This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
File:                     WYd3IMAUaISU6mkQyDR03hPpmAI.mft (raw, json)
Hash identifier:          sir1n1yK6hJnTmix2X2+YZijmPoRi9rQTaFlmMWozlQ=
Subject key identifier:   B2:91:A1:39:B9:4E:45:87:83:D9:4D:AB:66:AA:52:5C:9F:BE:62:DF
Authority key identifier: 59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
Certificate issuer:       /CN=59877720c014688494ea6910c83474de13e99802
Certificate serial:       019AF19B9EB849E01E08E322F76F1FD21444
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
Manifest number:          11C1
Signing time:             Sat 06 Dec 2025 03:01:38 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:38 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:38 +0000
Files and hashes:         1: 9c0rgR7sx5b0INcSJYu5W29d3Lc.roa (hash: y70EM6GErQtflpK0nFkjr6koXzt1x9WLonWw/bb44FI=)
                          2: GGiu1L5lhvZ8MzbHc6hTc-r37u4.roa (hash: rDG83BQh2P4hrlgqRkJ2V5CxzCdFANpJED+WOO84WlU=)
                          3: WYd3IMAUaISU6mkQyDR03hPpmAI.crl (hash: gLUDz6tsJqaACaLdQ64dkNVk1FHR9BSByAjn0BSLhIA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 03:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:9e:b8:49:e0:1e:08:e3:22:f7:6f:1f:d2:14:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59877720c014688494ea6910c83474de13e99802
        Validity
            Not Before: Dec  6 03:01:38 2025 GMT
            Not After : Dec  7 03:01:38 2025 GMT
        Subject: CN=b291a139b94e458783d94dab66aa525c9fbe62df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e4:8f:b9:45:7f:af:d8:c6:1c:d0:2b:80:64:
                    3a:dc:8d:76:36:e7:10:cf:b3:95:8e:65:6b:3b:2d:
                    28:8d:8b:b0:8c:62:85:05:e4:3b:e2:0c:21:e4:2b:
                    85:ef:ab:40:43:a6:d9:82:5e:29:38:5b:85:7b:7b:
                    6d:ee:3b:8f:67:9d:24:0e:19:0f:e6:a2:a7:eb:76:
                    e8:96:c8:83:b6:d8:d5:29:5e:20:58:06:8a:fa:6b:
                    ba:3b:c6:ea:c9:60:80:9b:f8:6f:81:71:00:99:7c:
                    63:78:68:f8:e8:b0:dd:df:1e:5c:d3:9b:d9:6c:3e:
                    8b:9d:54:7f:9c:45:55:89:ae:f0:ed:9b:a8:f3:be:
                    57:d5:20:6a:03:21:97:51:c3:09:e6:e4:0e:d8:9e:
                    0f:46:d0:8e:9e:11:31:93:b1:7f:c6:71:9d:e9:cb:
                    7b:bf:c0:19:41:45:99:e7:61:86:df:e1:4a:2a:96:
                    5d:4d:ee:a0:bf:39:be:21:ed:eb:32:3b:f7:50:2f:
                    2a:10:aa:6e:d8:9c:ee:93:ac:a1:1a:fa:42:03:1c:
                    f6:70:c5:df:dd:f1:db:e3:66:7c:8b:5f:18:38:29:
                    82:8d:9a:c7:2c:6c:27:07:71:bd:80:11:75:5b:41:
                    2c:64:c9:64:d5:9f:75:41:6b:5f:ec:ab:bb:8d:61:
                    18:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:91:A1:39:B9:4E:45:87:83:D9:4D:AB:66:AA:52:5C:9F:BE:62:DF
            X509v3 Authority Key Identifier:
                keyid:59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:74:6a:ca:28:f1:86:1f:c9:2c:1b:a0:93:89:11:ad:f8:55:
         d0:af:62:64:cd:cf:b0:35:57:dc:93:fc:b1:f2:2f:44:cc:61:
         fd:7b:17:a3:7e:c1:51:f1:5c:c3:ef:c7:1b:8d:09:19:82:d9:
         24:b1:d3:5c:50:6c:35:cc:c0:4c:b5:15:bf:ed:c8:96:56:57:
         9e:dc:18:b8:e8:55:75:9f:c7:fe:a6:c4:f6:0b:dd:38:b0:5d:
         e4:94:32:b4:1f:9b:84:8c:6b:7a:72:3f:bc:78:47:80:2e:b5:
         45:51:36:3b:4d:96:22:ef:d8:ea:7c:d7:8a:0c:72:c4:01:1c:
         a6:1d:ae:a5:d2:63:f4:dc:72:95:3a:6f:be:3a:fc:56:3e:c2:
         9c:0e:6a:fe:47:12:36:f1:d4:f5:cf:6c:a8:a7:ac:d9:6c:1b:
         7e:41:9b:11:f3:1c:33:64:4d:23:30:99:67:2c:de:96:3e:bc:
         a9:44:80:fc:56:08:12:f2:b7:d5:03:28:dc:6c:2a:2c:f3:11:
         eb:71:49:b0:9b:e0:5c:b5:42:15:a5:13:7a:0e:4f:18:48:cd:
         12:31:30:4c:a3:86:61:dc:32:03:7c:33:21:ce:5e:f7:0b:54:
         cd:58:08:8c:89:90:bb:9c:c9:6a:55:65:44:03:96:81:fd:e6:
         df:d5:19:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:49:48 2025 by rpki-client