This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft
File:                     WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft (raw, json)
Hash identifier:          0xrzHEcK2mhMXaHUpfN1Q/NbJ+xmSQ/hBqNL9Mmco8U=
Subject key identifier:   31:02:D7:30:6D:4D:58:17:BB:BF:35:4A:EF:AE:1D:6E:EE:4E:5C:1C
Authority key identifier: 5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF
Certificate issuer:       /CN=5a4a47d582bb0e9680f89258ab96d05867d352ef
Certificate serial:       019AF12D4E09EDB4C7CB79DC6D5D80E0CB36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft
Manifest number:          154A
Signing time:             Sat 06 Dec 2025 01:01:09 +0000
Manifest this update:     Sat 06 Dec 2025 01:01:09 +0000
Manifest next update:     Sun 07 Dec 2025 01:01:09 +0000
Files and hashes:         1: IAWEnryJVpaK2PC1i1p1gzyA5aM.roa (hash: V8zeqHEXmBXDf+5VLnGO8LhbeOvdCzFQOaNucWQFdJs=)
                          2: IxvoZc4F3Qaa5ur1q1XhsdbIwYI.roa (hash: uBXV07kX7Q7HlXXY9czyil+ZyCPUWCh5XY0q2xGQk9E=)
                          3: WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl (hash: jPxtTpWgALielht9TbgW9ZjRInvhLgKQlRD3Szlml38=)
                          4: gcLYIM7NGFOjlEOaeCFYBSRJsQU.roa (hash: Gb37A8lctlHsApBbJF+wFlN+wBQgxlqZQzSQ9DIxfCE=)
                          5: tMFph9cmJacY9_6pBYOFi0X8qxI.roa (hash: yN3wCBUXrF4u5FVJmYsnf0p7F7khnudzz4ntTOuoOuA=)
                          6: tYYSCJCFza29RNke_2EcrZu7XHo.roa (hash: lB4PFBQhaKp43hqTQ3cMQhuQr2bCAaP0ut24A/mZGfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2d:4e:09:ed:b4:c7:cb:79:dc:6d:5d:80:e0:cb:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a4a47d582bb0e9680f89258ab96d05867d352ef
        Validity
            Not Before: Dec  6 01:01:09 2025 GMT
            Not After : Dec  7 01:01:09 2025 GMT
        Subject: CN=3102d7306d4d5817bbbf354aefae1d6eee4e5c1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ed:29:48:23:e1:1a:ef:45:68:23:9e:1c:c1:
                    ed:a4:0e:d7:38:08:5f:ed:b5:a7:e3:88:d4:61:c3:
                    b6:00:0d:12:ef:5e:10:64:49:b2:76:ee:c6:5d:c8:
                    c3:14:62:0d:a3:36:59:ce:4a:b5:31:02:84:6c:bb:
                    be:b6:64:77:fa:ff:85:a8:d1:94:e6:2b:86:18:d3:
                    c9:06:4d:9f:01:be:0b:59:e0:3c:06:47:b9:0f:61:
                    a6:af:34:bb:9b:cb:2c:d8:ef:37:13:77:8c:18:55:
                    92:7a:86:5a:1e:4d:9a:ac:9a:df:e2:f5:3b:90:43:
                    30:35:b3:08:ce:0d:4d:1c:ac:e0:af:74:37:23:38:
                    8d:25:5b:fe:4a:4c:42:13:a5:83:03:75:57:27:d9:
                    27:ac:eb:e2:fa:fe:57:95:79:36:f2:98:b6:2d:af:
                    ce:84:74:a8:38:12:bc:5a:4f:cf:5b:bf:d7:32:67:
                    a6:2a:7a:b3:cb:c2:18:3b:7d:4f:5d:f8:09:af:a5:
                    cf:7d:fd:0f:1a:73:8c:60:fc:56:06:47:45:da:1d:
                    a3:6b:21:f7:74:b0:5e:e6:cc:42:a4:21:ad:5a:94:
                    45:c0:f6:69:96:b1:a4:f2:ac:d2:8c:e3:6e:b8:9c:
                    ea:b5:0b:54:d0:dd:83:b0:88:91:3b:08:e9:58:78:
                    2e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:02:D7:30:6D:4D:58:17:BB:BF:35:4A:EF:AE:1D:6E:EE:4E:5C:1C
            X509v3 Authority Key Identifier:
                keyid:5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:7c:ef:b2:7b:83:88:0c:33:21:a2:b9:71:96:5d:fe:d3:b3:
         44:04:f9:44:c0:cf:c6:9d:ad:43:57:0b:24:dd:29:50:83:61:
         27:f6:4b:03:aa:93:78:c1:31:f0:d9:83:97:8a:d2:05:35:98:
         a0:6d:b8:2e:ed:20:eb:a6:31:f4:da:4c:36:77:06:20:d4:a4:
         04:91:fb:82:fe:f7:6e:1d:fb:8a:6c:dd:e6:59:07:36:ba:a4:
         13:23:42:d2:c3:f6:81:04:12:21:36:2c:70:f4:fc:69:ca:11:
         7f:f8:8a:b8:d1:fe:34:fe:a2:82:f3:ea:08:6c:40:84:b4:5e:
         5a:dd:0f:ad:55:46:60:37:f5:0d:6e:fa:b4:c5:ef:58:e9:28:
         bd:c7:bc:c4:24:dd:c5:fc:42:01:6f:6f:ef:4b:8b:0d:5b:b4:
         06:77:d3:dc:03:0d:e4:34:2b:2e:67:64:ba:5c:ee:45:d9:b0:
         f5:7e:ea:9a:75:87:ef:df:84:2e:21:e8:33:54:10:91:2b:fd:
         31:42:4c:98:99:8d:d7:0c:86:56:7d:10:ed:c6:91:7e:4b:20:
         73:f5:13:65:02:60:08:74:27:6c:8a:17:eb:1d:e0:da:9f:15:
         f5:8a:a6:aa:90:97:fe:88:c1:c4:2a:d0:7e:6e:34:4e:a4:20:
         a6:24:97:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:13:12 2025 by rpki-client