This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
File:                     wBZuIWw2DDbg91sNORI9utQiZOk.mft (raw, json)
Hash identifier:          7xSfj3hHEsxqS4oiTk4yQYfD2CLr5zHFz2BPMTAQDow=
Subject key identifier:   C4:75:20:11:C7:39:88:2B:25:C9:A5:F9:F7:7C:A6:2B:D2:D6:A8:31
Authority key identifier: C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9
Certificate issuer:       /CN=c0166e216c360c36e0f75b0d39123dbad42264e9
Certificate serial:       019AF276949AD178986F9B4D7D63DF15D33E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
Manifest number:          1763
Signing time:             Sat 06 Dec 2025 07:00:48 +0000
Manifest this update:     Sat 06 Dec 2025 07:00:48 +0000
Manifest next update:     Sun 07 Dec 2025 07:00:48 +0000
Files and hashes:         1: Wxr7kgALDgcsOOCQfZoACHYOwbQ.roa (hash: B9f7m4dPaZeRMrrY3iGXe7xjmu9+7nX6lw2kW7YcneQ=)
                          2: wBZuIWw2DDbg91sNORI9utQiZOk.crl (hash: WvFTGvP+hizl9bcWJ8mGnE1qDJBKiFk3FCPUFb+rt/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:94:9a:d1:78:98:6f:9b:4d:7d:63:df:15:d3:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0166e216c360c36e0f75b0d39123dbad42264e9
        Validity
            Not Before: Dec  6 07:00:48 2025 GMT
            Not After : Dec  7 07:00:48 2025 GMT
        Subject: CN=c4752011c739882b25c9a5f9f77ca62bd2d6a831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:43:d5:2d:23:be:c1:1f:b1:ed:0e:7c:59:9a:
                    0e:eb:0c:b2:d1:e0:59:2d:54:72:be:ac:33:88:d3:
                    6d:3e:ed:11:64:57:72:a5:c7:95:0b:0a:58:f8:57:
                    06:ab:ca:fc:c2:2e:fe:cc:fe:5c:f0:c0:f2:93:f7:
                    b1:d1:c8:79:70:60:ea:6c:c3:55:85:35:e8:0b:1c:
                    d9:d7:32:3c:8c:a2:7e:d8:5d:a3:92:80:18:2e:cf:
                    3a:e4:b4:dc:fd:f4:be:de:de:d5:1e:ee:e7:d3:95:
                    fb:fe:ac:1e:89:68:80:18:c9:b0:97:32:0c:e1:a6:
                    ee:92:13:ef:b5:a8:36:8b:ad:96:38:b6:a3:f3:5b:
                    c1:56:09:3c:3b:b4:86:b0:8b:dd:f9:7c:dd:de:94:
                    34:65:f3:e7:7c:b7:ea:3f:78:ac:af:c5:72:6a:60:
                    22:d0:87:09:fe:2c:a6:4b:61:31:07:9d:07:71:46:
                    8c:34:ed:b2:50:f7:48:ae:ea:20:24:07:51:61:2c:
                    48:7a:03:e0:a8:9c:23:66:9a:ac:da:6f:62:d5:46:
                    b5:a3:71:0a:18:2f:ed:43:ce:1d:fd:f2:66:a1:cf:
                    bc:cd:62:7d:98:17:d3:63:27:6c:f5:0c:aa:22:0d:
                    e6:b2:b5:e3:2d:d9:9f:3a:aa:59:69:dd:cf:f3:b4:
                    30:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:75:20:11:C7:39:88:2B:25:C9:A5:F9:F7:7C:A6:2B:D2:D6:A8:31
            X509v3 Authority Key Identifier:
                keyid:C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:ec:41:22:89:6b:9a:da:d7:94:25:85:f7:da:c0:72:29:f8:
         79:a7:e2:a8:dc:5e:2a:74:0d:a9:49:81:56:2b:73:cc:58:f7:
         a0:20:77:02:98:0c:46:8c:43:8a:7f:f3:32:f1:0f:58:ba:da:
         9a:e4:93:a0:4d:50:85:5e:0f:68:47:b4:a1:61:f6:53:0a:bd:
         3f:57:3e:1d:34:4e:6c:c7:3c:30:7e:34:9c:32:db:e8:08:96:
         e5:00:55:22:45:4d:b4:5e:c9:de:f4:90:d8:99:98:c6:d2:60:
         c7:78:43:f5:ef:fe:7c:c0:eb:04:54:21:fc:95:52:96:47:ab:
         d2:7a:cb:44:b9:7c:23:5d:b9:d8:54:29:ec:35:f2:b8:34:67:
         a2:30:60:7f:46:fd:bd:70:4c:81:70:b7:ce:9b:c6:57:ba:50:
         ab:24:c9:5e:11:14:bf:c5:06:b5:37:39:4d:bf:36:70:44:e3:
         ff:f5:9b:c9:d0:88:f2:94:e5:d1:0f:63:8d:a2:5d:27:90:ef:
         6c:63:f5:61:26:88:9e:57:76:a0:fd:b8:ed:c7:19:bf:91:e3:
         ee:e4:f2:da:4b:ab:84:de:ce:19:aa:69:93:bc:33:8e:c5:40:
         8c:a9:7d:78:0b:01:e3:bb:81:e9:d5:a3:14:f8:88:63:5a:3d:
         03:18:ff:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:42:55 2025 by rpki-client