This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
File:                     WLtUmHY5ugxs-8rVmMP145_KlFw.mft (raw, json)
Hash identifier:          OBJG5s5oGsdOHFqSGLRLepllpO89z9uZV7SBkTZ6u4s=
Subject key identifier:   E3:DE:85:19:80:44:A2:42:EB:23:A2:1A:FE:02:28:D2:05:2F:BB:81
Authority key identifier: 58:BB:54:98:76:39:BA:0C:6C:FB:CA:D5:98:C3:F5:E3:9F:CA:94:5C
Certificate issuer:       /CN=58bb54987639ba0c6cfbcad598c3f5e39fca945c
Certificate serial:       019AF50B2428866739D5D587AED20EBD25D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
Manifest number:          1764
Signing time:             Sat 06 Dec 2025 19:02:19 +0000
Manifest this update:     Sat 06 Dec 2025 19:02:19 +0000
Manifest next update:     Sun 07 Dec 2025 19:02:19 +0000
Files and hashes:         1: BfcfF2b1LL5M2AE__W3yCJVNAKA.roa (hash: +bgWpcxXbBLXQoTPRn9MMXKJT/S9VM5GWgJ62Kc9z/4=)
                          2: WLtUmHY5ugxs-8rVmMP145_KlFw.crl (hash: VS2eJ430/MsmrCLEJ6msjYTaIYGFJHvYYo+NfPVG/RE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:0b:24:28:86:67:39:d5:d5:87:ae:d2:0e:bd:25:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58bb54987639ba0c6cfbcad598c3f5e39fca945c
        Validity
            Not Before: Dec  6 19:02:19 2025 GMT
            Not After : Dec  7 19:02:19 2025 GMT
        Subject: CN=e3de85198044a242eb23a21afe0228d2052fbb81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:64:e0:ff:fb:12:af:1f:60:3a:87:49:be:a7:
                    70:0b:70:9d:c4:f1:67:27:c6:f0:db:1f:fd:fd:be:
                    5d:d7:ea:b6:77:df:1e:ba:a6:30:41:d6:c3:b1:f5:
                    d2:f7:96:6e:1a:24:d2:a8:46:7b:a7:bb:10:96:97:
                    ff:18:c0:75:74:51:6f:03:01:86:b4:d4:6e:1e:e1:
                    d9:24:11:2f:4c:87:48:0a:00:a9:02:b3:1c:7b:b7:
                    ff:e4:2e:28:bc:ff:2b:07:2d:e2:f2:7a:6d:e0:5e:
                    10:61:8b:ba:84:73:34:3e:03:ff:1a:a9:02:87:86:
                    5b:6c:ce:3c:7c:f3:7f:b4:54:6a:0c:d0:90:c8:02:
                    a6:01:1f:d6:b0:f6:ac:a5:9e:af:48:b5:e4:65:f3:
                    27:52:9e:09:59:7b:ff:9f:49:96:24:a8:04:e1:3a:
                    7b:f8:50:db:41:b3:7f:57:f0:e1:c0:89:0f:c3:48:
                    bb:26:ae:27:91:3a:58:9c:8c:8b:4c:d7:b0:4f:2a:
                    62:6b:09:fb:cb:cc:9f:67:25:82:15:15:9d:d4:f6:
                    8a:18:db:e7:33:a3:3b:25:bd:13:72:5a:f1:24:db:
                    36:d2:37:07:51:0c:1a:a7:fa:8c:0c:54:83:cd:9b:
                    32:df:16:30:9a:ac:70:2c:91:89:f4:f9:e0:dd:90:
                    2a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DE:85:19:80:44:A2:42:EB:23:A2:1A:FE:02:28:D2:05:2F:BB:81
            X509v3 Authority Key Identifier:
                keyid:58:BB:54:98:76:39:BA:0C:6C:FB:CA:D5:98:C3:F5:E3:9F:CA:94:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:0a:05:46:10:88:5e:ce:5c:91:15:39:5e:c3:b0:f4:b7:94:
         2c:e3:b9:d1:d2:bf:f2:89:a7:cb:c8:a7:c2:88:00:6e:3d:41:
         d6:93:14:80:ed:68:ed:90:a7:09:26:15:94:4f:8c:ca:34:fc:
         1f:47:9f:28:81:b4:42:cb:61:29:52:7d:d0:49:eb:07:9e:d2:
         b9:dc:40:1c:64:1e:de:d4:7e:16:eb:79:ca:bb:9b:7f:e7:ca:
         eb:de:49:19:86:8f:df:69:77:17:c3:35:b0:9b:4c:c6:ff:c6:
         ef:73:2e:b9:56:b2:46:8a:48:c9:01:a3:8f:1c:3f:6a:72:3e:
         6d:3f:c2:ad:6c:c2:48:64:95:9e:ec:77:9c:1a:ec:d8:77:bf:
         6b:9e:9e:42:26:04:c1:9f:7d:3e:15:a4:2c:c3:3c:c9:ec:50:
         3c:81:00:0e:c4:f7:c0:aa:68:e5:cb:d2:77:a7:6e:13:0e:83:
         5e:0e:e6:b2:a2:6a:16:21:32:a4:32:70:ac:7d:65:5e:05:bb:
         55:7c:81:88:2f:47:24:96:a4:45:c9:28:39:d1:9b:25:e4:5d:
         75:42:d7:ca:64:e4:e3:db:08:3c:13:55:30:85:24:15:9e:75:
         23:d1:d4:8d:fa:38:c6:d7:58:97:26:eb:df:7a:44:42:41:a0:
         c7:cf:8c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:46:20 2025 by rpki-client