This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.mft
File:                     WBTburY-kRfQsCy6tWY55v0NQNk.mft (raw, json)
Hash identifier:          zcjLvf8TbltNTqaRO4vHEaUvHlV8+UlmA+z68fxzuTg=
Subject key identifier:   03:24:45:1E:AE:95:E0:58:66:E8:C7:6B:E7:5F:AF:23:DC:30:74:D8
Authority key identifier: 58:14:DB:BA:B6:3E:91:17:D0:B0:2C:BA:B5:66:39:E6:FD:0D:40:D9
Certificate issuer:       /CN=5814dbbab63e9117d0b02cbab56639e6fd0d40d9
Certificate serial:       019AF31CA5A24F12D78B7D2C0C6F7BE949E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WBTburY-kRfQsCy6tWY55v0NQNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.mft
Manifest number:          1767
Signing time:             Sat 06 Dec 2025 10:02:12 +0000
Manifest this update:     Sat 06 Dec 2025 10:02:12 +0000
Manifest next update:     Sun 07 Dec 2025 10:02:12 +0000
Files and hashes:         1: 9aWfFrVV6kNcSEVMyjUiJGRV2Hk.roa (hash: 2ggTFeYxBPxRF6Rq6dR3nlXwESWxYB6llxCNOaUOXlk=)
                          2: WBTburY-kRfQsCy6tWY55v0NQNk.crl (hash: B1FsaXqDkjNiHFmdQXrwrZjaPZ2QlvgPhItvJn4MlIA=)
                          3: vCIsJFXMW5fIme07NsNA6g87pdQ.roa (hash: L57Yb+wStbiyBbdvvlmBkGgeQ91E4S6blQZLWIVdGHc=)
                          4: xu0lNnNgpgRxpTDG1h2JpwspWBg.roa (hash: CT74Gr1ktpZ4XprpILCL5l7k9j2cryovp9gU1z+Gj84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WBTburY-kRfQsCy6tWY55v0NQNk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1c:a5:a2:4f:12:d7:8b:7d:2c:0c:6f:7b:e9:49:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5814dbbab63e9117d0b02cbab56639e6fd0d40d9
        Validity
            Not Before: Dec  6 10:02:12 2025 GMT
            Not After : Dec  7 10:02:12 2025 GMT
        Subject: CN=0324451eae95e05866e8c76be75faf23dc3074d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2b:b7:32:42:cf:88:78:1f:17:b1:e2:82:dd:
                    4a:43:2e:1b:11:e0:91:46:4f:10:90:3e:f8:bf:e7:
                    16:ea:51:36:13:f6:11:90:8c:fb:d2:df:e0:df:78:
                    de:11:29:10:e5:75:9b:53:18:ae:a9:ef:bb:05:22:
                    e7:1d:71:96:8c:00:5a:e1:73:19:14:43:f4:57:8d:
                    77:4a:f0:56:f7:cd:5a:0d:37:e6:cf:91:00:76:3c:
                    b5:70:ba:34:66:62:90:92:38:84:85:fd:f0:3b:59:
                    61:be:c4:61:85:48:7b:72:be:92:ec:ae:e7:4f:b4:
                    e3:a8:ee:2e:cd:cf:ad:53:61:b8:65:b5:e1:74:0e:
                    3c:75:19:85:8f:b5:97:3d:55:db:48:a0:dc:12:10:
                    c1:08:fa:f0:ac:53:29:bd:42:2f:a7:10:ac:82:43:
                    4b:38:0c:90:e5:e0:26:35:57:54:52:fd:0f:c8:fb:
                    5c:bf:70:bc:97:1a:9d:1b:ea:e1:b5:fb:34:c5:53:
                    7c:ec:74:84:fc:3e:68:ef:85:11:e7:77:02:8b:38:
                    33:da:65:0f:46:2c:89:4f:aa:86:0b:e3:fe:3c:3d:
                    ac:ff:09:1e:f4:98:08:f0:29:f9:0d:fc:f7:5a:a2:
                    d3:cd:92:62:be:d5:91:6f:f0:e4:01:c6:76:f0:79:
                    e6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:24:45:1E:AE:95:E0:58:66:E8:C7:6B:E7:5F:AF:23:DC:30:74:D8
            X509v3 Authority Key Identifier:
                keyid:58:14:DB:BA:B6:3E:91:17:D0:B0:2C:BA:B5:66:39:E6:FD:0D:40:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBTburY-kRfQsCy6tWY55v0NQNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:00:a8:33:79:78:81:5a:07:c2:85:1e:0a:28:b1:65:c8:74:
         2b:47:7a:ee:42:9b:2d:6e:a1:e6:23:ad:e5:9b:51:ea:e2:4e:
         8e:48:a4:bc:d9:9d:7a:11:58:78:9c:d5:da:38:3f:50:e3:6e:
         95:a0:24:45:d8:8f:47:fb:45:34:a3:77:eb:b1:48:df:3d:dc:
         8a:f2:c4:f9:a2:7b:aa:a1:25:5c:21:2e:24:55:65:2b:b5:7e:
         51:a9:f6:df:d3:7a:73:0a:0b:6a:77:68:f4:da:ad:b5:f7:3b:
         c0:21:9b:78:3c:62:d4:29:a2:a5:d1:8b:1c:77:4f:98:f8:cf:
         13:58:fa:14:e3:9a:d8:44:e6:9a:af:5b:16:cf:a3:cc:41:f8:
         21:f4:9d:23:e6:1a:68:74:8f:7c:7c:6b:39:a0:fa:64:5c:b1:
         ef:d0:ad:b5:e2:e9:58:62:32:1d:b8:b7:aa:00:7f:b8:18:ea:
         cd:81:7c:69:77:e6:c8:c0:63:8b:3c:93:41:96:f7:36:78:e4:
         5b:6c:bf:8e:9a:8d:11:c9:25:b2:3f:ee:d5:c8:26:62:1a:87:
         da:21:09:e4:46:52:e4:c7:e1:91:13:44:9f:ee:47:9c:4d:f7:
         73:47:f4:a6:39:7a:38:6b:f4:3a:cc:37:05:1f:83:92:eb:7a:
         d7:f1:9e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:46:30 2025 by rpki-client