:         1: RErNlaOpDzrD6wSfbbH1rz1M530.roa (hash: wgBHw0Ti6lWp1Z64AKciY1+PcChXXuuN8WEU42REeQ4=)
                          2: W-qBqpshl9kSe0QlJRAP-qNuDVI.crl (hash: yTTrBUQReCffaFmUE2NnmS9CG7rzNhYDeH+blARUXLY=)
                          3: iuYZctM9ho40y9O9NGu8oiwydyQ.roa (hash: iVbT4XgjGA1oWctdpXO1acTvsUwxsInkD3aqlUFGvoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W-qBqpshl9kSe0QlJRAP-qNuDVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:67:99:4b:aa:fb:63:c5:e3:75:7e:14:93:e6:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bea81aa9b2197d9127b442525100ffaa36e0d52
        Validity
            Not Before: Dec  6 06:00:32 2025 GMT
            Not After : Dec  7 06:00:32 2025 GMT
        Subject: CN=10be8539946bd55472708d2e720582714c2a9215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b0:6f:47:cd:09:aa:05:0b:5f:96:0a:c3:33:
                    30:d5:19:58:30:8b:d9:db:a9:d1:22:e8:e7:63:c0:
                    96:51:2b:0b:82:f0:15:f7:5a:43:4d:04:6e:c0:2b:
                    c6:74:71:69:61:29:25:c8:e9:b5:b4:10:42:10:c0:
                    d9:de:6e:66:28:79:5c:e1:31:66:bd:d1:38:78:fd:
                    17:ed:24:d3:59:aa:2b:c5:09:85:e1:28:d0:aa:af:
                    5f:09:25:db:17:56:e0:eb:25:34:88:a7:df:ab:42:
                    4c:7e:05:ab:fc:3b:44:29:d4:44:37:06:73:25:12:
                    bf:78:74:77:66:52:8a:63:23:c4:96:f6:8b:a0:62:
                    3b:19:f4:bf:da:9e:85:bb:c0:7c:d7:23:6c:7c:c2:
                    79:09:c6:94:18:8b:df:3e:68:b2:10:47:ed:71:30:
                    d1:60:70:d9:86:bc:f1:f5:b8:46:5c:6c:f1:b4:bf:
                    16:ec:8d:08:4e:e1:5c:8f:83:e6:ce:3c:0b:22:d1:
                    c4:67:c3:20:39:bc:9b:ba:81:fe:1a:e5:03:3f:23:
                    ba:00:38:b7:38:d1:17:4f:a5:33:99:f6:63:c1:5f:
                    92:49:f7:ad:ef:fa:05:54:bb:5f:45:3a:a2:79:e6:
                    f1:cc:2d:5d:87:2e:95:8b:a4:30:3f:c3:b9:8a:c0:
                    e8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:BE:85:39:94:6B:D5:54:72:70:8D:2E:72:05:82:71:4C:2A:92:15
            X509v3 Authority Key Identifier:
                keyid:5B:EA:81:AA:9B:21:97:D9:12:7B:44:25:25:10:0F:FA:A3:6E:0D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-qBqpshl9kSe0QlJRAP-qNuDVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:eb:20:62:4e:96:14:0e:ca:5e:fe:37:fb:94:1c:16:a0:bc:
         62:46:0b:ab:7d:ad:c2:69:ed:80:87:a0:f8:73:fa:62:8b:34:
         1b:45:91:c2:d4:46:f4:95:49:25:e2:6e:87:95:c0:90:bc:33:
         5f:68:d0:e2:c6:ae:40:b0:e3:7a:09:71:61:83:1c:79:a6:05:
         66:52:bb:94:f8:28:58:3d:bf:12:2e:76:36:39:d6:03:97:e2:
         36:4b:72:68:8a:4f:51:dd:5b:7a:7d:0b:ea:a2:30:d4:77:0a:
         68:c2:dd:cc:d7:77:88:98:d1:f7:69:02:dd:84:2f:b4:f4:85:
         c2:fb:24:61:e6:e4:f4:d6:25:80:41:a1:92:27:5f:50:5f:5a:
         5d:55:2c:95:77:9a:8a:5a:2f:95:29:ae:7f:fc:02:be:51:df:
         b2:6a:8c:25:d1:95:8a:2d:30:c1:92:e9:b4:c5:6e:e1:62:0f:
         6d:9d:fe:16:23:92:16:ad:0e:23:fd:77:2d:ea:27:0f:0a:50:
         80:a2:8c:c7:f8:a5:29:c2:d1:1c:91:4c:9d:96:a2:da:d1:fe:
         67:6b:dc:55:77:99:51:c6:d8:a0:54:4d:27:6c:61:00:2e:69:
         79:0b:9d:de:35:f1:ea:d0:f8:cd:3b:d9:48:26:59:db:c0:4f:
         dc:81:56:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:32:30 2025 by rpki-client