This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
File:                     wNKohFzfZXbejrARGAir1l_YvEQ.mft (raw, json)
Hash identifier:          hEY0CEgF7oU6l/1eQMJ/KfvZ2zAs+lysnkI+xztq8sU=
Subject key identifier:   8C:19:63:75:C9:55:E1:38:85:C4:70:93:1A:3F:26:F2:CC:5D:91:E0
Authority key identifier: C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44
Certificate issuer:       /CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
Certificate serial:       019AF50BB8858CF1CE632236F6A4CE68C89C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
Manifest number:          1763
Signing time:             Sat 06 Dec 2025 19:02:57 +0000
Manifest this update:     Sat 06 Dec 2025 19:02:57 +0000
Manifest next update:     Sun 07 Dec 2025 19:02:57 +0000
Files and hashes:         1: OmgVAw8ZHFFpHCyw7LOehrOM8KA.roa (hash: 6CbGQ8M2p8DqUv4lPi9kJg+A49OPSohIvq46VoGyAHM=)
                          2: iB80sjC3FaeKn3w8-_wDD7I9eLg.roa (hash: J8k5oGXUl2TYImVeWDD/bvu/zaBz6UEfFHiKZd9EJV0=)
                          3: wNKohFzfZXbejrARGAir1l_YvEQ.crl (hash: NpaiZBv9Ij8IS8Ei5iWi4yWBHbm2no4w0W0K6eZchMc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:0b:b8:85:8c:f1:ce:63:22:36:f6:a4:ce:68:c8:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
        Validity
            Not Before: Dec  6 19:02:57 2025 GMT
            Not After : Dec  7 19:02:57 2025 GMT
        Subject: CN=8c196375c955e13885c470931a3f26f2cc5d91e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:49:89:39:bd:c4:18:0c:5d:34:2b:cb:4d:74:
                    61:2c:41:61:55:89:99:f5:6e:46:71:b3:bf:1a:56:
                    a9:cf:74:c2:4e:6f:65:c5:86:3d:a6:61:b7:67:39:
                    96:bf:b6:e6:dd:ff:53:91:4b:61:1e:1c:a4:59:8b:
                    e5:bc:07:22:ea:c6:93:29:c5:3e:4b:1d:12:dc:83:
                    96:54:a7:9a:5f:43:f6:d0:67:d0:68:6e:6a:ff:8a:
                    84:1b:63:27:0b:4f:c4:ee:3d:5c:e4:00:a5:85:72:
                    d7:fa:e2:46:da:02:47:ad:e3:22:47:79:38:9a:e7:
                    09:ba:3a:5c:6b:4d:99:28:c1:33:39:a9:78:85:e7:
                    3f:3d:37:a0:b0:5b:59:85:90:0c:f1:a3:2f:6e:e4:
                    81:7e:a7:4f:75:9b:26:80:de:c5:bf:64:2d:04:ff:
                    93:a6:3c:f3:ac:65:64:3b:69:cb:38:b0:af:62:44:
                    fa:95:8f:5c:c9:2f:87:ca:e0:c6:17:09:f4:cf:0c:
                    55:1b:21:1d:3e:db:a5:f6:60:c0:55:f0:e4:b2:01:
                    35:8d:0d:81:0a:f7:3f:6a:e0:06:ab:f4:d9:7f:af:
                    ff:94:f3:fc:71:a2:c6:17:f9:37:5a:00:b1:92:cd:
                    f5:fa:41:85:b9:40:d7:9c:ba:0e:0d:ff:ff:a1:05:
                    d5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:19:63:75:C9:55:E1:38:85:C4:70:93:1A:3F:26:F2:CC:5D:91:E0
            X509v3 Authority Key Identifier:
                keyid:C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:26:a8:51:66:09:93:ef:86:df:77:dd:aa:71:77:69:99:48:
         e6:05:ea:f9:1a:df:e9:17:bc:df:87:8d:5e:45:ff:eb:eb:78:
         7f:df:cd:b1:c0:4c:36:a8:6a:df:99:a3:eb:2d:90:97:6b:98:
         52:8d:5a:a5:b4:3c:b2:d6:d6:37:4a:ee:ed:96:b8:41:00:94:
         05:c9:a8:1f:55:00:55:46:2d:89:41:4d:9c:a8:90:2f:a9:96:
         84:00:c2:53:89:d1:aa:9f:55:fe:1e:04:4c:ac:29:b0:54:ad:
         a3:4c:4b:18:e0:2b:61:ca:fd:3f:20:a6:8e:70:9d:6e:56:b2:
         82:ea:f9:3e:78:89:8f:2d:33:db:d5:f5:bf:23:db:a8:72:e1:
         b8:e1:c3:c2:31:42:d6:c1:37:17:c9:9a:b2:ee:5f:f3:fa:e6:
         6b:f7:a7:80:66:7d:b4:78:46:ca:23:fb:1e:ba:35:a8:54:94:
         69:d1:73:0e:49:3f:96:78:93:5a:68:03:4b:2b:b6:87:62:dd:
         3c:97:73:b4:ac:3a:fc:0b:96:4d:e6:aa:d2:8d:a2:82:8f:95:
         78:d3:88:09:55:24:68:d9:50:e1:19:25:34:d0:10:4b:b6:ad:
         74:ea:9f:58:10:cb:c2:0a:66:88:67:e5:56:d6:bd:ad:35:6c:
         40:42:9c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:46:53 2025 by rpki-client