This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft
File:                     WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft (raw, json)
Hash identifier:          z2Aov7NNnrCxUzB8biri4m4vSVSkL77CRqZ4WHdjqxQ=
Subject key identifier:   19:91:00:5B:40:25:93:3F:91:24:BB:66:B9:C3:29:6C:5B:7D:63:E3
Authority key identifier: 58:F7:D2:7E:BC:26:9B:F1:4B:8D:68:95:79:1A:FF:D4:29:F7:02:22
Certificate issuer:       /CN=58f7d27ebc269bf14b8d6895791affd429f70222
Certificate serial:       019B2219CA57176FBC45D29B1950EE90F114
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft
Manifest number:          1779
Signing time:             Mon 15 Dec 2025 13:01:14 +0000
Manifest this update:     Mon 15 Dec 2025 13:01:14 +0000
Manifest next update:     Tue 16 Dec 2025 13:01:14 +0000
Files and hashes:         1: A2lRtYsynJJAILeNP4ol_NB53as.roa (hash: zgRdZJry0e4HRbPx+TfhqLtDE1uOOj3QlmHxDJhN/Mg=)
                          2: WPfSfrwmm_FLjWiVeRr_1Cn3AiI.crl (hash: 4aaw0vWEVmcgFmnn/2ejPT91ZTxqPocU6pIGxVdj4/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 13:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:22:19:ca:57:17:6f:bc:45:d2:9b:19:50:ee:90:f1:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58f7d27ebc269bf14b8d6895791affd429f70222
        Validity
            Not Before: Dec 15 13:01:14 2025 GMT
            Not After : Dec 16 13:01:14 2025 GMT
        Subject: CN=1991005b4025933f9124bb66b9c3296c5b7d63e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:23:3a:89:72:a2:e6:30:e5:e5:cb:e8:89:58:
                    43:2f:93:ad:27:7b:6a:14:18:80:f2:98:6f:d3:c2:
                    7b:97:79:4c:8d:c5:65:d7:ac:10:6f:a2:a2:74:a0:
                    31:48:b9:30:69:67:65:9e:1a:5d:f3:79:d0:68:7f:
                    d5:fe:ca:f9:86:df:f6:5c:d7:2f:7b:54:99:00:ce:
                    4c:7b:3d:e2:63:c1:2a:fc:ba:e9:a0:90:51:2a:86:
                    a9:c2:12:67:b9:de:78:2e:ed:d0:50:f3:68:31:ca:
                    f4:37:0f:b8:22:47:34:30:c3:63:00:43:dd:0d:1d:
                    e3:94:79:e5:d8:dd:2e:18:99:04:77:9a:a2:2d:4e:
                    a4:7c:76:47:18:1e:82:a5:68:54:70:41:c7:1c:56:
                    62:c3:a3:db:92:12:a8:0d:2e:d2:88:33:04:29:25:
                    bc:3e:6b:a0:32:c1:5f:e9:1f:e6:3b:12:14:59:13:
                    d0:4a:27:2c:a2:0a:a6:c9:87:ea:b5:04:f4:4b:93:
                    be:eb:c7:d4:3f:f5:45:71:da:3a:d9:de:d1:c2:ea:
                    01:7c:77:ba:b9:3a:d5:18:79:64:02:9a:7f:16:33:
                    23:bb:8c:ab:a4:e7:45:44:32:56:35:e1:56:dd:0f:
                    b5:e2:2b:10:08:4a:f9:f3:2f:19:51:ca:39:fa:b2:
                    48:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:91:00:5B:40:25:93:3F:91:24:BB:66:B9:C3:29:6C:5B:7D:63:E3
            X509v3 Authority Key Identifier:
                keyid:58:F7:D2:7E:BC:26:9B:F1:4B:8D:68:95:79:1A:FF:D4:29:F7:02:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:dd:88:f9:7f:d1:34:fa:01:b7:e6:44:96:db:a8:bc:91:61:
         2e:9d:18:01:37:4f:8f:d4:70:8a:f5:5d:99:c6:24:08:ab:b8:
         73:30:0f:f3:5e:a7:17:79:ed:cd:d7:bc:31:41:26:4f:ef:ba:
         e1:c4:5a:01:e6:42:67:37:19:f9:02:49:8c:f3:f8:0e:03:5b:
         31:e1:f2:03:18:dc:20:a1:25:d0:b2:ea:e4:89:01:7a:9d:5b:
         90:26:6e:23:66:f2:c8:6a:37:83:55:52:68:d7:ad:1b:7f:0a:
         0f:07:34:15:11:74:aa:53:be:58:3e:5f:27:c5:f1:df:49:4e:
         ba:d1:e5:57:55:54:67:13:fa:7a:ed:2e:95:cf:39:e4:95:de:
         0d:02:67:c1:04:f6:ba:32:9e:c6:45:5f:e3:12:91:7c:31:3c:
         c5:21:f2:83:36:95:0b:d2:ce:a7:c0:6c:c4:2d:1f:b0:8a:5d:
         15:99:18:d3:2c:00:b0:9c:d7:b7:47:b4:99:6a:59:bd:94:5c:
         a1:c1:15:ae:90:90:34:04:f6:8b:b0:35:29:67:ec:1b:85:73:
         25:90:21:fe:5f:8a:fd:95:15:b6:d2:9e:d4:96:a6:3f:10:03:
         c9:c1:4b:3c:30:38:0b:c8:e8:05:62:27:10:5b:d1:03:6f:a4:
         59:4c:0b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 19:55:57 2025 by rpki-client