This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
File:                     wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft (raw, json)
Hash identifier:          VEwU2x+AgRtCTySZco6dP+HDsCzTgY+v20LelBcctrM=
Subject key identifier:   A1:5C:F5:1F:B2:00:12:33:82:EF:52:E8:6A:6C:20:F0:60:21:51:45
Authority key identifier: C1:DB:04:1A:FA:BF:D8:C1:1F:0B:10:B5:23:79:9B:65:CF:DE:39:08
Certificate issuer:       /CN=c1db041afabfd8c11f0b10b523799b65cfde3908
Certificate serial:       019AF19A931C1E89864C619BBBB81D853C81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
Manifest number:          071A
Signing time:             Sat 06 Dec 2025 03:00:30 +0000
Manifest this update:     Sat 06 Dec 2025 03:00:30 +0000
Manifest next update:     Sun 07 Dec 2025 03:00:30 +0000
Files and hashes:         1: pHhGl7hC09oju4TJunou2EvQcgs.roa (hash: 2VlBpUDieZUHkJYBbPMMtM8Or6vr8jhJfvPVbdLnF2s=)
                          2: wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl (hash: lIC5OHNnnWSZmWq500EpA9rAPSAvEIlOu5mDSekcRnY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9a:93:1c:1e:89:86:4c:61:9b:bb:b8:1d:85:3c:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1db041afabfd8c11f0b10b523799b65cfde3908
        Validity
            Not Before: Dec  6 03:00:30 2025 GMT
            Not After : Dec  7 03:00:30 2025 GMT
        Subject: CN=a15cf51fb200123382ef52e86a6c20f060215145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:be:d9:56:df:8d:a0:e9:5a:e3:a3:d4:eb:5b:
                    98:c5:d1:6e:27:75:c9:67:f6:4a:30:ca:15:20:ce:
                    ed:14:bc:9b:e2:fe:a8:e2:bf:52:5d:15:72:d2:4f:
                    d5:e3:02:30:99:c3:a3:86:f1:b8:82:7d:ef:01:3d:
                    ba:7d:32:ea:47:43:33:5d:1d:9a:01:63:1d:8b:5c:
                    b0:87:4f:a1:0f:9a:f9:9c:97:86:68:11:aa:24:a8:
                    14:8a:37:ba:a1:8c:48:af:b5:54:6c:1b:1d:37:9c:
                    5e:22:29:ee:5e:2f:29:4f:ff:32:77:e9:02:c3:c8:
                    5e:7e:b9:24:bb:18:24:81:5c:08:fb:87:75:d2:e4:
                    9b:36:d4:06:0e:34:11:88:47:ee:fa:c9:b4:e5:72:
                    87:fb:04:c3:af:37:b7:d6:8c:b7:dd:ad:65:b7:53:
                    54:b0:13:e7:28:0a:8c:fc:21:d7:66:bf:e2:23:d1:
                    55:6e:fb:a7:8d:ba:4a:2a:a7:d0:7b:ab:67:11:11:
                    b1:3d:8f:a4:3b:88:9b:ee:e9:05:91:07:3e:af:a8:
                    29:6d:ea:4c:b6:a6:c2:1f:5c:9d:cf:6d:26:3a:29:
                    b9:4a:3f:22:b6:e5:1b:bf:d1:32:57:f6:97:b4:95:
                    0d:75:83:ac:60:3a:17:5e:20:0e:5a:16:68:a0:78:
                    74:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:5C:F5:1F:B2:00:12:33:82:EF:52:E8:6A:6C:20:F0:60:21:51:45
            X509v3 Authority Key Identifier:
                keyid:C1:DB:04:1A:FA:BF:D8:C1:1F:0B:10:B5:23:79:9B:65:CF:DE:39:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:bb:2b:1a:ec:fe:a5:85:06:0e:1f:48:7d:05:f3:6a:b8:73:
         9f:0d:b5:dc:0a:c9:ab:25:25:bc:37:bc:16:e8:bd:f4:10:90:
         d4:22:0d:01:5b:a1:72:ad:dc:f6:00:06:da:65:f4:23:45:b0:
         b2:22:54:82:f8:9b:5f:ba:de:6e:66:e0:fe:89:a4:6b:9a:6e:
         5f:37:78:e7:43:7d:a8:72:81:7c:9c:8f:d8:89:16:f0:27:eb:
         12:91:cb:9e:8d:01:56:b5:b4:f3:a5:14:c2:5d:82:a5:fd:cb:
         de:c3:ff:96:03:4f:37:82:47:72:eb:ac:2b:81:37:7a:5a:51:
         7b:06:92:d6:1a:09:d4:d6:fc:c7:61:cc:33:79:d6:67:2e:ae:
         8d:93:6e:c5:7c:6e:d5:eb:89:7a:a7:10:66:f9:b3:e1:95:91:
         17:8f:a7:35:5e:5e:db:12:0b:89:85:57:bb:d6:4c:c7:ea:a1:
         88:23:a6:74:d9:88:05:4f:90:42:a7:20:b7:2f:56:9b:68:e1:
         84:67:99:e5:de:a2:6a:0a:82:d2:1d:78:cd:f9:df:4d:94:78:
         f2:01:42:6c:20:14:d7:64:02:b9:8d:5f:4a:a4:44:c0:5b:3a:
         9a:72:7c:05:a9:a2:97:1d:31:80:52:02:2c:70:e5:4d:e4:7a:
         42:c8:c1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:49:06 2025 by rpki-client