This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.mft
File:                     wj_7f9rDV5zXAB3FBjAgFT3s56U.mft (raw, json)
Hash identifier:          wTCuhBkGjduXEcfFzGG4kkKrYTiHP4M5vgq5fiX8Klg=
Subject key identifier:   29:85:60:F9:06:42:A9:E4:32:88:DF:A7:4D:07:82:B9:78:C0:A5:2E
Authority key identifier: C2:3F:FB:7F:DA:C3:57:9C:D7:00:1D:C5:06:30:20:15:3D:EC:E7:A5
Certificate issuer:       /CN=c23ffb7fdac3579cd7001dc5063020153dece7a5
Certificate serial:       019AF12DE960F25A75A10BD699B255D145A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wj_7f9rDV5zXAB3FBjAgFT3s56U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.mft
Manifest number:          175E
Signing time:             Sat 06 Dec 2025 01:01:48 +0000
Manifest this update:     Sat 06 Dec 2025 01:01:48 +0000
Manifest next update:     Sun 07 Dec 2025 01:01:48 +0000
Files and hashes:         1: wj_7f9rDV5zXAB3FBjAgFT3s56U.crl (hash: e8lGXAwAKdnxIjSbaoKqu2S4nWktUIfW+fKXunGOOE8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wj_7f9rDV5zXAB3FBjAgFT3s56U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2d:e9:60:f2:5a:75:a1:0b:d6:99:b2:55:d1:45:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c23ffb7fdac3579cd7001dc5063020153dece7a5
        Validity
            Not Before: Dec  6 01:01:48 2025 GMT
            Not After : Dec  7 01:01:48 2025 GMT
        Subject: CN=298560f90642a9e43288dfa74d0782b978c0a52e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b4:4a:7f:2f:53:51:3b:22:dd:03:0d:db:40:
                    a3:79:ee:f7:1a:d4:66:61:79:4f:9c:4a:93:b5:c3:
                    fb:21:22:7e:a9:87:a2:d7:d8:55:c8:50:b0:d2:bf:
                    7f:8e:17:47:22:83:43:bc:a6:41:58:0d:c0:df:c8:
                    b2:22:c9:cc:31:6b:ef:94:19:14:96:40:57:6a:5c:
                    b4:c3:79:e2:db:45:03:3b:ed:b9:80:ec:83:30:5d:
                    68:f4:4c:cf:56:6b:24:2b:7d:ef:17:6e:ff:38:30:
                    48:ea:c1:6b:88:32:cd:2a:ac:6d:fd:2e:b4:a2:07:
                    0f:12:10:a1:4d:93:a2:d3:2d:94:03:b0:f0:d4:03:
                    59:2b:d2:fc:8f:04:8c:81:c4:04:89:84:46:c4:30:
                    73:e3:b0:1e:40:c9:f6:78:0c:a5:ee:58:b2:d6:98:
                    21:81:e8:cc:8f:78:0a:d2:7c:0c:6b:0e:d2:79:f1:
                    5e:96:35:92:c1:54:dc:27:5b:38:f3:7d:89:58:a7:
                    81:90:12:b0:2b:40:a3:fa:67:8e:95:8e:72:5c:d9:
                    34:c2:7a:76:37:f6:27:e1:1d:c8:48:96:88:9d:99:
                    5d:57:cb:97:4b:fe:1f:b4:01:46:d8:0a:cd:16:2c:
                    13:06:67:3a:db:b6:4a:cb:11:54:e1:cb:55:55:8f:
                    17:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:85:60:F9:06:42:A9:E4:32:88:DF:A7:4D:07:82:B9:78:C0:A5:2E
            X509v3 Authority Key Identifier:
                keyid:C2:3F:FB:7F:DA:C3:57:9C:D7:00:1D:C5:06:30:20:15:3D:EC:E7:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wj_7f9rDV5zXAB3FBjAgFT3s56U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:49:a5:20:59:5b:14:a3:9a:9e:8f:00:b1:1b:e3:29:23:9f:
         bc:fd:8c:0a:5d:87:92:c3:94:29:8b:56:c6:10:ae:2e:6d:c1:
         da:25:5d:e3:a4:c1:bc:1a:b4:7f:3e:a1:0c:ab:0d:67:72:6b:
         34:56:5c:7c:88:0d:31:12:0f:f0:97:83:2b:2d:00:70:7c:cd:
         f8:6a:47:45:4e:4b:06:20:81:d4:88:1d:41:f9:5c:5a:28:05:
         ed:4e:a2:f5:2a:2c:25:1a:fa:fd:40:f1:cb:b7:d0:ad:e2:7b:
         91:6a:2e:b1:0d:8e:6f:7d:06:02:d0:7a:6b:2f:5c:6b:46:fe:
         3e:99:5b:bd:b0:4b:50:75:12:44:1f:b4:f2:27:f0:0a:bf:38:
         44:d8:d1:6d:ce:08:46:2b:5f:71:5b:cc:67:80:0f:45:aa:9d:
         2c:d5:30:2c:91:95:d3:14:3a:c4:fe:2a:f3:c3:7f:36:64:74:
         7f:59:72:c7:f6:f9:6c:cb:ff:cf:ab:01:29:55:f8:6d:bb:40:
         65:c8:62:08:66:f0:b9:b7:fe:a4:6a:5a:8a:8b:03:1e:9d:d5:
         57:43:66:91:2d:a8:98:62:10:6f:9d:2b:dd:a9:61:f4:fe:8b:
         f2:c4:89:95:8b:22:29:de:d8:ed:b1:d3:0b:58:f2:89:ec:a9:
         0f:72:c8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:26:55 2025 by rpki-client