This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
File:                     WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft (raw, json)
Hash identifier:          gqv51Ju+0Iirk3IK40xI6MJZH7tau+kYSzlf43tkF0w=
Subject key identifier:   B4:2C:31:E5:85:B0:42:AC:83:4B:B9:69:06:25:62:19:64:53:C1:98
Authority key identifier: 5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA
Certificate issuer:       /CN=5a52945d231f5f8a974be712e8718ab50f04cffa
Certificate serial:       019B058FEA978EC82A1781833DA028A7C71E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
Manifest number:          176C
Signing time:             Wed 10 Dec 2025 00:01:16 +0000
Manifest this update:     Wed 10 Dec 2025 00:01:16 +0000
Manifest next update:     Thu 11 Dec 2025 00:01:16 +0000
Files and hashes:         1: WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl (hash: lgYN2j6ZVJMjaNTdrnl7gL8UyRJig7+cOVRka42GNBU=)
                          2: aiBw7mg-7iWQbjUD1MChAVL_Coo.roa (hash: KeivAY3qo56HW2nMzFcSP1tB4CHei3XM2+AGnhTVVP0=)
                          3: jqsja3Ig_Inj8Kr-paXhHO8forw.roa (hash: lgk++/8/iHEqAJTqQrY78sNZtOq1z4JSDJP8vNMWH0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 00:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:05:8f:ea:97:8e:c8:2a:17:81:83:3d:a0:28:a7:c7:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a52945d231f5f8a974be712e8718ab50f04cffa
        Validity
            Not Before: Dec 10 00:01:16 2025 GMT
            Not After : Dec 11 00:01:16 2025 GMT
        Subject: CN=b42c31e585b042ac834bb969062562196453c198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:45:72:ad:50:89:50:f7:6e:17:3a:7b:89:6f:
                    86:d4:4c:ba:32:9f:b1:c5:7f:0e:1c:72:8c:f7:d3:
                    10:1b:9e:a6:38:58:7a:ee:45:42:2d:c9:b6:6b:65:
                    07:f6:1b:9b:21:df:79:d4:19:8b:2d:5b:f7:ab:77:
                    6f:3e:ee:58:65:4b:45:ba:78:d2:5e:ce:e0:99:75:
                    a9:13:88:dd:61:60:0e:34:10:2d:21:ad:29:9d:8c:
                    92:f0:bf:b5:b1:f8:1c:2e:c7:8c:be:39:60:ef:7b:
                    f3:4e:73:28:33:1d:85:78:c9:f7:ba:71:aa:26:45:
                    85:d3:88:99:f0:12:ed:71:c3:46:0e:8d:f5:5d:4a:
                    5e:7a:d0:f2:f0:b6:23:c6:a3:23:53:8b:d1:e7:84:
                    be:31:83:ef:18:5c:03:20:50:52:02:12:d6:18:ad:
                    d8:03:84:c1:ed:8e:22:2f:ae:08:94:2a:45:c2:c9:
                    9a:e7:12:5a:21:da:73:22:88:bd:7a:11:98:8a:37:
                    74:83:7f:b7:43:de:08:54:69:00:ae:c3:ab:d0:21:
                    ac:17:64:be:bf:31:46:18:0e:94:03:2c:fe:c6:59:
                    3a:f5:2f:97:12:c6:8c:b8:97:9a:b6:e2:81:fc:37:
                    ac:01:d3:39:93:c0:d5:21:a2:1d:ad:aa:f5:41:57:
                    c7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2C:31:E5:85:B0:42:AC:83:4B:B9:69:06:25:62:19:64:53:C1:98
            X509v3 Authority Key Identifier:
                keyid:5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:2e:71:c2:93:c3:b2:90:79:e9:6f:23:21:ce:26:c1:60:de:
         9b:20:f9:6b:99:cc:94:79:bc:87:40:44:6c:96:b0:ef:98:02:
         0d:9d:b2:f0:58:43:91:c2:b9:35:f8:6b:4d:2a:8c:30:30:52:
         ea:dd:2b:e9:72:16:7e:fb:41:13:1d:86:61:07:b5:0c:df:0d:
         da:4d:ad:8d:5e:90:d1:03:ac:86:21:6b:54:55:7e:6b:d8:46:
         09:62:28:bf:ff:b7:ba:0f:51:0b:30:f6:8e:1b:86:c8:ed:16:
         11:29:2b:6e:27:75:14:5e:e2:d3:e5:1b:e8:c3:1d:59:c3:d8:
         b3:80:d9:64:d6:e1:d0:d5:96:07:75:ad:26:cc:72:38:1d:df:
         44:ca:3b:2a:f9:4b:06:e1:ca:e5:dd:00:21:67:b7:09:c9:83:
         ae:83:11:a0:40:51:5b:12:20:63:31:bc:c2:43:fe:26:ba:ba:
         c9:42:5d:e5:b1:6b:a2:aa:5a:3f:11:25:7a:24:63:ed:45:d8:
         43:03:84:c5:49:89:74:2d:06:44:9c:31:c5:34:1f:21:ce:e3:
         38:e3:66:e4:dc:7f:e4:54:e9:e2:82:d2:b0:3a:95:db:8f:d5:
         21:48:a9:85:51:da:03:b9:de:54:57:9a:1a:6e:cb:7b:ba:96:
         74:91:e3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 08:54:49 2025 by rpki-client