This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.mft
File:                     WXtExKeTHGam_56S27MspyPUzPc.mft (raw, json)
Hash identifier:          7aXWRpm6riEbkclYmxxu2tSVnpRsTycCper1cOE/2xg=
Subject key identifier:   1D:E3:4E:65:BE:32:B2:BB:31:62:3D:FF:57:80:36:93:6C:B5:59:F5
Authority key identifier: 59:7B:44:C4:A7:93:1C:66:A6:FF:9E:92:DB:B3:2C:A7:23:D4:CC:F7
Certificate issuer:       /CN=597b44c4a7931c66a6ff9e92dbb32ca723d4ccf7
Certificate serial:       019B12A70AD34A2D71E091F4BAFA98E10C5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.mft
Manifest number:          1776
Signing time:             Fri 12 Dec 2025 13:01:35 +0000
Manifest this update:     Fri 12 Dec 2025 13:01:35 +0000
Manifest next update:     Sat 13 Dec 2025 13:01:35 +0000
Files and hashes:         1: 27thg2xR1ns9dxvQknh6OQz2HQE.roa (hash: 8utEVwtgJM/87D9G8Lvp0Zap9PR/R1pmHN8nnbsDNS0=)
                          2: 7EOkJISYh1lPEvtjEsSd_uB091A.roa (hash: iyJBe6KDY2jgmtE4ar31VWghuSb4Z0TN62CuRa0HGDo=)
                          3: IsbNRUwtF97TzTNIl7-2xG06qDM.roa (hash: ZJvUiTXJS17zRJXm+MWYGG6p9Wcs9KOAFeVCvx+kP0Q=)
                          4: WXtExKeTHGam_56S27MspyPUzPc.crl (hash: Zjtpw28gXmD3jwTFVkqHHf91vSKFA/yFTDZs20wBTws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Dec 2025 08:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:12:a7:0a:d3:4a:2d:71:e0:91:f4:ba:fa:98:e1:0c:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=597b44c4a7931c66a6ff9e92dbb32ca723d4ccf7
        Validity
            Not Before: Dec 12 13:01:35 2025 GMT
            Not After : Dec 13 13:01:35 2025 GMT
        Subject: CN=1de34e65be32b2bb31623dff578036936cb559f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c4:af:87:7c:3a:a5:60:71:4c:58:f1:3f:67:
                    a7:ce:e0:d5:f7:8f:eb:f6:5b:e6:de:22:24:58:7b:
                    14:42:60:01:6c:92:eb:c3:5a:0c:27:fb:55:57:50:
                    e7:b8:9f:aa:ac:25:f6:44:44:92:7d:9d:9e:fd:24:
                    c6:36:5e:0e:6d:c3:fe:eb:a3:f7:72:04:b6:d2:b0:
                    77:ed:de:09:d9:b6:41:af:30:8b:e6:1d:39:e0:84:
                    c9:57:63:89:e9:29:e0:52:85:0b:fc:83:82:df:ab:
                    7c:bb:b1:e6:18:eb:13:38:60:62:5a:6c:26:60:09:
                    70:b1:34:8b:12:7d:46:ba:08:f5:de:68:28:2c:e9:
                    58:2e:4b:84:0d:7f:83:32:c4:09:62:53:91:32:91:
                    08:89:bf:c5:08:de:26:4c:2f:f2:12:6b:0e:ba:c6:
                    bd:fb:19:73:8a:47:cd:0e:ce:3b:fe:de:d7:a3:92:
                    a1:60:0f:2f:01:a3:ec:36:69:8e:47:26:8b:21:63:
                    ec:2e:da:fd:37:81:22:42:62:c0:00:6c:31:05:01:
                    6c:43:11:23:fc:c6:78:46:e9:4c:8e:1b:05:b9:57:
                    08:75:3a:f4:4a:24:c3:89:66:e8:43:0a:69:64:0e:
                    3e:f5:bb:f3:7c:54:04:09:5e:05:7d:44:9a:ef:3b:
                    9c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E3:4E:65:BE:32:B2:BB:31:62:3D:FF:57:80:36:93:6C:B5:59:F5
            X509v3 Authority Key Identifier:
                keyid:59:7B:44:C4:A7:93:1C:66:A6:FF:9E:92:DB:B3:2C:A7:23:D4:CC:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:0b:e7:13:6d:bb:c8:4b:8f:71:c5:9d:a2:10:2e:56:0b:eb:
         b2:50:63:08:30:f0:f7:38:d5:1c:03:61:96:0b:39:19:88:9c:
         24:1c:d7:2e:75:67:ca:ba:37:af:94:bb:aa:3c:46:b8:8a:41:
         97:f8:8c:d8:9b:7a:f6:70:13:0e:a9:59:4a:50:90:e2:f9:1b:
         64:94:b7:80:18:c4:77:9b:b7:15:ba:be:ed:98:a2:d3:0c:19:
         c4:a0:a4:6e:09:5d:ef:d8:90:72:56:5a:eb:d2:f7:08:a6:fd:
         4b:93:f2:09:13:15:ab:27:a3:37:a2:b3:8f:4f:c5:ad:f2:d3:
         4f:d0:4c:f3:45:bb:73:ba:bc:5b:19:01:09:d1:4e:01:ef:da:
         94:22:c2:01:3d:e2:6a:85:09:9e:ae:5d:b6:f7:63:fe:9b:26:
         01:93:60:a1:3d:12:07:fc:9e:89:f6:b7:7e:19:be:8e:fb:34:
         d7:11:fa:cd:52:b5:d0:59:93:24:85:df:a3:b4:3e:a0:bc:c4:
         4e:53:15:6a:6f:c8:1c:ed:f9:7f:6b:11:e0:e3:81:54:19:ae:
         a4:89:fc:3b:14:f9:50:74:4d:ff:ec:a0:2e:cb:3b:ac:82:c8:
         e0:39:45:88:09:62:48:50:84:00:93:6f:42:03:da:43:55:e4:
         a4:d3:03:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 16:19:57 2025 by rpki-client