This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
File:                     wOOV6sUDfy5HhZVvjai4aeu-_OA.mft (raw, json)
Hash identifier:          Talurxw3SZNSzf54D9oT7BeuA0dEM8+O8yZ/y9QUoYM=
Subject key identifier:   9C:50:97:D6:1B:7E:D5:68:3C:69:6F:60:C5:C8:F9:4C:1E:9A:72:0F
Authority key identifier: C0:E3:95:EA:C5:03:7F:2E:47:85:95:6F:8D:A8:B8:69:EB:BE:FC:E0
Certificate issuer:       /CN=c0e395eac5037f2e4785956f8da8b869ebbefce0
Certificate serial:       019AF31D554F6A6964C20663A18FFA147D97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wOOV6sUDfy5HhZVvjai4aeu-_OA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
Manifest number:          0E56
Signing time:             Sat 06 Dec 2025 10:02:57 +0000
Manifest this update:     Sat 06 Dec 2025 10:02:57 +0000
Manifest next update:     Sun 07 Dec 2025 10:02:57 +0000
Files and hashes:         1: wOOV6sUDfy5HhZVvjai4aeu-_OA.crl (hash: yLQI30EwqWv8EMCsI66zBDsaEfJd6nLL+2FH0JFFV8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wOOV6sUDfy5HhZVvjai4aeu-_OA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1d:55:4f:6a:69:64:c2:06:63:a1:8f:fa:14:7d:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0e395eac5037f2e4785956f8da8b869ebbefce0
        Validity
            Not Before: Dec  6 10:02:57 2025 GMT
            Not After : Dec  7 10:02:57 2025 GMT
        Subject: CN=9c5097d61b7ed5683c696f60c5c8f94c1e9a720f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:25:dd:31:9e:0d:26:da:c4:7e:80:74:1a:73:
                    7e:8d:df:cf:2f:64:f8:f3:ba:fc:fc:fb:1d:8b:4d:
                    e9:0c:53:ae:14:93:e7:b5:82:8b:05:c2:3a:4f:bd:
                    a4:27:54:95:e5:2c:27:ac:7b:a1:ab:50:62:3d:79:
                    7a:44:77:4c:8d:46:da:44:91:de:dc:36:13:02:e8:
                    42:03:cf:0e:20:6e:82:f4:2c:fa:5e:87:11:e0:8e:
                    2b:de:74:3a:46:8f:5e:5e:d7:04:05:31:1d:ec:e0:
                    39:c8:f5:4e:fe:6b:91:c2:c8:8f:98:df:d7:8f:b5:
                    5f:3c:23:91:4d:44:1e:4f:f2:65:1f:0a:9c:32:b8:
                    01:fe:c4:f1:c5:a2:f5:bd:7d:0c:ae:6e:8e:d9:35:
                    80:d1:c4:7b:23:eb:8c:fa:79:5b:c0:cd:63:bc:76:
                    d5:a3:a9:a5:d3:ef:59:60:01:a8:ca:af:97:d4:11:
                    b4:2c:d5:ae:3a:73:0a:b6:e4:f5:3a:6a:88:37:48:
                    37:40:5f:e4:63:a2:68:15:9a:fb:7f:68:98:9c:2a:
                    00:9d:f1:5e:7b:13:60:22:67:5f:fc:ad:23:d2:eb:
                    a8:22:a9:cf:f7:6b:56:31:99:af:a2:b1:a5:d0:42:
                    78:8a:75:73:eb:f1:58:de:8c:c7:0e:b7:a3:09:be:
                    55:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:50:97:D6:1B:7E:D5:68:3C:69:6F:60:C5:C8:F9:4C:1E:9A:72:0F
            X509v3 Authority Key Identifier:
