This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
File:                     rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft (raw, json)
Hash identifier:          //kjGYRwwuDxRcRR29p844aWlLiNoEnEzKtaGQwiVH8=
Subject key identifier:   76:1B:C7:F4:CD:69:EE:31:D9:33:D4:4A:D0:73:C5:36:09:0A:8F:9B
Authority key identifier: AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF
Certificate issuer:       /CN=af036816a317dd99d25383a32a681859c047b5ff
Certificate serial:       019AF1D1E31A7511CB799D3EE9485EDE7057
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
Manifest number:          11BD
Signing time:             Sat 06 Dec 2025 04:00:55 +0000
Manifest this update:     Sat 06 Dec 2025 04:00:55 +0000
Manifest next update:     Sun 07 Dec 2025 04:00:55 +0000
Files and hashes:         1: dv2-CubAEzDgm9-A6q6tebm8sb8.roa (hash: TsKOArcBjp/tutNspO+BZ3fNFViji2g9Yje5CxDDQXE=)
                          2: rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl (hash: 5pOqNbCvmXGQJCRLIalqbu3lLM5y+nqSH8hG6JMxHd4=)
                          3: uPmBIiMy_mwoAMwRr2tHb8mN_DQ.roa (hash: HueNCAsjAp0HpCdgeRDBaDeI3suLIq9xXvHT44od5wE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 04:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d1:e3:1a:75:11:cb:79:9d:3e:e9:48:5e:de:70:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af036816a317dd99d25383a32a681859c047b5ff
        Validity
            Not Before: Dec  6 04:00:55 2025 GMT
            Not After : Dec  7 04:00:55 2025 GMT
        Subject: CN=761bc7f4cd69ee31d933d44ad073c536090a8f9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:07:57:14:c0:2d:a3:fd:31:f3:46:64:f7:63:
                    cb:16:c5:39:c1:f8:15:c5:28:e8:9c:0a:9c:e5:1b:
                    bc:de:a4:dd:7d:0d:34:5b:77:71:37:92:49:ca:f7:
                    d6:d6:70:e4:58:70:08:04:75:3c:5e:44:39:a0:ba:
                    8c:a3:a6:5d:5d:fa:39:35:7c:1c:77:15:7f:c0:90:
                    3f:85:4f:e6:c6:a7:57:64:bc:c2:60:d8:36:65:49:
                    f0:60:18:d1:73:be:84:66:18:22:a7:26:19:ef:aa:
                    2b:f6:3a:58:bf:0d:1a:82:ec:f1:44:f5:6c:92:7f:
                    06:ee:f6:d9:87:39:f9:65:22:93:4d:1d:01:53:da:
                    64:f3:27:29:73:d0:4d:30:ec:78:99:10:5f:c5:ed:
                    e8:08:83:12:9c:aa:cf:32:a3:15:c6:a8:0b:7d:35:
                    fb:01:f2:cd:7c:13:dd:0c:c6:25:34:20:79:69:d1:
                    23:09:f3:aa:98:f6:80:46:dc:5b:46:5e:f0:19:bb:
                    bb:4e:d3:bd:72:14:61:d3:8d:ff:a9:3e:37:e5:62:
                    28:2b:49:4a:df:e3:15:b1:48:17:9f:9e:ae:b8:e1:
                    df:c3:53:88:83:a3:0d:c1:b4:11:36:d4:55:23:5f:
                    2f:ea:bf:37:38:8d:e7:71:a6:cb:25:c1:39:20:8c:
                    35:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:1B:C7:F4:CD:69:EE:31:D9:33:D4:4A:D0:73:C5:36:09:0A:8F:9B
            X509v3 Authority Key Identifier:
                keyid:AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:41:10:e7:4e:2c:43:f1:ff:9b:fa:2d:a4:8c:67:fa:04:01:
         c4:db:2f:ec:88:15:39:41:42:2c:c1:70:16:d8:65:93:24:fa:
         ab:5b:6c:06:0b:fd:3c:43:8b:52:a6:29:1d:e8:0b:aa:f3:c8:
         6f:d2:c3:c6:a2:20:be:de:2b:bc:70:0c:97:4d:39:2e:3d:37:
         c0:9e:58:95:89:ff:d1:93:a5:21:34:ab:23:3f:82:d4:3b:d0:
         0b:45:d0:d5:c9:04:3c:7b:d0:ce:9b:73:0d:3c:36:14:a9:5d:
         88:78:39:32:06:00:05:4c:c4:b6:1c:39:1e:41:3b:6b:4e:ae:
         7b:e7:b2:f4:6c:88:ce:bc:aa:ba:c3:1d:b9:ac:3e:0d:8d:ae:
         05:d4:5c:bd:e2:c5:66:3c:aa:9e:5a:e9:16:b8:a5:ed:0e:11:
         1a:2b:84:46:1b:3d:b0:2e:87:3a:43:2c:62:c2:f0:5a:f6:cc:
         02:1e:89:cf:37:20:7e:99:99:47:b4:77:20:27:d6:03:e1:42:
         23:e9:47:e4:71:87:83:66:bc:ec:ed:9b:85:b0:97:28:6d:ad:
         6e:88:95:ea:f6:1b:29:7e:8e:40:0f:41:97:32:41:95:b2:82:
         c0:bb:92:73:c3:1d:56:d6:75:9c:8a:ac:cf:5e:ed:4e:19:4b:
         45:9a:45:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:38:49 2025 by rpki-client