This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft
File:                     pywg5_4xCpg7miNx-ULa9EvmELM.mft (raw, json)
Hash identifier:          MrGLCh6qfmESfW1g8sSYqP9LlUgEa0ZAJL3vB405IZQ=
Subject key identifier:   A6:12:E4:2E:0E:E2:02:E0:13:CA:54:AA:E8:7B:B7:42:CA:3E:82:E6
Authority key identifier: A7:2C:20:E7:FE:31:0A:98:3B:9A:23:71:F9:42:DA:F4:4B:E6:10:B3
Certificate issuer:       /CN=a72c20e7fe310a983b9a2371f942daf44be610b3
Certificate serial:       019AF61C81A0F536C070464830076E54D4CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pywg5_4xCpg7miNx-ULa9EvmELM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft
Manifest number:          0495
Signing time:             Sun 07 Dec 2025 00:00:54 +0000
Manifest this update:     Sun 07 Dec 2025 00:00:54 +0000
Manifest next update:     Mon 08 Dec 2025 00:00:54 +0000
Files and hashes:         1: 7Mmb5ZRsB9m8oInge4JVYHrP4Ew.roa (hash: NBi3hLwQwbGQATz90wDw9LkVn07LZS1piVwE8dvvsug=)
                          2: pywg5_4xCpg7miNx-ULa9EvmELM.crl (hash: N5HBL0qov8uCAK+cszw51O1NYo09N6Xd2m1jLB1AujY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pywg5_4xCpg7miNx-ULa9EvmELM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f6:1c:81:a0:f5:36:c0:70:46:48:30:07:6e:54:d4:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a72c20e7fe310a983b9a2371f942daf44be610b3
        Validity
            Not Before: Dec  7 00:00:54 2025 GMT
            Not After : Dec  8 00:00:54 2025 GMT
        Subject: CN=a612e42e0ee202e013ca54aae87bb742ca3e82e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3d:ba:3b:16:8a:b6:f1:10:8b:81:53:af:76:
                    e9:ec:c5:f2:91:89:10:de:b5:c2:a7:7d:33:79:a0:
                    41:48:00:1d:b6:3a:f8:48:12:60:15:56:9a:b5:64:
                    79:05:f6:88:ea:12:b3:e3:a3:a8:60:75:be:38:9d:
                    e9:a7:84:19:e7:ec:7b:98:19:f3:7a:77:d2:88:98:
                    d7:cb:c3:43:f7:5e:39:59:e2:6d:70:a4:22:1c:3d:
                    6e:5d:d3:4a:16:5b:88:82:ad:e3:ab:0d:6a:58:11:
                    66:e9:00:28:d7:4d:59:fa:a8:4d:0a:af:c7:8b:2b:
                    ea:ee:cf:05:0a:2c:98:24:83:3d:01:17:b4:9c:93:
                    50:ac:ed:fe:59:46:d0:56:a9:ac:0b:58:89:aa:3b:
                    5e:f4:a2:0e:e5:03:5c:b2:e5:08:bb:50:31:cd:e2:
                    68:98:5a:12:84:a5:ca:63:90:d2:47:33:d9:08:6e:
                    fb:b5:26:ef:f4:ce:ab:a4:9a:3d:56:b3:04:23:0a:
                    1c:72:06:7c:ad:37:5a:56:75:ca:ec:9b:13:32:0b:
                    75:d4:ee:4d:5f:b3:f7:26:6a:54:0e:f4:ee:ed:45:
                    3e:84:99:c3:2f:d4:91:a1:87:2d:f3:a9:24:58:f2:
                    e9:e7:16:09:bf:21:5d:82:2a:b2:da:84:4e:5b:89:
                    97:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:12:E4:2E:0E:E2:02:E0:13:CA:54:AA:E8:7B:B7:42:CA:3E:82:E6
            X509v3 Authority Key Identifier:
                keyid:A7:2C:20:E7:FE:31:0A:98:3B:9A:23:71:F9:42:DA:F4:4B:E6:10:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pywg5_4xCpg7miNx-ULa9EvmELM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:8b:ee:4d:0c:66:b2:b3:f0:f9:ac:63:14:dc:00:2a:5f:06:
         1d:ca:8e:e3:fa:1e:83:d3:6b:87:5d:67:97:87:ca:83:8a:ad:
         b7:2c:07:ce:f2:24:82:a6:a8:b6:d2:21:43:ad:3a:eb:14:85:
         e1:a6:0d:11:0e:bd:65:a9:8c:9c:f1:97:79:a7:82:50:cf:7e:
         d0:96:6d:d7:cf:5a:c8:56:32:14:06:b3:e3:a8:b4:e2:a1:37:
         5b:22:c0:2d:f4:9a:a7:eb:c8:64:00:2b:00:73:1b:2f:c5:57:
         20:11:9a:ad:d4:7b:9d:f7:29:f9:37:be:93:2f:4e:4a:0c:7e:
         7a:73:91:5c:59:2d:82:83:c1:29:ad:ca:a8:8c:c1:c0:93:ef:
         f0:48:30:47:7d:9a:bd:da:bb:e7:1c:f5:92:04:77:26:46:9f:
         01:14:5f:bd:65:96:1a:ee:ee:09:25:50:40:7d:a9:5e:77:8d:
         74:d8:06:e5:68:b5:61:1a:b6:c4:3e:e2:07:1b:04:c0:62:fd:
         05:d6:8e:6f:9c:1e:e0:59:69:96:bc:55:b6:31:4f:72:78:41:
         a4:7a:fc:34:bf:01:1b:39:fb:05:58:3c:6c:68:ff:0c:33:de:
         71:db:e3:f2:b8:dd:96:9a:6d:f3:1f:c4:3a:88:1e:b8:7c:f5:
         2e:6f:68:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:15:13 2025 by rpki-client