                keyid:C0:E3:95:EA:C5:03:7F:2E:47:85:95:6F:8D:A8:B8:69:EB:BE:FC:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOOV6sUDfy5HhZVvjai4aeu-_OA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:93:21:8f:9c:7b:9e:36:7a:64:7f:60:71:55:25:cb:e6:ef:
         2b:1b:d2:80:47:46:cb:5f:ef:7c:95:41:84:40:1e:4a:62:75:
         70:52:14:67:ab:c2:ba:df:5b:2e:bb:6d:5d:23:e2:c9:e5:78:
         5d:77:2c:83:7a:e8:6d:96:74:af:a2:50:e2:ef:55:dd:8a:b5:
         9d:d1:70:fe:2c:03:92:d8:3e:73:47:1d:1f:e5:d1:19:6e:85:
         0f:e7:34:06:3e:db:60:50:9a:1e:2b:d6:87:07:bc:7f:9a:05:
         b6:07:8d:77:ac:5f:fc:0a:7b:67:7f:b8:56:3b:aa:8b:a5:63:
         03:12:ef:40:8e:00:b3:f3:79:bf:6d:d3:fe:11:29:2c:35:e0:
         01:a1:5a:ac:0f:a0:40:40:55:27:b1:04:74:14:d0:57:cb:a9:
         5d:0d:56:c5:58:03:44:03:c5:e9:b2:2a:b0:a6:58:f0:71:e4:
         08:dd:cc:ed:66:3a:00:6b:27:65:a7:1e:40:fc:58:5a:61:05:
         18:65:1b:28:9e:a7:d9:d6:30:e3:de:77:f1:01:da:43:36:8c:
         3c:17:b1:f2:2a:e4:e6:63:f6:10:cf:f2:b7:17:7a:2e:55:a8:
         e5:53:1a:1b:0d:7b:b9:55:ac:cc:81:2e:f2:d8:df:fd:1c:70:
         ca:e1:f1:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzHVVPamlkwgZjoY/6FH2XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZTM5NWVhYzUwMzdmMmU0Nzg1OTU2ZjhkYThiODY5ZWJi
ZWZjZTAwHhcNMjUxMjA2MTAwMjU3WhcNMjUxMjA3MTAwMjU3WjAzMTEwLwYDVQQD
Eyg5YzUwOTdkNjFiN2VkNTY4M2M2OTZmNjBjNWM4Zjk0YzFlOWE3MjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSXdMZ4NJtrEfoB0GnN+jd/PL2T4
87r8/Psdi03pDFOuFJPntYKLBcI6T72kJ1SV5SwnrHuhq1BiPXl6RHdMjUbaRJHe
3DYTAuhCA88OIG6C9Cz6XocR4I4r3nQ6Ro9eXtcEBTEd7OA5yPVO/muRwsiPmN/X
j7VfPCORTUQeT/JlHwqcMrgB/sTxxaL1vX0Mrm6O2TWA0cR7I+uM+nlbwM1jvHbV
o6ml0+9ZYAGoyq+X1BG0LNWuOnMKtuT1OmqIN0g3QF/kY6JoFZr7f2iYnCoAnfFe
exNgImdf/K0j0uuoIqnP92tWMZmvorGl0EJ4inVz6/FY3ozHDrejCb5VVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxQl9YbftVoPGlvYMXI+UwemnIPMB8GA1UdIwQY
MBaAFMDjlerFA38uR4WVb42ouGnrvvzgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd09PVjZzVURmeTVIaFpWdmphaTRhZXUtX09BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy80MjBhMTMtZjBhNS00ZGIwLTkwNDgt
MTU5NThhODlhMDEyLzEvd09PVjZzVURmeTVIaFpWdmphaTRhZXUtX09BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy80MjBhMTMtZjBhNS00ZGIwLTkwNDgtMTU5NThhODlhMDEy
LzEvd09PVjZzVURmeTVIaFpWdmphaTRhZXUtX09BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfpMhj5x7
njZ6ZH9gcVUly+bvKxvSgEdGy1/vfJVBhEAeSmJ1cFIUZ6vCut9bLrttXSPiyeV4
XXcsg3robZZ0r6JQ4u9V3Yq1ndFw/iwDktg+c0cdH+XRGW6FD+c0Bj7bYFCaHivW
hwe8f5oFtgeNd6xf/Ap7Z3+4Vjuqi6VjAxLvQI4As/N5v23T/hEpLDXgAaFarA+g
QEBVJ7EEdBTQV8upXQ1WxVgDRAPF6bIqsKZY8HHkCN3M7WY6AGsnZaceQPxYWmEF
GGUbKJ6n2dYw49538QHaQzaMPBex8irk5mP2EM/ytxd6LlWo5VMaGw17uVWszIEu
8tjf/RxwyuHxAw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:31:03 2025 by rpki-client