This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
File:                     BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft (raw, json)
Hash identifier:          BIEY8fPc3d8eHdSQGMvgEEOyX9LeisjjOGKvYkFRfMY=
Subject key identifier:   A6:1A:92:23:B6:82:0F:5A:4C:E7:3B:32:FB:3D:AE:43:14:73:38:67
Authority key identifier: 05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E
Certificate issuer:       /CN=056ad2f4ffc5872e35a429e53ef179925ff4215e
Certificate serial:       019AF3524ABED58537840FA7FEDA3DA893C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
Manifest number:          176C
Signing time:             Sat 06 Dec 2025 11:00:47 +0000
Manifest this update:     Sat 06 Dec 2025 11:00:47 +0000
Manifest next update:     Sun 07 Dec 2025 11:00:47 +0000
Files and hashes:         1: 74ie5YhiWCpEdYw1osP6lOLENo8.roa (hash: AISylC4LJSWYY19JWF/C07coR9FQEVOV3zwowa8Jq8A=)
                          2: BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl (hash: 03Gt53IUDRW08vECiDBCO9n7c+P3FcEL79kTHiJb+98=)
                          3: CFOEQzJpDfyIX_oaNWeu5lzrryg.roa (hash: IIn5PGhc9iJknynMgMeEVyICP0S0I656B95iMkmFmVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 11:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:52:4a:be:d5:85:37:84:0f:a7:fe:da:3d:a8:93:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056ad2f4ffc5872e35a429e53ef179925ff4215e
        Validity
            Not Before: Dec  6 11:00:47 2025 GMT
            Not After : Dec  7 11:00:47 2025 GMT
        Subject: CN=a61a9223b6820f5a4ce73b32fb3dae4314733867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3b:00:4f:ea:f1:ed:19:30:d1:21:87:bf:84:
                    5e:7e:f2:50:ea:25:48:b4:d2:61:d8:18:62:e4:8f:
                    70:1f:ae:ad:39:6d:8c:6a:b1:3d:81:c1:0f:c8:64:
                    5a:c1:58:0c:bb:c4:6b:c7:cb:f0:da:a8:d8:73:42:
                    d7:13:8e:b8:f3:35:d4:98:0a:6c:ff:03:ff:a0:34:
                    8a:c1:47:09:5b:bc:c1:33:a8:68:9a:1a:ec:36:1b:
                    86:75:2e:39:31:78:cb:4d:a2:8c:bd:3c:ab:03:8b:
                    8e:84:7c:32:bc:88:a2:84:ab:f6:b4:9e:04:96:df:
                    e3:95:ba:43:5c:49:d5:91:fa:3f:ae:9d:ff:26:22:
                    f0:31:d4:57:fe:b8:0e:0d:7d:ab:d8:09:d1:8d:30:
                    04:01:ac:28:ed:04:b9:79:99:7b:6d:d3:e3:48:d6:
                    cf:48:46:68:5d:14:7a:91:3c:76:c6:2d:97:bd:10:
                    72:36:8c:08:44:d6:86:4a:81:63:b5:49:73:c0:e3:
                    4a:60:e4:c4:bf:94:03:93:1f:f2:16:82:68:76:11:
                    56:c9:86:c4:42:7c:1c:fb:9b:7b:30:d8:7c:a2:e1:
                    14:7c:d3:d1:8c:6a:77:a8:50:32:26:64:89:fc:95:
                    1c:d1:b1:59:64:9a:12:40:f4:ba:5e:35:d8:7f:55:
                    c9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:1A:92:23:B6:82:0F:5A:4C:E7:3B:32:FB:3D:AE:43:14:73:38:67
            X509v3 Authority Key Identifier:
                keyid:05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:29:72:64:e8:6e:7c:8a:10:dc:41:9f:7c:71:48:6e:46:08:
         ae:b5:fd:fe:fc:9c:76:e4:53:e7:e5:d2:b5:31:fc:e3:1d:79:
         1b:43:e2:cf:00:95:e4:0e:a6:fb:9a:8f:fc:ab:2d:5f:18:4b:
         1b:73:90:1f:73:5e:2f:bf:b5:eb:3d:29:d9:e0:5b:7a:98:83:
         3e:3b:30:60:6f:69:c7:d0:84:74:72:be:2b:a9:76:6a:07:02:
         d2:6b:cd:a8:c3:2d:ad:f4:d1:e4:cd:b9:95:52:20:fd:c1:dd:
         2b:ee:11:57:fb:f6:94:7d:fd:d0:5e:e2:a9:82:bc:2a:96:f5:
         8e:60:9d:30:6f:73:c9:e0:c4:70:1c:9b:cc:51:8d:66:91:35:
         34:ba:93:ad:12:aa:f2:f9:f6:56:d8:6c:5a:90:3f:2b:8e:16:
         14:74:4e:1d:89:9e:9b:b7:94:2a:94:c7:0e:5c:9c:3f:b6:07:
         a4:6c:c0:39:13:7e:d5:9d:7d:f5:e4:aa:ac:48:b0:8d:e2:73:
         4f:12:00:09:27:b8:39:f6:9a:d1:45:03:d9:7f:61:2e:eb:c8:
         5c:92:2f:6b:72:9d:39:8e:c2:42:7c:0f:92:fa:20:7b:a6:5c:
         53:6b:5c:ab:45:f3:c9:ec:b0:77:f5:5f:cc:01:64:d9:86:54:
         12:f5:f3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:38:09 2025 by rpki-client