This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft
File:                     RwwsmDticWkhhXHGuClHru6l984.mft (raw, json)
Hash identifier:          S2TCcSzQUHGZoJWUfvkNgo5Q+2LhwD7bL/eSjEqGDK8=
Subject key identifier:   73:74:11:9F:FB:55:24:58:BC:15:05:67:7E:E4:95:F4:05:E7:9E:21
Authority key identifier: 47:0C:2C:98:3B:62:71:69:21:85:71:C6:B8:29:47:AE:EE:A5:F7:CE
Certificate issuer:       /CN=470c2c983b627169218571c6b82947aeeea5f7ce
Certificate serial:       019AF1D1977D49299B8423D98E3580045F4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft
Manifest number:          1765
Signing time:             Sat 06 Dec 2025 04:00:35 +0000
Manifest this update:     Sat 06 Dec 2025 04:00:35 +0000
Manifest next update:     Sun 07 Dec 2025 04:00:35 +0000
Files and hashes:         1: B3HRVDq17dmYEd_4fHtjlcnZx1I.roa (hash: bT7FTTeSzclYhdeU0fsaRQxAGT8mqDYR/4kWlCp4d8o=)
                          2: RwwsmDticWkhhXHGuClHru6l984.crl (hash: VaVzCbfhWn64VZKQBE2Ye9QzRAN4Ybxwu3m2PcTTbhk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d1:97:7d:49:29:9b:84:23:d9:8e:35:80:04:5f:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=470c2c983b627169218571c6b82947aeeea5f7ce
        Validity
            Not Before: Dec  6 04:00:35 2025 GMT
            Not After : Dec  7 04:00:35 2025 GMT
        Subject: CN=7374119ffb552458bc1505677ee495f405e79e21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1b:37:9d:70:c0:12:dd:8a:fe:be:44:c1:71:
                    8e:5e:62:ba:1c:02:10:cd:53:9e:ae:5d:f8:10:ba:
                    5b:78:04:1c:4c:a2:b3:f8:4a:4b:64:79:b0:f6:37:
                    41:a3:a2:16:8f:24:89:ea:a6:81:e2:31:6f:29:e1:
                    a6:73:63:fb:b9:25:f1:61:63:fb:71:2c:fd:52:e3:
                    43:f7:73:08:c9:2e:ef:87:8d:97:f8:13:cc:b9:fd:
                    6c:6f:e2:7d:02:9c:b7:71:1d:56:ab:39:8d:79:95:
                    97:c0:73:90:4b:7d:15:09:7c:78:c4:ea:44:06:d3:
                    07:0c:55:49:a6:0f:1e:4b:6f:83:54:81:e5:a2:0f:
                    d1:15:e6:bc:0f:fa:4c:97:91:55:91:82:cb:61:33:
                    1c:b9:8e:8b:bd:5e:4a:c7:75:06:5c:fe:b0:d8:af:
                    ac:27:ab:02:d0:c7:80:0b:42:e3:f1:dd:bb:04:5a:
                    0b:8d:07:02:ac:a0:63:d0:5e:9e:2f:bd:9e:b5:11:
                    40:56:db:9e:bc:12:34:a2:f2:e4:d2:22:b4:30:93:
                    ea:65:f6:c7:d6:e5:0e:91:8a:cd:e7:dc:ae:1b:16:
                    cb:c2:1d:1e:05:91:66:5f:07:0c:f6:fc:8a:78:76:
                    e4:87:e3:38:49:09:76:08:38:f0:45:22:b1:f3:d5:
                    06:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:74:11:9F:FB:55:24:58:BC:15:05:67:7E:E4:95:F4:05:E7:9E:21
            X509v3 Authority Key Identifier:
                keyid:47:0C:2C:98:3B:62:71:69:21:85:71:C6:B8:29:47:AE:EE:A5:F7:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:67:64:43:84:47:d1:ea:9f:b7:f0:4e:4e:48:86:b6:60:ce:
         38:f4:a6:b1:ec:f3:86:0f:ca:96:dd:16:70:88:ba:e3:4d:f2:
         1d:f0:ed:84:69:52:d3:17:d2:a9:c6:01:1b:1c:0f:dc:6a:4f:
         4c:1f:15:65:6c:1b:85:4d:b8:25:1f:63:1f:5a:34:95:64:10:
         15:da:91:9d:39:e9:36:5f:6d:ae:bb:68:89:a5:2e:9e:2f:88:
         d3:36:f5:53:10:f6:30:77:52:2b:9b:eb:71:06:c5:ce:89:2d:
         3c:ce:18:fa:b6:6a:4b:d6:a6:d9:3c:fd:15:71:d8:ca:93:0e:
         57:b8:36:69:50:c9:78:8d:cc:a2:e3:1a:cf:ef:be:17:b6:77:
         6d:36:47:92:28:6e:61:0c:56:f8:f1:9f:ec:4e:bc:4a:9c:c4:
         95:27:4d:7f:84:f2:82:2a:43:73:8c:79:b3:f9:b0:11:95:07:
         82:35:46:22:6b:85:a8:35:f0:34:8b:66:5b:f5:ab:e0:7d:c9:
         ee:a3:1e:97:f1:a5:0e:ba:43:37:c1:b2:f7:c2:2c:fa:29:82:
         9a:37:24:a3:2d:15:92:a8:1f:6c:c5:7d:61:6d:a8:05:7b:37:
         7c:2b:3a:10:f2:41:e2:a9:e1:5c:3b:e6:b2:92:4b:80:ab:15:
         11:4e:37:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:31:26 2025 by rpki-client