This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.mft
File:                     WwMpBmE4u1VkVx_Dwp7pU-XBx6M.mft (raw, json)
Hash identifier:          X+nJKmXeUvbtXXs70aCwHCqpIEzLMgvNn8HR9DlShRA=
Subject key identifier:   8A:1A:7F:7B:3E:5C:15:6E:7E:11:2A:72:DD:85:69:7F:A8:08:D9:51
Authority key identifier: 5B:03:29:06:61:38:BB:55:64:57:1F:C3:C2:9E:E9:53:E5:C1:C7:A3
Certificate issuer:       /CN=5b0329066138bb5564571fc3c29ee953e5c1c7a3
Certificate serial:       019AF50A20AD5B545507CDF5AF2235EA6D1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.mft
Manifest number:          1350
Signing time:             Sat 06 Dec 2025 19:01:12 +0000
Manifest this update:     Sat 06 Dec 2025 19:01:12 +0000
Manifest next update:     Sun 07 Dec 2025 19:01:12 +0000
Files and hashes:         1: DyRwBEbI8KOzoySiBNVJMb7s5KU.roa (hash: wDRsOyXGHbVJ62aAwVRxH4D/qweuo8ITd3xub2JjGHM=)
                          2: OYIoN89zbqPntmraJpgRonWeoa4.roa (hash: msUXAs2ftNoAEVb5ac65VdYNV6D9fQMn4QP7QioVYww=)
                          3: WwMpBmE4u1VkVx_Dwp7pU-XBx6M.crl (hash: SGtCD/SAOtNmLV4fiuDbTXgYzxkNNSAIsD6pf+j9IYA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:0a:20:ad:5b:54:55:07:cd:f5:af:22:35:ea:6d:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b0329066138bb5564571fc3c29ee953e5c1c7a3
        Validity
            Not Before: Dec  6 19:01:12 2025 GMT
            Not After : Dec  7 19:01:12 2025 GMT
        Subject: CN=8a1a7f7b3e5c156e7e112a72dd85697fa808d951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:31:ca:98:01:8a:90:12:e2:5e:26:2f:6b:3d:
                    dc:b5:be:15:af:ef:65:f4:26:98:56:42:7b:ed:c0:
                    57:79:92:95:c7:f0:ff:dd:98:7c:0e:9e:da:a9:67:
                    c3:a1:22:bd:d8:09:1b:a8:91:0c:5a:e9:91:fe:89:
                    e0:fc:36:65:e3:a1:60:3b:f9:8d:a5:69:49:6a:14:
                    a8:42:76:ae:9f:d5:11:78:12:86:96:b8:0e:e4:03:
                    de:45:32:a5:8e:0a:2f:a5:93:64:d1:b6:db:aa:ab:
                    e6:45:a5:76:2f:25:3b:8e:3a:af:3e:71:68:8f:c6:
                    65:d2:64:cf:78:c2:10:ad:6b:40:ff:14:dc:a4:66:
                    8e:07:e1:ca:4e:e0:80:0a:e8:2d:1a:cb:65:df:b5:
                    09:be:f4:11:ca:8d:f5:c4:0b:ce:ea:48:9b:c7:6d:
                    17:b8:c7:0d:bf:49:65:3f:f8:a9:99:07:bc:80:fa:
                    32:72:1f:08:39:2d:1b:86:41:41:b4:a5:36:9e:5c:
                    fa:1b:0e:fb:1d:21:1f:b7:98:aa:cf:61:39:2d:b6:
                    47:e2:5a:d9:1e:f2:85:be:1e:c4:90:11:82:b1:eb:
                    5d:b5:8f:d0:9f:5d:0e:07:b4:b5:23:1f:bc:51:92:
                    a8:c4:46:11:ae:28:b8:4a:fc:72:92:00:75:79:24:
                    61:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:1A:7F:7B:3E:5C:15:6E:7E:11:2A:72:DD:85:69:7F:A8:08:D9:51
            X509v3 Authority Key Identifier:
                keyid:5B:03:29:06:61:38:BB:55:64:57:1F:C3:C2:9E:E9:53:E5:C1:C7:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:ef:64:9a:fa:10:7a:fd:c4:c1:69:2b:3c:f7:ef:b5:6d:00:
         6a:fc:f3:4c:e6:b8:55:40:f7:aa:4d:96:db:37:31:71:ff:47:
         35:66:4e:ed:52:1e:c3:95:8b:50:95:3d:e9:f3:90:d8:a2:86:
         47:43:b9:bf:97:3b:70:d1:98:b6:2e:f6:57:ea:ae:03:49:bc:
         1b:c8:cc:f3:3b:18:67:e4:24:4f:79:ac:cd:cf:02:65:81:51:
         4f:14:01:0d:51:3e:54:41:b3:3d:a9:44:a6:78:97:f5:e4:26:
         30:35:83:46:0a:6f:e1:ec:06:c5:f0:cd:53:7b:9a:ac:65:1f:
         2a:30:e0:aa:eb:72:cd:52:86:e6:fb:f9:b2:ef:87:7b:ff:57:
         3b:6b:40:8f:30:ae:e5:8b:b2:49:a4:a8:89:21:42:92:d6:06:
         f1:8b:bc:67:38:af:65:98:a0:ab:4e:b9:25:05:df:a7:ec:4c:
         ef:a7:bc:f3:d9:9a:58:94:46:0c:07:05:d2:00:66:e1:06:3c:
         e5:e1:27:92:1f:75:f5:e7:13:62:c2:4c:cc:d3:a9:b2:85:e1:
         0a:b4:f6:bd:77:96:a1:75:9f:50:82:94:5e:0b:65:8d:32:f8:
         e3:03:07:e0:d4:d0:5a:f1:d6:e9:87:53:b7:94:42:33:70:95:
         33:3f:43:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:29:19 2025 by rpki-client