This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.mft
File:                     wnaouodMP73a00TQMliz4sBNe8s.mft (raw, json)
Hash identifier:          krDahi0ii+tqSTUXfKnVr/2ENRBxvA6VWl+1PCRNs/Q=
Subject key identifier:   F6:5C:80:54:8D:5C:21:5C:74:E7:31:E3:9F:04:4F:D6:8C:EB:E9:72
Authority key identifier: C2:76:A8:BA:87:4C:3F:BD:DA:D3:44:D0:32:58:B3:E2:C0:4D:7B:CB
Certificate issuer:       /CN=c276a8ba874c3fbddad344d03258b3e2c04d7bcb
Certificate serial:       019AF23FA136D911015C919477E0857D5F92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wnaouodMP73a00TQMliz4sBNe8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.mft
Manifest number:          1091
Signing time:             Sat 06 Dec 2025 06:00:47 +0000
Manifest this update:     Sat 06 Dec 2025 06:00:47 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:47 +0000
Files and hashes:         1: SnUCCZZYum042g1gYXMaVoOXuMU.roa (hash: M/QoXy5WhPTKQgTBgL09lFPLsW1ii5YQSa5PEJIzgjY=)
                          2: TUiCM4KG56kUFHyQ4z62cK1w4aU.roa (hash: oeiYwDcvLf1IwsozoVBwiO3FZCf7r8vq2XpYtiKcyYc=)
                          3: oxJHCUyfUdzBPumLPvgBptPxw7c.roa (hash: qFqZ06uVAWLf4xiUdta/ot3JkbRtO7iQ5FyDbtRBuKE=)
                          4: wnaouodMP73a00TQMliz4sBNe8s.crl (hash: PJw9wx1W2fIej+6dQyVoVoY6YpNRV8lBEdg0yeJeEt0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wnaouodMP73a00TQMliz4sBNe8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:a1:36:d9:11:01:5c:91:94:77:e0:85:7d:5f:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c276a8ba874c3fbddad344d03258b3e2c04d7bcb
        Validity
            Not Before: Dec  6 06:00:47 2025 GMT
            Not After : Dec  7 06:00:47 2025 GMT
        Subject: CN=f65c80548d5c215c74e731e39f044fd68cebe972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:84:66:36:fd:79:22:37:b1:a2:fc:09:2d:71:
                    36:9b:d0:11:b1:d3:18:e2:94:7c:3a:9c:54:e3:0a:
                    b1:03:c6:0d:70:6a:c1:d0:59:61:28:0e:b8:20:09:
                    41:7e:b4:5e:94:d0:cc:4d:ba:31:2a:f8:ba:a2:5d:
                    c4:f9:fa:3e:8f:09:dc:0f:5e:23:d5:b1:bb:cd:df:
                    04:88:18:f5:0d:3e:32:30:f1:e8:a3:94:f2:34:03:
                    81:95:ca:5d:6c:6f:5f:64:6f:7b:4e:57:58:b1:2f:
                    8d:91:05:d8:f7:7a:6b:63:6d:02:6f:d1:34:a3:78:
                    58:96:08:28:8c:47:51:ed:80:06:46:71:9d:57:a3:
                    c1:a3:de:34:f9:41:ab:78:91:20:8c:39:7a:be:6a:
                    c9:c8:9a:f5:cc:ff:90:0a:b6:44:70:e6:2c:ef:d2:
                    f3:33:06:48:16:4f:51:ff:61:2c:94:3a:ff:44:24:
                    8a:aa:b3:23:0c:45:db:87:92:7f:80:35:c2:8a:27:
                    c5:b1:24:d9:cf:1f:d4:aa:72:17:34:bb:81:2a:11:
                    1a:be:0a:e9:95:80:9c:e7:f6:ae:f8:9f:87:51:5a:
                    2e:34:bd:83:4d:a9:ff:46:58:36:b1:20:97:be:d3:
                    ac:32:0c:b7:c4:f5:85:bc:a9:db:33:e2:4b:29:54:
                    07:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:5C:80:54:8D:5C:21:5C:74:E7:31:E3:9F:04:4F:D6:8C:EB:E9:72
            X509v3 Authority Key Identifier:
                keyid:C2:76:A8:BA:87:4C:3F:BD:DA:D3:44:D0:32:58:B3:E2:C0:4D:7B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnaouodMP73a00TQMliz4sBNe8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:e2:98:01:96:9f:32:a2:76:54:75:a7:fc:79:6d:08:54:d5:
         1f:b8:23:94:31:32:1a:2a:fd:2c:20:4b:ee:54:04:0e:f3:a8:
         35:96:dc:b3:a6:55:a5:c3:04:f7:5c:5e:63:1d:d2:22:c1:08:
         89:ec:cb:1b:82:97:dd:e9:0a:dc:8a:08:b3:5b:94:37:05:37:
         05:27:8d:c2:8f:0f:0d:40:b6:53:96:38:5f:cc:69:0a:b9:b5:
         c1:c3:73:56:1c:40:d6:56:ea:33:18:66:ba:65:27:16:8a:d1:
         bf:41:e6:f0:b4:a2:d8:8c:c0:3c:40:f2:5c:fc:be:7a:ce:08:
         0b:33:81:cb:45:b9:3d:c4:ec:7f:dd:2e:76:32:c5:f9:b8:d9:
         da:cb:2e:16:09:5a:8c:ed:ca:6b:bd:09:2d:dd:f5:f5:1a:c1:
         24:1d:9e:d6:63:71:06:3a:19:71:a1:9e:b1:49:e0:29:d5:8f:
         18:d2:ba:75:5e:63:f9:e6:73:51:54:ad:12:a1:ab:51:9c:be:
         c3:63:97:e4:27:63:3e:a8:c7:14:7f:a9:95:51:b2:08:66:47:
         52:c9:18:a5:81:c7:a8:83:c1:22:85:74:8b:fe:06:74:c1:ed:
         a4:28:32:59:81:06:bb:9e:06:d5:16:77:f0:d0:b7:94:cc:ee:
         da:fd:5a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:31:40 2025 by rpki-client