This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft
File:                     warwQ_4gnANFNiIF-Mx81hlRwn4.mft (raw, json)
Hash identifier:          QD4sZlk8a4dDE6C5W/ofBRek78IET1hjI+yDdpWxiQo=
Subject key identifier:   95:5E:E7:0D:F6:F0:A2:15:03:2B:DE:39:7E:1D:A0:80:37:95:9D:DB
Authority key identifier: C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E
Certificate issuer:       /CN=c1aaf043fe209c0345362205f8cc7cd61951c27e
Certificate serial:       019B3E6D9CBD2436BE5E2591A5C60DED1607
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft
Manifest number:          1000
Signing time:             Sun 21 Dec 2025 01:02:09 +0000
Manifest this update:     Sun 21 Dec 2025 01:02:09 +0000
Manifest next update:     Mon 22 Dec 2025 01:02:09 +0000
Files and hashes:         1: oLyY8vvBAfeOhRsj9eexvuktQm4.roa (hash: scoM8Sq6POvOb7psz/VnzYZYQjNB2n1Y53tdfQTGFcc=)
                          2: warwQ_4gnANFNiIF-Mx81hlRwn4.crl (hash: 6jUW2VDCkOQ+HXaOwdV2EvUIPHtPD23/EqcD+JWjfJ8=)
                          3: yuwuNuzvATZfP3JuA06dTGzQ9o8.roa (hash: iaJVdCZsnNb9Cyubf2e2B713adANaUt93mNYt5mCPK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3e:6d:9c:bd:24:36:be:5e:25:91:a5:c6:0d:ed:16:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1aaf043fe209c0345362205f8cc7cd61951c27e
        Validity
            Not Before: Dec 21 01:02:09 2025 GMT
            Not After : Dec 22 01:02:09 2025 GMT
        Subject: CN=955ee70df6f0a215032bde397e1da08037959ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c3:f3:5a:d4:d2:de:6a:d7:13:18:fe:87:4f:
                    0a:27:86:dc:56:ab:7c:09:cb:4b:5b:cc:f9:9f:7d:
                    d4:4e:ac:36:d2:fe:72:e2:f5:50:08:2f:44:0c:f1:
                    51:26:9e:29:7e:3f:d4:66:5c:7f:cb:82:11:27:c2:
                    36:28:d8:a6:94:75:e0:ed:b0:2d:7c:26:5a:46:31:
                    6e:b6:aa:ee:65:13:a7:ac:ea:cf:32:c7:eb:2d:dc:
                    ef:7f:70:77:d2:43:9a:dc:fe:99:45:f3:5e:76:17:
                    81:be:3e:6d:d2:cb:5c:cf:1c:9c:9a:ea:ba:d2:2b:
                    75:e4:96:d8:2c:81:35:33:6a:17:10:b8:ef:b0:d1:
                    4f:7a:ad:03:f6:b2:aa:09:4f:c8:2e:4e:2f:dd:3f:
                    51:32:4a:68:cc:af:ba:18:9c:ea:f0:59:d5:54:99:
                    37:92:96:b5:5f:47:af:0c:3a:99:c3:c0:e8:7a:4e:
                    80:52:ac:ce:58:68:ef:16:d1:13:b6:93:3f:ed:26:
                    f7:9b:69:4e:02:40:4f:db:dd:56:22:8a:10:21:b7:
                    e2:ea:22:d5:77:87:6a:0e:9f:35:d5:2d:73:18:94:
                    21:22:a6:47:73:bd:b5:0e:2a:65:1b:6c:16:54:99:
                    1b:b2:ec:6f:e0:3e:93:19:0f:7a:b1:1c:06:0d:03:
                    dc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:5E:E7:0D:F6:F0:A2:15:03:2B:DE:39:7E:1D:A0:80:37:95:9D:DB
