This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
File:                     WH9UeNHpTyQHBXIsN4kHba9VN1c.mft (raw, json)
Hash identifier:          X7+sRyFbp5f8TpMFF0F1CmmS/Ca1gQ3BtKV/N0I39U8=
Subject key identifier:   73:30:C4:E8:88:60:AF:63:32:C6:DD:B9:DE:76:70:93:B7:18:85:C7
Authority key identifier: 58:7F:54:78:D1:E9:4F:24:07:05:72:2C:37:89:07:6D:AF:55:37:57
Certificate issuer:       /CN=587f5478d1e94f240705722c3789076daf553757
Certificate serial:       019AAC4B77CAA6FCB070C659AC83F5C1FE94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
Manifest number:          0278
Signing time:             Sat 22 Nov 2025 16:00:18 +0000
Manifest this update:     Sat 22 Nov 2025 16:00:18 +0000
Manifest next update:     Sun 23 Nov 2025 16:00:18 +0000
Files and hashes:         1: JYHlFaw4wOmIWR_77ywpgSBNK2k.roa (hash: OvZXgWODCQ+eoxv2l2YqNiIKjAuMYd6ZKeSQVCi/uJE=)
                          2: WH9UeNHpTyQHBXIsN4kHba9VN1c.crl (hash: N0g0+c+1MaBa7LCROJ+1VvqWbJRgtfW9o+Ahm87RFvk=)
                          3: d9EPdccRI9fe31r8YXiF11dbuAE.roa (hash: Mn6la1cNZ2lvlxnLvxs6dnBmU/hxdiSINwGaH327vug=)
                          4: g1OClMd_E4NQ7EkPx7bidts26wA.roa (hash: CeqCEmByjs4N40bd+Z4KEPz6ASh9HSswP/ltMk2hKeQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Nov 2025 12:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ac:4b:77:ca:a6:fc:b0:70:c6:59:ac:83:f5:c1:fe:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=587f5478d1e94f240705722c3789076daf553757
        Validity
            Not Before: Nov 22 16:00:18 2025 GMT
            Not After : Nov 23 16:00:18 2025 GMT
        Subject: CN=7330c4e88860af6332c6ddb9de767093b71885c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:25:87:4b:0f:51:e6:bc:c0:a3:7d:83:e1:fc:
                    31:02:2c:46:4f:43:0a:ba:db:55:0a:87:0e:d8:2d:
                    43:00:f1:6b:3d:32:97:59:2a:c7:37:06:7a:a7:af:
                    ab:c6:9a:c8:6b:22:6b:be:38:3a:7f:73:de:00:29:
                    6d:a2:19:4e:87:5d:6b:f2:20:82:6e:40:69:cd:ee:
                    23:f8:e8:04:31:ed:9d:49:fe:97:4c:c4:3a:f3:4e:
                    85:8f:cb:9a:ee:26:d3:59:0a:33:bb:3c:36:bf:7e:
                    ac:b8:d6:bb:23:4f:c3:ff:37:92:40:f3:6f:d7:2f:
                    a0:ee:70:fc:2f:c0:d5:39:1b:2e:7e:01:5c:3a:07:
                    da:ca:ab:de:89:1e:87:0a:15:b7:3f:97:f6:8c:ac:
                    27:42:af:8a:fa:7e:59:45:19:ac:85:d5:f3:84:2a:
                    21:fd:46:d6:63:7b:02:15:f4:de:1b:2c:8b:a2:cd:
                    a7:23:2f:d5:16:c9:7a:40:6f:f1:76:c9:93:07:3a:
                    9d:d0:9b:74:c4:af:49:91:98:21:23:05:68:a3:15:
                    01:5d:e8:e5:42:ee:81:1a:e0:1f:47:a7:21:01:33:
                    d4:44:e4:46:97:fa:7c:4e:63:58:90:fc:5f:03:c9:
                    33:78:18:d0:73:60:b3:5d:d1:51:a9:48:a5:e8:15:
                    a1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:30:C4:E8:88:60:AF:63:32:C6:DD:B9:DE:76:70:93:B7:18:85:C7
            X509v3 Authority Key Identifier:
                keyid:58:7F:54:78:D1:E9:4F:24:07:05:72:2C:37:89:07:6D:AF:55:37:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:4d:f1:f9:2f:bd:b2:1b:f1:23:65:1f:ea:05:46:46:8b:58:
         37:06:4d:fc:68:41:da:25:5e:dc:75:27:50:db:3d:6c:aa:88:
         be:06:01:f1:e7:4e:19:a7:ac:4a:8b:d7:1b:29:32:db:99:fc:
         62:85:98:cb:d0:a0:b1:5e:75:d1:2a:c3:e5:6f:a7:7e:11:bc:
         5a:13:3c:b2:ef:17:49:3d:5c:13:6c:46:2f:b9:50:9d:2e:c9:
         83:e9:03:81:91:48:12:d2:05:d1:fd:10:24:b5:bf:85:79:43:
         03:e9:43:1f:d6:23:3b:6f:e1:05:49:3e:45:44:63:a9:3f:4a:
         bd:8c:e9:51:0b:f6:d7:cf:a6:0c:4c:3f:99:fd:89:9d:31:97:
         de:be:0b:86:4f:07:e3:5f:a3:27:2f:3f:08:d3:96:92:fc:45:
         bb:de:e1:17:48:d6:3c:86:1d:58:9b:f1:23:54:f3:00:2a:bf:
         7f:8f:e4:db:3d:2e:d6:c8:07:51:c5:81:aa:7e:65:cd:45:c2:
         ea:2f:5d:77:1e:7c:9f:84:a8:01:1f:0c:d3:61:8c:3a:05:fc:
         43:b3:b4:9b:94:fa:65:56:79:40:b7:bd:0c:7e:4b:18:83:dd:
         a6:cd:a2:5c:14:20:e7:ec:95:d6:37:c9:e1:d8:79:89:5e:d7:
         53:92:cc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:47:13 2025 by rpki-client