This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft
File:                     WTiXF0-WdJDb9hidR53yyTcb9AQ.mft (raw, json)
Hash identifier:          58iDGBxhsls6lJi1ctSmZScXja5OACbNexmiy1c2K64=
Subject key identifier:   BC:F4:2E:96:98:8A:11:0B:73:AA:A8:B4:C3:2F:00:E4:34:3E:79:6B
Authority key identifier: 59:38:97:17:4F:96:74:90:DB:F6:18:9D:47:9D:F2:C9:37:1B:F4:04
Certificate issuer:       /CN=593897174f967490dbf6189d479df2c9371bf404
Certificate serial:       019B5975F609D7AE473DF700FA78E72CE89C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft
Manifest number:          10AB
Signing time:             Fri 26 Dec 2025 07:01:01 +0000
Manifest this update:     Fri 26 Dec 2025 07:01:01 +0000
Manifest next update:     Sat 27 Dec 2025 07:01:01 +0000
Files and hashes:         1: Bb8ycOE7qhSFoSMHyD2xB85u_Z0.roa (hash: KcdCM+LEn+v24gkqqCtc8motwJZXGA9KFLUTB0+gGg8=)
                          2: WTiXF0-WdJDb9hidR53yyTcb9AQ.crl (hash: v4utjimh7kJTj6Ti+xQsDgnf/Iyp5rBdd2Ar6OyGBqM=)
                          3: g-54cvk5hO2Au4tfyjhzhnHoH90.roa (hash: Q49mbpUpWnr28zAxYWF00PO3wsoqtVE5pDkqJmiOpho=)
                          4: kTl30QOsbrDzk_mb8ECK1dAhV14.roa (hash: ktEj7/KQdl7DWD89NCLPeaAfOqTe9FU+2FvlPHr9TVM=)
                          5: x4O9V3tAmzZjxZHKXXKdfDf1aNY.roa (hash: F4vKg2iqkGQkTay3EP9VXjOjSKkwkZAg3JC6CDhOzYc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:59:75:f6:09:d7:ae:47:3d:f7:00:fa:78:e7:2c:e8:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=593897174f967490dbf6189d479df2c9371bf404
        Validity
            Not Before: Dec 26 07:01:01 2025 GMT
            Not After : Dec 27 07:01:01 2025 GMT
        Subject: CN=bcf42e96988a110b73aaa8b4c32f00e4343e796b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:35:cc:58:e1:1e:d6:90:f1:3f:4b:7e:51:19:
                    e3:82:dc:e5:64:fa:c9:3a:02:3d:3c:ed:e9:d8:86:
                    ed:49:6e:63:b5:b0:c7:0b:4b:bc:be:73:94:98:30:
                    f2:b1:16:c7:c0:b2:5d:5e:a5:8a:84:cb:34:c5:be:
                    ba:f7:74:b1:80:e1:f0:f5:6e:61:87:85:77:df:b4:
                    73:85:f2:b7:82:9e:85:c7:e0:21:cc:46:57:c3:dd:
                    cf:5c:27:b9:10:f5:be:ae:e1:c8:dd:97:61:af:a5:
                    81:e3:5a:b6:08:ae:ff:1e:9a:7f:b3:4f:58:08:d7:
                    de:2b:58:11:9d:82:3e:75:3b:b6:c9:ed:ab:34:40:
                    95:b7:bd:52:d0:fb:13:d7:57:c6:0e:76:88:fa:ac:
                    eb:78:8f:29:12:34:2f:5a:36:03:db:7f:02:39:85:
                    7f:39:9c:1e:c8:71:4d:f0:1b:5e:f6:a6:00:3f:f8:
                    f1:68:cf:6a:2c:ad:d5:dc:1f:a2:86:92:c6:40:71:
                    17:22:70:1c:e7:1b:db:b2:29:4b:27:8f:e2:c4:35:
                    d7:20:30:a9:ca:30:42:28:44:07:55:44:64:60:82:
                    9e:b0:50:a4:e5:5d:d5:c9:77:c1:24:61:99:0a:af:
                    da:5b:59:66:d8:00:87:3f:b0:61:47:96:ce:91:e0:
                    94:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F4:2E:96:98:8A:11:0B:73:AA:A8:B4:C3:2F:00:E4:34:3E:79:6B
            X509v3 Authority Key Identifier:
                keyid:59:38:97:17:4F:96:74:90:DB:F6:18:9D:47:9D:F2:C9:37:1B:F4:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:f9:e5:83:d4:26:d0:fd:90:db:85:07:19:b2:81:f5:95:6d:
         4c:b4:eb:be:dd:e3:23:03:2f:98:47:86:9f:5d:2d:ef:40:f5:
         3f:15:aa:d3:dd:57:75:52:ae:e3:8b:80:1b:d6:a5:05:9e:79:
         44:de:cf:88:1e:74:2c:2f:3f:42:0c:8c:ae:61:a3:4d:28:a8:
         09:32:6d:b0:7b:a8:ab:c3:c6:71:96:c2:f7:42:61:fa:90:f8:
         f7:15:36:0f:48:16:d2:f9:4b:1a:b0:df:92:5d:00:d7:8b:e3:
         2a:2e:8e:e6:36:7b:ec:ec:02:df:18:6a:1d:d7:e1:a3:05:bb:
         62:87:ac:cf:3b:b4:52:5b:50:2b:9e:b1:f9:c4:87:94:2f:05:
         07:51:ef:44:c4:33:c4:ef:77:4a:16:cf:26:fd:99:ce:83:76:
         e7:f2:b9:3e:ed:8e:e1:87:87:6a:e7:0e:ac:e2:cc:e5:bc:6d:
         6c:04:7f:0f:7a:56:3c:76:92:56:ed:e2:74:df:f9:78:3e:68:
         29:8e:a1:df:d3:49:d1:a9:5e:ba:46:b4:13:aa:5f:7b:17:5d:
         b2:98:f8:f2:f7:31:5a:e6:60:87:c1:18:d7:95:be:86:40:f7:
         95:4a:0d:53:72:3e:bc:69:b3:3f:da:90:86:10:9c:18:1c:f6:
         a5:17:42:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 14:06:25 2025 by rpki-client