This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/c6f31a-7ca7-48c4-93ff-c480da0264ca/1/WggaUqycsIVt9lY-2H04sMrKfMw.mft
File:                     WggaUqycsIVt9lY-2H04sMrKfMw.mft (raw, json)
Hash identifier:          gEY9vQcd8ANPOENPBBMa8v9JIJb8PDJMehYxANRCzG4=
Subject key identifier:   BB:A8:29:F9:A0:37:DA:AE:3E:3C:E2:78:2C:3C:AC:E4:63:53:3F:D2
Authority key identifier: 5A:08:1A:52:AC:9C:B0:85:6D:F6:56:3E:D8:7D:38:B0:CA:CA:7C:CC
Certificate issuer:       /CN=5a081a52ac9cb0856df6563ed87d38b0caca7ccc
Certificate serial:       019B3C7F57634F7915C6CD53AC85B6612237
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WggaUqycsIVt9lY-2H04sMrKfMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/c6f31a-7ca7-48c4-93ff-c480da0264ca/1/WggaUqycsIVt9lY-2H04sMrKfMw.mft
Manifest number:          12E3
Signing time:             Sat 20 Dec 2025 16:02:16 +0000
Manifest this update:     Sat 20 Dec 2025 16:02:16 +0000
Manifest next update:     Sun 21 Dec 2025 16:02:16 +0000
Files and hashes:         1: EiR11fr6TM-xIWtB9B_S9WHDhyg.roa (hash: W7TwQaP1ljwu3y/NoaNHpEvMwxHlKGr1Z26uiUftCq0=)
                          2: OMxHi5JK05DSMGK7ve_zhY-IUTA.roa (hash: 35sYR6BG69zLQEok7pk/D7dgz6S6dUuxJp8Ecka7Hac=)
                          3: WggaUqycsIVt9lY-2H04sMrKfMw.crl (hash: srCcIrmK7UHXxNmDZmvpchIn8uioGd3Es8HeExeRZUw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/c6f31a-7ca7-48c4-93ff-c480da0264ca/1/WggaUqycsIVt9lY-2H04sMrKfMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/c6f31a-7ca7-48c4-93ff-c480da0264ca/1/WggaUqycsIVt9lY-2H04sMrKfMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WggaUqycsIVt9lY-2H04sMrKfMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:7f:57:63:4f:79:15:c6:cd:53:ac:85:b6:61:22:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a081a52ac9cb0856df6563ed87d38b0caca7ccc
        Validity
            Not Before: Dec 20 16:02:16 2025 GMT
            Not After : Dec 21 16:02:16 2025 GMT
        Subject: CN=bba829f9a037daae3e3ce2782c3cace463533fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6e:aa:d4:eb:64:cd:5b:50:b3:2d:cc:09:71:
                    66:b9:c9:7b:0e:23:eb:79:c9:b0:21:84:be:9a:4c:
                    58:05:65:5e:e0:3a:3f:7a:2f:1d:88:7e:4c:29:9b:
                    c7:90:64:ca:e2:f4:b1:0a:18:55:b1:32:0f:90:ce:
                    e5:87:e8:0d:de:3b:f7:48:71:b4:dc:04:68:23:3c:
                    07:76:bf:94:5b:08:4a:18:94:99:74:3f:74:2d:2a:
                    8a:a3:65:cd:4b:a9:bf:91:89:1a:27:4c:a9:50:ce:
                    25:91:45:e8:1a:87:47:63:05:81:72:6b:f3:b5:ce:
                    b1:f5:03:c6:78:4e:d7:e2:62:04:7e:12:61:c4:82:
                    ab:f1:d1:f4:1e:58:1c:7e:2c:c3:79:cb:66:d6:2d:
                    ee:4e:25:5c:1e:0c:f1:5d:af:4c:ff:14:c0:bf:23:
                    5d:5a:36:c7:91:87:e1:cf:12:ea:37:be:72:ec:f2:
                    27:30:80:4a:c1:26:27:8e:99:8f:dd:ee:50:07:62:
                    81:3c:96:0e:68:d9:c6:9f:eb:f5:6f:33:65:32:d2:
                    10:27:73:5e:f4:55:fb:1f:0c:9a:0c:31:b2:cb:f3:
                    b3:a6:fe:6e:27:f1:54:fa:36:be:59:aa:fc:01:ea:
                    15:f9:59:bc:2c:82:50:0f:6c:24:be:c6:35:fd:5f:
                    2c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A8:29:F9:A0:37:DA:AE:3E:3C:E2:78:2C:3C:AC:E4:63:53:3F:D2
            X509v3 Authority Key Identifier:
                keyid:5A:08:1A:52:AC:9C:B0:85:6D:F6:56:3E:D8:7D:38:B0:CA:CA:7C:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WggaUqycsIVt9lY-2H04sMrKfMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c6f31a-7ca7-48c4-93ff-c480da0264ca/1/WggaUqycsIVt9lY-2H04sMrKfMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c6f31a-7ca7-48c4-93ff-c480da0264ca/1/WggaUqycsIVt9lY-2H04sMrKfMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:f3:c4:af:20:7b:9a:ca:a3:0b:a7:16:cf:37:c0:2e:76:7a:
         2e:3f:2e:20:c0:80:cb:8b:28:87:63:48:ff:28:f9:12:2b:db:
         d3:92:10:0f:54:6e:1f:03:46:f9:6d:6e:61:81:e2:cf:e2:02:
         d0:23:c2:51:6d:91:71:54:42:59:2c:4d:6f:0f:af:bd:65:08:
         21:a0:0b:6d:e5:db:1c:aa:e1:c8:6b:e2:e7:06:18:71:c9:0a:
         97:32:51:8f:e7:0c:6b:8d:7a:f9:57:be:dc:a5:6f:db:45:db:
         6c:e0:b3:d4:d0:92:b0:e2:57:41:60:88:83:d8:61:af:44:02:
         8d:55:c5:6c:af:72:89:94:77:2e:7d:0b:25:0a:44:14:c5:37:
         ef:96:f5:d5:61:6d:7f:8a:d6:6e:b0:a0:36:19:e6:79:a4:19:
         94:55:08:d3:9a:3d:f5:b1:1e:59:cd:00:70:91:8f:7b:d9:7f:
         8a:c9:e7:3f:b6:42:05:ec:95:78:fc:39:63:13:1c:83:ce:96:
         78:33:23:3d:25:78:9a:35:99:55:e8:b0:08:09:32:c7:45:09:
         12:9d:77:5a:47:ca:22:43:d6:bd:76:22:aa:6f:b3:4b:65:74:
         2a:f9:39:49:5f:9c:7a:79:2a:c2:24:4b:de:43:c6:30:90:20:
         0e:98:e8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:08:59 2025 by rpki-client