This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/Wu3LM00555eBfi60dwPAGLTcSdU.mft
File:                     Wu3LM00555eBfi60dwPAGLTcSdU.mft (raw, json)
Hash identifier:          0iexF/tW9K9l2OpYu3WNvHvAxWk91BVYAxOEsSs4kHw=
Subject key identifier:   9A:91:4F:BE:FD:C8:5E:65:F5:06:A9:0F:DC:74:BA:D4:48:EC:0F:70
Authority key identifier: 5A:ED:CB:33:4D:39:E7:97:81:7E:2E:B4:77:03:C0:18:B4:DC:49:D5
Certificate issuer:       /CN=5aedcb334d39e797817e2eb47703c018b4dc49d5
Certificate serial:       019B2F9EDCD6A6AE2537E8A40742D5336B44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wu3LM00555eBfi60dwPAGLTcSdU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/Wu3LM00555eBfi60dwPAGLTcSdU.mft
Manifest number:          0D71
Signing time:             Thu 18 Dec 2025 04:01:38 +0000
Manifest this update:     Thu 18 Dec 2025 04:01:38 +0000
Manifest next update:     Fri 19 Dec 2025 04:01:38 +0000
Files and hashes:         1: Wu3LM00555eBfi60dwPAGLTcSdU.crl (hash: 7kVQ7lOlMbySAorlOhZIy3t/XkbaAWKImX2gWb+Ulb8=)
                          2: Wyb52zGEnneuzfD2tuztnuglkZM.roa (hash: pRaWUV+rJLCM+NItD33S9b/zkSegxof0Tte2Clq6a78=)
                          3: dcyYzxG1C_w_nBNFlVJtruOvAh0.roa (hash: plCR5uHg69g6tAPVlizUtVtwRqfn4K3Hux+I6ZCYSag=)
                          4: vxDWfcBErbw3QM5tYdBzh-7Akm8.roa (hash: qv/OhT65F1U2TWpmssPcn9SlD/6ghmK29vjWP8rBXfE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/Wu3LM00555eBfi60dwPAGLTcSdU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/Wu3LM00555eBfi60dwPAGLTcSdU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wu3LM00555eBfi60dwPAGLTcSdU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 01:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2f:9e:dc:d6:a6:ae:25:37:e8:a4:07:42:d5:33:6b:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5aedcb334d39e797817e2eb47703c018b4dc49d5
        Validity
            Not Before: Dec 18 04:01:38 2025 GMT
            Not After : Dec 19 04:01:38 2025 GMT
        Subject: CN=9a914fbefdc85e65f506a90fdc74bad448ec0f70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:20:5e:f0:e1:15:ac:90:b0:73:4b:6a:1d:d4:
                    a7:12:b9:d5:9d:a2:77:40:a0:d3:9b:1a:51:13:57:
                    22:7b:84:48:13:ed:e7:c1:05:13:c6:27:7e:ea:f8:
                    07:d6:2c:b2:27:75:fb:f6:c4:20:a6:a0:9d:4a:a1:
                    d5:a1:d5:75:db:11:5b:db:ce:6a:00:87:aa:94:b5:
                    c5:26:14:13:6d:db:bb:b0:4a:60:f4:c2:4b:ac:2c:
                    b0:14:bb:01:58:58:bd:0a:34:fe:75:2d:7f:01:c4:
                    35:dc:83:1f:fb:b2:0c:b4:b1:77:91:8f:6b:9c:20:
                    12:95:9a:c4:26:0f:f4:f8:d5:db:94:a0:33:a0:64:
                    67:04:6b:fb:70:62:58:93:43:5d:e3:b9:6d:95:b3:
                    b9:27:b3:ea:2d:73:02:91:25:da:bf:cc:b0:a7:ee:
                    fb:ea:b0:bb:c2:db:3f:66:1a:24:99:6f:2f:af:4e:
                    06:1b:e4:9e:2f:2c:f9:ba:1f:0e:2e:f8:63:ca:c0:
                    1c:20:05:b1:53:ed:89:fa:11:fd:70:b6:6b:58:f2:
                    55:14:cb:4c:73:d2:5d:af:f4:9f:d9:43:89:6c:36:
                    dc:1d:7f:cc:52:cd:23:c0:ae:14:b6:48:8f:36:c1:
                    fe:ec:60:e8:6d:a0:85:36:81:03:8a:75:03:73:8b:
                    04:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:91:4F:BE:FD:C8:5E:65:F5:06:A9:0F:DC:74:BA:D4:48:EC:0F:70
            X509v3 Authority Key Identifier:
                keyid:5A:ED:CB:33:4D:39:E7:97:81:7E:2E:B4:77:03:C0:18:B4:DC:49:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wu3LM00555eBfi60dwPAGLTcSdU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/Wu3LM00555eBfi60dwPAGLTcSdU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/Wu3LM00555eBfi60dwPAGLTcSdU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:07:30:24:8e:a2:56:8b:be:c9:d4:13:ed:91:16:77:e7:07:
         bd:6c:9a:e6:c7:2d:1c:ce:6c:94:16:e8:f8:a5:f5:65:5e:14:
         ec:58:77:f4:de:87:86:39:34:d2:d6:81:a3:d9:68:08:db:82:
         34:ba:b3:27:be:69:e9:60:96:20:d1:a5:89:78:ed:a7:2a:5a:
         fb:49:9c:69:a3:31:fa:a5:3b:d1:51:c5:41:66:36:42:7f:25:
         89:fa:19:98:34:bd:28:ad:87:70:cf:4b:19:c0:58:91:a4:b4:
         50:93:ad:ea:8a:a5:fa:05:c7:42:83:9c:4c:e5:90:dd:d4:f5:
         97:6f:92:36:7f:40:29:c8:98:01:9a:5a:15:9a:eb:80:cc:7f:
         46:c2:97:cb:7a:2e:29:b9:46:07:cd:d5:f8:21:56:77:d3:f8:
         ee:85:ba:03:2c:b4:55:ec:df:46:02:23:1c:bd:de:06:55:1c:
         c9:6c:dc:20:1d:60:37:ac:8d:83:f4:a3:7a:c4:28:33:d1:d7:
         f4:01:f5:e7:bf:5e:80:4e:e7:1f:40:40:12:a1:d3:76:30:2f:
         fb:d1:d6:55:17:49:23:2c:c1:7c:32:78:c0:7d:71:d2:92:e8:
         c7:17:af:3b:16:b3:a1:73:87:3a:64:7e:c6:60:01:4e:48:5d:
         6c:ae:60:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 06:17:43 2025 by rpki-client