This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft
File:                     wWFXjOD_N_BsJjYuosY1e5hjO3A.mft (raw, json)
Hash identifier:          mYHeeWt5LJAVvfLK7zdtZpt0NY198Isenhmzs/5ccSs=
Subject key identifier:   49:FB:91:58:DA:84:B5:9F:CE:E9:59:BB:87:31:35:44:82:80:A6:DD
Authority key identifier: C1:61:57:8C:E0:FF:37:F0:6C:26:36:2E:A2:C6:35:7B:98:63:3B:70
Certificate issuer:       /CN=c161578ce0ff37f06c26362ea2c6357b98633b70
Certificate serial:       019B2B1E4EB252C8D430A37BCE6AE9B885D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wWFXjOD_N_BsJjYuosY1e5hjO3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft
Manifest number:          0F2F
Signing time:             Wed 17 Dec 2025 07:02:44 +0000
Manifest this update:     Wed 17 Dec 2025 07:02:44 +0000
Manifest next update:     Thu 18 Dec 2025 07:02:44 +0000
Files and hashes:         1: VaQFkBkaVYjwzbk-d1HfVSqGj30.roa (hash: mgqfVOInqFPvEjCxJre+1kdiyjEUS8UusvaHKwVL6Uo=)
                          2: wWFXjOD_N_BsJjYuosY1e5hjO3A.crl (hash: TjL3kIFuvPhkYmg7H9esIAOnpdnXX9Gq5MaFHVN2lz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wWFXjOD_N_BsJjYuosY1e5hjO3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 07:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2b:1e:4e:b2:52:c8:d4:30:a3:7b:ce:6a:e9:b8:85:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c161578ce0ff37f06c26362ea2c6357b98633b70
        Validity
            Not Before: Dec 17 07:02:44 2025 GMT
            Not After : Dec 18 07:02:44 2025 GMT
        Subject: CN=49fb9158da84b59fcee959bb873135448280a6dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:eb:24:1b:50:73:48:b1:45:5f:39:96:d1:29:
                    32:cd:c3:60:4b:b8:55:12:14:63:62:0b:7c:d8:a1:
                    2b:5e:05:5c:9d:ef:1a:88:3c:f6:a0:20:cc:08:ac:
                    af:d1:4d:5f:81:9b:06:c1:fb:b2:b4:0c:0f:b3:91:
                    1a:31:c4:1f:99:0d:51:7e:9d:43:ce:08:9d:98:fa:
                    e4:90:d0:28:1f:e0:4f:0c:a6:75:07:60:ea:fc:05:
                    ae:eb:86:cb:44:fe:a3:73:49:4c:59:95:55:8a:89:
                    72:db:e9:ba:d6:bf:9a:d7:bb:6a:dd:3b:b3:d5:c3:
                    32:c7:3c:b8:01:ff:f2:13:fd:33:5b:97:67:26:f8:
                    77:0c:a8:98:2b:27:d7:ef:63:fc:01:be:72:47:b7:
                    d0:e2:30:59:e9:0c:42:16:c6:3e:31:6d:43:28:f6:
                    49:95:af:7a:06:77:1d:54:f1:a8:31:0d:bc:65:16:
                    b2:09:32:5e:0d:de:19:10:d8:f1:89:53:10:db:1c:
                    0a:d2:46:da:df:e5:bc:73:91:6c:8d:4d:48:2f:92:
                    ce:d3:f4:2b:f8:ca:71:5b:d5:16:82:1d:ec:64:b0:
                    ce:77:7c:35:c6:cd:51:da:17:44:3f:d5:a5:fb:df:
                    2a:e2:3f:f9:86:e7:06:f4:12:b6:44:8c:4b:00:43:
                    08:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:FB:91:58:DA:84:B5:9F:CE:E9:59:BB:87:31:35:44:82:80:A6:DD
