This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
File:                     ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft (raw, json)
Hash identifier:          rCqHeAJy92WBZRcivCraiwX1CtiZ5EFu1iPqlCX1Svg=
Subject key identifier:   AA:27:4C:FB:01:29:AA:5E:EA:42:D4:E6:31:5E:C7:6C:6F:58:83:23
Authority key identifier: C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB
Certificate issuer:       /CN=c2ce0814167eaa8189fd84d390270eadf29482cb
Certificate serial:       019AF2ADD43AF9FB2FC93AE669FC391F1BF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
Manifest number:          0BE2
Signing time:             Sat 06 Dec 2025 08:01:09 +0000
Manifest this update:     Sat 06 Dec 2025 08:01:09 +0000
Manifest next update:     Sun 07 Dec 2025 08:01:09 +0000
Files and hashes:         1: R1gidcfPTDL9l_CbPS671EyX5iY.roa (hash: c4a4L7/lsOBY0SjW+Je19dj12ru5NWUKEP164tb+S4Q=)
                          2: Re7xjUICEpcefdPF_f0YtM8qXn4.roa (hash: ekIH5kxgf0bGVz6q5zIjK4NfDPuAaNIY8i0OtjeIH9w=)
                          3: f7Zg_MmXx6IJnLloz3q786pe2i4.roa (hash: mDHnzXpmbP7OAduSpZ+5VZ3yHq/l9M3cROQgCCtCtyw=)
                          4: ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl (hash: i7Q9xhGLFqh8uPEZWBQhY11GsTXBUbJOvgEPtHKu+1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:d4:3a:f9:fb:2f:c9:3a:e6:69:fc:39:1f:1b:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2ce0814167eaa8189fd84d390270eadf29482cb
        Validity
            Not Before: Dec  6 08:01:09 2025 GMT
            Not After : Dec  7 08:01:09 2025 GMT
        Subject: CN=aa274cfb0129aa5eea42d4e6315ec76c6f588323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bf:87:9e:9e:1d:bc:ee:0f:d6:2a:77:12:ff:
                    e4:05:4d:ed:f4:2f:aa:8b:cc:5d:ff:84:14:77:ea:
                    fa:a6:29:2a:12:cd:0d:9f:8e:21:75:fc:82:a7:59:
                    c1:4b:0b:35:4b:85:85:8d:64:62:3d:8f:39:ff:c3:
                    47:e7:7f:6f:cb:bb:35:42:b3:be:d9:18:04:c0:11:
                    7b:fe:09:4a:41:9d:bd:60:b3:10:5c:12:5e:ee:05:
                    b4:4e:b7:0c:b4:76:5f:cc:cc:d8:09:47:b0:c9:e9:
                    e7:49:c7:60:f7:e2:ac:ab:7d:fd:43:38:80:fa:4b:
                    26:f0:cd:fc:73:1f:b6:ee:d6:34:d4:3c:be:77:0c:
                    27:8b:47:4c:72:ba:07:01:0c:7a:c2:7b:52:8b:f1:
                    dd:df:6f:f6:89:40:20:1f:d1:24:9b:b2:2c:80:ae:
                    41:b7:6c:61:36:8b:12:cc:83:2d:f5:cf:0a:02:ca:
                    1d:f8:48:63:69:4f:2d:31:97:66:6e:93:df:fc:b1:
                    40:69:73:5e:56:b6:29:b2:8c:16:d5:46:ab:b4:50:
                    80:83:8e:ba:cf:d9:1e:77:5f:16:73:11:d8:62:ab:
                    38:90:0e:c3:0f:b7:b4:a6:29:50:b9:93:79:1a:5b:
                    9d:fd:ab:5e:5b:15:48:8a:07:71:41:b0:61:2c:98:
                    e1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:27:4C:FB:01:29:AA:5E:EA:42:D4:E6:31:5E:C7:6C:6F:58:83:23
            X509v3 Authority Key Identifier:
                keyid:C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:6b:2f:8c:3b:4e:da:2e:3c:43:5e:6e:6a:8b:0b:6d:54:10:
         4a:85:d2:d8:7e:15:fb:d8:d5:24:95:ef:9d:99:1b:b2:5b:86:
         3a:4f:5a:61:7e:ba:17:18:27:b5:5f:5d:7b:c1:56:c8:6f:99:
         3b:8c:2e:e2:f4:c4:66:08:5d:02:27:d2:84:e6:b7:5a:04:e0:
         5b:20:74:a1:37:84:bb:b0:ea:39:62:13:13:40:9b:0b:a7:57:
         48:1f:b5:00:ce:71:b6:f4:6f:32:9e:0f:f2:73:2b:00:49:1b:
         bf:df:ea:7b:14:db:79:d5:4c:55:05:5f:fe:d9:1e:78:cb:9d:
         99:5e:b4:89:67:a4:37:30:87:fb:60:68:cc:17:e7:b5:ec:87:
         a5:a9:1e:1f:6b:15:46:fa:be:41:87:97:68:66:2a:e2:e2:48:
         b5:a1:6e:1c:4c:e9:77:ce:4e:45:a1:cc:f5:0b:26:fb:73:31:
         c4:d8:df:ae:f0:4c:f2:99:52:6c:ef:a5:fe:a7:94:83:23:7e:
         b5:4e:fa:dd:d2:0b:dd:60:76:c0:87:71:25:95:d6:92:97:09:
         95:02:8b:81:d1:fd:bc:65:f7:55:ff:b2:3f:63:64:83:a6:19:
         74:96:5e:9e:5a:52:6f:44:cc:1b:0d:2e:55:ee:5a:e0:1b:05:
         69:80:61:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:00:33 2025 by rpki-client