This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.mft
File:                     WXtExKeTHGam_56S27MspyPUzPc.mft (raw, json)
Hash identifier:          Qq8Va+UU53hmazFPsbpz+P+Z73t9RopQMEwquaqqPWk=
Subject key identifier:   74:CF:40:F9:62:8C:26:DC:DF:8D:2D:C0:6D:09:42:78:6F:36:D0:D4
Authority key identifier: 59:7B:44:C4:A7:93:1C:66:A6:FF:9E:92:DB:B3:2C:A7:23:D4:CC:F7
Certificate issuer:       /CN=597b44c4a7931c66a6ff9e92dbb32ca723d4ccf7
Certificate serial:       019AF3C0B1C1619D2289DC3E8B2BE8594A6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.mft
Manifest number:          1766
Signing time:             Sat 06 Dec 2025 13:01:23 +0000
Manifest this update:     Sat 06 Dec 2025 13:01:23 +0000
Manifest next update:     Sun 07 Dec 2025 13:01:23 +0000
Files and hashes:         1: 27thg2xR1ns9dxvQknh6OQz2HQE.roa (hash: 8utEVwtgJM/87D9G8Lvp0Zap9PR/R1pmHN8nnbsDNS0=)
                          2: 7EOkJISYh1lPEvtjEsSd_uB091A.roa (hash: iyJBe6KDY2jgmtE4ar31VWghuSb4Z0TN62CuRa0HGDo=)
                          3: IsbNRUwtF97TzTNIl7-2xG06qDM.roa (hash: ZJvUiTXJS17zRJXm+MWYGG6p9Wcs9KOAFeVCvx+kP0Q=)
                          4: WXtExKeTHGam_56S27MspyPUzPc.crl (hash: SXXjwdWHiFob8RBr4X0dZPLgnltgX/vf2Fk85z32Lyw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:c0:b1:c1:61:9d:22:89:dc:3e:8b:2b:e8:59:4a:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=597b44c4a7931c66a6ff9e92dbb32ca723d4ccf7
        Validity
            Not Before: Dec  6 13:01:23 2025 GMT
            Not After : Dec  7 13:01:23 2025 GMT
        Subject: CN=74cf40f9628c26dcdf8d2dc06d0942786f36d0d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d6:a0:51:d9:49:15:61:d4:a4:9c:42:4f:d1:
                    3e:83:4c:a3:2e:d0:ca:3c:c0:ef:58:cd:28:1d:14:
                    cf:0a:57:49:ab:4c:1b:18:0e:f0:9d:28:30:e8:e2:
                    51:56:3c:23:59:83:9a:43:5c:79:17:71:60:4f:fc:
                    48:c2:33:da:35:58:56:2a:6c:27:18:62:cf:70:4f:
                    5d:c3:0c:9b:13:06:8a:ba:22:d0:a2:09:14:12:af:
                    b6:60:2f:14:ad:e1:f1:41:e8:f3:e7:8b:c9:5b:e1:
                    11:d3:a1:7c:ec:33:7a:4d:df:d4:03:64:4c:d5:23:
                    02:59:d8:44:7a:f5:d3:92:03:de:e7:7a:91:ef:46:
                    bb:1e:92:d0:25:32:48:c8:ed:81:83:2e:ba:a9:5e:
                    fa:f3:ea:d4:00:32:96:55:da:4c:f2:d6:79:00:97:
                    bb:ed:5a:af:91:3d:8d:97:15:5f:7b:01:ee:2f:6e:
                    69:6b:05:b7:2e:e1:f8:ce:01:2c:1f:09:84:f2:59:
                    62:df:0d:3c:32:db:88:4c:d1:57:f1:7b:b0:24:65:
                    b5:60:42:fc:86:49:d2:e0:e6:c8:6c:ea:f6:96:e6:
                    80:02:69:da:bd:aa:83:b0:de:43:39:0e:3d:f0:c6:
                    fd:41:b7:eb:89:9a:f4:a4:b5:cd:8f:59:c8:5b:31:
                    df:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CF:40:F9:62:8C:26:DC:DF:8D:2D:C0:6D:09:42:78:6F:36:D0:D4
