This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
File:                     WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft (raw, json)
Hash identifier:          bfDw0w8g5tw4yddFy6M8ahqiRQ8yAz4Td0V5OXoj8os=
Subject key identifier:   AD:44:76:5E:7A:11:CA:44:71:1B:C4:37:E0:41:96:E7:E5:45:5E:6B
Authority key identifier: 5A:E4:34:1E:23:A3:31:5E:D4:45:5A:54:5D:1A:48:CE:F2:9E:78:93
Certificate issuer:       /CN=5ae4341e23a3315ed4455a545d1a48cef29e7893
Certificate serial:       019AF27732FB26E56125A352C2BFEAAD06DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
Manifest number:          175E
Signing time:             Sat 06 Dec 2025 07:01:29 +0000
Manifest this update:     Sat 06 Dec 2025 07:01:29 +0000
Manifest next update:     Sun 07 Dec 2025 07:01:29 +0000
Files and hashes:         1: H-w2T99zCrrlKQYxLvTqjVHNtNs.roa (hash: 8/w5H9itBFo+zRfCIM8deFlqPQ7aIcS5e5Q1K2Dc7sw=)
                          2: WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl (hash: 4E3O6DRgWKDSDCJ89TtIc1TuyY66Mx9ic0bsyaAxTjs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:77:32:fb:26:e5:61:25:a3:52:c2:bf:ea:ad:06:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae4341e23a3315ed4455a545d1a48cef29e7893
        Validity
            Not Before: Dec  6 07:01:29 2025 GMT
            Not After : Dec  7 07:01:29 2025 GMT
        Subject: CN=ad44765e7a11ca44711bc437e04196e7e5455e6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7d:ca:ad:e9:36:4a:97:25:7b:04:39:35:39:
                    e5:54:9f:98:bf:f4:95:49:24:fd:c1:f3:5e:82:e3:
                    f4:55:59:20:2f:98:54:de:f6:e3:7a:8b:49:6e:f7:
                    4c:3d:72:01:47:aa:c0:05:7c:7a:f1:8d:a9:13:f3:
                    c6:c1:4b:22:c5:bb:3b:39:25:15:e1:d7:a1:4d:45:
                    39:d5:20:1e:0f:90:3d:14:a0:2b:30:51:0b:4c:8c:
                    2e:70:31:2e:a9:e9:3f:c1:e3:59:be:15:55:cf:17:
                    2f:80:ca:11:68:d9:15:f3:6d:64:91:a7:4b:f6:68:
                    69:a3:3b:26:2f:b1:6f:d9:11:44:c0:27:8c:2c:63:
                    f4:64:8f:5d:ff:9e:bf:51:39:ca:ea:16:60:ac:a0:
                    5a:5c:a7:b9:14:35:d3:f4:1b:a0:14:70:43:ed:5b:
                    fe:c8:9a:3b:42:ab:2d:53:79:5d:d8:6b:0c:32:9d:
                    4a:72:6f:dd:f4:f3:09:a2:3b:49:67:46:99:6a:df:
                    ab:d1:58:67:cd:06:f1:92:3a:75:67:6c:e7:06:07:
                    b0:36:8d:bf:b9:a1:13:b9:e5:22:83:95:95:fa:11:
                    a7:1f:19:f1:37:2b:53:b7:7c:f6:71:1f:3a:5f:0f:
                    d1:75:b4:ec:12:c6:50:f2:28:fd:fc:eb:be:2d:9c:
                    be:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:44:76:5E:7A:11:CA:44:71:1B:C4:37:E0:41:96:E7:E5:45:5E:6B
            X509v3 Authority Key Identifier:
                keyid:5A:E4:34:1E:23:A3:31:5E:D4:45:5A:54:5D:1A:48:CE:F2:9E:78:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:9a:e6:c9:62:d0:fd:4e:49:ae:e3:40:44:03:01:f8:82:6d:
         d4:1d:ad:63:ae:49:06:f1:eb:ce:05:01:18:e5:20:cd:d9:c9:
         17:65:75:a6:08:04:67:85:da:04:5a:fc:dd:64:39:4c:2d:c2:
         c9:e9:37:4f:c0:29:0f:8f:6e:cb:27:8d:f0:f4:17:c9:9b:38:
         1a:3b:72:52:cc:ef:fa:75:b8:74:c8:a2:70:01:99:7c:08:93:
         9c:18:b8:f4:f6:41:8f:5d:be:97:33:3a:81:6e:22:b9:6b:54:
         a8:56:83:8d:b4:96:5d:37:c7:95:a4:5d:5d:6f:01:26:b3:15:
         77:1a:e7:42:2b:b7:7b:6f:57:80:91:57:b4:ea:b0:8d:03:7a:
         b1:16:84:23:5b:87:93:78:8e:53:b7:df:f4:65:2b:96:67:14:
         c5:11:ff:e6:16:cc:39:55:c7:36:c1:49:23:ca:06:7d:9f:80:
         a6:d8:e8:d4:da:08:f4:38:59:da:cc:f6:45:2d:05:40:0a:fd:
         61:03:c2:01:25:08:eb:14:63:63:96:25:60:5d:b9:f4:82:09:
         4e:ff:82:50:95:20:57:c5:24:38:27:18:c5:c5:91:47:c0:8d:
         bd:de:27:ab:6a:28:74:a2:84:02:53:74:91:03:7f:84:77:55:
         f8:99:36:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:58:38 2025 by rpki-client