This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft
File:                     WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft (raw, json)
Hash identifier:          hUXI3nEwDVq4DmluHzT8B4fc8RKntyLona+gWs6PA9c=
Subject key identifier:   B4:19:FB:5A:B8:92:1C:B0:28:DE:F9:DD:6F:4E:0C:B4:31:B3:F3:B1
Authority key identifier: 5A:68:D6:99:D1:A9:45:7C:78:AC:FB:EC:00:4F:98:67:7A:A4:CC:16
Certificate issuer:       /CN=5a68d699d1a9457c78acfbec004f98677aa4cc16
Certificate serial:       019B0F374903714475201F47E3459929984B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft
Manifest number:          1777
Signing time:             Thu 11 Dec 2025 21:00:39 +0000
Manifest this update:     Thu 11 Dec 2025 21:00:39 +0000
Manifest next update:     Fri 12 Dec 2025 21:00:39 +0000
Files and hashes:         1: KOtOprlo9eWM-S3ee18Bkra0s7U.roa (hash: YzsVJr77Droy7DJXTIqItUpDk3Xa+3GyD3WsTRtaj84=)
                          2: PnDAeBphB2kiD9o4b1TlFW_oiEw.roa (hash: 80HIEeMh1J7mTJAl8xWdqZV3GTcdBhba2s3G/UCvDhk=)
                          3: VJASrMOyLg85AblR9YiVSWxHxZs.roa (hash: REvGVujT8OfpbkY6GeJPSg8UwmOkMcFqkev3bGvsPwQ=)
                          4: WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl (hash: qh/zm1Eq3RF2abokJGng+lFPrMY0lIhWwi0zn4eYjZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 14:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0f:37:49:03:71:44:75:20:1f:47:e3:45:99:29:98:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a68d699d1a9457c78acfbec004f98677aa4cc16
        Validity
            Not Before: Dec 11 21:00:39 2025 GMT
            Not After : Dec 12 21:00:39 2025 GMT
        Subject: CN=b419fb5ab8921cb028def9dd6f4e0cb431b3f3b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:06:c2:d6:8a:93:75:47:cb:3c:32:9d:9a:d2:
                    bd:41:14:87:c1:d9:a9:14:c3:35:9a:35:8a:8b:67:
                    67:2f:fa:9c:e1:6e:91:7a:73:99:da:40:15:dd:6b:
                    49:b6:2a:20:d2:f3:14:3d:4b:5c:48:8b:7a:c1:5e:
                    6e:f3:ba:4c:89:f4:46:27:89:00:99:ec:b8:f3:19:
                    57:e9:ca:30:da:17:70:e8:37:33:7c:57:0c:73:ef:
                    38:e6:ca:49:80:17:a0:27:50:b3:ac:5d:6a:6c:e0:
                    43:19:67:13:67:06:8e:69:d3:7b:bd:4b:d7:5b:88:
                    cf:85:8a:7a:84:80:65:e6:fa:61:17:cd:03:3f:7e:
                    6b:2f:29:6a:0d:df:c7:cd:4d:84:27:4a:65:8c:d6:
                    33:6e:df:22:c3:12:ce:ef:06:3c:2e:70:e0:ec:86:
                    b3:bd:24:c2:e8:65:70:1a:6f:13:93:c5:b5:59:c1:
                    4f:db:06:19:81:d0:a6:33:c6:df:e6:74:ec:6d:a1:
                    0f:5a:0d:fb:f2:be:18:c1:a8:36:5c:80:3d:e1:66:
                    2a:b8:82:0c:38:da:0d:9e:33:ab:3e:e5:09:51:b5:
                    76:6f:fa:93:20:22:13:e3:52:3a:ab:07:50:18:99:
                    96:07:a0:11:6a:23:59:3e:7a:28:6b:1e:18:5f:82:
                    4b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:19:FB:5A:B8:92:1C:B0:28:DE:F9:DD:6F:4E:0C:B4:31:B3:F3:B1
            X509v3 Authority Key Identifier:
                keyid:5A:68:D6:99:D1:A9:45:7C:78:AC:FB:EC:00:4F:98:67:7A:A4:CC:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:74:c7:b1:a8:a1:e5:7f:0b:ab:75:23:a0:79:66:cf:23:2f:
         25:3a:7f:78:39:3d:44:f4:97:7a:f1:11:76:8c:08:fc:3d:01:
         45:61:47:fb:27:ef:28:fc:83:13:0e:0b:70:92:5d:72:79:1a:
         54:1f:5c:7c:99:20:0b:d4:94:50:8e:db:43:05:39:be:1a:7b:
         9e:7f:e4:78:61:ff:ca:4b:6b:fc:74:b6:3b:a7:ae:ca:10:b5:
         03:9f:02:7e:3c:af:f4:4c:78:35:d7:17:84:e1:92:a9:d0:17:
         2c:78:35:36:35:3f:b4:e0:c9:38:15:fc:af:5d:8b:cf:4a:85:
         64:88:19:cd:2c:e4:f6:96:25:8e:27:c5:a3:be:d4:86:00:6c:
         33:a5:83:56:0f:71:47:8a:f0:5b:62:8e:88:92:5b:10:da:6f:
         64:63:aa:6e:73:91:14:dc:e4:6b:20:5c:94:33:0f:c8:d0:78:
         cd:59:a1:39:f0:c4:a7:30:38:4c:49:7f:0c:11:dc:77:d3:d0:
         3b:fb:86:3d:87:d5:d0:91:ac:69:8b:46:b2:95:82:e9:45:a5:
         40:3a:2e:a0:28:1a:a2:d9:85:8d:25:87:3f:12:1f:2f:93:e0:
         6f:e6:88:ef:c2:15:73:c6:28:ba:8f:f0:d3:c7:17:c0:52:72:
         f1:f6:8e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 23:28:04 2025 by rpki-client