This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
File:                     1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft (raw, json)
Hash identifier:          s62Dzpx1NdN7bpPAipA8WshdyfOZbwTmOErq9QoKGig=
Subject key identifier:   03:94:D1:39:15:8E:11:CE:D3:70:71:E8:3E:38:C4:80:0F:B2:9B:67
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Certificate issuer:       /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial:       019AF31B8528F82F805C210269EA853EFC1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
Manifest number:          0D75
Signing time:             Sat 06 Dec 2025 10:00:58 +0000
Manifest this update:     Sat 06 Dec 2025 10:00:58 +0000
Manifest next update:     Sun 07 Dec 2025 10:00:58 +0000
Files and hashes:         1: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl (hash: epPESKxFDcuxGWeIAHDaoItL+sjP3yGd5BgryN8P6ig=)
                          2: 90yTu1ZvBXsj2zvvf_cf6smqsAY.roa (hash: d0+vl+KGJdXe44PbjywGVSh4mi3ZR2K5B0XyBELq85Q=)
                          3: 9ESb3nU5cbHcLFUhNEpqkvmhj_4.roa (hash: LHv33BgF/+ayoq8UGd9MWgrIjXrwU1xij1zgE5RnA6k=)
                          4: MPC4WGBwWzUKQ4MIf9vheq3ljf8.roa (hash: X1yT4PQqSCT8h7K1UyGvzdMze10lM3EBcX0jmIp7dhY=)
                          5: QWJn3q0Lr5gGgTezlymenkp6b1w.roa (hash: FCKvF/NqXSUJyECvMZNBgT9ANA+px+Gc/iswj+zUJEI=)
                          6: UCuT9DdR1uf2eaUQ5W61UcGGe5s.roa (hash: el2ZUvN5cR0Xlq/3JU37CLxdd+Op9S06q4bKQS6tg4A=)
                          7: WkuL6FUDIfRDF14nPyGZlNz9TC8.roa (hash: D4GYrfLtGgd4PpXaht+eqgT9SvcVMk1Cz7ndFDRulUI=)
                          8: X2UArr6NpSeUa_r53UJKN_WcE2Q.roa (hash: 7e3/Cphtp59zFTi7++qenlH+zOQWGj2nPifYLt+4tUo=)
                          9: bFcZDGbJEt3C25QZpuOG1dcl73c.roa (hash: k66etaeQpibh+6ldsVEJ1epfT/mPN5OS3FzuNI+MZuc=)
                          10: du_MXb8GLOewa44v34_3lLw6dnw.roa (hash: a2a2dhTFIXXWOYnBPekfjuJxO8TA9JqXeDf3zAfH4X8=)
                          11: gczW35cqQlBADOQAWeSQ-bYxRMo.roa (hash: 9jHvOrJ1ViTa6G5Us1NPMW3J9nbWdq6Gknf3R0RABUE=)
                          12: gq4-qZZLFBuurcOJ9Pxlu03_UHo.roa (hash: xfn9bc1Rb+filmBHMlKSU98Tci6TOw0mmXsz+N116Q0=)
                          13: n3IhM1zBRa6pSVaHWbwRlWlBc9c.roa (hash: cG88RiwnklB+hGfdAs9rfXTkd4LxMdYdGB9RXUfaE4M=)
                          14: pwMO6ssE5D-O8Xyj-6Cg12qPD5Q.roa (hash: jNpNRBAX1vK+/7+Nq5SPgMC/QUrkJvx5kFMoBcHUw5U=)
                          15: sUUBdGAF9TJecEG5749G1YWJ5bU.roa (hash: GKDRtzmqCQRfHRzfpLrnvEf31pPDp4sPaetIcigYVig=)
                          16: wz-KZ5KX8jTmXScvr3XeQj04j3I.roa (hash: RxnlIvfwP2SpAoX0QlB2pLFsNqlUFCANi/oFyJ3SgAs=)
