This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
File:                     WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft (raw, json)
Hash identifier:          w61sQH6hDLLChyqWknhK2xuwfHSTovHZCuoc4Q5iy4k=
Subject key identifier:   55:DE:8A:01:E5:6C:2F:B4:F9:E4:BA:0C:69:77:FE:89:5F:4D:FA:6F
Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
Certificate issuer:       /CN=5a141c5090824d0a17c29ec4050e21007113fbda
Certificate serial:       019AF19B9469EACC0951ECAB973F647281CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
Manifest number:          176A
Signing time:             Sat 06 Dec 2025 03:01:36 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:36 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:36 +0000
Files and hashes:         1: 9mv5BJvEaAqWoj8vH5r1xx_pFgo.roa (hash: IAS+DSX7WNtHYk4j+RDYn0qWAwRUWPxJ+A4Wt+jMAHQ=)
                          2: Jue_aw4zHx1sp-mJmowMMM2tGGA.roa (hash: 0Yitoumoz1xxoSRol/a1PWMjCmZIGDa9duJ/3vMhBiw=)
                          3: MpJGW61wsAY2na2GoCEJeo5HvXk.roa (hash: vRlmBz0iiqrk+J7PazbAwX0O6F7JU+iRJTTbiLqVjxU=)
                          4: PNxKt9EExJcdff8t4PlXHS3Zp8E.roa (hash: l/sm5m0RtWP1FamD6nvtIs4Wmty8En19TqcjOBknuMY=)
                          5: SNph92J-Xcf8IveNNNu0MkGJVWI.roa (hash: VJRwO2aW7uM1HccqCjhKGDaLckqIJFkhu3+W4SavOHw=)
                          6: U8yyp-JTHsc4PzNj0KNOVG9KECs.roa (hash: XL8cza6Y6dTsPDS6Eb2/zXU0zrVRVcGlEc/rkfzZaj0=)
                          7: WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl (hash: xYqa7lPyEBZYgqC6/jALZXbug4tCIajoTt8Ztkx3WGo=)
                          8: ve4iz1Nb8DcHS9BJwN65K0mM0-E.roa (hash: KrskrDJ9DRb/ge1dc1ifB8Oiho4jbO0ADnVg8CJqCCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:94:69:ea:cc:09:51:ec:ab:97:3f:64:72:81:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda
        Validity
            Not Before: Dec  6 03:01:36 2025 GMT
            Not After : Dec  7 03:01:36 2025 GMT
        Subject: CN=55de8a01e56c2fb4f9e4ba0c6977fe895f4dfa6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ac:25:a7:6f:ed:53:ba:24:8c:f3:94:9f:f2:
                    a4:3f:cb:7e:e4:1a:69:6d:e5:91:83:d3:da:4d:8e:
                    6f:08:41:f3:54:68:b8:5c:8a:ca:93:2e:92:a8:07:
                    08:94:e0:71:64:fd:94:b7:e1:7d:2f:5a:76:d1:46:
                    71:e1:e2:f7:65:90:1c:76:77:5d:9e:8e:3b:cc:aa:
                    3b:ed:38:09:d7:3a:97:96:3f:50:8e:72:20:2c:b5:
                    68:89:9c:61:1f:59:cb:29:01:d4:fd:4b:48:b3:b7:
                    3e:5b:ba:a5:ed:e4:c2:a1:ee:86:67:ac:16:62:9b:
                    94:81:6f:fe:d0:6f:94:25:49:71:42:2c:1a:71:97:
                    f5:96:8d:83:09:20:26:66:49:b5:96:8d:2d:43:a6:
                    80:00:68:fd:7e:9d:ad:9b:d7:23:ad:13:58:40:01:
                    90:13:57:94:81:b4:3e:e8:1a:0e:09:a6:7c:2a:50:
                    32:62:2d:da:8c:6c:35:dd:ec:38:96:22:2e:ef:3e:
                    e5:4e:f8:96:7e:a3:c6:b6:a8:5c:81:e4:e7:93:e5:
                    9a:79:06:d4:c3:f3:a4:e9:91:99:54:b6:a9:85:ec:
                    40:c6:e4:11:e3:0e:da:3c:79:49:71:29:cc:de:ac:
                    64:a7:8a:09:ca:94:59:84:0b:b1:ad:9d:cc:08:6e:
                    08:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DE:8A:01:E5:6C:2F:B4:F9:E4:BA:0C:69:77:FE:89:5F:4D:FA:6F
            X509v3 Authority Key Identifier:
                keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:8c:d3:57:5c:9b:b1:b6:04:63:19:c5:f2:c8:a3:a8:f4:f3:
         8a:94:a7:40:a5:f0:78:d1:e5:fe:8c:b3:3b:f2:86:98:a3:b9:
         25:72:96:8e:18:da:6a:69:9e:2c:84:a2:7a:fe:d3:6e:26:6b:
         e2:d2:0f:df:78:90:76:f7:af:d6:36:56:b2:0c:1e:38:b1:83:
         df:68:42:a1:52:17:b4:d8:7e:42:82:20:03:98:64:10:6b:d3:
         52:be:bc:87:11:aa:ef:5c:5b:77:45:f9:cd:6d:3c:01:1c:79:
         3e:65:08:c4:e9:c9:82:02:b8:44:56:02:e1:24:c3:7e:0a:9c:
         7e:b5:d5:0c:84:13:ca:2a:85:2b:5b:6c:25:de:ae:3d:84:8b:
         56:fa:d8:d1:9c:7f:74:91:b9:0c:1a:04:91:16:16:2a:95:2f:
         5c:72:b8:7e:26:d3:35:95:bf:8c:6c:d0:91:8e:14:50:71:aa:
         9a:6c:a1:20:fa:93:cb:6c:bb:06:8f:1e:08:fa:09:e7:cc:96:
         b9:26:04:74:1e:6a:88:71:84:07:f0:4e:0c:83:3f:ae:ea:ac:
         82:1b:b9:cd:c4:09:04:46:01:2e:96:1b:f5:56:c2:e4:68:b3:
         51:b5:e5:58:cf:4a:eb:63:57:bc:82:51:81:cd:9b:e4:c3:9a:
         52:75:99:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:59:05 2025 by rpki-client