This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
File:                     WH9UeNHpTyQHBXIsN4kHba9VN1c.mft (raw, json)
Hash identifier:          ek/+rGxKhX4qKCG+pOhnsa/gEeceI7TFLTHQvsLfoAA=
Subject key identifier:   F6:75:46:9F:2D:82:9D:29:72:85:82:B2:A7:17:0D:0B:41:AA:94:60
Authority key identifier: 58:7F:54:78:D1:E9:4F:24:07:05:72:2C:37:89:07:6D:AF:55:37:57
Certificate issuer:       /CN=587f5478d1e94f240705722c3789076daf553757
Certificate serial:       019AF3BFFF538ABA1E30522CA84FE793EE89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
Manifest number:          029D
Signing time:             Sat 06 Dec 2025 13:00:37 +0000
Manifest this update:     Sat 06 Dec 2025 13:00:37 +0000
Manifest next update:     Sun 07 Dec 2025 13:00:37 +0000
Files and hashes:         1: JYHlFaw4wOmIWR_77ywpgSBNK2k.roa (hash: OvZXgWODCQ+eoxv2l2YqNiIKjAuMYd6ZKeSQVCi/uJE=)
                          2: WH9UeNHpTyQHBXIsN4kHba9VN1c.crl (hash: 7I+OAa3OViUcpQwAMoAUT2y1S3CIDIF+TPPkvuHuLF4=)
                          3: d9EPdccRI9fe31r8YXiF11dbuAE.roa (hash: Mn6la1cNZ2lvlxnLvxs6dnBmU/hxdiSINwGaH327vug=)
                          4: g1OClMd_E4NQ7EkPx7bidts26wA.roa (hash: CeqCEmByjs4N40bd+Z4KEPz6ASh9HSswP/ltMk2hKeQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:bf:ff:53:8a:ba:1e:30:52:2c:a8:4f:e7:93:ee:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=587f5478d1e94f240705722c3789076daf553757
        Validity
            Not Before: Dec  6 13:00:37 2025 GMT
            Not After : Dec  7 13:00:37 2025 GMT
        Subject: CN=f675469f2d829d29728582b2a7170d0b41aa9460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:36:5b:df:bf:f7:59:9b:8d:e3:00:17:0c:bc:
                    aa:e1:ce:97:e3:4e:b8:e0:80:cb:a7:a7:d4:7c:d4:
                    b0:35:6c:24:c4:61:2a:e2:c2:35:5d:2a:d4:31:9e:
                    7d:0c:dc:d5:2b:46:85:29:80:64:4a:cd:be:db:d8:
                    45:45:3f:cf:ee:87:8f:76:26:d6:74:4e:09:ef:f9:
                    6f:a7:8e:28:63:e6:f4:ed:10:28:66:f7:94:08:eb:
                    c1:a7:d5:c2:fb:ff:87:e5:56:95:74:d3:c0:fe:e9:
                    64:17:c1:08:f1:8a:86:f2:f0:41:90:c6:f0:26:e3:
                    65:16:05:49:62:e5:38:80:55:0a:cf:22:05:e2:fa:
                    93:1c:d4:cb:41:d8:c6:f8:1e:e4:5f:e3:fc:1a:ba:
                    e9:bb:46:6e:18:0f:c9:6b:91:70:bb:48:c9:d6:64:
                    31:a3:50:49:98:0f:1e:6f:99:2b:ce:9d:86:79:a4:
                    5d:ea:f1:45:ac:e9:17:60:5f:75:9b:7b:13:2f:90:
                    12:75:86:aa:fa:5a:81:32:1f:de:0c:11:b1:af:b2:
                    6c:e3:d4:53:1b:79:a0:48:65:85:d6:8a:95:55:c5:
                    ab:f2:6a:4b:b7:95:8b:08:62:92:33:22:5a:a6:ef:
                    83:4c:f8:5a:e6:7c:3a:f2:f8:79:f7:0b:16:ec:4d:
                    7e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:75:46:9F:2D:82:9D:29:72:85:82:B2:A7:17:0D:0B:41:AA:94:60
            X509v3 Authority Key Identifier:
                keyid:58:7F:54:78:D1:E9:4F:24:07:05:72:2C:37:89:07:6D:AF:55:37:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:54:45:6c:f0:9a:0b:46:24:d9:d1:01:02:cf:23:8b:4b:c9:
         e3:35:21:f4:86:78:ce:73:b5:6b:3b:e1:02:94:b4:b4:d6:f6:
         bf:d1:4c:3b:16:12:da:2f:45:0f:99:6c:7f:93:c4:5c:7f:46:
         b5:c8:15:c3:76:24:84:1f:c5:1f:4f:fa:bb:ae:3e:d6:9f:8a:
         88:11:be:fe:bf:77:a3:fd:58:88:14:9d:77:f5:3e:7e:82:8f:
         72:94:8e:e3:fb:12:a3:ab:cc:91:f3:45:d0:49:93:cd:f6:2c:
         60:f4:36:8c:39:31:f2:19:99:91:52:3e:df:97:1c:6e:d6:f6:
         b6:ad:d7:79:91:21:be:e3:13:61:fd:c4:10:ad:0d:eb:47:ef:
         09:7f:49:ac:05:16:72:51:0d:7b:13:2a:6d:d3:d6:b3:6c:73:
         04:c1:35:c3:de:69:49:49:39:5a:06:3a:13:e5:fd:24:78:16:
         29:b4:35:4b:ba:25:16:01:e8:86:ee:fe:a0:f5:d5:5a:0b:9c:
         9e:9f:87:53:a1:31:a7:6f:9e:3b:b0:c6:20:42:21:e4:e0:f4:
         78:4c:e3:92:c5:ff:34:0d:c3:3f:d6:16:df:f6:1c:c8:cd:14:
         a8:4f:a7:db:33:80:30:c6:fa:e4:3d:a4:f0:66:f8:1d:cd:45:
         2f:cb:9a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:48:04 2025 by rpki-client