This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
File:                     cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft (raw, json)
Hash identifier:          YpdP37cA4PLuWTepYbm0GMotgdgYzmyxx0DUiAIsB5s=
Subject key identifier:   B6:05:88:33:CE:6F:F6:B7:BE:F8:4C:0B:66:1A:50:DF:D4:FB:EF:B0
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Certificate issuer:       /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial:       019AF20973E5C824CF2F577217C107627C07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
Manifest number:          176C
Signing time:             Sat 06 Dec 2025 05:01:36 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:36 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:36 +0000
Files and hashes:         1: 1-Fu8tQlmeJTnAPs_klN6k0sVtas.roa (hash: a3MzODKGqIz16CZMFFSjRzhUI5B7HYxJad8zpdAQZ4o=)
                          2: BE6iIPIX8zFmJc8BbYvpzoakrXE.roa (hash: zyf1exZFAT4j17OLfHltxLPlTiiX5aqGBHkZByoGZDo=)
                          3: TJJQIxFkBPcclxKSiBSE29OWp44.roa (hash: o//SaNRJoAMIebEbxmORe+ZFOyk3uvF1gz9qkdqBZAw=)
                          4: VNCm6_FzOH2wvD6zP5chPBaMMwY.roa (hash: Y0Swh/SNbMijU4wn94W5cEpLxOM8OyzH9BGZ9D0MVqQ=)
                          5: W5UTNQ5ej991ZXRgwLKU5FQvFHg.roa (hash: IRDGgxnAqqWapeedP2vWmhEF4xJ1dwTUzVZaEKAfNbA=)
                          6: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl (hash: SKUmj6ZgxgAFYrE7MAH2vEwYcJxJsPfXbnjFBoDTOBw=)
                          7: mWVKLu7JIbWDRf6UwKQVpc3TeHk.roa (hash: /ILKWnYvC10gU3wVh36K0lsRGNP01gsP1Ff/pKP4YGQ=)
                          8: o715x5kcExne_D_D3zYLFnEa5s0.roa (hash: /1ud4mPQXWjniwbnuJIk+aU9+DH9Jasow43KC86v9gE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:73:e5:c8:24:cf:2f:57:72:17:c1:07:62:7c:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
        Validity
            Not Before: Dec  6 05:01:36 2025 GMT
            Not After : Dec  7 05:01:36 2025 GMT
        Subject: CN=b6058833ce6ff6b7bef84c0b661a50dfd4fbefb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e1:17:bc:a9:90:97:22:d3:a5:a6:42:aa:e5:
                    e5:dc:8d:15:7f:1a:b3:e9:98:01:89:e6:ee:76:54:
                    35:7e:75:4e:c7:74:9c:f4:ba:26:ab:69:c0:c7:ae:
                    5c:c5:5a:bc:1d:21:45:03:33:60:c4:58:19:0a:97:
                    e1:34:98:c7:72:ca:04:ce:ae:7b:28:82:d4:36:80:
                    68:48:9d:14:86:fb:8b:99:ff:63:02:4f:17:c4:40:
                    a7:1f:d1:9a:41:37:fc:55:d2:ea:80:7d:67:5e:4d:
                    b5:e2:fe:80:50:e7:15:12:64:37:19:9e:4b:80:2d:
                    f7:6d:4d:16:6f:3b:6f:a7:8c:55:7f:89:a5:f0:5b:
                    2e:20:93:a7:c8:51:f2:9e:d9:7a:58:00:2f:aa:a7:
                    8c:fa:44:87:df:20:7e:4a:04:19:4a:51:23:5e:4f:
                    66:2f:9b:83:4f:34:78:1d:01:31:03:2b:12:8a:14:
                    d7:0c:32:74:a2:8d:50:86:bc:af:76:53:52:35:29:
                    17:4a:c8:4c:90:15:9f:e6:01:dc:5e:99:d4:11:e4:
                    1c:11:a0:dd:93:b0:1b:47:a3:e5:f2:6f:c4:e7:2a:
                    b3:34:7a:3d:a0:26:93:da:0f:bc:9f:89:b5:de:5b:
                    c6:56:75:6d:cc:1a:31:4a:96:27:f3:2a:89:22:3d:
                    af:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:05:88:33:CE:6F:F6:B7:BE:F8:4C:0B:66:1A:50:DF:D4:FB:EF:B0
            X509v3 Authority Key Identifier:
                keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:76:4e:9f:60:ae:31:af:0e:89:b2:ed:37:78:be:38:27:92:
         1a:90:ed:09:de:88:09:8d:2f:d7:00:c9:39:ee:9e:d0:fd:41:
         f5:cf:4e:e6:11:a1:f9:2f:e7:7b:b6:31:41:1f:5b:9c:56:fb:
         9a:3b:42:ad:cd:03:94:9f:c9:cd:d1:1d:cc:4a:1a:a4:f3:d9:
         1a:7e:5c:29:5c:8c:25:3d:f2:5f:e2:ea:8d:8d:cf:3c:22:84:
         c2:45:5e:2e:67:77:b2:9d:86:fd:c4:85:53:1a:ad:3d:bf:1f:
         fa:75:59:67:48:5a:8f:29:d5:d4:5f:78:de:b1:1a:5d:46:d9:
         71:d4:44:b9:c2:be:41:b8:4a:e8:2e:5b:81:a9:d6:ca:4a:49:
         fd:0d:0b:4e:bc:51:b8:43:7b:85:f6:9c:d6:cf:02:49:63:7f:
         6b:78:1f:37:db:11:14:90:33:fb:6e:bb:e4:e9:63:52:fa:a2:
         8a:0e:bd:99:f2:bb:83:cf:49:f9:ca:01:36:cb:d7:26:cd:99:
         b1:a0:e7:ca:97:73:d2:9e:b3:2d:5c:64:76:6c:75:24:df:6a:
         d1:a2:58:fe:a4:f0:41:2e:2c:a4:c7:5c:8b:33:94:e1:09:5a:
         a5:a8:5a:32:4d:25:9f:a7:d4:2e:60:e6:0b:26:49:bc:96:56:
         5b:e5:e4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:54:41 2025 by rpki-client