This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
File:                     WtlDpBzifnt7z9_2monD4zfqY7U.mft (raw, json)
Hash identifier:          RWRk+jH71ZzVAVxvUdw568gH27N/bXydNZNLvixMWHs=
Subject key identifier:   05:7C:40:52:9A:DC:C8:A1:F9:54:9F:B2:68:12:69:45:B3:F8:51:11
Authority key identifier: 5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5
Certificate issuer:       /CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
Certificate serial:       019AF2E434D9AB4C458917338C0D1F7CB772
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
Manifest number:          0970
Signing time:             Sat 06 Dec 2025 09:00:33 +0000
Manifest this update:     Sat 06 Dec 2025 09:00:33 +0000
Manifest next update:     Sun 07 Dec 2025 09:00:33 +0000
Files and hashes:         1: CrZg-KF8Q9A22OHJJHctF4UJ8vA.roa (hash: TgN9LzFg5B6mAl/H8RLYxQOgYmdpxQcOV4fT/DnUDn0=)
                          2: SQ2_vb8pZ2pKG_CAnGQ99aAzhXc.roa (hash: BeWy+dlaJycBkNeRNkXcy0pfdCOJIP2bN9zt/qAhbUY=)
                          3: WtlDpBzifnt7z9_2monD4zfqY7U.crl (hash: BAtwjmahEu4kNoFw84ajbdDuG9hhnjUfT4m5p/OI/xI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 09:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:e4:34:d9:ab:4c:45:89:17:33:8c:0d:1f:7c:b7:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
        Validity
            Not Before: Dec  6 09:00:33 2025 GMT
            Not After : Dec  7 09:00:33 2025 GMT
        Subject: CN=057c40529adcc8a1f9549fb268126945b3f85111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:79:68:51:e1:0c:64:e9:53:fa:78:7d:a9:98:
                    7c:dc:e2:36:89:b1:b0:ff:10:d3:39:9f:b9:00:80:
                    7f:b6:e8:9d:1d:af:b2:4a:49:47:24:7e:6e:c8:a4:
                    96:eb:f5:28:41:1e:17:6d:e8:0a:86:45:7f:1b:19:
                    10:53:3f:48:30:ad:45:6e:11:0e:24:1d:b6:4e:0b:
                    dd:37:4d:ec:c3:17:57:d7:7b:60:5b:23:30:87:b5:
                    00:10:a3:06:12:52:c8:e5:20:9c:60:21:e1:4e:97:
                    7e:69:8b:b0:52:10:15:f1:43:a8:21:2e:8c:87:4f:
                    80:10:fd:b7:e9:34:bf:60:34:5a:62:90:8b:09:02:
                    78:af:ae:99:71:0b:0f:d3:0a:0c:22:0f:23:d4:e0:
                    63:d0:5e:c4:11:6b:e3:7d:51:b9:17:82:50:6b:87:
                    e2:c8:c8:e4:a1:4a:64:2f:e5:5d:42:c6:7e:6c:3a:
                    b6:eb:f1:6c:60:bb:29:f5:43:59:ae:e5:89:bf:21:
                    d3:fa:1f:48:d4:76:ba:7f:30:3a:69:f9:9b:56:9f:
                    b1:5b:78:0d:52:74:a0:92:1a:81:d9:93:3f:7f:a1:
                    f1:09:4b:3e:1f:80:34:c5:c5:51:3d:1a:dd:5b:62:
                    32:95:41:dc:9b:70:6b:ce:f1:ea:8d:7c:e8:68:10:
                    68:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:7C:40:52:9A:DC:C8:A1:F9:54:9F:B2:68:12:69:45:B3:F8:51:11
            X509v3 Authority Key Identifier:
                keyid:5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:54:de:9b:85:e9:40:7d:b6:78:f9:c9:c2:6e:83:a4:cc:1e:
         2e:ca:a5:70:35:0b:d0:06:01:81:b4:d3:51:5a:a4:92:b5:c7:
         6a:c1:f0:ee:cf:fa:cf:76:06:73:d4:62:bd:06:90:b6:ca:cc:
         11:cf:1c:6e:d9:47:98:b5:dc:70:b3:cf:f4:5c:6b:e7:67:7e:
         c1:e8:fa:f0:3b:a4:cc:18:e1:5a:51:eb:ca:02:50:3a:b4:56:
         15:66:e9:47:60:0e:c7:f9:ae:1b:f8:f9:13:41:44:68:96:44:
         90:29:76:97:91:3d:ee:90:08:d1:8e:3d:58:37:f3:36:f6:83:
         3f:d4:c1:26:7e:09:da:99:75:65:df:c8:46:ff:6b:b0:c5:bb:
         c6:88:f6:8c:43:63:cc:b4:ee:48:ba:e8:22:6e:dd:2a:23:9b:
         2e:31:3c:ac:80:42:83:d0:a9:4e:7b:48:87:ee:e4:a2:a6:cf:
         48:d8:a7:35:42:b6:7d:4b:4a:8b:ec:1d:0c:da:ca:d3:c0:af:
         33:42:83:26:56:e0:48:ce:88:e0:87:2f:aa:e5:1b:cb:80:46:
         f8:7d:68:d4:1e:6a:8a:34:8a:f8:5d:11:5d:be:e3:12:7e:e2:
         33:f8:ee:05:ab:9d:87:ae:b5:97:2d:ba:36:3d:40:6a:95:f1:
         dd:57:d7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:54:39 2025 by rpki-client