This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/4f08a5-432f-48fc-bd8b-fb71bd4545b0/1/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.mft
File:                     wJiRTLCpRUQPhN6vPz2X_Hf9Js4.mft (raw, json)
Hash identifier:          7YfYJl2B4jP2tXs/urtDqSHG05hNYsWDe6QpvAX+ePI=
Subject key identifier:   13:19:CE:48:0F:CC:EE:04:46:91:A9:EC:88:80:FC:66:38:1A:0F:50
Authority key identifier: C0:98:91:4C:B0:A9:45:44:0F:84:DE:AF:3F:3D:97:FC:77:FD:26:CE
Certificate issuer:       /CN=c098914cb0a945440f84deaf3f3d97fc77fd26ce
Certificate serial:       019AF2099386745572B671FB175C34EB034E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/4f08a5-432f-48fc-bd8b-fb71bd4545b0/1/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.mft
Manifest number:          16F4
Signing time:             Sat 06 Dec 2025 05:01:45 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:45 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:45 +0000
Files and hashes:         1: f3Dh_2Y-zNZkcN90_TpfLSQTddk.roa (hash: vypiT7TdTiicDqreOdfVGNkJ1vOMr5vmxtAo64EoIdw=)
                          2: wJiRTLCpRUQPhN6vPz2X_Hf9Js4.crl (hash: dsxQsdSrdsD7RGfSgVZxqOclu2Yd79EBnUXua9F6fRw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/4f08a5-432f-48fc-bd8b-fb71bd4545b0/1/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/4f08a5-432f-48fc-bd8b-fb71bd4545b0/1/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:93:86:74:55:72:b6:71:fb:17:5c:34:eb:03:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c098914cb0a945440f84deaf3f3d97fc77fd26ce
        Validity
            Not Before: Dec  6 05:01:45 2025 GMT
            Not After : Dec  7 05:01:45 2025 GMT
        Subject: CN=1319ce480fccee044691a9ec8880fc66381a0f50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:77:36:6e:fe:e3:76:45:e5:f7:1c:18:c8:af:
                    37:fa:8a:5d:22:ac:9b:ec:db:18:99:92:2d:58:d0:
                    e8:73:00:fe:d6:f6:8c:8a:97:2e:cf:15:12:49:50:
                    01:d2:e2:81:89:31:92:95:90:2e:60:22:9f:9a:fb:
                    eb:22:4a:ab:1c:84:7e:b4:88:4a:a8:39:35:91:42:
                    f6:58:7b:82:58:ac:f4:13:49:b9:39:aa:83:82:bf:
                    4d:5f:db:c0:4e:c1:bb:7c:9a:c7:8f:5c:af:3d:66:
                    87:85:21:7e:eb:15:9d:f2:a5:7c:34:66:b4:71:ec:
                    a8:5d:b2:c7:db:54:97:b1:eb:cd:f0:33:9f:30:fc:
                    0c:b7:8c:47:a5:56:05:68:a4:a7:72:14:bf:de:72:
                    57:fa:e4:a3:82:d0:e2:15:24:e2:c2:5e:2f:d7:94:
                    a7:cb:c3:a1:32:21:c3:9d:87:56:f6:40:3d:1b:eb:
                    ec:fd:11:92:66:6f:90:25:bf:b6:59:d6:92:b3:81:
                    d3:89:29:e7:ee:ba:cf:94:75:0c:57:b6:46:10:a8:
                    a5:8b:88:e1:00:85:08:15:94:20:12:e6:c2:47:c3:
                    7d:a5:8b:e2:55:7b:c0:d9:06:f8:a3:00:6a:a2:73:
                    b6:6f:62:48:3d:6c:f0:b5:0f:dc:25:9c:11:7a:55:
                    65:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:19:CE:48:0F:CC:EE:04:46:91:A9:EC:88:80:FC:66:38:1A:0F:50
            X509v3 Authority Key Identifier:
                keyid:C0:98:91:4C:B0:A9:45:44:0F:84:DE:AF:3F:3D:97:FC:77:FD:26:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4f08a5-432f-48fc-bd8b-fb71bd4545b0/1/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4f08a5-432f-48fc-bd8b-fb71bd4545b0/1/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:ab:0a:10:f8:e9:8a:b7:c5:41:7e:fe:fd:24:95:c6:93:18:
         cc:1c:b3:88:bc:91:0b:f9:a3:02:81:72:e0:25:79:49:de:5f:
         0b:ea:83:55:00:2a:09:18:b9:a3:32:eb:7b:81:cc:13:20:28:
         61:77:ce:69:e0:29:e0:e6:b8:d6:ad:bb:8a:92:f2:16:e9:69:
         1a:76:22:c0:39:f6:80:a6:df:51:b2:8e:26:32:a2:be:29:b1:
         77:06:ce:4b:9d:66:1d:b8:7b:43:dd:e1:27:76:a0:23:88:6b:
         44:56:18:ea:7c:9b:16:6c:f9:3c:c9:9b:dd:8d:a1:16:da:a0:
         f8:8b:5d:fb:ff:5f:39:b6:7b:b4:97:40:75:2a:af:54:d8:fc:
         6c:d9:d4:a6:6e:08:60:f7:d9:82:9d:49:8c:9b:d6:6d:5d:52:
         f7:a8:a4:e5:3d:c6:b3:94:49:51:3c:66:06:f8:8b:75:49:65:
         61:03:9b:af:12:3b:5b:92:3a:ed:20:db:54:96:78:7a:15:57:
         d5:d1:75:ee:a0:3c:dd:69:29:c1:dc:27:ce:4b:aa:12:54:20:
         9f:b9:b8:4d:78:62:75:e8:d8:ad:27:86:67:30:01:39:b7:36:
         d4:9a:5b:da:1f:39:7f:1e:fd:74:c5:fa:85:54:09:1f:17:e6:
         ea:86:b2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:57:34 2025 by rpki-client