This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.mft
File:                     wly3EywZ99UfAC7UrYEa7PWyD1c.mft (raw, json)
Hash identifier:          8J1Yje6izuV+uo2PanKoZf/alYviBmYO2A+rX2d2Mi0=
Subject key identifier:   B7:AB:C0:C4:EC:97:1F:95:82:66:14:94:C4:38:9C:B0:74:C9:D1:79
Authority key identifier: C2:5C:B7:13:2C:19:F7:D5:1F:00:2E:D4:AD:81:1A:EC:F5:B2:0F:57
Certificate issuer:       /CN=c25cb7132c19f7d51f002ed4ad811aecf5b20f57
Certificate serial:       019AF1D1A56CA0035DF8204CCC5383090665
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.mft
Manifest number:          095E
Signing time:             Sat 06 Dec 2025 04:00:39 +0000
Manifest this update:     Sat 06 Dec 2025 04:00:39 +0000
Manifest next update:     Sun 07 Dec 2025 04:00:39 +0000
Files and hashes:         1: 0yK9CSc1iwH9Ha7iv7t9MQLBMSc.roa (hash: rrGUPdLm/yz0jAaBzRKBfGiiUHE1bJZVAlwYqWnvc2g=)
                          2: Mr7THJO68NohwknMfTQKnqHV-vc.roa (hash: knt9VF7cf9YizkNpPo4OGyLEE0z8MhXR+E+kt4mIdVA=)
                          3: TB6H5V1Ni-tKp6BX2r-SHLcytb4.roa (hash: 0fhq54aZgsVM/k0+CX/b9ZvdCc1x5cY4r3GXAZAMq6M=)
                          4: qFBBKSstVuYlvg1tCU9IRdG8_KQ.roa (hash: woIS65FxXCdUB0qPb1Sk66filHI9SQzJMbXAm2PrCSk=)
                          5: wly3EywZ99UfAC7UrYEa7PWyD1c.crl (hash: rTqHC7pZpMgrzyYIEUwMUmTxYbmQnL0B2ORhM2CNlKM=)
                          6: zSfZVih6hBceUixRgoQRbTOqrPs.roa (hash: azI0MEflNFx/avYXf2xzg+zXEruqyuhKpmbLg+R7a0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d1:a5:6c:a0:03:5d:f8:20:4c:cc:53:83:09:06:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c25cb7132c19f7d51f002ed4ad811aecf5b20f57
        Validity
            Not Before: Dec  6 04:00:39 2025 GMT
            Not After : Dec  7 04:00:39 2025 GMT
        Subject: CN=b7abc0c4ec971f9582661494c4389cb074c9d179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cd:4f:6d:8b:e8:db:54:06:96:7f:5f:f2:cc:
                    80:8f:40:48:11:24:c3:b4:31:91:97:9f:c9:22:f0:
                    87:31:f2:ca:e6:3c:be:24:09:93:84:95:53:a7:f5:
                    89:c9:0b:5f:55:37:9f:1d:b7:4c:41:4b:5d:84:fe:
                    c1:15:65:1f:62:af:fd:9e:90:34:e4:59:0e:77:fc:
                    aa:87:df:a7:a0:7d:11:2a:52:5a:a6:bd:16:37:90:
                    dc:f9:02:21:30:8b:5a:51:54:6f:85:d8:61:a9:9d:
                    49:5a:be:43:38:f2:73:52:ce:fe:d7:97:15:55:db:
                    79:85:0c:90:2a:71:23:8b:64:06:67:84:de:b2:60:
                    0a:bb:ae:64:04:63:90:0b:4d:49:dd:6f:83:05:ec:
                    9d:9c:44:1b:c0:0b:47:bd:19:ae:04:05:7b:49:1a:
                    4f:66:16:16:4b:26:e2:3c:e7:b0:78:11:e3:7d:ca:
                    57:4f:79:74:57:d6:59:c5:e3:c0:42:12:51:72:d9:
                    4d:79:9f:62:e0:be:70:f1:c3:5d:74:e7:df:45:26:
                    1f:f8:93:c6:55:c0:98:f9:96:b2:86:b8:b3:fb:e2:
                    0a:93:4e:08:49:c0:bb:4f:64:1b:84:b8:86:d3:cc:
                    d1:59:42:27:02:5b:83:a8:29:e5:e8:90:b7:40:81:
                    a1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:AB:C0:C4:EC:97:1F:95:82:66:14:94:C4:38:9C:B0:74:C9:D1:79
            X509v3 Authority Key Identifier:
                keyid:C2:5C:B7:13:2C:19:F7:D5:1F:00:2E:D4:AD:81:1A:EC:F5:B2:0F:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:68:2c:ef:3f:69:68:ff:19:77:5b:47:e8:ef:bf:c2:cd:7a:
         ff:07:ae:8f:c4:e2:75:74:92:a6:90:27:75:a6:a3:93:fd:4d:
         bd:c3:ea:c9:63:e3:dc:56:f3:05:56:b1:3f:b3:d3:23:d3:de:
         51:33:c3:4f:8f:ff:6c:de:61:6f:d8:8d:20:12:e6:07:a4:da:
         67:82:a3:6a:0c:4e:bf:e1:a8:34:20:17:77:55:bd:88:9e:a4:
         a7:2f:50:8b:00:d5:ae:ef:c6:a2:02:42:85:7c:28:25:d5:68:
         32:e1:2e:2e:57:b5:19:23:a0:62:7b:35:35:2f:34:2d:47:f9:
         94:5c:ba:73:a6:21:d6:b4:c7:cb:b8:7b:ad:65:87:30:f5:82:
         99:38:08:14:9e:f8:b9:4c:94:a5:90:3e:49:b5:3d:86:33:cf:
         6a:55:69:5f:56:5f:a4:95:1e:05:48:3f:fb:b8:45:f3:e6:ef:
         87:d0:1d:ec:95:1d:7e:e7:f2:13:d2:c1:d2:b7:87:49:54:a9:
         80:74:97:3b:16:9e:79:4a:49:0e:58:fb:01:3c:97:55:15:4d:
         06:dd:c9:89:67:2c:ee:9e:3b:b3:19:54:7d:43:69:a0:31:96:
         5f:e0:1c:07:20:ad:3c:22:6d:34:3f:0b:00:f2:90:38:8c:d6:
         f5:8e:3d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:08:19 2025 by rpki-client