This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft
File:                     WTiXF0-WdJDb9hidR53yyTcb9AQ.mft (raw, json)
Hash identifier:          QBjAp8uKp+osK2POfji0z+j3ssgYeQyBMG60hUSXaCY=
Subject key identifier:   E0:41:2F:4D:D1:83:6E:4F:D9:66:94:19:9B:AF:02:78:2A:CC:DC:23
Authority key identifier: 59:38:97:17:4F:96:74:90:DB:F6:18:9D:47:9D:F2:C9:37:1B:F4:04
Certificate issuer:       /CN=593897174f967490dbf6189d479df2c9371bf404
Certificate serial:       019AF31B617B3660D1D272D85DA8210DA657
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft
Manifest number:          1076
Signing time:             Sat 06 Dec 2025 10:00:49 +0000
Manifest this update:     Sat 06 Dec 2025 10:00:49 +0000
Manifest next update:     Sun 07 Dec 2025 10:00:49 +0000
Files and hashes:         1: Bb8ycOE7qhSFoSMHyD2xB85u_Z0.roa (hash: KcdCM+LEn+v24gkqqCtc8motwJZXGA9KFLUTB0+gGg8=)
                          2: WTiXF0-WdJDb9hidR53yyTcb9AQ.crl (hash: ubz28TBsVQeZfip9m1vJYRDAx7QI2kfKj8E3uZy5yrA=)
                          3: g-54cvk5hO2Au4tfyjhzhnHoH90.roa (hash: Q49mbpUpWnr28zAxYWF00PO3wsoqtVE5pDkqJmiOpho=)
                          4: kTl30QOsbrDzk_mb8ECK1dAhV14.roa (hash: ktEj7/KQdl7DWD89NCLPeaAfOqTe9FU+2FvlPHr9TVM=)
                          5: x4O9V3tAmzZjxZHKXXKdfDf1aNY.roa (hash: F4vKg2iqkGQkTay3EP9VXjOjSKkwkZAg3JC6CDhOzYc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1b:61:7b:36:60:d1:d2:72:d8:5d:a8:21:0d:a6:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=593897174f967490dbf6189d479df2c9371bf404
        Validity
            Not Before: Dec  6 10:00:49 2025 GMT
            Not After : Dec  7 10:00:49 2025 GMT
        Subject: CN=e0412f4dd1836e4fd96694199baf02782accdc23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:68:8e:46:b4:f8:1b:ae:f6:88:28:bf:15:2c:
                    aa:18:e8:e6:af:4f:27:5a:d7:a8:c0:0a:3c:d7:52:
                    6a:fa:b8:cc:ad:20:aa:f4:9e:97:2b:29:00:09:8e:
                    fc:d2:df:b6:96:37:5f:ae:9c:c8:e2:8a:8e:2a:80:
                    82:e7:cb:27:6b:bc:4c:b2:db:e9:fb:df:72:80:21:
                    e2:84:cc:f5:5b:44:d0:a4:4c:fe:c1:7e:23:b7:1f:
                    94:1e:d4:98:55:1d:af:aa:bd:39:bf:33:6e:6b:8a:
                    0b:6f:71:4f:f1:25:fa:65:e5:d4:f1:15:0a:98:ca:
                    cd:59:3d:8b:44:cc:a8:8b:92:f2:f1:6e:36:bf:d2:
                    1f:96:a4:31:b2:68:de:f2:a1:2e:95:a7:f3:75:4e:
                    87:ee:cc:c9:65:2b:d7:5b:2c:fe:15:7d:a1:4e:85:
                    47:e1:ce:b9:27:48:47:6a:b1:50:93:81:8a:cd:60:
                    dd:81:3a:d6:49:30:cd:ed:b6:ba:81:75:1e:a2:ea:
                    68:a3:a2:e0:a0:b2:75:68:a1:44:ac:93:82:d9:bb:
                    5c:a4:e4:8d:44:30:64:a4:20:4a:74:00:57:3a:f8:
                    49:c3:cd:af:7d:82:31:3c:60:48:86:9f:fc:31:49:
                    69:4f:60:c7:52:56:b2:ca:81:ba:f0:fe:d5:e1:52:
                    71:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:41:2F:4D:D1:83:6E:4F:D9:66:94:19:9B:AF:02:78:2A:CC:DC:23
            X509v3 Authority Key Identifier:
                keyid:59:38:97:17:4F:96:74:90:DB:F6:18:9D:47:9D:F2:C9:37:1B:F4:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:39:d3:c6:e3:76:77:13:21:12:13:06:9b:03:1d:f6:ce:ab:
         11:10:dd:f7:f0:d8:d3:45:b3:16:8b:dc:45:2e:f4:ff:08:14:
         96:23:9d:d0:4e:1a:96:2b:69:2d:25:19:22:4b:b1:82:1d:6a:
         2b:52:3b:54:69:2e:a6:84:18:a5:b8:54:c9:92:0c:3e:63:67:
         e7:25:25:4a:6a:ef:b0:74:ff:d5:4c:6f:77:8c:3a:fb:be:b2:
         ca:63:98:99:9b:cb:b2:8f:d3:1d:78:de:44:ce:09:59:96:b7:
         7e:7a:37:10:8e:9f:ef:f3:81:81:7d:ea:86:d1:03:64:73:d0:
         21:ec:75:d8:39:04:0e:73:b6:6b:44:f4:c7:67:75:7c:46:46:
         79:23:60:88:84:42:91:04:19:00:d9:37:fb:a2:50:6a:5f:83:
         9d:1b:d4:b6:04:f7:42:60:9e:38:5c:e2:be:d1:98:c6:d5:6c:
         ca:40:ad:73:95:be:50:4d:e7:6e:96:19:a8:1e:7e:97:26:6f:
         4c:1a:9e:79:73:ca:b8:08:24:c8:b0:a2:ac:d4:9a:27:60:b6:
         a1:b0:04:a0:14:64:c5:7b:70:f2:da:e5:f6:82:26:02:fa:f8:
         3d:53:3d:ba:25:9f:ac:b9:8c:fb:6b:94:ad:9c:9c:e5:d6:c0:
         ef:da:6f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:22:21 2025 by rpki-client