This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft
File:                     WC4hcKe8vsMQFU8rzpmDP-woAfs.mft (raw, json)
Hash identifier:          JKIdzUaMm8wQyfXnw+FGrmdoZCRZVL2w0IHbG1PdO68=
Subject key identifier:   69:06:13:D2:47:97:D8:3C:07:BA:DF:8E:96:26:86:9C:73:78:2D:87
Authority key identifier: 58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB
Certificate issuer:       /CN=582e2170a7bcbec310154f2bce99833fec2801fb
Certificate serial:       019AF19A9627E18D1C96C304AEF8B49C95FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft
Manifest number:          0955
Signing time:             Sat 06 Dec 2025 03:00:31 +0000
Manifest this update:     Sat 06 Dec 2025 03:00:31 +0000
Manifest next update:     Sun 07 Dec 2025 03:00:31 +0000
Files and hashes:         1: FKqsClUSc-HScmueq_QOqvdFJPo.roa (hash: QDB9/wNvtMenWcDG/OOKIL2kdnSagKU38zWW9V2bprA=)
                          2: WC4hcKe8vsMQFU8rzpmDP-woAfs.crl (hash: 4erNyn6M8LaoStTEyJOUYN/yObvyomxQbMNxZE2Nav8=)
                          3: ZxskbRgCMa6Yc-LklxQC1BBLGOk.roa (hash: CTUmOgotKmf+GqF4YkFaNe8ee4nBAUGdVxI+TEhO/Sw=)
                          4: o98Wg7KpgmJ871dQGpUlt4TCmbo.roa (hash: mzU2BBa9J5BX5hmBuscvoDSNFgApfZanUcB3Ps+gIWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 03:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9a:96:27:e1:8d:1c:96:c3:04:ae:f8:b4:9c:95:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=582e2170a7bcbec310154f2bce99833fec2801fb
        Validity
            Not Before: Dec  6 03:00:31 2025 GMT
            Not After : Dec  7 03:00:31 2025 GMT
        Subject: CN=690613d24797d83c07badf8e9626869c73782d87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:13:39:77:4d:f6:05:0c:20:6e:e9:57:d4:44:
                    ec:c3:d7:b2:cb:ea:6d:cf:b8:9b:77:e6:49:9d:62:
                    70:c2:6e:eb:e6:61:8c:72:7a:de:66:e3:56:b8:02:
                    47:87:87:0e:5a:7d:3e:d6:4f:a2:b8:4e:ac:fa:8d:
                    22:40:e6:e6:b8:d5:0e:74:e2:bb:3d:1c:6b:6e:09:
                    00:b6:06:c6:d7:f8:10:43:e0:50:40:94:10:b1:f5:
                    e8:da:02:5c:8a:76:b3:a1:4e:6b:18:09:d1:6a:9b:
                    77:cf:70:47:38:94:e1:e1:c7:cf:74:bb:5f:82:4e:
                    f6:be:55:1f:a7:22:aa:ce:39:ac:91:49:c6:f8:ce:
                    8c:de:93:06:80:99:3d:ff:c8:13:75:e7:e8:ce:ed:
                    27:bc:50:04:fc:5b:e1:17:76:02:28:ec:a5:de:93:
                    c7:67:00:13:1a:b3:b8:c4:66:ed:2a:4a:f6:01:bd:
                    49:b1:08:46:15:72:c5:2f:a5:8a:e9:87:a4:c8:07:
                    e4:96:df:85:90:20:76:4b:00:19:5c:07:4a:e5:13:
                    5f:db:2c:d4:b0:3f:16:97:a9:57:eb:0b:3d:da:75:
                    81:32:9d:20:74:6c:dd:02:f7:8f:97:7d:d8:26:71:
                    5d:82:3e:32:9a:5f:a2:8b:f7:12:1a:0f:f2:65:93:
                    43:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:06:13:D2:47:97:D8:3C:07:BA:DF:8E:96:26:86:9C:73:78:2D:87
            X509v3 Authority Key Identifier:
                keyid:58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:b3:e5:6a:14:97:d5:20:35:12:09:62:03:b9:8d:fb:d2:c1:
         0f:4e:00:84:b9:30:f8:df:e3:81:e1:27:95:c4:2d:c5:03:78:
         24:0d:11:bd:b7:dc:e7:58:fd:07:57:71:56:3c:99:c5:7f:e6:
         43:99:63:f2:1e:9e:41:11:85:6e:f1:28:be:ba:1f:a3:8b:e3:
         fb:61:20:63:34:be:27:c6:18:59:52:db:e9:d9:60:04:f9:73:
         ca:9b:18:56:9c:b2:ca:41:ee:61:05:df:f1:73:65:55:6c:0f:
         08:27:7e:18:75:c5:73:58:72:d1:a3:39:1a:94:a5:c3:df:87:
         fe:bb:a0:4c:1f:fb:00:a8:38:49:33:1f:49:a7:6b:bd:c4:71:
         88:50:c7:6c:19:a2:6e:63:13:5a:f9:11:10:6b:85:51:5e:5c:
         ef:dc:50:3b:c0:ab:ef:37:43:f3:82:e5:04:7d:1a:d4:0a:10:
         57:5b:e4:0a:07:8f:c1:c6:f0:8b:e2:a0:45:86:d8:1a:7c:20:
         6e:b9:0c:0d:86:23:03:28:1c:dd:89:74:b7:2e:ad:f1:23:bf:
         e4:a8:78:d0:08:d0:1c:16:f6:87:5e:8e:99:cf:77:0b:fa:2d:
         9a:bc:ec:4c:ce:c5:9d:77:c3:f1:94:45:4a:9e:95:89:c1:a7:
         8d:3b:e1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:20:21 2025 by rpki-client