This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.mft
File:                     WCrDWJ_FOauFJpD4XZ8_fyNOw5s.mft (raw, json)
Hash identifier:          8nIJTa3B+VPs2CycsV4Z3qC38CNPUIFTV5IGkluXKHE=
Subject key identifier:   1F:2D:66:A0:40:67:EF:89:97:BC:4A:E9:1E:E3:B5:BC:77:E5:80:83
Authority key identifier: 58:2A:C3:58:9F:C5:39:AB:85:26:90:F8:5D:9F:3F:7F:23:4E:C3:9B
Certificate issuer:       /CN=582ac3589fc539ab852690f85d9f3f7f234ec39b
Certificate serial:       019B31FAE9732C7FEF43B299A75C4AC96586
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.mft
Manifest number:          0A0C
Signing time:             Thu 18 Dec 2025 15:01:25 +0000
Manifest this update:     Thu 18 Dec 2025 15:01:25 +0000
Manifest next update:     Fri 19 Dec 2025 15:01:25 +0000
Files and hashes:         1: PkwWwJkvXsUEh6Cv0L7IgIGfFS8.roa (hash: ldaxlOWxdPdxsizqAkQ8NMKwi+hD26UCyicpS3F4O+A=)
                          2: WCrDWJ_FOauFJpD4XZ8_fyNOw5s.crl (hash: +PPPxKg39hhpJkUd+sjJHsWaeLMcd+MsojsGLLKrV8M=)
                          3: zlPIwjDPqeKD3uFdmxv9hznl_LA.roa (hash: sBzI0OQdYuCXwCE1xwy5akb2HUt9JvXsMA0Ia8KRcEk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 13:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:31:fa:e9:73:2c:7f:ef:43:b2:99:a7:5c:4a:c9:65:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=582ac3589fc539ab852690f85d9f3f7f234ec39b
        Validity
            Not Before: Dec 18 15:01:25 2025 GMT
            Not After : Dec 19 15:01:25 2025 GMT
        Subject: CN=1f2d66a04067ef8997bc4ae91ee3b5bc77e58083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dc:b6:6b:ac:66:30:26:1b:7b:70:de:0a:9b:
                    32:56:7b:31:fd:9d:1c:f4:36:95:34:c0:df:1d:cf:
                    5d:c1:0c:52:b5:9d:76:33:eb:ed:a1:82:61:5f:1b:
                    40:02:0e:e7:2f:f9:a9:2a:dc:fa:fc:76:e1:ae:25:
                    e4:00:34:c5:80:fd:f6:a2:56:03:8a:ab:76:c9:2f:
                    f6:b7:20:b5:2b:42:c2:6f:08:ad:15:72:49:87:36:
                    77:74:f0:b4:2c:77:14:f2:83:84:b6:8d:ba:0d:2c:
                    11:e8:cf:43:50:dc:85:d0:24:7e:80:6d:ee:87:d5:
                    db:73:9a:a9:59:65:4d:8a:6b:04:58:f5:22:5c:ac:
                    41:6f:60:35:b0:03:9a:7e:cb:fe:47:2d:f3:69:d0:
                    cd:55:62:e4:46:ed:92:19:7a:35:81:be:f2:a9:d8:
                    75:c7:bb:cc:8a:c6:10:61:b8:4b:70:54:c8:d7:e1:
                    8c:ab:a8:a3:f3:e0:d6:0f:d5:8c:42:96:a2:78:20:
                    39:dc:ce:e8:4e:0e:e5:19:e6:3a:37:6b:e9:65:3c:
                    2c:93:98:89:2c:e5:2c:95:4b:01:f2:60:95:23:99:
                    4b:01:d7:8f:2b:35:dc:cc:12:cc:65:72:10:8c:9c:
                    04:36:29:2f:15:98:f2:46:00:8a:27:97:bd:d2:55:
                    4b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:2D:66:A0:40:67:EF:89:97:BC:4A:E9:1E:E3:B5:BC:77:E5:80:83
            X509v3 Authority Key Identifier:
                keyid:58:2A:C3:58:9F:C5:39:AB:85:26:90:F8:5D:9F:3F:7F:23:4E:C3:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:03:fd:dd:78:2e:86:a1:c6:05:a5:52:24:7a:78:79:45:e9:
         46:5f:29:60:5f:ba:21:d3:e3:af:58:85:e0:e4:36:6d:bd:32:
         40:37:08:c3:03:eb:6d:6f:6e:3a:19:d7:16:18:bd:ff:e9:b9:
         00:38:81:b1:f1:97:ec:f4:6b:c0:64:be:68:8a:a8:5e:06:9a:
         fc:98:94:16:5c:e4:3a:55:81:1b:c6:5d:24:74:66:77:94:72:
         aa:22:1b:78:f4:8b:01:15:fb:51:7b:03:66:b4:95:53:18:36:
         4c:36:df:29:49:40:2f:b9:e1:9f:a7:e7:bd:56:0c:59:20:7e:
         5b:f8:59:73:08:5a:ad:dc:ce:5c:f4:31:a4:b2:2e:6c:30:ab:
         1e:c2:86:73:a1:2b:cb:a9:17:cc:1c:37:a8:17:37:a5:4e:1e:
         ba:f4:0c:36:49:0f:71:6c:f5:b0:ab:a9:3b:d6:0f:55:4f:a7:
         b0:34:12:04:d6:75:30:6d:ba:21:ad:c0:fb:7d:be:9f:07:bf:
         a8:2b:8d:92:4c:73:6b:18:2a:fc:c9:e2:fe:6c:89:e8:b0:77:
         c2:a7:b1:74:dd:25:c0:1b:e2:cc:b6:d3:94:65:75:d8:d8:50:
         81:e8:48:b8:e7:06:8e:d0:9d:49:23:88:61:1c:53:29:6a:6a:
         d9:16:2c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 20:37:51 2025 by rpki-client