This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft
File:                     WC4hcKe8vsMQFU8rzpmDP-woAfs.mft (raw, json)
Hash identifier:          vL+Zfg9gs3JwLqOS2sQbCykq/a4qD6lflMUfexQ3KsI=
Subject key identifier:   28:3B:8F:40:37:FA:78:2E:C9:64:AE:59:B5:C4:D3:A2:5B:7E:1A:5B
Authority key identifier: 58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB
Certificate issuer:       /CN=582e2170a7bcbec310154f2bce99833fec2801fb
Certificate serial:       019B3532A9FB940D4F5C7024F72B4E8107F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft
Manifest number:          0978
Signing time:             Fri 19 Dec 2025 06:01:11 +0000
Manifest this update:     Fri 19 Dec 2025 06:01:11 +0000
Manifest next update:     Sat 20 Dec 2025 06:01:11 +0000
Files and hashes:         1: FKqsClUSc-HScmueq_QOqvdFJPo.roa (hash: QDB9/wNvtMenWcDG/OOKIL2kdnSagKU38zWW9V2bprA=)
                          2: WC4hcKe8vsMQFU8rzpmDP-woAfs.crl (hash: UN5fgGaNBed0EZoyL7BPWPwKPneI/NbbIXCRTz3jKxc=)
                          3: ZxskbRgCMa6Yc-LklxQC1BBLGOk.roa (hash: CTUmOgotKmf+GqF4YkFaNe8ee4nBAUGdVxI+TEhO/Sw=)
                          4: o98Wg7KpgmJ871dQGpUlt4TCmbo.roa (hash: mzU2BBa9J5BX5hmBuscvoDSNFgApfZanUcB3Ps+gIWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 06:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:35:32:a9:fb:94:0d:4f:5c:70:24:f7:2b:4e:81:07:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=582e2170a7bcbec310154f2bce99833fec2801fb
        Validity
            Not Before: Dec 19 06:01:11 2025 GMT
            Not After : Dec 20 06:01:11 2025 GMT
        Subject: CN=283b8f4037fa782ec964ae59b5c4d3a25b7e1a5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f4:a3:90:e8:1e:62:b4:e4:7d:3d:0d:38:19:
                    ce:b2:03:52:ef:19:a1:02:8d:f6:52:fb:51:e2:4d:
                    09:99:51:a7:fe:e4:a3:cf:36:dc:07:8e:71:bd:fa:
                    40:ba:64:1e:8e:2b:22:87:9d:b0:c9:8f:a4:32:e4:
                    0a:97:08:b6:df:e9:8c:42:ca:ac:e8:3d:80:0c:36:
                    49:9a:31:97:d9:e7:bd:59:7f:79:44:fd:31:ca:cc:
                    8f:5a:c3:3c:bb:11:12:bb:b4:12:f2:99:bb:14:11:
                    84:73:0a:d4:65:a8:1e:7f:2c:24:b8:45:37:ef:a9:
                    eb:9a:21:67:48:ee:dc:2d:e7:5d:90:bf:e4:f2:40:
                    37:93:c5:f8:a1:86:76:a3:bf:0c:dc:22:54:72:45:
                    c5:dd:d8:08:bb:45:d0:74:51:7f:15:6d:8b:33:1d:
                    66:db:1f:3b:3e:e8:d9:bd:7a:1b:93:9b:01:0b:40:
                    54:ff:33:fb:7c:40:ac:d9:c0:3f:a2:3e:e8:0f:28:
                    2f:31:f2:33:ff:2f:e5:2b:b4:dd:70:89:59:f9:ec:
                    71:67:f2:23:4b:a0:ee:c4:0a:00:8b:e5:23:9e:c2:
                    04:20:e4:5b:1b:c1:a8:66:f6:2f:4a:57:eb:35:c8:
                    e4:06:53:9e:e8:61:2a:58:db:10:f7:35:ef:f2:b2:
                    17:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:3B:8F:40:37:FA:78:2E:C9:64:AE:59:B5:C4:D3:A2:5B:7E:1A:5B
            X509v3 Authority Key Identifier:
                keyid:58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:f7:a3:84:69:e6:b5:3f:43:89:2e:8e:eb:98:e2:5c:fb:64:
         d1:fd:cc:cd:18:1d:11:fe:03:84:0b:cd:b8:84:f5:43:77:16:
         98:f7:5a:1f:6d:db:57:c2:26:fe:70:b4:72:01:5b:a0:d1:37:
         73:d3:0e:c5:a6:04:5e:7b:04:d9:c9:84:10:59:d7:1d:b7:7a:
         cd:d6:6a:a7:94:31:74:b8:2b:b9:5a:2f:b6:06:7a:b4:cc:2b:
         ac:b1:0a:60:9f:ad:fb:2e:c8:28:d5:93:3b:e4:60:a8:64:56:
         b0:fc:b6:b8:b3:c0:87:ae:ab:54:21:98:a1:c6:69:51:d2:53:
         ae:d2:5b:90:97:d4:2e:6d:a0:d9:63:27:62:94:e1:eb:10:7a:
         11:15:b1:cf:c8:0a:5a:4f:df:44:26:df:bd:fc:4b:7e:a5:25:
         de:9b:17:be:9d:ad:ea:18:bc:c0:53:ae:56:4a:f7:f8:32:9c:
         ec:18:bd:a3:e9:26:4a:36:e5:89:4a:cb:8b:ee:8d:a1:f8:cb:
         e1:33:68:b1:71:3e:c7:9f:6c:13:a0:5d:af:0a:8b:15:a9:b8:
         83:3c:e5:1b:34:9b:c7:b6:22:e7:78:2a:59:e4:3f:82:d9:06:
         92:14:64:6b:e0:48:98:ca:ef:77:2a:d5:7a:b2:84:03:82:e0:
         b6:8a:29:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:46:32 2025 by rpki-client