This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft
File:                     WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft (raw, json)
Hash identifier:          6u/roPoBqMN6CoROEoHtlAgI4jeK7SbAd5ea1i2V3HY=
Subject key identifier:   50:5A:C6:EE:EE:A7:A4:69:AF:5E:4F:44:59:14:19:B9:43:51:1F:96
Authority key identifier: 59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D
Certificate issuer:       /CN=598fa4201344d4107f792eee2566c62d65714e2d
Certificate serial:       019B07B5908D0F7DF030CF665E4DAF4320F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft
Manifest number:          1773
Signing time:             Wed 10 Dec 2025 10:01:38 +0000
Manifest this update:     Wed 10 Dec 2025 10:01:38 +0000
Manifest next update:     Thu 11 Dec 2025 10:01:38 +0000
Files and hashes:         1: 21Z7HmrOxiobds8TxVCgw76jX2Q.roa (hash: Skfph10GmJAF2gm8sQyaNWU8Upk0+888zHd0gic3TYc=)
                          2: 6BYQ4By2tJL3cWm4L-BQSWyvJS0.roa (hash: 3sAvJeopcRq49xZNtMv2qbQCEldVQVML4/pl6Sm3s88=)
                          3: WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl (hash: 67HKndcEscmimnuymMJOHy7++e5fZd84BSb1Qo2jexc=)
                          4: k97CrjwrQPT8_y6vdIb8L8R85BY.roa (hash: +DDKSroEDnHlqdOq/UjhA3pHL4D5bJ4vsDTADTBgxwE=)
                          5: n6_io3-KaLYhuJtZiy1MeoUuNbk.roa (hash: nSbtIazJ2SXxi9u2NxxSLPcqXno/gu6gZmKKyNsxgLg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:07:b5:90:8d:0f:7d:f0:30:cf:66:5e:4d:af:43:20:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=598fa4201344d4107f792eee2566c62d65714e2d
        Validity
            Not Before: Dec 10 10:01:38 2025 GMT
            Not After : Dec 11 10:01:38 2025 GMT
        Subject: CN=505ac6eeeea7a469af5e4f44591419b943511f96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c8:d1:13:e7:78:6f:08:1a:b8:00:3d:cb:1d:
                    b7:b6:7b:8b:00:ac:4c:0f:b9:73:6d:ba:5d:65:63:
                    59:50:ab:b1:f9:53:eb:a3:ac:d3:dc:ab:ae:ae:3a:
                    ca:ee:c3:c7:0f:6a:24:d2:b5:4a:6d:34:07:ca:39:
                    90:94:30:99:da:eb:ce:c3:4a:95:2f:ec:f0:c9:d0:
                    f3:ed:50:3f:07:5c:85:3b:d7:4d:84:5b:49:bd:d6:
                    77:57:1c:3d:8c:2d:2a:46:fd:0f:c4:ed:66:5e:2d:
                    ea:cb:0c:5d:ab:de:7b:52:4f:c5:dd:24:5b:e3:63:
                    a0:f6:2a:2d:8f:4c:51:0d:6b:a0:59:68:52:2d:e0:
                    60:41:9d:73:80:4b:a6:48:0c:36:5b:45:ba:7e:c6:
                    28:77:07:d0:d5:cc:bc:8f:1c:6c:3f:2a:d2:82:c8:
                    e5:a6:1c:44:71:2a:68:01:1c:c2:8c:91:68:fb:8c:
                    bb:d2:6e:2a:fe:bb:32:18:df:b2:d5:31:de:8a:09:
                    35:f8:53:6c:ab:f9:7e:03:70:e7:e2:f8:16:d3:ce:
                    79:d5:31:5f:41:82:b2:e1:43:b2:30:b8:de:8a:71:
                    90:bb:ab:20:b4:a4:21:1a:aa:cf:4f:6e:42:fb:fa:
                    93:48:6e:8c:6c:2b:5b:60:06:f6:fb:77:3e:83:87:
                    ec:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:5A:C6:EE:EE:A7:A4:69:AF:5E:4F:44:59:14:19:B9:43:51:1F:96
            X509v3 Authority Key Identifier:
                keyid:59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:c5:b5:04:73:14:b5:29:0a:f5:99:d8:ce:7a:62:a8:5c:cb:
         a6:9f:ce:a5:59:19:43:af:ae:23:b6:3b:9c:52:75:f5:8c:4f:
         8b:61:e4:84:fb:ac:87:8c:1e:54:21:e5:3e:d3:ba:af:e9:86:
         1f:fa:3f:49:01:08:b6:65:3b:d1:ad:5c:90:75:19:a0:77:98:
         7e:20:79:e3:06:db:55:72:04:37:01:25:1e:34:b5:00:c5:df:
         5d:3e:bd:3d:eb:37:db:13:d6:e3:0e:db:24:5c:1a:5b:c7:97:
         3b:b4:7a:4e:80:63:6c:e0:4e:58:25:9a:1c:9e:d5:ed:bc:07:
         af:79:1e:b1:d9:97:cb:68:42:2f:6c:47:b9:23:b1:32:12:29:
         1e:c6:ce:10:55:53:5a:74:f3:83:1d:78:1e:96:8c:fe:46:ee:
         af:f9:04:67:16:c9:e8:4d:f6:d9:c6:2b:39:a1:2f:ab:22:ea:
         25:ea:00:9c:09:1b:62:55:19:cb:fe:68:d6:a5:30:0f:27:60:
         fd:b3:eb:b8:f1:e0:b3:7f:1e:a5:7d:cf:17:07:43:b8:53:72:
         c9:35:e7:92:89:41:47:52:b4:a2:2e:24:35:60:75:8b:29:3f:
         75:24:5f:f2:ab:b8:f7:24:76:61:8f:fe:91:d6:c4:f0:6f:10:
         27:91:84:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 18:26:44 2025 by rpki-client