This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
File:                     woWhR044Yn4wGlUb4076RYKlzzk.mft (raw, json)
Hash identifier:          RFZD7dxvCgXU5d9KNqEF5mLWPMlSNI4Z2EZ7Wz++p+0=
Subject key identifier:   A2:A5:86:8B:79:A0:B8:50:0C:53:7B:2C:05:85:8E:74:E5:F2:AC:4C
Authority key identifier: C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39
Certificate issuer:       /CN=c285a1474e38627e301a551be34efa4582a5cf39
Certificate serial:       019AF389FE4B23AFD419095107C7A70E60F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
Manifest number:          1763
Signing time:             Sat 06 Dec 2025 12:01:38 +0000
Manifest this update:     Sat 06 Dec 2025 12:01:38 +0000
Manifest next update:     Sun 07 Dec 2025 12:01:38 +0000
Files and hashes:         1: BVOoOEB4gLobrgdxyI5-9zlLWgE.roa (hash: pTz91HcnSysQwLiCozFtJaXWh/WUZ9JSyAK8aIEd67c=)
                          2: TKlbM4JoTI14SvlWl9KxKwEmigw.roa (hash: YEHXScxruB3ZAlC0fbNpVAnfjw2qlaMRSrlrmf/M0XY=)
                          3: woWhR044Yn4wGlUb4076RYKlzzk.crl (hash: YMQ4GhuEh6x50u9WzV3EGmtWHH6o5wWYl1Ks2+pf0UU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 12:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:89:fe:4b:23:af:d4:19:09:51:07:c7:a7:0e:60:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c285a1474e38627e301a551be34efa4582a5cf39
        Validity
            Not Before: Dec  6 12:01:38 2025 GMT
            Not After : Dec  7 12:01:38 2025 GMT
        Subject: CN=a2a5868b79a0b8500c537b2c05858e74e5f2ac4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6f:f1:98:20:8d:d0:d3:00:ce:d1:52:71:77:
                    f5:67:99:5b:a8:e3:51:b7:bb:f7:3a:97:2d:f7:66:
                    b6:93:74:8e:5f:91:5b:f3:fd:4c:89:c7:d3:b8:85:
                    a0:6a:d7:86:3d:c4:90:41:c2:87:f7:42:9d:67:d2:
                    d1:b2:0b:2a:a1:72:44:d4:c0:d3:25:95:2f:85:ce:
                    56:01:09:dc:f2:19:4a:76:e0:a6:f3:c8:5b:b0:6a:
                    81:3c:17:3c:36:12:98:65:5a:02:3d:82:37:45:77:
                    18:5b:96:9d:05:a7:bd:f7:cc:aa:e8:d0:d3:f7:57:
                    26:4d:e6:78:72:54:68:2c:cd:33:cd:15:84:f0:ca:
                    17:03:ec:5c:25:ac:69:1f:36:6d:af:59:c4:8a:b2:
                    4d:6c:14:29:18:12:0f:43:33:17:8f:c0:45:2b:a6:
                    d4:33:18:56:43:02:78:a4:ea:7b:5e:c9:18:88:f9:
                    32:cd:94:7b:ab:50:28:30:01:b8:a2:fb:d2:d1:c5:
                    e6:c0:3e:48:29:84:9b:44:4c:6a:c8:8f:6c:b9:40:
                    c5:ae:6b:b4:cb:7f:16:9c:e1:65:3f:fa:35:66:e1:
                    ec:42:14:66:2d:f1:a6:49:a1:ba:f8:5b:35:d9:24:
                    69:06:a7:ea:0e:e2:12:76:ab:5e:1a:7f:c1:ea:28:
                    c8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A5:86:8B:79:A0:B8:50:0C:53:7B:2C:05:85:8E:74:E5:F2:AC:4C
            X509v3 Authority Key Identifier:
                keyid:C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:9b:be:c1:69:08:cf:41:d5:29:e6:49:a0:b0:2f:aa:62:28:
         56:df:0a:38:3f:55:c5:30:71:d7:0a:7c:78:da:d1:f0:bc:73:
         a1:67:08:cb:27:5d:ca:05:f2:79:f9:a2:5b:6c:1d:a4:68:e1:
         81:f8:8b:17:ba:6b:85:0c:e1:86:75:36:af:39:4e:75:55:d9:
         a6:db:ca:54:0e:00:09:23:2b:85:ab:39:11:22:f4:9a:c8:9d:
         30:9b:ee:2f:dd:dd:78:12:0a:25:b7:38:a9:a0:cc:6b:1b:77:
         5b:e8:d2:ae:04:ec:d8:d5:8c:65:6d:7d:cb:65:89:9c:b3:13:
         3e:63:93:fb:f1:82:db:0d:f6:59:3f:04:a3:5c:ec:ff:7a:85:
         1a:57:b8:89:77:e6:d2:e6:b3:77:4a:c9:4a:68:67:2d:e2:bf:
         3d:6e:f7:64:c2:3b:3b:2b:3f:5e:23:f4:92:db:fa:48:f2:d7:
         09:4b:f3:54:b7:59:62:33:1c:da:3a:8d:e4:08:7f:6f:72:b4:
         19:6e:01:2a:dd:99:b9:d6:f0:7e:51:e6:bf:a0:48:cf:92:b8:
         56:e3:15:8a:30:b7:a2:ad:eb:a7:91:32:8d:00:f5:ca:ee:c4:
         9d:1a:c6:21:72:85:a2:14:1f:8a:b7:00:33:a9:4c:dd:25:92:
         a9:93:15:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:44:57 2025 by rpki-client