This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
File:                     wXLFrvM8BsSu8trI8FA_y92acoc.mft (raw, json)
Hash identifier:          3D0ILqjIMDnHxqYoDea2aK4IonFVWwL9vILc7RJoYmM=
Subject key identifier:   59:21:E4:6A:07:DB:A6:36:24:67:FD:F7:03:D4:BB:64:43:7B:71:35
Authority key identifier: C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
Certificate issuer:       /CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Certificate serial:       019AF3893FD09EFD3BCFABF9762F5E5868F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
Manifest number:          1768
Signing time:             Sat 06 Dec 2025 12:00:49 +0000
Manifest this update:     Sat 06 Dec 2025 12:00:49 +0000
Manifest next update:     Sun 07 Dec 2025 12:00:49 +0000
Files and hashes:         1: Xcqq0m0T1yRbHOKg5cEHJjsB7MI.roa (hash: oC9S1bEkPnnQvPMvmcVeOLv10F6tSd5dc+2qe4J3PwQ=)
                          2: bCoGHAtTSxDtX1oYqNKnhpGYY0Q.roa (hash: eFHrLDgLSqCz0ldYK/DeOjHpdOvOetjhzRdvuzqcBXw=)
                          3: wXLFrvM8BsSu8trI8FA_y92acoc.crl (hash: AtuVha1QbP3yC6ygLE+SufLG0iQ3J9nCq+QTTyDn7QE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 12:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:89:3f:d0:9e:fd:3b:cf:ab:f9:76:2f:5e:58:68:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
        Validity
            Not Before: Dec  6 12:00:49 2025 GMT
            Not After : Dec  7 12:00:49 2025 GMT
        Subject: CN=5921e46a07dba6362467fdf703d4bb64437b7135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:79:a2:c6:10:a6:b4:7d:d5:5a:0a:0a:aa:8c:
                    03:55:7d:4f:95:ac:ad:99:cd:03:a3:52:da:ed:8a:
                    66:e9:ce:ee:d7:6d:e4:99:5a:1e:f0:bd:de:45:cf:
                    b8:e1:76:b6:09:cb:a9:8e:f5:7f:81:6a:c5:b3:47:
                    81:43:d4:e6:6a:7e:a5:fe:f3:61:42:bf:aa:1a:d0:
                    c1:86:09:c3:fd:32:f5:1a:d8:d4:6c:44:ed:88:fc:
                    94:65:0c:62:c9:00:a6:d6:45:bb:6f:22:b9:a9:32:
                    3e:65:31:d2:1d:8e:2d:2b:18:47:e4:ca:61:4e:10:
                    6d:4f:2d:cd:f7:6a:f5:1b:c3:5f:07:b4:7f:1b:e4:
                    5d:77:1b:84:c2:cf:bc:3f:32:f0:39:03:4c:43:cc:
                    f3:38:48:9f:5f:19:c6:41:5c:fc:c7:d3:f6:6e:68:
                    95:10:d9:04:09:09:92:db:8c:d8:e1:f0:cb:b8:74:
                    5b:b5:5b:53:51:0d:44:59:ca:ad:30:c3:4b:f3:2a:
                    83:04:5b:eb:74:fd:28:14:b4:7c:45:30:85:28:1c:
                    3d:65:c7:2e:e8:a3:8c:35:e2:66:49:a3:47:eb:58:
                    3b:86:c0:5f:32:9a:b4:8a:d9:a0:2f:c2:5a:09:bb:
                    b1:54:24:eb:11:08:46:2a:15:12:13:bd:d6:03:f9:
                    f0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:21:E4:6A:07:DB:A6:36:24:67:FD:F7:03:D4:BB:64:43:7B:71:35
            X509v3 Authority Key Identifier:
                keyid:C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:6f:fb:8b:3b:ac:b1:86:03:26:2e:ed:8f:55:2e:6b:45:91:
         73:23:84:8b:00:24:c3:2f:ab:de:45:03:70:7f:02:3c:14:7d:
         dc:3c:d4:a3:fa:e1:5f:1a:f2:fa:91:3f:61:ad:ac:2a:b1:cc:
         e3:be:9a:6a:81:33:bb:09:ed:8d:f8:b4:67:c6:90:dd:71:c7:
         aa:97:84:0b:38:cd:f2:1c:22:8c:08:ae:f9:c9:f1:55:b7:9b:
         ba:e1:53:48:1f:32:36:6e:4e:8e:43:f8:ca:ac:eb:7b:7d:34:
         55:26:28:56:36:e7:71:3e:fc:07:8c:d6:47:ab:3e:11:e8:ad:
         17:9e:8f:8c:2d:8a:48:9e:11:39:9f:50:70:38:36:74:a2:5f:
         23:72:87:12:f1:d6:12:4f:c8:45:a9:bf:98:a2:40:16:db:93:
         c7:ad:10:4a:6c:26:ae:6d:84:a9:a3:71:c2:c8:ae:cf:8b:0c:
         87:53:e6:34:f1:04:b1:f9:09:ed:37:5c:e7:90:a3:60:f0:c1:
         eb:53:2c:69:a7:c3:21:19:58:05:ab:10:0d:d8:a8:9c:f9:0b:
         64:2b:80:da:d1:ce:2d:fd:a5:2b:6f:93:e5:af:fb:9a:91:c2:
         85:43:84:51:f1:5e:3d:14:b1:66:f7:be:d0:a7:ff:d2:46:0e:
         89:0e:72:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:28:41 2025 by rpki-client