                          17: ycORncNA45mJd3RcVB4kkVyYyek.roa (hash: 73ViTZ9duoNfFxXb5BewNjClF8EYFoeTaVe/H//+q5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 10:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1b:85:28:f8:2f:80:5c:21:02:69:ea:85:3e:fc:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
        Validity
            Not Before: Dec  6 10:00:58 2025 GMT
            Not After : Dec  7 10:00:58 2025 GMT
        Subject: CN=0394d139158e11ced37071e83e38c4800fb29b67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1b:18:db:1c:78:13:c1:12:5c:23:c0:a7:44:
                    25:d6:58:17:57:65:16:93:c1:77:4c:0a:7b:c8:3c:
                    cb:2e:30:28:a4:a1:00:6e:e4:b9:06:c1:b1:cb:e6:
                    be:2a:5a:70:8e:fd:a5:bd:f1:7b:04:bd:38:2d:ee:
                    0b:2a:d6:cb:be:57:a4:28:63:20:65:e0:35:41:b0:
                    b0:d9:aa:d6:fb:0a:ed:88:53:48:f3:73:ea:c9:6d:
                    1b:84:50:7a:31:3a:88:b4:76:b5:c7:3f:18:1d:31:
                    79:9b:96:84:e8:09:e3:2b:97:bd:ab:4c:10:34:f1:
                    16:a2:e5:84:de:0c:c0:8e:df:d8:f0:c5:d9:c9:70:
                    33:cd:b5:5b:b6:20:55:8d:9d:7b:9b:4f:35:17:04:
                    17:5f:f6:51:a5:81:b9:10:a8:52:2a:b8:53:cf:92:
                    eb:51:e4:0a:92:12:8e:4a:d1:a5:4b:71:ca:12:dd:
                    ca:3c:f7:6f:1a:34:9f:51:14:75:3e:cb:0c:0d:0b:
                    11:70:ec:ff:97:37:27:8b:df:8e:50:5f:51:7c:99:
                    28:c7:21:05:8b:50:c5:30:2b:aa:3c:25:1b:c0:e5:
                    42:a2:2d:cb:b0:3f:72:6d:68:5d:6b:0d:85:8e:c3:
                    90:5a:ec:1d:00:71:4c:06:16:16:cd:25:f7:a7:69:
                    4e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:94:D1:39:15:8E:11:CE:D3:70:71:E8:3E:38:C4:80:0F:B2:9B:67
            X509v3 Authority Key Identifier:
                keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:5a:09:46:bf:30:44:fd:de:05:e9:6e:32:95:a6:fb:54:f0:
         f6:30:fb:92:34:00:df:bd:d7:c3:d8:03:30:47:50:35:ca:6d:
         6e:a0:97:52:11:da:62:00:1d:66:53:92:16:8d:12:ba:9a:5d:
         a7:b5:15:f7:4c:fb:dc:55:d0:2d:dd:ab:a8:c3:5d:e8:36:05:
         59:d6:80:67:62:57:38:e7:15:63:90:2c:7e:39:4e:2a:01:5f:
         14:51:b4:b8:cc:36:a7:7b:35:e1:0d:e1:81:54:aa:f6:a0:98:
         8d:93:10:96:00:8d:af:53:99:39:e8:ef:93:5b:34:9f:71:d3:
         14:a3:0b:a8:fb:01:21:0e:05:f4:e4:19:20:ab:69:72:70:ce:
         fb:42:71:53:79:52:e9:fb:7f:13:bb:a1:9f:28:e2:f6:42:c5:
         51:87:f7:43:e9:e8:79:6b:92:db:ba:a2:7b:6f:8f:8c:dd:00:
         9a:66:79:e7:f7:d3:1c:74:2f:10:e8:14:40:6d:98:66:75:77:
         25:c7:4b:28:21:d3:06:41:eb:c2:3a:4d:c2:8a:36:7d:8f:3f:
         5c:3f:71:0c:21:97:59:24:b1:2e:d9:21:f1:da:af:2c:40:79:
         a3:d4:d2:98:0d:83:b7:ed:2d:31:65:1f:5c:c2:0a:6b:44:23:
         f8:01:60:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:50:00 2025 by rpki-client