This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
File:                     wq_BTc5FCwXshsfFMHDNa7bbx-4.mft (raw, json)
Hash identifier:          ImffqPQsHW/EVop1ZDU59AeMfAeCCgFksZ7Y8n21jMg=
Subject key identifier:   70:EE:2A:20:A0:3F:45:BC:B1:91:84:05:8F:13:51:CC:D1:7C:E1:C1
Authority key identifier: C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE
Certificate issuer:       /CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
Certificate serial:       019AF276FFBE3E855840DAA07D5846B33A0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
Manifest number:          1765
Signing time:             Sat 06 Dec 2025 07:01:16 +0000
Manifest this update:     Sat 06 Dec 2025 07:01:16 +0000
Manifest next update:     Sun 07 Dec 2025 07:01:16 +0000
Files and hashes:         1: 9R7u9NYY_fdGGu9OLtebIHbh-p8.roa (hash: EvXc+WkKL+opgKBNfenegjbhQJ0LX3U13qSmBaz/xEY=)
                          2: L9HnYDWvNpMZS4pIu5zArdvE5v8.roa (hash: 0/PRNPNH9PE5TqzwlxbNtq6foN9oanZ3LsojHdx7xuw=)
                          3: khRg4MYEnETJ2jPimtqut6SDcfI.roa (hash: Nu5ttQZeyOdAqpRtT8J7JzoHpXrE1o2QevNWAJZ6hBk=)
                          4: wq_BTc5FCwXshsfFMHDNa7bbx-4.crl (hash: 5/dnaK4iR8t/79P3JaI2pfO55Ek++xXbdk+GXUtKq74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:ff:be:3e:85:58:40:da:a0:7d:58:46:b3:3a:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
        Validity
            Not Before: Dec  6 07:01:16 2025 GMT
            Not After : Dec  7 07:01:16 2025 GMT
        Subject: CN=70ee2a20a03f45bcb19184058f1351ccd17ce1c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:40:be:45:ef:75:18:ee:45:0b:3f:52:54:71:
                    6f:f6:b3:48:ba:26:bd:d4:9e:d0:55:be:07:47:2f:
                    c2:cf:04:28:0d:16:be:4f:fb:c5:c5:59:cb:1e:07:
                    dc:03:5a:8f:03:d8:4f:74:db:79:ea:02:a8:59:66:
                    ef:76:2f:07:e1:28:b6:91:55:66:3b:cc:68:60:9f:
                    77:dd:f2:da:9e:fc:65:b6:50:0c:f9:fc:ae:fb:49:
                    9a:40:8d:16:49:11:66:7b:e8:e7:5b:3b:1f:82:0e:
                    de:38:da:d5:c4:c5:e2:3d:39:d5:3a:27:2c:f6:78:
                    e0:62:a7:a5:49:a3:1d:62:5b:f3:71:1a:e8:10:bf:
                    0f:83:88:c6:5a:a8:42:56:40:e9:9b:e5:79:c4:ab:
                    71:8e:14:c6:c0:3b:6f:af:b9:ea:4e:dd:23:0d:70:
                    3a:58:53:39:b5:83:0f:df:b8:e0:52:ba:a1:09:b3:
                    e7:be:17:2e:99:dd:34:c1:cb:b6:7a:76:c6:94:88:
                    71:72:80:1c:14:74:fb:87:55:84:32:e9:ae:7a:fd:
                    55:8c:b9:60:ea:62:92:2e:c2:cd:bb:41:d5:02:a3:
                    a5:27:cf:54:5e:10:d7:3d:12:da:0a:aa:69:11:87:
                    0b:23:b0:34:ca:c6:ce:a3:cd:81:4d:5a:79:ab:2e:
                    c8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:EE:2A:20:A0:3F:45:BC:B1:91:84:05:8F:13:51:CC:D1:7C:E1:C1
            X509v3 Authority Key Identifier:
                keyid:C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:15:73:67:d0:7b:b9:00:39:18:8a:3c:ae:3d:0a:f5:8e:25:
         cd:00:3a:45:b3:dd:26:b0:4d:f3:2f:72:a0:be:54:3f:fc:a5:
         3d:4b:59:a3:e8:87:a6:47:ec:32:5e:b6:0f:2c:9c:d9:86:78:
         0b:cb:20:26:26:df:6c:cc:02:93:ce:82:85:35:b6:f6:d7:3d:
         af:33:0e:fb:ef:c7:d5:7a:00:92:b9:28:a2:07:bb:ef:98:47:
         12:1b:f7:97:6c:27:61:7e:c6:cd:29:b3:c0:d8:46:b8:b6:2f:
         a4:c1:09:6a:c8:b3:ab:5f:fd:a8:be:4e:b1:e1:a1:c5:a4:b3:
         6e:34:55:d5:c5:74:27:f7:d0:28:97:d5:1a:c2:4c:de:ab:c7:
         62:a4:81:eb:c5:30:f1:da:67:4b:d6:f1:48:02:c3:c7:3d:1f:
         3e:b7:32:46:11:84:91:eb:aa:49:1d:a1:1c:4d:9b:35:74:47:
         ba:dc:1c:da:ed:23:c8:45:d1:84:4e:24:53:60:bc:0a:f9:1a:
         1b:52:b5:42:1f:d9:da:a8:1f:59:1c:ae:cc:66:96:99:74:57:
         14:0f:b5:22:a3:21:82:02:de:8d:7d:2f:56:74:4e:24:b7:72:
         8f:1e:d2:43:03:cb:80:ae:a3:da:35:32:27:6f:9c:89:c5:60:
         02:d6:ff:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:31:32 2025 by rpki-client