This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft
File:                     w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft (raw, json)
Hash identifier:          LTQu89gwHdz4wPfxecJvJqfqrFNxhIOT/o1TLtCfadI=
Subject key identifier:   93:28:31:EF:2A:05:42:7E:0D:79:60:88:53:F6:B6:02:C0:B3:F1:D5
Authority key identifier: C3:4B:DF:F8:8E:8E:89:89:87:1E:13:40:81:11:AD:14:33:B3:0C:63
Certificate issuer:       /CN=c34bdff88e8e8989871e13408111ad1433b30c63
Certificate serial:       019B3156063EDFA57F0BBA2B4797341A74F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w0vf-I6OiYmHHhNAgRGtFDOzDGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft
Manifest number:          0BEC
Signing time:             Thu 18 Dec 2025 12:01:19 +0000
Manifest this update:     Thu 18 Dec 2025 12:01:19 +0000
Manifest next update:     Fri 19 Dec 2025 12:01:19 +0000
Files and hashes:         1: ugMcDv1gcgsXhUTa2vBxQzpCLaI.roa (hash: rt0w1lyTwHj5nTBBa43BIhts6ikl3ovgbdGlD8LZ7VQ=)
                          2: w0vf-I6OiYmHHhNAgRGtFDOzDGM.crl (hash: 6t3c7My4RCGYI71jPilMpraPYl/vgL71zTjbc5B0ooI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w0vf-I6OiYmHHhNAgRGtFDOzDGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 12:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:31:56:06:3e:df:a5:7f:0b:ba:2b:47:97:34:1a:74:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c34bdff88e8e8989871e13408111ad1433b30c63
        Validity
            Not Before: Dec 18 12:01:19 2025 GMT
            Not After : Dec 19 12:01:19 2025 GMT
        Subject: CN=932831ef2a05427e0d79608853f6b602c0b3f1d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:29:ea:e0:0e:1f:b0:68:11:88:20:04:4f:15:
                    93:85:96:cc:d6:b4:74:5c:a1:1d:54:01:5b:76:33:
                    c7:d5:96:dc:58:7e:a9:17:5e:f9:8e:3d:0d:a6:56:
                    4b:44:31:0f:54:61:b3:1f:ba:dd:5c:31:c2:e4:b6:
                    14:eb:ee:eb:1b:15:31:c5:8e:79:a0:ed:50:59:bb:
                    52:70:d6:8d:18:73:62:1b:23:c0:d0:6d:ea:f7:b3:
                    e5:0d:2c:e5:07:cd:72:56:0e:7f:85:1a:da:c6:ee:
                    07:ec:91:fb:d4:85:85:35:ce:b4:8d:ab:42:0f:22:
                    c2:29:0c:20:9e:af:ea:d1:e2:ae:31:f7:c0:62:8a:
                    a4:37:3c:da:d9:b4:a7:78:c7:8e:0e:d6:62:e3:18:
                    dc:49:d6:e5:15:8f:e4:51:c8:de:44:dc:f3:7f:61:
                    1c:3e:dd:ec:e7:9d:c1:7e:11:61:7b:89:38:61:4c:
                    11:a1:49:56:e4:b9:cf:58:45:a6:8b:ff:b6:d6:dd:
                    08:65:78:80:39:85:30:e4:0e:19:5a:83:15:74:de:
                    c2:cb:7c:e9:2d:af:c1:d4:7a:c8:53:ac:8c:e3:0c:
                    dc:0b:00:ee:da:b9:3a:a2:d1:01:92:7d:c8:74:10:
                    6d:6a:6f:40:86:eb:94:31:80:5b:3f:62:b0:76:95:
                    ed:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:28:31:EF:2A:05:42:7E:0D:79:60:88:53:F6:B6:02:C0:B3:F1:D5
            X509v3 Authority Key Identifier:
                keyid:C3:4B:DF:F8:8E:8E:89:89:87:1E:13:40:81:11:AD:14:33:B3:0C:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0vf-I6OiYmHHhNAgRGtFDOzDGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ae:3d:2d:df:f4:06:36:46:32:0c:4d:d6:12:25:83:08:d4:
         5c:e5:6d:ab:82:93:4d:82:6a:fa:72:5d:b4:02:db:d0:c7:bd:
         33:40:fe:06:e4:3c:9e:b5:63:f3:6b:f7:9f:1d:ee:98:56:56:
         9d:a9:29:cc:21:d1:3d:d6:f1:75:bf:0d:d7:a0:0a:ae:c8:93:
         cd:ca:93:c3:fe:b4:81:28:fb:f2:5b:2c:ec:cc:39:8a:74:13:
         7d:c8:27:06:64:69:42:00:49:c4:ed:54:a5:ff:18:41:96:f4:
         51:64:df:0c:2b:97:1e:c3:9f:a9:ee:bf:ad:15:60:8a:4c:36:
         ba:82:a2:37:17:49:0d:ee:92:6c:58:e1:ae:e2:72:22:35:21:
         9f:7a:a4:6e:f7:7b:60:cd:0c:ff:2a:cd:f4:cf:f9:62:59:28:
         e8:89:72:cd:05:98:10:ab:35:a3:c1:f6:96:42:14:af:b5:5f:
         ce:86:5b:ee:9d:4f:8f:af:5d:d0:e7:b8:1f:ea:fe:37:52:73:
         62:ac:2f:4a:d8:34:bf:e0:1d:3b:99:6b:57:c0:1c:b8:fe:02:
         e0:ec:87:0f:1d:1c:e4:a8:a6:2d:a4:5e:f9:5e:bc:6e:c5:17:
         d0:6f:5b:3a:f5:03:e8:34:24:73:bd:ee:bb:81:be:b2:72:f6:
         0f:be:1d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 19:10:54 2025 by rpki-client