This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft
File:                     w7DVNe688o5grJiuSVs0mBtak-w.mft (raw, json)
Hash identifier:          Zn6SHjTLQAp4549dLMwD33CVg3gDIJGgQhcfqHf7XaU=
Subject key identifier:   60:62:C3:CE:7E:BB:25:E5:B6:2F:AB:09:DA:07:7A:73:6B:53:48:01
Authority key identifier: C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC
Certificate issuer:       /CN=c3b0d535eebcf28e60ac98ae495b34981b5a93ec
Certificate serial:       019AF23FAFC878251497CA2A4D6100B7130E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft
Manifest number:          1767
Signing time:             Sat 06 Dec 2025 06:00:51 +0000
Manifest this update:     Sat 06 Dec 2025 06:00:51 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:51 +0000
Files and hashes:         1: 1-ZTXd6PmTmIMEMe100W5NGDRj3c.roa (hash: NHkVAtdEjUnA2SCcMg/CpdPj8emXX0V3c3ArPmZsQPo=)
                          2: cKTFKLuoQdiYE7_u9RuNKWw7fco.roa (hash: KXSC0hf1ayPyYoQDrw1CY1aRR6JyJ+UZkoTbKkWxBMQ=)
                          3: d5p44SeL41Vv8U9LRNaQSIJeXfY.roa (hash: tK/nEBw1HGQWPtkPKGf1rTHF1XrAXssUZrXXRf8dXMs=)
                          4: w7DVNe688o5grJiuSVs0mBtak-w.crl (hash: oCs3Ota7sKQDRhpnWhvJRXTfvA8eG4uu0bW8OCY7D9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:af:c8:78:25:14:97:ca:2a:4d:61:00:b7:13:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3b0d535eebcf28e60ac98ae495b34981b5a93ec
        Validity
            Not Before: Dec  6 06:00:51 2025 GMT
            Not After : Dec  7 06:00:51 2025 GMT
        Subject: CN=6062c3ce7ebb25e5b62fab09da077a736b534801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5b:bc:da:f4:59:44:cb:54:77:7f:92:d6:65:
                    5b:c9:9c:03:e3:36:bb:34:f3:6b:0f:57:42:6d:49:
                    bf:36:47:1b:cf:fc:14:79:a7:7e:66:a8:0c:55:60:
                    f0:07:e5:8a:23:01:ed:bd:6a:47:0f:ad:47:bc:33:
                    fc:b8:36:11:27:50:00:90:8e:b8:38:0a:0d:58:3f:
                    66:1d:ba:b1:35:45:0c:db:41:43:40:32:10:3d:db:
                    ef:63:71:82:94:4f:a3:96:bb:21:c7:65:67:ad:8d:
                    e8:fc:25:5f:5f:67:06:1f:e3:5a:26:4e:4c:ea:2e:
                    a1:a6:1b:bb:0b:f2:d7:08:90:2b:a3:c6:6e:7e:95:
                    12:58:0b:79:fa:7e:34:66:85:4f:9a:72:f9:85:a2:
                    67:1a:08:b0:2d:7e:b6:0d:be:47:8b:c2:65:56:90:
                    0a:12:12:58:82:e7:e3:a7:b6:4b:95:1a:91:a9:37:
                    c8:1b:3c:99:b6:76:0f:2b:75:fc:9d:5b:e0:b1:28:
                    22:8b:21:a9:fe:7f:bc:b7:71:d0:00:ed:94:a3:43:
                    d6:20:93:90:1b:53:dd:83:80:7f:d9:47:80:4b:c8:
                    b6:90:c2:f7:d5:ca:88:64:88:14:d5:6e:df:2f:ce:
                    ac:6f:2f:97:22:b1:15:cd:a1:ea:e5:3d:87:f6:2f:
                    43:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:62:C3:CE:7E:BB:25:E5:B6:2F:AB:09:DA:07:7A:73:6B:53:48:01
            X509v3 Authority Key Identifier:
                keyid:C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:08:ac:2a:05:ff:0d:19:3c:7a:bd:cd:60:7c:d2:1a:cd:c0:
         b0:b5:ea:eb:ed:30:4c:21:c9:b1:01:1c:53:5a:f6:53:1d:e4:
         52:2c:a6:76:72:4a:92:72:3f:cc:e0:ed:b8:9d:7c:43:ef:ec:
         5d:29:cf:7f:74:53:e5:72:14:65:bc:22:ac:81:d1:5d:71:48:
         64:75:1e:b7:c3:72:e7:3d:6c:22:d0:76:f6:5f:42:d6:e5:95:
         5f:34:96:19:0f:55:54:2a:8d:15:eb:6d:7d:35:6a:b6:b7:3b:
         ab:c4:aa:69:7c:64:f7:eb:0a:c6:7e:13:d1:05:23:d9:5f:f5:
         f0:64:e0:b0:ad:6f:43:e7:68:5a:51:64:a0:d2:05:3d:14:e3:
         04:76:9e:e1:8c:d0:61:9d:27:15:e4:c6:3f:83:a5:84:e2:e7:
         86:26:7d:1e:d4:a5:71:11:05:12:a8:a5:c6:72:7d:92:7b:78:
         15:24:1d:8f:5e:84:27:6a:c4:90:65:7b:51:f7:26:be:b2:af:
         ad:86:d3:2b:3b:5c:db:17:04:cf:53:00:e5:89:74:07:5e:c3:
         c2:a2:d7:79:a7:ca:3a:bb:a0:4d:12:2a:d5:76:e0:f5:f9:7d:
         89:19:79:3c:3f:60:2c:73:38:26:63:d1:6a:bd:60:cd:87:e1:
         fa:cd:ae:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:26:31 2025 by rpki-client