This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
File:                     wQKF31sDng8E4t_s4opaj77G6Tg.mft (raw, json)
Hash identifier:          646n9B/q1go+F4LNX9GZNbMDkvKTVAaWFQ+FFSwGjv4=
Subject key identifier:   9A:C5:6F:9F:BD:1F:2B:47:50:7A:83:4A:80:BF:02:82:B9:2F:48:D8
Authority key identifier: C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38
Certificate issuer:       /CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
Certificate serial:       019AF1D1AA18AE2301BEEB5645ADBF09343C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
Manifest number:          109F
Signing time:             Sat 06 Dec 2025 04:00:40 +0000
Manifest this update:     Sat 06 Dec 2025 04:00:40 +0000
Manifest next update:     Sun 07 Dec 2025 04:00:40 +0000
Files and hashes:         1: 2GK7KjijxkSp5rFI9ZFtp0atb8k.roa (hash: wdEjqmgar3oUItYyi55t1/3r4eSEpgrdLi/xchL3smU=)
                          2: XqKPzfmuCzaXuReNqmun-bylVl0.roa (hash: fIH8TXgcjjHXQ/BvOpbDJ0pldyGYRtZMTKQJxTQ5HkU=)
                          3: ty37WXzEM_QABRJJkI6c7K_G8EQ.roa (hash: KUqDTpdF99zPoKmTMTv8GshjWBlrKcQSI4Ly51l4brg=)
                          4: wQKF31sDng8E4t_s4opaj77G6Tg.crl (hash: L6G5RBBynOcA4/Tmx/QlTcuijH4o0Hx5Mfm908Lp6eA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d1:aa:18:ae:23:01:be:eb:56:45:ad:bf:09:34:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
        Validity
            Not Before: Dec  6 04:00:40 2025 GMT
            Not After : Dec  7 04:00:40 2025 GMT
        Subject: CN=9ac56f9fbd1f2b47507a834a80bf0282b92f48d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f5:1f:ec:e9:e8:8b:1c:78:82:22:2c:5f:3a:
                    17:d5:f7:e4:51:d9:53:d5:28:c3:c0:6f:49:fd:1d:
                    26:74:eb:50:fe:1b:a1:f2:1d:71:71:7f:01:7e:e4:
                    bf:1d:19:f8:02:7c:a1:58:3d:01:fe:df:e7:7c:b3:
                    33:c2:52:d8:54:b5:90:7d:af:0b:03:db:ec:01:86:
                    7a:03:cb:7c:50:5e:75:14:09:1e:d2:d3:41:82:69:
                    58:82:da:31:7d:3c:d6:b3:e0:06:64:a7:fc:92:f0:
                    0c:5c:e3:ca:f9:55:f7:b3:68:95:2d:92:31:0f:19:
                    98:51:c4:6f:8d:9e:12:61:68:b0:00:a6:1a:10:51:
                    67:5b:32:9c:20:36:fc:6d:a1:11:e6:bf:45:2e:38:
                    81:0e:08:4b:f6:72:01:c2:ba:da:d0:05:14:51:10:
                    82:2b:08:45:a3:19:f5:c2:c3:25:72:ac:94:ad:10:
                    44:ec:40:a6:b5:54:ee:be:8a:02:c7:e8:52:d1:ff:
                    fd:df:5d:f8:75:b8:82:c5:91:26:8e:64:ea:54:d5:
                    7b:aa:a6:50:21:71:f6:7a:76:06:4f:da:ca:72:2b:
                    3f:03:1a:98:1c:83:85:c5:56:8d:b4:ba:36:b2:6a:
                    6c:44:74:23:fb:19:ed:c8:3c:26:d7:65:6e:07:64:
                    90:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C5:6F:9F:BD:1F:2B:47:50:7A:83:4A:80:BF:02:82:B9:2F:48:D8
            X509v3 Authority Key Identifier:
                keyid:C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:5b:48:1a:d4:89:50:c5:48:c6:03:a5:f8:25:bf:30:a6:84:
         da:bf:9b:d6:70:ac:97:26:68:ca:f1:e7:62:c2:a0:ea:50:26:
         5f:11:54:75:4e:70:dc:d9:48:be:db:b8:59:71:8f:7c:d1:f2:
         da:ff:37:7e:03:ba:be:f2:c6:cc:7e:8a:7a:9e:a3:0b:a9:84:
         12:07:cf:9d:61:67:6f:fd:a7:2e:9f:6f:fd:19:39:7b:f8:15:
         6e:36:05:33:5c:3d:9a:0f:11:de:9c:0b:66:40:ac:87:ba:ba:
         3f:a4:b2:fd:c2:13:31:0d:84:12:8b:8c:b3:09:e3:a4:35:7b:
         0a:53:91:17:90:66:e5:07:8d:09:87:0a:f8:79:69:4f:85:49:
         62:cb:99:e9:e4:02:b9:6b:0a:8b:23:c2:6d:eb:fd:13:52:d0:
         08:e2:81:ea:cd:60:58:b8:87:6b:bd:3d:cc:d2:e3:15:71:62:
         c7:57:70:5d:2e:54:3b:30:08:0b:2f:bb:cf:d8:ea:21:5d:96:
         2c:54:88:8b:63:aa:b8:00:a7:7a:18:fd:f2:44:a9:4d:14:df:
         04:9a:8c:0b:5b:70:74:18:3f:47:d6:dd:5a:cd:55:ab:a6:82:
         43:d2:80:f1:1d:60:67:7e:58:f5:3d:52:06:b4:55:b6:d7:68:
         9d:3c:ac:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:04:50 2025 by rpki-client