This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft
File:                     WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft (raw, json)
Hash identifier:          KJdtYC/WS+nljlrwxurrYedX9n59DhjraVBcIzSvTI0=
Subject key identifier:   7B:1A:85:33:17:84:BD:29:80:4D:FC:54:5B:C0:BE:B6:0F:C6:CD:3C
Authority key identifier: 58:63:29:F3:07:B9:82:85:B7:1D:22:C7:19:7E:C1:9B:70:1D:ED:67
Certificate issuer:       /CN=586329f307b98285b71d22c7197ec19b701ded67
Certificate serial:       019B341F898077A7FF546962F96F278D4FF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft
Manifest number:          1788
Signing time:             Fri 19 Dec 2025 01:00:40 +0000
Manifest this update:     Fri 19 Dec 2025 01:00:40 +0000
Manifest next update:     Sat 20 Dec 2025 01:00:40 +0000
Files and hashes:         1: PiqBBXAA6we4MoLDl4MdjTFczpk.roa (hash: UmY/XV+HwWVcLuYg16r45R+AHciaE7tJGWzQzK3TX58=)
                          2: WGMp8we5goW3HSLHGX7Bm3Ad7Wc.crl (hash: 5mLbJNFdiW5wha2qichOS8CLjTgLs/IjGZM8yK78rGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 01:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:34:1f:89:80:77:a7:ff:54:69:62:f9:6f:27:8d:4f:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=586329f307b98285b71d22c7197ec19b701ded67
        Validity
            Not Before: Dec 19 01:00:40 2025 GMT
            Not After : Dec 20 01:00:40 2025 GMT
        Subject: CN=7b1a85331784bd29804dfc545bc0beb60fc6cd3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f2:15:90:9e:d8:fa:00:c2:f8:ca:6f:c6:21:
                    3d:97:85:17:34:de:8a:b3:5e:d7:0b:18:1d:42:a2:
                    53:0e:5d:54:ce:1a:3b:07:4f:98:1b:7d:ee:57:2b:
                    a2:d0:ae:06:12:e8:51:fd:51:73:d1:2c:39:88:d8:
                    f1:89:6c:5d:68:a4:6c:ff:c3:2e:f7:aa:7a:21:ee:
                    ac:49:5d:72:26:cc:cc:29:3d:84:da:63:a9:83:b2:
                    48:8f:fc:dd:e1:86:ff:68:7c:31:38:42:81:a2:07:
                    43:04:21:b7:d8:6c:fa:0e:a1:3e:24:d3:5f:dc:d3:
                    60:09:d8:a2:fd:5b:fd:a8:df:a6:98:f6:90:78:25:
                    88:58:96:bf:f9:f8:ea:fd:c7:67:c3:3a:46:eb:33:
                    e3:af:fb:d0:a0:09:72:a3:35:d2:cc:19:f9:14:30:
                    15:09:c4:4b:28:10:4f:f9:25:1a:c6:74:fc:a6:6b:
                    b5:98:8d:bd:1f:8e:f4:75:fd:ef:93:15:a0:cf:76:
                    0c:ae:0e:d6:76:b5:4c:8e:81:ba:5b:78:3e:4f:e8:
                    f0:7b:36:ef:75:b0:9d:b8:13:4f:77:ce:d1:bc:56:
                    a3:14:d3:9a:94:62:b1:f8:d8:29:d0:c3:bb:bd:14:
                    ed:ce:83:56:1e:c7:0a:d1:5f:d0:1c:27:56:ef:e0:
                    7d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:1A:85:33:17:84:BD:29:80:4D:FC:54:5B:C0:BE:B6:0F:C6:CD:3C
            X509v3 Authority Key Identifier:
                keyid:58:63:29:F3:07:B9:82:85:B7:1D:22:C7:19:7E:C1:9B:70:1D:ED:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:cb:6e:73:2a:2f:ef:74:36:d3:b6:02:ce:ac:4a:76:43:a6:
         03:f3:cd:7f:f3:7a:c2:f7:e7:37:61:26:3e:07:b8:c8:34:86:
         92:fc:a0:02:ae:9a:50:5d:85:8f:fb:f1:78:1e:ff:a5:0d:37:
         47:26:ff:f6:35:68:7d:e7:53:09:7e:86:77:b2:83:49:47:f7:
         10:d3:ed:fe:5b:d4:6b:6a:6b:7b:16:42:f3:a1:51:41:ca:cd:
         9b:a9:1a:d9:0a:f1:12:e0:98:20:b1:ff:84:f1:1d:a2:00:6f:
         1d:78:2e:96:35:e3:1e:40:a8:01:a0:ee:56:16:48:83:17:4c:
         1c:31:1a:29:fb:dc:e2:30:47:26:37:c8:80:ba:8f:6f:71:5a:
         54:9f:1e:38:b7:63:e8:1b:af:6d:05:64:a8:07:6a:b5:1a:99:
         ca:a3:87:4b:ab:d9:c8:ac:c2:b5:7b:6e:25:c1:85:1b:49:b8:
         4f:ac:6d:6d:f3:12:02:52:21:5f:58:6b:7d:4d:97:34:66:3d:
         d6:76:08:87:c3:dc:e3:7e:f5:0d:c2:20:82:6c:11:86:22:b2:
         83:89:d5:f6:11:f3:03:5f:5e:cd:2c:37:e5:38:95:8a:ac:7a:
         e6:7f:93:d3:32:c9:34:fe:83:04:b8:2d:6b:8c:a9:49:5f:fb:
         b0:bf:f5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 10:23:50 2025 by rpki-client