            X509v3 Authority Key Identifier:
                keyid:59:7B:44:C4:A7:93:1C:66:A6:FF:9E:92:DB:B3:2C:A7:23:D4:CC:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:52:c4:74:9c:c6:8c:21:d5:3a:ce:68:3a:0b:6f:3c:86:00:
         1e:ed:2a:8b:45:cb:7a:4f:ea:06:e4:27:5c:93:13:7d:f8:d8:
         b2:eb:79:40:3c:af:38:1c:ca:f7:7b:9c:1a:53:9b:38:07:04:
         73:a0:a7:92:eb:a9:38:40:cf:4c:84:73:4f:a9:d0:a7:16:89:
         16:23:af:dc:42:eb:be:32:bf:58:2c:0d:42:ce:29:42:d5:30:
         d7:58:a7:bb:10:a3:40:2b:43:bc:22:87:1a:4a:eb:9f:fa:5c:
         1a:f2:85:c9:94:35:62:2e:25:91:26:f8:ce:5e:25:8b:ce:34:
         cd:58:0e:70:97:aa:16:7f:18:cd:71:7e:b4:2d:0a:2b:40:93:
         50:21:59:17:34:00:c7:c7:31:fd:fc:cb:43:e8:d3:36:75:21:
         18:4d:1b:db:a4:a0:92:04:74:91:3e:e6:0c:6f:91:47:98:99:
         ab:32:02:5a:8e:a8:30:14:59:2c:62:72:07:5e:f1:cb:5f:45:
         1f:ef:c4:0c:97:2f:4d:f2:81:6e:c8:78:f6:83:25:8e:f3:cd:
         5a:b7:80:b5:97:b5:7b:c5:02:bc:62:b8:ef:b2:35:95:2a:92:
         03:bd:d1:52:66:41:d3:b1:f6:cd:97:3b:d3:b6:fc:fb:0e:3f:
         81:b6:13:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzwLHBYZ0iidw+iyvoWUpsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5N2I0NGM0YTc5MzFjNjZhNmZmOWU5MmRiYjMyY2E3MjNk
NGNjZjcwHhcNMjUxMjA2MTMwMTIzWhcNMjUxMjA3MTMwMTIzWjAzMTEwLwYDVQQD
Eyg3NGNmNDBmOTYyOGMyNmRjZGY4ZDJkYzA2ZDA5NDI3ODZmMzZkMGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9agUdlJFWHUpJxCT9E+g0yjLtDK
PMDvWM0oHRTPCldJq0wbGA7wnSgw6OJRVjwjWYOaQ1x5F3FgT/xIwjPaNVhWKmwn
GGLPcE9dwwybEwaKuiLQogkUEq+2YC8UreHxQejz54vJW+ER06F87DN6Td/UA2RM
1SMCWdhEevXTkgPe53qR70a7HpLQJTJIyO2Bgy66qV768+rUADKWVdpM8tZ5AJe7
7VqvkT2NlxVfewHuL25pawW3LuH4zgEsHwmE8lli3w08MtuITNFX8XuwJGW1YEL8
hknS4ObIbOr2luaAAmnavaqDsN5DOQ498Mb9QbfriZr0pLXNj1nIWzHfQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTPQPlijCbc340twG0JQnhvNtDUMB8GA1UdIwQY
MBaAFFl7RMSnkxxmpv+ektuzLKcj1Mz3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1h0RXhLZVRIR2FtXzU2UzI3TXNweVBVelBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85NWZmOGYtNjZiYy00YjExLTk4ZjAt
MGFiMjFiMmYyNzU0LzEvV1h0RXhLZVRIR2FtXzU2UzI3TXNweVBVelBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS85NWZmOGYtNjZiYy00YjExLTk4ZjAtMGFiMjFiMmYyNzU0
LzEvV1h0RXhLZVRIR2FtXzU2UzI3TXNweVBVelBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASVLEdJzG
jCHVOs5oOgtvPIYAHu0qi0XLek/qBuQnXJMTffjYsut5QDyvOBzK93ucGlObOAcE
c6CnkuupOEDPTIRzT6nQpxaJFiOv3ELrvjK/WCwNQs4pQtUw11inuxCjQCtDvCKH
Gkrrn/pcGvKFyZQ1Yi4lkSb4zl4li840zVgOcJeqFn8YzXF+tC0KK0CTUCFZFzQA
x8cx/fzLQ+jTNnUhGE0b26SgkgR0kT7mDG+RR5iZqzICWo6oMBRZLGJyB17xy19F
H+/EDJcvTfKBbsh49oMljvPNWreAtZe1e8UCvGK477I1lSqSA73RUmZB07H2zZc7
07b8+w4/gbYT7g==
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:11:16 2025 by rpki-client