This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.mft
File:                     WP3E4ivstTWhxX9LjcRBtTMWd-M.mft (raw, json)
Hash identifier:          4+N8gEKegIR9Ud3F3r5KmX5AhKJ7Mo8JfvnVK32Ijao=
Subject key identifier:   E9:01:C0:1D:1E:56:C4:8D:73:62:F2:C3:E8:46:3A:0A:B1:6C:0C:0E
Authority key identifier: 58:FD:C4:E2:2B:EC:B5:35:A1:C5:7F:4B:8D:C4:41:B5:33:16:77:E3
Certificate issuer:       /CN=58fdc4e22becb535a1c57f4b8dc441b5331677e3
Certificate serial:       019B31C43EFCC548D5081101C4C3506E2F2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WP3E4ivstTWhxX9LjcRBtTMWd-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.mft
Manifest number:          14C5
Signing time:             Thu 18 Dec 2025 14:01:43 +0000
Manifest this update:     Thu 18 Dec 2025 14:01:43 +0000
Manifest next update:     Fri 19 Dec 2025 14:01:43 +0000
Files and hashes:         1: WP3E4ivstTWhxX9LjcRBtTMWd-M.crl (hash: tkw+6fB19rlkHrlGu8DAzyl+R8n8l7h4xJzx3FWFWDg=)
                          2: taQy9HpaIR-B5wNPU72M0d1f0co.roa (hash: GppUCw9ptPGs5O818rWaJoPW+Ulu8uS+JiuUV5bM6v4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WP3E4ivstTWhxX9LjcRBtTMWd-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 14:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:31:c4:3e:fc:c5:48:d5:08:11:01:c4:c3:50:6e:2f:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58fdc4e22becb535a1c57f4b8dc441b5331677e3
        Validity
            Not Before: Dec 18 14:01:43 2025 GMT
            Not After : Dec 19 14:01:43 2025 GMT
        Subject: CN=e901c01d1e56c48d7362f2c3e8463a0ab16c0c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c0:7f:03:7e:34:50:ad:18:3a:78:11:79:ff:
                    28:c0:2a:85:bb:64:29:0c:e7:ca:84:bb:87:35:ae:
                    10:d9:68:a8:dc:1a:f3:3b:1a:44:c3:10:2e:e3:dd:
                    9d:c3:c2:3b:eb:6c:e4:c8:80:85:94:eb:d0:46:c1:
                    b0:14:36:0e:bc:94:e3:a9:17:60:0c:49:f6:09:a6:
                    ce:dd:3f:5e:ab:d9:26:1b:20:24:36:3b:98:4c:4f:
                    ea:1f:94:cd:cc:42:6b:79:9c:de:7b:38:de:e5:cc:
                    e8:be:ec:66:eb:28:68:93:6d:fd:e8:f8:18:9d:de:
                    e1:6e:08:53:7a:fb:41:9f:b9:29:35:68:b3:5e:dc:
                    cd:cc:a6:eb:d6:8a:d3:b9:ad:c2:a1:48:75:cc:26:
                    ff:5b:c3:15:40:28:cd:ff:5e:42:8d:ee:a3:70:9b:
                    53:49:fb:40:54:7c:02:51:a0:ca:80:a7:16:ea:d0:
                    07:3c:ab:cc:55:63:da:66:4c:88:a6:f8:89:97:74:
                    48:58:32:0d:09:01:b0:03:a4:b4:2f:4f:8d:c8:2f:
                    ef:36:5d:5d:7e:18:ea:b6:eb:8a:3c:91:7f:dc:1f:
                    c2:a5:68:46:95:e1:c1:84:d8:eb:be:72:60:76:47:
                    bc:8e:32:c4:6c:d0:c9:4a:9d:35:5f:2d:a6:97:51:
                    4f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:01:C0:1D:1E:56:C4:8D:73:62:F2:C3:E8:46:3A:0A:B1:6C:0C:0E
            X509v3 Authority Key Identifier:
                keyid:58:FD:C4:E2:2B:EC:B5:35:A1:C5:7F:4B:8D:C4:41:B5:33:16:77:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WP3E4ivstTWhxX9LjcRBtTMWd-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:b3:44:b1:fa:b6:e5:ba:2e:89:a5:f4:c7:c2:6e:fd:9b:c3:
         ad:05:4b:53:bb:90:c7:93:51:12:2e:ca:f4:a0:eb:86:03:0f:
         3d:41:f0:93:fa:66:50:36:3b:b8:21:58:68:00:23:62:9b:8b:
         e7:50:2c:fb:2b:2b:c0:84:d8:c0:33:d4:13:ad:bb:13:b2:0b:
         98:29:10:63:57:e3:10:33:0b:cf:22:36:d1:c6:4f:9d:0f:f5:
         18:29:d0:b7:82:38:2b:46:30:6a:6f:08:44:93:78:06:5d:e1:
         03:4a:f8:bb:ef:3b:fc:2b:ee:9e:20:bc:cf:59:c2:25:77:ee:
         e8:17:05:63:1b:75:58:d3:93:01:53:f0:0c:63:a3:56:ae:b6:
         ad:e9:f3:7d:e1:b2:72:a1:e4:f4:5c:82:47:b3:6d:53:b2:38:
         10:ad:81:8b:77:fe:9b:15:88:b9:5c:eb:e4:cd:ca:3d:87:cf:
         03:8e:ec:79:bf:ef:22:50:f4:87:ad:47:3f:c7:f9:b5:3c:bf:
         78:6c:8d:17:d2:3a:d7:39:b5:ff:51:13:6d:a3:44:49:93:24:
         e8:66:70:15:24:7c:39:23:a5:81:ec:ef:b4:54:be:9a:b2:76:
         40:21:37:55:5d:f8:a1:98:57:e4:c8:e4:56:56:21:32:5b:77:
         20:69:3f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 23:27:52 2025 by rpki-client