This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
File:                     wjbowhbwWp2eAyfxIivxIZirpdo.mft (raw, json)
Hash identifier:          rF8Kh1q9uyvVuudfxH4vUwUOX7EhP+VlSIyUv41dkYw=
Subject key identifier:   C0:CB:7F:23:6D:EA:36:6F:A6:B1:AD:32:28:2D:4F:76:8C:17:0E:7C
Authority key identifier: C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA
Certificate issuer:       /CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
Certificate serial:       019AF19B06E534E439C5718DEB2B7550890D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
Manifest number:          0563
Signing time:             Sat 06 Dec 2025 03:01:00 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:00 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:00 +0000
Files and hashes:         1: RE5hObodnlVzPY2NC9fBqxqamSo.roa (hash: vt4HA66geUCnP70MZ/cuIbrc9l462uvO+5uycK2tf/g=)
                          2: huVpaDuOyP7YO_hg-K93nMNZjQI.roa (hash: kb027+6ralND9X0aHEkf2xrhEHp9EQN+J7LlYr7HG58=)
                          3: jhFFnOfiUX1beQnMdFI7HQkXMu4.roa (hash: 3FY7Qpzpo28uDSYDS9CvGlbhOup4Iwr9S2FVCDXO+eg=)
                          4: jlgMYBPPrhVmr9kA8s7ItAO1aAc.roa (hash: LWFdrbfxp7Y32HBXjHLDhwbHmx4AJjStWSjMklLVIJw=)
                          5: wjbowhbwWp2eAyfxIivxIZirpdo.crl (hash: b4y5ZwZXSB/SRa4XdW6oEjyKfdmwiJl48DSgwkXfwG8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:06:e5:34:e4:39:c5:71:8d:eb:2b:75:50:89:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
        Validity
            Not Before: Dec  6 03:01:00 2025 GMT
            Not After : Dec  7 03:01:00 2025 GMT
        Subject: CN=c0cb7f236dea366fa6b1ad32282d4f768c170e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6c:fa:bc:54:1a:d6:af:22:c0:2e:4f:f7:ef:
                    66:ad:f7:d9:57:41:0b:69:56:4f:1b:05:ce:2b:ab:
                    77:8d:07:3a:6d:c2:15:7e:ce:78:41:c1:89:ef:3d:
                    95:cf:4b:5c:18:43:d7:d1:57:cd:b7:de:83:35:4c:
                    ea:01:9b:d5:18:7a:7d:69:e7:57:2d:85:ad:89:54:
                    6e:13:23:48:cd:c0:d4:04:21:6b:44:af:61:54:bc:
                    0a:e8:d7:55:39:38:fa:72:d5:ef:bf:b3:cc:d1:f4:
                    08:89:88:55:49:28:33:7b:2f:3b:bc:a0:d8:71:01:
                    1c:a1:43:df:9a:e5:fb:e3:07:39:28:f1:b8:7e:92:
                    f5:84:42:1e:6e:30:5c:0a:4b:2b:21:63:96:61:83:
                    06:b9:de:2a:bd:37:b8:0a:30:c3:e3:fd:f1:ef:fd:
                    01:aa:23:59:43:27:77:b8:40:75:ae:8d:da:f1:e2:
                    6e:06:3f:a0:4b:0f:3e:ab:47:05:6a:c8:61:19:3f:
                    30:97:0d:bc:d6:71:42:59:7e:e1:e6:dd:38:49:82:
                    ea:4b:cb:03:58:5f:0f:bc:a9:8b:4f:41:c3:68:09:
                    2e:f7:15:bf:ce:7a:b0:cf:70:1d:66:71:3d:24:88:
                    6e:02:86:95:51:22:b9:da:0d:65:70:f0:47:bf:18:
                    1b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:CB:7F:23:6D:EA:36:6F:A6:B1:AD:32:28:2D:4F:76:8C:17:0E:7C
            X509v3 Authority Key Identifier:
                keyid:C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:ee:df:72:da:df:1c:51:45:62:06:2a:dc:74:39:e6:84:db:
         3a:7d:81:91:13:5f:64:5e:fd:c2:86:83:80:3c:9b:df:c6:22:
         8a:72:d2:53:ce:f2:9b:92:f8:97:5f:65:1b:8c:04:e0:18:31:
         11:e2:3f:be:02:12:ce:03:d7:41:8f:20:e1:c5:67:e7:d1:c4:
         71:2e:a8:e9:2b:89:57:63:30:25:61:4b:01:98:98:61:e2:b8:
         67:f5:08:33:40:d3:4d:92:fa:11:3d:2f:e0:f6:58:67:9c:98:
         6e:41:9b:24:1e:1a:0a:da:b3:5c:1a:fd:13:cd:72:7a:64:db:
         85:28:72:dd:89:10:c4:f3:b3:e1:e7:e6:c1:d5:d0:25:f8:b2:
         79:d9:b2:db:c3:e7:7d:2b:0c:3b:c0:d0:31:a6:07:b5:40:65:
         10:71:f6:29:82:c6:90:f2:ee:ce:fe:be:5f:56:bc:33:4d:5e:
         0c:f8:eb:62:2a:cf:99:84:cd:bc:5e:fe:fb:06:79:20:bb:52:
         26:a1:88:2a:35:40:7c:36:5c:4a:5e:60:05:c5:e2:dc:0c:4d:
         96:82:71:4a:28:22:37:57:5c:e6:a8:8b:77:eb:7a:9e:72:dd:
         c3:cc:89:09:f5:22:11:93:90:3c:20:d7:c9:38:9f:32:45:e4:
         4c:d3:a6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:58:25 2025 by rpki-client