This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
File:                     WLKee4oN25w2xuDj9JV3gXsOo6Y.mft (raw, json)
Hash identifier:          P7Qs+/RK2lt8zddVKl8xkt3xFo0okr0VTCWf61FXAf4=
Subject key identifier:   F5:75:30:54:D6:8C:CB:94:F1:DE:02:41:21:37:5F:27:8F:45:8F:6B
Authority key identifier: 58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6
Certificate issuer:       /CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6
Certificate serial:       019AF2401BB80614260841422F5E4173B36A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
Manifest number:          0D05
Signing time:             Sat 06 Dec 2025 06:01:18 +0000
Manifest this update:     Sat 06 Dec 2025 06:01:18 +0000
Manifest next update:     Sun 07 Dec 2025 06:01:18 +0000
Files and hashes:         1: WLKee4oN25w2xuDj9JV3gXsOo6Y.crl (hash: fVaSMYSdSA/NA+RLwGm/VyfFvR10J7GzwUzXAGVk7B8=)
                          2: sPVz6CXeimsgpxuXKMYY5ra1yXI.roa (hash: uGVCkdoP9XZVNq6UA53Y8OgwaBktr5jNaHV/XYvmoPk=)
                          3: zkc2uOHfImVjREc_qVShC0g8NMk.roa (hash: 5EZkcIVSam+MTu3rBIkIbCkGEAsWno08pV+ytgZsspg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:40:1b:b8:06:14:26:08:41:42:2f:5e:41:73:b3:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6
        Validity
            Not Before: Dec  6 06:01:18 2025 GMT
            Not After : Dec  7 06:01:18 2025 GMT
        Subject: CN=f5753054d68ccb94f1de024121375f278f458f6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7a:3d:fa:44:e9:04:ea:04:e9:e3:5d:87:03:
                    fa:e8:d5:69:18:ec:0e:ae:16:ac:78:ff:b9:84:2d:
                    d8:c5:cf:1b:91:c0:bc:c5:d0:29:ea:02:da:68:82:
                    48:59:71:77:95:2d:58:09:07:00:42:7c:13:4e:4b:
                    b5:67:17:da:5a:28:06:50:05:dd:6d:a9:8d:21:aa:
                    33:0a:d6:f6:57:39:8c:bd:e6:23:bc:59:c1:58:e4:
                    6c:0a:ff:05:56:7b:28:38:8c:5b:a1:03:ca:f6:0e:
                    43:4a:1e:d8:4c:89:fb:5e:32:c3:04:d8:b9:4f:72:
                    e4:32:b7:bc:db:db:c5:43:7b:7a:84:0b:01:06:db:
                    2a:33:2f:d1:6c:f1:d5:a4:bb:f4:ee:d4:87:59:38:
                    e0:47:b7:34:7d:9e:29:ed:a3:ab:45:af:c3:7e:ab:
                    8f:dc:07:db:49:3c:35:a1:b1:f9:fe:05:fd:03:51:
                    00:cc:4d:ee:06:47:85:cd:00:32:12:1d:59:8a:20:
                    66:a9:84:31:1d:d2:39:61:79:1b:99:9e:06:6b:82:
                    e9:1a:a8:65:20:2d:6e:0e:1c:99:a4:61:f9:76:32:
                    e7:67:31:0d:c3:66:6c:dd:94:06:31:2b:d8:11:6e:
                    26:32:63:7c:61:41:7d:95:d7:04:fc:fd:c9:47:d0:
                    10:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:75:30:54:D6:8C:CB:94:F1:DE:02:41:21:37:5F:27:8F:45:8F:6B
            X509v3 Authority Key Identifier:
                keyid:58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:76:31:42:85:42:37:2c:33:fb:7c:c7:0d:0e:31:cf:31:6f:
         b7:d7:bb:21:cc:87:70:0d:6b:58:24:aa:2a:de:3f:72:ed:7b:
         ae:a7:b8:5e:15:3b:ad:2e:ef:87:8e:a0:44:ce:86:7f:b4:5e:
         cc:b5:dd:a6:f6:ea:89:72:00:42:90:88:24:fc:ca:04:64:7a:
         55:fb:49:ab:cd:6e:95:4b:7e:96:49:d9:78:d9:ac:13:7c:29:
         b3:4d:87:c8:1b:64:55:7d:4d:ac:9d:dc:37:28:75:52:41:d2:
         57:51:ab:67:20:27:80:c9:3c:0b:e5:3b:28:f5:23:14:bd:05:
         34:b7:be:0b:3e:43:c6:b7:47:e6:fa:06:81:5e:2d:c8:42:bb:
         b6:da:da:c0:e7:fd:e3:71:e5:b7:bf:67:1c:9b:01:ad:26:55:
         28:0f:cd:0d:48:fc:6d:84:d2:25:8d:3e:85:fc:b1:2a:40:8d:
         cc:27:c3:0a:a0:15:9b:52:69:be:bd:ca:1a:6b:88:a4:05:88:
         ef:2a:8d:23:83:01:d4:d7:63:15:05:1b:1f:29:1f:3e:2e:82:
         de:60:46:43:47:7e:00:b2:4b:8f:c9:89:94:8c:fc:1c:10:2a:
         eb:1c:5d:57:e9:b4:91:0b:aa:9d:99:63:5c:0f:37:89:36:a6:
         a8:19:eb:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:33:23 2025 by rpki-client