This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft
File:                     W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft (raw, json)
Hash identifier:          FVF3vNrQfn7iMN6wpLnWbtK/aJy3ACxNxmZORU1nHBc=
Subject key identifier:   A6:C6:A6:EB:27:63:7E:8C:BF:A5:AD:BC:EC:72:E8:DD:C4:0A:1E:6A
Authority key identifier: 5B:F8:14:35:ED:13:78:98:95:F3:75:DC:34:D0:4C:E9:1A:CA:47:44
Certificate issuer:       /CN=5bf81435ed13789895f375dc34d04ce91aca4744
Certificate serial:       019AF1D19A597E8631FA78B16D18BEE7873D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft
Manifest number:          105B
Signing time:             Sat 06 Dec 2025 04:00:36 +0000
Manifest this update:     Sat 06 Dec 2025 04:00:36 +0000
Manifest next update:     Sun 07 Dec 2025 04:00:36 +0000
Files and hashes:         1: W_gUNe0TeJiV83XcNNBM6RrKR0Q.crl (hash: s9/h1L+8OtgfgSx8KQbDtPlcGJ766OInHGS3VvI4KR4=)
                          2: c_oc0m8Q0D83TCO_fpBfaVJwNRs.roa (hash: mqb+D/ntHZJvZ/z36Bl1ItrdLaA25yJOk+uY5NUbN8E=)
                          3: h8iTz8AcPNoluNeaeW1XeZ2ZNTU.roa (hash: 6G/ihHpZFbWryvRuqI72FYSOZMMwREr3wb5GAXO7F4Q=)
                          4: pPT9mYyICtb5n_YmE-i-z8FboNk.roa (hash: L1rDzYnw/K/P26JqWUlSKAL88oGG3Ri5ojFqbgYUqu8=)
                          5: slyK1DAB4dbXemNXvoMVu6ZnABY.roa (hash: Rc7vQ1K5O9MgP86008BcYYEvvo1tQ62QMOGFXd3ulqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 04:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d1:9a:59:7e:86:31:fa:78:b1:6d:18:be:e7:87:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bf81435ed13789895f375dc34d04ce91aca4744
        Validity
            Not Before: Dec  6 04:00:36 2025 GMT
            Not After : Dec  7 04:00:36 2025 GMT
        Subject: CN=a6c6a6eb27637e8cbfa5adbcec72e8ddc40a1e6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0d:bd:fc:02:e0:b0:89:48:97:4f:25:cd:75:
                    56:a5:3c:95:8d:6c:1d:3e:64:5e:a4:c2:2e:14:16:
                    bb:0d:e5:2d:00:55:8d:e1:18:31:6e:a2:f8:20:5d:
                    61:e3:11:f1:c0:6e:09:f3:a8:c6:eb:f6:fe:ef:c7:
                    3b:29:9f:bd:0e:81:90:26:90:86:f3:9d:bb:9c:1d:
                    b0:bb:b5:1b:82:34:4f:91:80:ae:8d:ff:e4:67:25:
                    27:f5:ff:b5:b0:5d:ed:e0:9c:c1:7f:6f:fc:5d:72:
                    f8:a0:30:70:41:bd:7c:6d:81:61:5e:f5:83:14:c6:
                    cc:a1:33:af:71:61:6a:4a:0e:b2:95:24:89:68:53:
                    05:0b:7d:56:ca:8e:ab:9b:59:ee:d1:3d:13:d1:9c:
                    a0:a9:19:51:4a:23:7b:aa:c6:e6:3c:27:6c:a9:83:
                    c4:f1:bd:78:d4:ce:59:45:b7:0b:25:93:28:1f:82:
                    80:00:d5:9b:31:5d:f9:31:3b:0b:b0:6f:f2:f1:43:
                    4d:ea:f9:dc:b7:33:f2:ec:40:ca:f9:a6:70:5c:5b:
                    2b:b0:11:c3:e3:af:ea:ce:7b:cb:9c:59:29:85:ee:
                    4c:47:c1:bf:ba:8a:f1:70:08:91:0b:e5:33:fe:27:
                    f0:ef:b2:ee:af:ba:d3:8a:ce:f1:c6:e7:28:86:1d:
                    49:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C6:A6:EB:27:63:7E:8C:BF:A5:AD:BC:EC:72:E8:DD:C4:0A:1E:6A
            X509v3 Authority Key Identifier:
                keyid:5B:F8:14:35:ED:13:78:98:95:F3:75:DC:34:D0:4C:E9:1A:CA:47:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:38:cb:62:dc:68:d8:c0:72:89:e9:b3:a7:bf:f0:ff:cc:9c:
         ad:62:c8:c6:6f:90:11:42:bb:d2:d9:23:58:71:40:c4:3e:5f:
         40:74:ba:fc:f2:c0:d0:b9:e8:14:45:04:d9:8f:9c:8e:63:0f:
         bc:af:b2:21:f5:1c:9d:0a:e6:6e:05:1c:75:ef:9e:59:10:b9:
         9a:50:3f:bd:e0:d1:d6:d2:e7:3b:3f:dd:8e:ff:8a:5c:18:64:
         24:2c:bf:ce:24:25:11:8c:54:79:b8:9b:79:5d:bb:62:a9:17:
         03:3c:b4:e9:c2:9b:96:24:95:e2:6d:25:25:93:ed:12:6e:34:
         2f:75:0b:32:61:d3:35:86:51:cb:77:94:8a:61:df:29:ea:31:
         35:28:9c:38:2e:44:1c:70:a0:fc:0d:f7:27:d6:99:c2:16:41:
         15:43:e7:63:24:2c:22:87:36:1e:3b:e0:87:be:39:14:74:29:
         19:21:55:8d:d9:89:60:90:6c:f1:9e:e4:29:bb:f4:9b:e9:37:
         66:ac:c8:57:4e:a4:a7:67:de:e1:40:91:a7:4b:c4:3f:c6:1b:
         f8:39:ed:d3:58:8b:cd:94:31:a3:b6:c9:cf:c1:27:b9:96:20:
         e4:58:58:a3:1c:0b:02:c6:48:bc:fc:4a:3d:51:d5:06:b4:4c:
         06:02:d5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:41:55 2025 by rpki-client