This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft
File:                     WujHjxYTl64dvQrDIlhPYvt0AJc.mft (raw, json)
Hash identifier:          XDSyUW8Byem8vN9nqVl+3jTryRjlnzvb3H6ajIiK7mE=
Subject key identifier:   19:7E:46:12:64:B5:3B:92:4C:4F:09:C3:AF:87:DE:48:BD:4E:AE:32
Authority key identifier: 5A:E8:C7:8F:16:13:97:AE:1D:BD:0A:C3:22:58:4F:62:FB:74:00:97
Certificate issuer:       /CN=5ae8c78f161397ae1dbd0ac322584f62fb740097
Certificate serial:       019B1D997F8CB22919A461A0C7F5F47529A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft
Manifest number:          177E
Signing time:             Sun 14 Dec 2025 16:02:37 +0000
Manifest this update:     Sun 14 Dec 2025 16:02:37 +0000
Manifest next update:     Mon 15 Dec 2025 16:02:37 +0000
Files and hashes:         1: WujHjxYTl64dvQrDIlhPYvt0AJc.crl (hash: CV0mo/gDO567f6Hf6rtQQfoK12suDDyLjbxDB43jLDM=)
                          2: daHEI4pwK9MCoKlOIJSUBvhI06c.roa (hash: /jr1EJCG0Q64uCvZ5hBO4FDYHAmlotvlgjK0tDnckkE=)
                          3: eyQdGysIhp_r6-1FHIzSXU5efx8.roa (hash: huANc1mdWopecpKqoSK4uR5EG7Pph6cXGyXeN73ZyWA=)
                          4: haxTlRYy2yO-0mAOlc4jzaKbbWo.roa (hash: yUxYpdVjNsLpxhJtWSKKbU7j/fl7MSe7J+Jl/FZPDcE=)
                          5: qEBSULOSMZqvdv0jIfml2f7tabs.roa (hash: nH9uGd3tMpksCUbkWl3JLVG6iE75o6qgmjF/U2MlHRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 11:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1d:99:7f:8c:b2:29:19:a4:61:a0:c7:f5:f4:75:29:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae8c78f161397ae1dbd0ac322584f62fb740097
        Validity
            Not Before: Dec 14 16:02:37 2025 GMT
            Not After : Dec 15 16:02:37 2025 GMT
        Subject: CN=197e461264b53b924c4f09c3af87de48bd4eae32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1d:59:95:b4:6d:9a:7e:b8:a0:39:05:80:54:
                    1b:0e:9f:6c:3f:cf:58:42:a6:dd:4a:58:a5:d4:c1:
                    d8:d5:3c:9d:14:e9:dd:60:25:63:99:82:01:df:f5:
                    ee:27:64:9c:e7:e6:39:aa:cc:ea:f6:23:be:6d:f1:
                    b3:ff:8f:e3:0b:68:13:1a:2e:d7:64:ca:f5:38:e2:
                    14:39:f3:8d:3c:b2:3a:32:4a:c5:1b:22:17:28:af:
                    06:9e:39:26:ee:bc:f8:e1:0f:96:38:f2:aa:a2:79:
                    46:9a:09:32:64:2a:bc:0a:17:97:8f:71:c2:26:a2:
                    1c:77:78:5f:0c:cb:a3:07:1d:e4:6c:65:8e:79:cd:
                    d8:7b:2a:f5:d8:5d:31:8a:8a:e4:21:fe:89:91:10:
                    3d:35:90:5e:f9:9b:78:e3:89:b2:24:b3:1d:cc:64:
                    8b:42:b5:9b:fe:b5:02:05:74:d3:85:b4:8d:ce:1e:
                    63:10:95:81:d5:27:6b:c9:0d:fa:16:aa:39:60:77:
                    a4:81:61:01:40:9c:6d:01:99:23:83:9f:4b:74:33:
                    cc:05:30:14:1f:61:20:65:56:b9:22:bd:0f:c4:7d:
                    24:2f:4a:69:c6:5b:55:a3:21:46:af:e1:09:bd:4f:
                    e9:d8:ec:bf:a5:88:e5:a7:b0:e2:39:62:84:73:17:
                    f7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:7E:46:12:64:B5:3B:92:4C:4F:09:C3:AF:87:DE:48:BD:4E:AE:32
            X509v3 Authority Key Identifier:
                keyid:5A:E8:C7:8F:16:13:97:AE:1D:BD:0A:C3:22:58:4F:62:FB:74:00:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:5b:f6:20:fa:52:e6:06:ac:5a:a4:01:33:c0:5c:cb:87:5f:
         8b:20:cc:9a:20:eb:17:1c:7d:e8:d2:36:f9:3e:d6:38:d8:70:
         97:70:d6:a6:a4:3e:e4:9e:cc:e8:c1:26:f3:9f:af:18:c9:8e:
         46:7e:f9:77:b8:1a:08:ec:41:10:3a:a0:9f:13:f7:58:dc:c2:
         bb:ce:82:31:24:b9:c9:ba:61:61:38:9a:ef:7c:ec:67:66:cf:
         bc:58:5c:fb:b0:e9:da:c4:10:36:47:56:6a:57:78:89:5a:fc:
         88:8e:2a:10:bb:8f:5b:30:24:2a:13:63:3f:26:e4:f4:aa:e4:
         0b:06:04:30:01:6b:37:62:ef:37:cc:d7:0d:f0:96:f0:ea:58:
         2f:ca:77:e8:d3:cd:21:2c:b1:14:25:7d:50:51:6d:83:a0:93:
         4b:1c:64:37:ec:65:ac:96:b6:25:ce:83:6a:a9:50:7e:36:c3:
         17:9c:bb:02:ae:47:10:05:da:a9:64:55:09:03:7f:09:c6:68:
         1a:f4:70:b9:0c:94:71:e6:da:75:95:9f:b2:88:e5:13:35:2c:
         2e:68:9b:da:e7:dc:f4:cd:12:82:bb:ab:1e:7c:ec:31:32:d3:
         1f:6e:29:71:8d:40:02:e6:24:98:4c:21:eb:c1:04:41:f3:24:
         fb:d5:85:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 19:39:43 2025 by rpki-client