This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
File:                     leiDWblaOWSub5oM2q4H9Xn5jDU.mft (raw, json)
Hash identifier:          cpoRhgnyvyp/KQnrvC9fevIzp5dtq7ciGWZuc123ceQ=
Subject key identifier:   9D:50:C2:91:FF:F0:0B:3B:5A:CA:10:76:24:9B:2D:95:A9:0B:74:9F
Authority key identifier: 95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35
Certificate issuer:       /CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35
Certificate serial:       019AF276B882B03AC235034C67CCCBA921D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
Manifest number:          0524
Signing time:             Sat 06 Dec 2025 07:00:57 +0000
Manifest this update:     Sat 06 Dec 2025 07:00:57 +0000
Manifest next update:     Sun 07 Dec 2025 07:00:57 +0000
Files and hashes:         1: leiDWblaOWSub5oM2q4H9Xn5jDU.crl (hash: PNrSNgu4NmYAZn1gEA8iB632h8puiqSqb+7Tb9BzcDs=)
                          2: pe1o9e3jWHQk95p2Ei_dXirE0kc.roa (hash: 7nIBr99cFeZBlfuF7+XYt3ntEwToRh90vxok7wcdM9Q=)
                          3: rzPMwtKJbrfVAK2tZQ7ho2lMTko.roa (hash: 6lSfgp9VWZJODBNAF2r5pCybLvr4sFR9bMz2OJU8t8k=)
                          4: yFZR2dMAN5V-U5yvB8zako3sBAI.roa (hash: Su1HZF/T/54lCtr91bZGjGbSwHR7/PFdtQAeMPFLxmk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:b8:82:b0:3a:c2:35:03:4c:67:cc:cb:a9:21:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35
        Validity
            Not Before: Dec  6 07:00:57 2025 GMT
            Not After : Dec  7 07:00:57 2025 GMT
        Subject: CN=9d50c291fff00b3b5aca1076249b2d95a90b749f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3e:b9:5d:e9:66:e3:38:09:81:0b:aa:1e:40:
                    89:a5:34:3c:97:92:b3:8b:b9:46:22:c3:1c:4d:f2:
                    46:d3:58:dc:94:88:c1:80:fb:ef:b2:b6:7d:af:1b:
                    23:dc:fc:96:8f:cc:8f:46:7e:31:24:41:51:ae:38:
                    c8:53:f8:7c:9b:38:32:3e:0b:8d:62:aa:09:39:97:
                    1f:d2:9f:bc:f6:b7:4e:9b:42:76:2e:39:0e:f8:7a:
                    e9:ba:45:a6:27:ad:95:18:3e:c5:06:16:65:3b:2d:
                    f9:25:dc:1d:99:5d:08:54:f3:c2:ce:45:e9:8a:6c:
                    1e:8b:7e:4f:8d:d0:b8:5c:81:57:2f:8f:bb:61:f6:
                    55:1e:e3:20:ac:0d:94:53:a1:6a:26:00:fc:cb:3f:
                    c4:b1:37:27:ad:9c:02:ed:6d:d3:f3:c9:45:7c:c6:
                    06:60:15:77:47:29:ef:4b:57:ad:c2:87:7f:b7:0c:
                    d7:db:98:0e:54:43:ad:8e:3a:d9:d7:e2:60:80:42:
                    5c:cf:78:16:84:17:53:80:8a:8d:16:50:41:d1:2a:
                    03:e4:9c:10:5b:3c:3e:e7:d3:49:53:c1:a8:0e:85:
                    58:38:8a:d6:97:fe:56:d3:8a:09:97:37:ee:10:5f:
                    a1:0d:44:da:cf:e3:4b:80:00:6c:a5:91:71:b4:34:
                    45:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:50:C2:91:FF:F0:0B:3B:5A:CA:10:76:24:9B:2D:95:A9:0B:74:9F
            X509v3 Authority Key Identifier:
                keyid:95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:7e:23:28:c1:78:1b:f6:f5:46:18:35:ce:8a:ff:3d:15:e6:
         4c:71:c8:09:a7:83:b1:b2:c3:8e:01:4e:09:7e:21:2b:25:dc:
         b3:82:38:33:3d:d3:b8:3a:6a:36:4c:27:9c:fe:b3:55:b8:48:
         d5:9f:08:d8:51:c6:b0:63:2e:aa:98:62:d2:83:c1:5a:6c:34:
         0f:67:3b:49:8c:7a:ff:28:a6:38:3b:d0:f9:61:a8:f3:9e:5e:
         0d:c7:77:a7:a9:93:db:b3:1c:68:94:fc:cd:dd:06:12:3b:3e:
         e6:66:96:d4:32:8f:fa:ea:b0:64:f0:12:b1:77:ed:c1:a1:81:
         9b:9c:7c:87:7f:53:06:51:b8:c8:db:10:aa:c2:04:e1:21:e3:
         e1:c2:da:6a:88:16:e6:36:1b:b7:e8:4f:69:84:7a:ca:07:05:
         d0:e8:92:2b:85:67:2d:a9:b2:e5:ee:f5:b5:63:8b:4b:77:69:
         3d:54:bd:5d:68:ef:3a:c2:72:6d:51:22:0e:26:85:5f:31:78:
         b9:64:12:5c:a3:6b:4b:4a:f7:ee:4a:33:95:51:69:ff:d0:88:
         aa:14:89:a7:9b:ea:a7:88:45:39:0c:6b:a0:6e:92:1c:67:33:
         6a:5f:6d:07:20:31:0a:d1:86:71:57:b7:60:a8:cf:84:35:2b:
         29:f5:b1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:44:52 2025 by rpki-client