This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
File:                     WBPibXGsW2pgEVbZDODczsWYYkM.mft (raw, json)
Hash identifier:          kna0i1YRXikbAJLRNxLF50Wh52yRvWwDKb5hFEXzq9o=
Subject key identifier:   46:61:D0:9A:65:37:D8:A9:13:09:96:F9:FC:58:A0:4A:89:E9:AB:BE
Authority key identifier: 58:13:E2:6D:71:AC:5B:6A:60:11:56:D9:0C:E0:DC:CE:C5:98:62:43
Certificate issuer:       /CN=5813e26d71ac5b6a601156d90ce0dccec5986243
Certificate serial:       019AF1D2094322835D9487D748FED458C25C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
Manifest number:          067B
Signing time:             Sat 06 Dec 2025 04:01:05 +0000
Manifest this update:     Sat 06 Dec 2025 04:01:05 +0000
Manifest next update:     Sun 07 Dec 2025 04:01:05 +0000
Files and hashes:         1: 0RROrS7EP_5CwYaWtOibTCuabhc.roa (hash: uwLvq6OyphLPb9DhsW74rLK9fPzz8lUuatzazhiEDUA=)
                          2: WBPibXGsW2pgEVbZDODczsWYYkM.crl (hash: 24HkAce3cV9bf3AOe4iWdAHekux3UXFXqBpQRhXzhiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d2:09:43:22:83:5d:94:87:d7:48:fe:d4:58:c2:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5813e26d71ac5b6a601156d90ce0dccec5986243
        Validity
            Not Before: Dec  6 04:01:05 2025 GMT
            Not After : Dec  7 04:01:05 2025 GMT
        Subject: CN=4661d09a6537d8a9130996f9fc58a04a89e9abbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:de:1d:b5:c5:ee:21:c3:ae:3e:99:53:ee:d8:
                    a4:b3:ec:f8:f4:89:81:de:eb:c6:7b:93:94:06:4e:
                    88:d6:d0:4c:5c:4b:00:d2:35:24:42:21:12:b0:7b:
                    3c:3b:5a:5e:f4:66:c5:76:00:3b:1b:f8:1a:7c:64:
                    f6:3d:da:99:47:94:4f:ae:25:b4:13:7c:99:73:06:
                    29:c2:6c:81:85:60:1f:bd:74:4d:ca:57:d7:e3:05:
                    e7:0e:94:d4:7d:fa:09:10:8c:75:b5:b5:b6:13:c0:
                    6b:1c:63:3b:a9:62:67:74:53:f3:fe:ba:19:8c:95:
                    54:14:33:e5:1a:86:8e:a3:e5:63:36:79:9e:3d:57:
                    3b:56:b4:35:dc:10:2e:68:69:d4:1f:87:f7:ce:04:
                    64:fb:7e:49:f2:be:e1:eb:6a:49:69:a8:38:51:93:
                    4d:0c:28:61:57:b1:f6:db:8f:34:f5:0b:28:7e:98:
                    d6:ac:89:aa:9d:28:d3:f3:79:0d:2d:28:75:b8:ee:
                    6e:0b:fb:bd:3b:51:38:62:50:eb:55:40:eb:b7:2b:
                    75:57:51:25:16:37:08:f4:83:39:47:6e:18:d3:b5:
                    85:76:dc:50:33:a9:24:87:cf:bf:c4:8d:9c:17:06:
                    17:8d:2e:5a:c5:1f:cf:43:35:19:2e:26:e8:1b:18:
                    f2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:61:D0:9A:65:37:D8:A9:13:09:96:F9:FC:58:A0:4A:89:E9:AB:BE
            X509v3 Authority Key Identifier:
                keyid:58:13:E2:6D:71:AC:5B:6A:60:11:56:D9:0C:E0:DC:CE:C5:98:62:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:a1:27:7a:bc:58:07:d7:17:b1:c1:36:32:94:65:1b:3c:b4:
         ef:bf:ff:fc:03:a3:37:93:37:e1:ac:99:e8:e0:f3:ff:1a:d1:
         8e:5d:5d:d1:15:f3:ba:5f:72:64:e1:60:0f:ad:64:c7:15:2b:
         84:60:0e:ca:f6:66:68:c5:16:08:7f:d4:b5:36:70:d1:8a:68:
         ed:e4:9c:79:82:d4:65:b8:49:56:02:b6:20:f5:da:e0:a3:12:
         b9:44:1c:ef:31:ae:28:29:a5:d9:97:9d:96:4e:97:2c:b2:da:
         5e:fa:82:b3:9c:09:b6:1d:0a:f6:a0:9f:db:e6:2f:6b:40:62:
         df:bb:eb:25:68:f1:dc:41:69:d6:75:ce:41:c1:8c:80:2c:0c:
         37:8f:2f:33:16:9c:56:c0:77:c6:83:aa:07:f3:95:71:05:6f:
         57:26:1a:7c:2d:e3:31:a6:2d:07:2f:f0:fc:03:67:12:c6:44:
         f7:5a:26:8b:8b:e1:22:5a:4f:0d:2c:00:02:b1:cb:18:d3:18:
         52:12:92:25:70:3a:53:f2:83:b1:d0:5f:7c:20:bd:e8:fd:16:
         80:de:31:78:67:82:d5:19:a5:d1:14:3e:b0:11:f1:1d:6c:44:
         4d:c5:ac:3c:d8:20:88:73:1a:0b:d4:72:cc:6e:13:40:e2:0e:
         03:4b:da:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:21:53 2025 by rpki-client