            X509v3 Authority Key Identifier:
                keyid:C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:28:cf:2e:f3:9e:84:27:b2:df:12:fd:7d:b7:76:22:b6:73:
         77:b2:5b:0f:15:88:d4:e1:f8:67:13:c4:2e:9a:d3:2c:f1:5a:
         46:fe:21:f6:f5:ba:d5:5b:3d:84:1d:1a:2f:44:c4:27:a0:69:
         c0:51:70:2a:d2:b4:ea:17:16:87:b2:b0:15:45:8e:47:49:c9:
         55:94:30:76:b9:c0:d7:62:da:7b:b9:64:6e:63:f6:0d:bc:b8:
         f3:00:2f:5a:90:09:3e:a2:15:38:00:88:1a:6a:69:34:b8:9e:
         16:d9:2e:7e:ef:8c:90:e9:3b:d0:53:9c:d3:1d:fa:f3:ba:da:
         7e:8c:3f:3c:c9:ce:40:5a:15:df:59:3c:94:67:b9:52:6a:64:
         af:d5:d3:4f:44:2d:1b:c2:ee:9b:79:6b:f6:71:1d:9e:f3:fd:
         79:02:fc:bc:b0:78:b2:a8:e9:2a:ff:80:d1:fa:3e:58:61:d0:
         6a:0a:c0:78:4d:85:9a:b3:72:05:f6:b9:19:7a:14:c0:57:94:
         9d:af:c7:b5:6c:f6:ae:89:38:ea:68:a1:5c:29:25:d0:c1:0e:
         eb:85:2c:51:22:2e:09:94:7d:a3:70:e3:9b:d4:59:45:c8:c5:
         1d:48:c6:21:3d:3e:65:5a:94:7d:e2:d0:a6:80:ac:47:c7:28:
         a1:b5:34:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs+bZy9JDa+XiWRpcYN7RYHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYWFmMDQzZmUyMDljMDM0NTM2MjIwNWY4Y2M3Y2Q2MTk1
MWMyN2UwHhcNMjUxMjIxMDEwMjA5WhcNMjUxMjIyMDEwMjA5WjAzMTEwLwYDVQQD
Eyg5NTVlZTcwZGY2ZjBhMjE1MDMyYmRlMzk3ZTFkYTA4MDM3OTU5ZGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMPzWtTS3mrXExj+h08KJ4bcVqt8
CctLW8z5n33UTqw20v5y4vVQCC9EDPFRJp4pfj/UZlx/y4IRJ8I2KNimlHXg7bAt
fCZaRjFutqruZROnrOrPMsfrLdzvf3B30kOa3P6ZRfNedheBvj5t0stczxycmuq6
0it15JbYLIE1M2oXELjvsNFPeq0D9rKqCU/ILk4v3T9RMkpozK+6GJzq8FnVVJk3
kpa1X0evDDqZw8Doek6AUqzOWGjvFtETtpM/7Sb3m2lOAkBP291WIooQIbfi6iLV
d4dqDp811S1zGJQhIqZHc721DiplG2wWVJkbsuxv4D6TGQ96sRwGDQPcYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVe5w328KIVAyveOX4doIA3lZ3bMB8GA1UdIwQY
MBaAFMGq8EP+IJwDRTYiBfjMfNYZUcJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2Fyd1FfNGduQU5GTmlJRi1NeDgxaGxSd240LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82YzI3ZjAtMTM3ZC00NzFiLTlkMWQt
Yjc1NzhiMTBiYTdlLzEvd2Fyd1FfNGduQU5GTmlJRi1NeDgxaGxSd240Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC82YzI3ZjAtMTM3ZC00NzFiLTlkMWQtYjc1NzhiMTBiYTdl
LzEvd2Fyd1FfNGduQU5GTmlJRi1NeDgxaGxSd240LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwSjPLvOe
hCey3xL9fbd2IrZzd7JbDxWI1OH4ZxPELprTLPFaRv4h9vW61Vs9hB0aL0TEJ6Bp
wFFwKtK06hcWh7KwFUWOR0nJVZQwdrnA12Lae7lkbmP2Dby48wAvWpAJPqIVOACI
GmppNLieFtkufu+MkOk70FOc0x3687rafow/PMnOQFoV31k8lGe5Umpkr9XTT0Qt
G8Lum3lr9nEdnvP9eQL8vLB4sqjpKv+A0fo+WGHQagrAeE2FmrNyBfa5GXoUwFeU
na/HtWz2rok46mihXCkl0MEO64UsUSIuCZR9o3Djm9RZRcjFHUjGIT0+ZVqUfeLQ
poCsR8coobU0Dw==
-----END CERTIFICATE-----
Generated at Sun Dec 21 09:03:18 2025 by rpki-client