This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft
File:                     wei4jx4wVzoOIOR51boAtOkYJ7Y.mft (raw, json)
Hash identifier:          dGxdRQA0BG1KFfXPjm9qNUT70aIwO883hngYY+UmE1U=
Subject key identifier:   96:49:65:85:6D:BE:7C:A1:42:77:9F:C6:CC:E7:D8:9B:48:6D:A6:94
Authority key identifier: C1:E8:B8:8F:1E:30:57:3A:0E:20:E4:79:D5:BA:00:B4:E9:18:27:B6
Certificate issuer:       /CN=c1e8b88f1e30573a0e20e479d5ba00b4e91827b6
Certificate serial:       019B435BEE1EA7F9E8F79D726DE5CCF3F284
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wei4jx4wVzoOIOR51boAtOkYJ7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft
Manifest number:          178B
Signing time:             Mon 22 Dec 2025 00:00:56 +0000
Manifest this update:     Mon 22 Dec 2025 00:00:56 +0000
Manifest next update:     Tue 23 Dec 2025 00:00:56 +0000
Files and hashes:         1: _hY8OE1vA86wyK3ByKxKme_jHPA.roa (hash: 77qfF/YB8xlTjgPPV6F7smZo7NAYUmHDjTAKbxWVa7Q=)
                          2: wei4jx4wVzoOIOR51boAtOkYJ7Y.crl (hash: Wy75MEaGkKput7bDWRHsYPfdiWBDcMDtlqt34Ms6uQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wei4jx4wVzoOIOR51boAtOkYJ7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:43:5b:ee:1e:a7:f9:e8:f7:9d:72:6d:e5:cc:f3:f2:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1e8b88f1e30573a0e20e479d5ba00b4e91827b6
        Validity
            Not Before: Dec 22 00:00:56 2025 GMT
            Not After : Dec 23 00:00:56 2025 GMT
        Subject: CN=964965856dbe7ca142779fc6cce7d89b486da694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:af:40:86:cb:89:36:bc:23:34:89:55:c5:82:
                    6e:d0:8a:9c:72:73:ad:3e:07:17:7e:5d:7e:f2:ce:
                    5c:1a:c1:82:b9:c0:af:7c:0b:ed:7d:a8:7e:89:81:
                    20:55:64:f3:f6:7d:52:c2:9c:c4:21:8f:19:8f:af:
                    5d:6f:b0:71:18:d4:36:af:b4:ba:80:b5:0c:e3:21:
                    bb:8b:40:d5:73:b5:d1:65:e8:27:b1:a8:b6:9b:b8:
                    9f:95:d8:d4:bf:b3:e5:87:f5:f6:ac:85:90:a6:ff:
                    9c:b2:7d:d4:6a:4e:16:b9:6d:aa:9d:3e:0b:b5:cd:
                    6c:95:9a:3c:7f:ff:c4:28:1f:92:4a:9a:e9:2a:ac:
                    5a:5c:ec:89:5f:68:a3:4b:d1:40:22:28:08:83:e5:
                    86:03:8a:67:b7:f0:a6:45:8d:c8:41:17:3a:4c:5c:
                    c9:d5:d7:29:34:4c:78:b5:68:be:d0:bf:95:8a:c2:
                    2e:18:3d:9c:53:9d:99:c0:07:e2:db:26:11:a5:cc:
                    7c:76:bb:c3:41:2d:86:c7:40:2d:79:da:5b:03:a5:
                    b3:1d:f1:f1:3d:83:ea:40:d4:82:16:37:54:a3:50:
                    d8:d1:66:24:49:9f:4f:fb:9a:2f:61:37:ff:58:5a:
                    1b:06:a5:aa:46:30:90:0f:20:17:e1:cb:f8:36:29:
                    e7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:49:65:85:6D:BE:7C:A1:42:77:9F:C6:CC:E7:D8:9B:48:6D:A6:94
            X509v3 Authority Key Identifier:
                keyid:C1:E8:B8:8F:1E:30:57:3A:0E:20:E4:79:D5:BA:00:B4:E9:18:27:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wei4jx4wVzoOIOR51boAtOkYJ7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:36:e9:24:2a:31:e7:82:d9:72:21:dc:62:1a:c5:42:ce:cc:
         e6:ae:77:dd:d7:20:4e:6c:17:5c:a7:f4:1a:00:25:c0:0e:4f:
         7b:26:7c:ae:d4:50:e2:c9:f4:e6:a7:4f:72:5d:ca:4b:9e:c1:
         12:11:4a:bd:7a:84:c5:60:c8:72:df:60:41:9a:4a:09:b6:db:
         40:73:a9:69:01:71:a0:37:45:ac:c4:bd:9a:25:41:ef:9b:21:
         1a:54:94:23:a5:13:fe:16:0f:8c:64:31:04:bd:87:cf:20:4c:
         5c:94:bc:00:40:32:2d:0e:2f:ea:b5:14:9e:ea:5b:01:96:1e:
         7a:ce:7d:97:8b:a9:4d:87:c0:3d:af:05:7f:bb:fd:00:4d:d4:
         c4:7a:cb:69:c0:42:f0:2f:b4:b7:eb:a4:05:f1:a0:53:7c:6f:
         7f:4d:4e:ad:c5:e8:2f:ab:1a:a0:15:82:ed:39:53:f7:19:48:
         6e:1c:ba:43:20:08:d9:df:06:28:80:cd:f3:03:34:6e:88:73:
         aa:b5:df:61:59:f7:9a:dd:09:08:7d:a0:8b:96:fd:eb:56:13:
         c4:64:8d:ca:79:73:10:5e:92:f2:c3:b0:63:57:af:ea:13:92:
         64:48:28:b5:7a:76:01:ce:b1:f5:64:6f:4c:f1:70:c4:b3:a2:
         35:1b:1c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 06:51:08 2025 by rpki-client