            X509v3 Authority Key Identifier:
                keyid:C1:61:57:8C:E0:FF:37:F0:6C:26:36:2E:A2:C6:35:7B:98:63:3B:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWFXjOD_N_BsJjYuosY1e5hjO3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:22:a1:ec:f1:16:e0:e5:28:08:10:9c:0b:70:72:82:a2:51:
         75:49:f9:8e:ba:ca:2b:4a:10:65:1f:cb:a6:3e:be:81:41:de:
         4a:b4:4f:78:1c:d3:dd:66:0a:7a:94:06:4c:90:ac:22:fc:61:
         b8:da:1a:ba:79:f1:0a:00:80:9c:d7:f9:3a:0d:20:c4:5e:44:
         99:38:d0:44:c0:79:a0:78:cf:3a:5f:26:ac:17:93:20:b1:15:
         2e:c2:c4:86:51:09:6a:a7:28:23:94:4c:e1:64:94:9a:d6:ae:
         be:80:67:53:3d:1b:5e:f5:3d:05:f4:0f:32:73:15:b8:1f:d9:
         f8:c2:08:d4:92:4b:95:45:7a:6c:8b:f6:76:31:cc:30:25:78:
         b0:94:fc:31:dc:74:ea:16:95:3e:5f:da:eb:42:b1:e3:ff:ad:
         05:7e:c1:24:e9:2c:63:42:8c:7c:90:60:1f:41:81:59:de:29:
         3f:94:f2:0d:90:54:75:2d:a3:cb:ab:02:a1:e5:6b:b3:51:b3:
         32:6c:2f:84:c6:a2:8b:92:1c:c2:bb:ce:61:a0:ba:62:e9:3d:
         89:06:c8:e2:4a:11:5c:47:10:20:1a:a8:68:88:7b:c3:45:5d:
         96:02:a7:9b:a6:e0:0d:63:5c:3c:35:08:e6:7c:fd:a6:15:47:
         f3:66:ae:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsrHk6yUsjUMKN7zmrpuIXRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNjE1NzhjZTBmZjM3ZjA2YzI2MzYyZWEyYzYzNTdiOTg2
MzNiNzAwHhcNMjUxMjE3MDcwMjQ0WhcNMjUxMjE4MDcwMjQ0WjAzMTEwLwYDVQQD
Eyg0OWZiOTE1OGRhODRiNTlmY2VlOTU5YmI4NzMxMzU0NDgyODBhNmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOskG1BzSLFFXzmW0SkyzcNgS7hV
EhRjYgt82KErXgVcne8aiDz2oCDMCKyv0U1fgZsGwfuytAwPs5EaMcQfmQ1Rfp1D
zgidmPrkkNAoH+BPDKZ1B2Dq/AWu64bLRP6jc0lMWZVVioly2+m61r+a17tq3Tuz
1cMyxzy4Af/yE/0zW5dnJvh3DKiYKyfX72P8Ab5yR7fQ4jBZ6QxCFsY+MW1DKPZJ
la96BncdVPGoMQ28ZRayCTJeDd4ZENjxiVMQ2xwK0kba3+W8c5FsjU1IL5LO0/Qr
+MpxW9UWgh3sZLDOd3w1xs1R2hdEP9Wl+98q4j/5hucG9BK2RIxLAEMIMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEn7kVjahLWfzulZu4cxNUSCgKbdMB8GA1UdIwQY
MBaAFMFhV4zg/zfwbCY2LqLGNXuYYztwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1dGWGpPRF9OX0JzSmpZdW9zWTFlNWhqTzNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wYjgzNzMtMGMyYy00YjA2LWJmNjkt
YWZiZjRlY2YyYjUwLzEvd1dGWGpPRF9OX0JzSmpZdW9zWTFlNWhqTzNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8wYjgzNzMtMGMyYy00YjA2LWJmNjktYWZiZjRlY2YyYjUw
LzEvd1dGWGpPRF9OX0JzSmpZdW9zWTFlNWhqTzNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWyKh7PEW
4OUoCBCcC3BygqJRdUn5jrrKK0oQZR/Lpj6+gUHeSrRPeBzT3WYKepQGTJCsIvxh
uNoaunnxCgCAnNf5Og0gxF5EmTjQRMB5oHjPOl8mrBeTILEVLsLEhlEJaqcoI5RM
4WSUmtauvoBnUz0bXvU9BfQPMnMVuB/Z+MII1JJLlUV6bIv2djHMMCV4sJT8Mdx0
6haVPl/a60Kx4/+tBX7BJOksY0KMfJBgH0GBWd4pP5TyDZBUdS2jy6sCoeVrs1Gz
MmwvhMaii5IcwrvOYaC6Yuk9iQbI4koRXEcQIBqoaIh7w0VdlgKnm6bgDWNcPDUI
5nz9phVH82auBQ==
-----END CERTIFICATE-----
Generated at Wed Dec 17 16:36:20 2025 by rpki-client