This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft
File:                     WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft (raw, json)
Hash identifier:          bNnvKJ/osDa/FWtpuP5wcJdEAoJPBCEGy/rdqJECn2c=
Subject key identifier:   95:AC:D8:69:D7:95:0C:63:54:21:ED:B0:B2:AF:88:9B:6E:B5:AA:05
Authority key identifier: 59:C4:CF:BD:87:1C:42:DD:55:A5:7B:D0:FF:56:71:34:F3:22:B2:3E
Certificate issuer:       /CN=59c4cfbd871c42dd55a57bd0ff567134f322b23e
Certificate serial:       019B2C2F5F245160A8CB481405787697E780
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WcTPvYccQt1VpXvQ_1ZxNPMisj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft
Manifest number:          106D
Signing time:             Wed 17 Dec 2025 12:01:00 +0000
Manifest this update:     Wed 17 Dec 2025 12:01:00 +0000
Manifest next update:     Thu 18 Dec 2025 12:01:00 +0000
Files and hashes:         1: WcTPvYccQt1VpXvQ_1ZxNPMisj4.crl (hash: 1iuPL94DNB3WoRPDyJSn+EjY/ygIofKwptMQObt87hA=)
                          2: WukoJKvYevk5DCDC_j-VNd6UEsY.roa (hash: oH9XlTl7oEKCB+DPnY3H0aSfeO00Y6Ze9ixEhvL+Fj8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WcTPvYccQt1VpXvQ_1ZxNPMisj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 12:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2c:2f:5f:24:51:60:a8:cb:48:14:05:78:76:97:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59c4cfbd871c42dd55a57bd0ff567134f322b23e
        Validity
            Not Before: Dec 17 12:01:00 2025 GMT
            Not After : Dec 18 12:01:00 2025 GMT
        Subject: CN=95acd869d7950c635421edb0b2af889b6eb5aa05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f8:84:d8:fc:2c:19:60:e1:fe:34:66:38:01:
                    e8:dc:d9:12:e6:5c:ca:12:39:84:3d:da:30:c4:b8:
                    2f:7d:03:dc:4f:0b:b7:b0:a7:82:94:61:f6:01:b7:
                    4c:d6:48:80:2d:cc:df:65:84:97:f3:cf:e8:3d:07:
                    a7:6a:5f:70:b5:4b:d0:67:07:57:5b:49:2f:d6:37:
                    e5:f2:06:24:1a:26:f5:25:84:cd:e7:a4:20:ba:b2:
                    1f:64:cc:17:2c:53:3c:f8:08:f9:17:d5:02:41:f0:
                    28:f3:02:f8:d7:da:16:e2:27:20:7a:79:a6:f6:84:
                    5f:5e:28:a6:6a:23:c1:3b:38:56:a3:50:8e:e2:ea:
                    da:5e:df:6e:be:65:65:89:68:e8:c9:b1:16:94:cd:
                    1a:f5:5e:ca:f2:81:57:cf:2b:86:30:76:07:68:da:
                    56:a6:24:08:23:07:65:3f:81:a4:51:fb:a1:54:20:
                    58:1e:76:57:ac:b5:42:49:f9:78:fa:75:b7:41:87:
                    79:7b:7a:82:d9:b9:af:09:ef:cf:45:85:5f:c6:5f:
                    fa:d7:fa:73:5c:84:39:0e:eb:62:61:ee:81:48:ec:
                    55:ad:3d:50:cb:b2:cd:e1:3a:dc:90:b9:31:5d:69:
                    7f:12:88:ed:52:3e:5a:f1:a1:7e:e8:24:cb:31:6d:
                    30:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AC:D8:69:D7:95:0C:63:54:21:ED:B0:B2:AF:88:9B:6E:B5:AA:05
            X509v3 Authority Key Identifier:
                keyid:59:C4:CF:BD:87:1C:42:DD:55:A5:7B:D0:FF:56:71:34:F3:22:B2:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WcTPvYccQt1VpXvQ_1ZxNPMisj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:d7:e7:e5:16:11:9f:21:fd:31:84:bf:8c:13:f0:44:e8:14:
         86:de:90:5d:21:3b:b6:b2:d6:c3:46:d8:30:a9:6a:68:ca:a4:
         f1:16:b6:a3:92:8f:a8:96:92:ad:12:c6:a5:22:27:6c:36:2c:
         41:da:62:e6:6f:ee:39:cb:f5:83:73:fc:35:fb:fa:b8:8c:f4:
         0b:29:df:f1:ce:79:cf:47:fb:95:56:38:e8:a3:fe:80:0b:27:
         83:13:8d:c9:d3:e3:35:65:c2:41:a1:c6:d3:4a:b4:0c:69:bd:
         ed:ec:1f:9c:a0:13:84:27:dc:6b:41:a8:2c:48:43:7e:c3:3d:
         4d:e5:c9:e2:72:d4:f3:c9:32:fe:4c:9a:a1:67:e0:ce:b3:58:
         6c:27:0d:92:61:26:02:b4:7f:66:fb:1a:30:7c:74:bb:30:d9:
         45:94:5f:90:60:64:74:27:35:17:28:60:fb:c7:db:4d:06:f8:
         fc:cb:1d:d6:fd:4d:ce:1e:50:22:87:1c:a4:74:f9:db:9e:a1:
         03:97:2d:d7:17:72:0d:0d:94:c0:ec:78:a9:da:42:82:49:44:
         b0:af:2c:77:31:f2:9f:53:7a:eb:12:1f:f3:23:20:1a:e1:aa:
         78:4c:af:fb:c5:f0:39:aa:3f:5f:81:91:10:99:90:5a:cf:b1:
         b2:b5:92:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 20:47:25 2025 by rpki-client