This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
File:                     wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft (raw, json)
Hash identifier:          +b7XYHs6borPRXK1/l86kBggwGPVujYB/BrnHm35O8w=
Subject key identifier:   77:2F:D6:AA:EA:27:3A:CE:C1:0F:9E:EA:08:DD:D1:6E:3E:A1:27:92
Authority key identifier: C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
Certificate issuer:       /CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Certificate serial:       019AF19A9D233B14074F94D1C4223738183C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
Manifest number:          176C
Signing time:             Sat 06 Dec 2025 03:00:32 +0000
Manifest this update:     Sat 06 Dec 2025 03:00:32 +0000
Manifest next update:     Sun 07 Dec 2025 03:00:32 +0000
Files and hashes:         1: DIDvdbb3GKHM4R0fThp87ONTKIg.roa (hash: PpLadHjUjIbh3z8TdW7x9p2zKoB60tTFsLSNrfKJGP0=)
                          2: NiiYntce0l2g8rM0crSiQd9ju9Q.roa (hash: dXNA4zFEqgeMGWVbP7xCDHL9Yv22/YkYEyRq1Xgq0Qk=)
                          3: TKLzQ3aUn5r9wRqdWWY_X3np5Nw.roa (hash: FHEE5b54dYwOgG8q4mFeJQWJCBG47+yi4U4T7p61+TU=)
                          4: UwTNWro9evVq9A2tmjUi9EC7e1U.roa (hash: blbaLMvxLnOeS1jYks60LVjVa40KZBXbFkM1K6NYTsw=)
                          5: YD46-wu1gX9Rfc3-h0IJxr5M_6I.roa (hash: eydJEhyuH7mmIcl4Z67qIv5vGkaTb2dD7M7gIFncDbg=)
                          6: awX-yLV9QhTtYIRH8dzM3NZ-YyE.roa (hash: cUBeWKNk+8N9DHilcnVglMXRUVzQzFqcjW7BKF+It/4=)
                          7: hXz87hx_B-hbL3xb1XWOpeq_ghU.roa (hash: qgegZ0Q4MVtx4Pfhi+QnSP0PfWput13BxQSPM+9zyGM=)
                          8: nGG-OUODAxwLxi6jNHbpt8RGNb8.roa (hash: CE5MyGR9lb1V5N4ocRK2ocMWINjBM6Y8ecSTUiTujPU=)
                          9: wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl (hash: L/H06oADr31C2k3fpZG2udpntT7xs0fb5MSgfx0dgww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9a:9d:23:3b:14:07:4f:94:d1:c4:22:37:38:18:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
        Validity
            Not Before: Dec  6 03:00:32 2025 GMT
            Not After : Dec  7 03:00:32 2025 GMT
        Subject: CN=772fd6aaea273acec10f9eea08ddd16e3ea12792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:dc:e8:e9:c5:e2:ab:e5:77:c7:b1:12:e6:51:
                    9b:05:2a:8b:64:2f:75:0e:b2:8c:a3:a2:45:ba:58:
                    8c:1e:ce:a8:ba:c5:76:e0:0e:24:20:37:f5:3b:b2:
                    fa:a6:3a:fa:d2:30:41:a5:0f:5e:83:a4:19:30:f0:
                    55:e9:15:2a:5d:68:ea:28:2a:63:70:ac:bc:e0:d1:
                    c2:a3:07:10:04:6b:8a:93:06:64:20:ad:04:e9:7e:
                    94:a4:50:12:fc:4d:d9:ec:e2:8b:23:95:25:11:7b:
                    0a:dd:c3:38:e8:24:0c:74:6f:0f:e6:1b:4f:af:4c:
                    fa:50:c9:0b:bd:3c:65:48:de:b2:61:55:b4:d2:c1:
                    5d:69:e8:b5:a5:f0:cd:db:d3:3b:8f:f7:7e:93:31:
                    37:82:ae:7c:3e:b7:89:b8:de:e8:6c:48:a1:d5:40:
                    20:89:c4:94:23:ad:23:c4:51:78:17:06:c5:dc:f6:
                    9d:bd:c0:82:f7:46:a0:fb:0f:f2:33:fe:04:e2:3c:
                    a5:a3:02:70:e4:9a:55:78:88:2e:88:24:b4:a2:09:
                    6e:01:0b:83:ac:83:d3:c8:58:2c:ba:ff:96:28:60:
                    82:41:84:b8:8f:12:b8:08:40:ae:a7:d4:5d:69:4d:
                    9a:b3:f1:c6:b8:38:cb:a6:65:54:2e:b6:05:72:62:
                    e8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:2F:D6:AA:EA:27:3A:CE:C1:0F:9E:EA:08:DD:D1:6E:3E:A1:27:92
            X509v3 Authority Key Identifier:
                keyid:C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:03:fc:44:f8:00:9d:3a:b7:75:be:d6:07:ed:d1:8d:b4:4b:
         f9:48:2a:3b:57:2c:7c:1b:9b:32:95:b0:fc:e9:da:ef:46:6a:
         97:57:be:59:22:83:43:c4:dc:b8:33:f6:c0:3e:7d:8b:cd:47:
         4f:41:2c:d4:a9:1e:23:02:45:c0:df:08:6f:db:a6:b1:60:3f:
         2b:58:22:04:0d:1d:22:d4:58:9c:1d:ff:d1:36:1d:9a:9e:c9:
         15:1e:0d:b7:33:9d:be:27:e0:51:bf:4a:ff:ba:b2:4e:13:b1:
         d6:c9:1a:51:c9:0e:b7:20:28:53:7c:de:3b:38:1f:eb:e8:6c:
         e8:1d:89:ff:57:86:65:b8:47:26:a6:ec:ea:04:4b:69:94:a3:
         e1:fb:1e:45:65:b8:bd:78:74:e7:73:c5:43:3e:d7:fd:d7:cc:
         9f:ce:0b:28:20:a3:d6:97:e9:02:e2:1f:8b:36:89:59:52:60:
         42:59:1f:54:e6:75:f3:a5:64:1c:89:8d:48:03:51:ae:92:e1:
         56:9a:9f:c7:16:0a:5d:61:69:6d:8e:67:70:b4:7a:13:ad:1c:
         d6:47:80:18:d5:bd:24:3c:72:71:83:6c:65:2f:3b:23:61:a8:
         73:3d:5f:fd:f2:be:50:20:90:48:86:66:16:52:14:39:99:d1:
         ba:f1:52:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:23:15 2025 by rpki-client