This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
File:                     W5BVHjwX4KAtKNbconnbPkFH-ZE.mft (raw, json)
Hash identifier:          plkLsbyq3Pg159qmzdebOMYWu8v3GlRKp48WZiCCp3I=
Subject key identifier:   67:19:F4:15:58:05:C8:75:BC:22:9A:6D:5B:89:B2:73:36:62:61:C6
Authority key identifier: 5B:90:55:1E:3C:17:E0:A0:2D:28:D6:DC:A2:79:DB:3E:41:47:F9:91
Certificate issuer:       /CN=5b90551e3c17e0a02d28d6dca279db3e4147f991
Certificate serial:       019AF352557A9CD1DD3877419AF1918184C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
Manifest number:          13E1
Signing time:             Sat 06 Dec 2025 11:00:50 +0000
Manifest this update:     Sat 06 Dec 2025 11:00:50 +0000
Manifest next update:     Sun 07 Dec 2025 11:00:50 +0000
Files and hashes:         1: W5BVHjwX4KAtKNbconnbPkFH-ZE.crl (hash: hyhhK75Iclq/9HR9TcNO/XYBNJcBPkt9c+DjfbySfew=)
                          2: k0f9OoQq6B1aLa4kFQEIGk8_qxc.roa (hash: Zg6lE/FaFkljjUzS9qnwhWnpjXkAlp/DGZm1wnoBwyI=)
                          3: mfyRKyki9KIilboLxZkR4V98u1A.roa (hash: zMj3oFzyTUkut1k37DX3Mbj6z32e3XRjiKGOQwnR7iE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 11:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:52:55:7a:9c:d1:dd:38:77:41:9a:f1:91:81:84:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b90551e3c17e0a02d28d6dca279db3e4147f991
        Validity
            Not Before: Dec  6 11:00:50 2025 GMT
            Not After : Dec  7 11:00:50 2025 GMT
        Subject: CN=6719f4155805c875bc229a6d5b89b273366261c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f6:f5:b9:46:cf:89:83:24:d5:4c:0d:42:a0:
                    ed:3a:14:88:3c:46:48:5c:12:67:a7:3f:77:41:15:
                    c2:78:e6:f4:e0:6b:55:1c:5b:e3:0b:88:f6:81:eb:
                    65:8c:e0:c9:8a:c3:46:eb:b1:98:0f:17:84:64:b6:
                    c4:92:02:80:ac:33:dd:45:90:46:63:a4:18:c5:cc:
                    42:70:2e:f0:3f:36:ad:fa:e6:cd:28:da:7f:52:08:
                    e5:d6:24:e1:1b:10:9b:d5:fc:d9:bc:c0:ca:3b:d1:
                    8b:3d:73:ff:a6:4f:b0:0f:14:ed:f2:57:5c:7a:70:
                    60:38:bd:d1:72:55:c2:74:9f:3a:ba:37:ac:99:5a:
                    38:be:3a:a5:3c:ed:d2:72:f3:4b:95:1d:54:b3:d4:
                    05:56:fb:21:31:e0:58:1d:67:82:67:08:bf:eb:c6:
                    6e:a1:8e:61:9e:c6:08:a1:cf:5e:b9:cc:af:a6:b2:
                    cc:cb:9b:46:2d:84:78:71:31:9d:11:40:a8:db:c4:
                    73:bf:a7:02:99:90:01:7c:22:f4:54:96:4d:10:8f:
                    87:fd:6c:94:b7:a5:dd:d1:d9:7a:43:7b:fc:6a:c0:
                    24:0c:a2:97:f0:1f:8e:8c:a7:41:6a:89:09:05:b3:
                    a0:36:86:39:c2:f7:87:0e:08:a7:09:b0:a0:f1:ea:
                    03:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:19:F4:15:58:05:C8:75:BC:22:9A:6D:5B:89:B2:73:36:62:61:C6
            X509v3 Authority Key Identifier:
                keyid:5B:90:55:1E:3C:17:E0:A0:2D:28:D6:DC:A2:79:DB:3E:41:47:F9:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:b3:dc:44:14:7c:14:07:d4:56:ee:f4:09:a8:a3:f6:6a:ca:
         28:6e:b4:85:23:6b:cd:c6:5b:f1:4c:33:8b:e7:85:d6:f9:85:
         48:00:0d:0f:a7:84:0a:49:86:db:9b:14:2a:92:3a:6a:d5:70:
         3d:80:c6:67:0c:19:68:bb:7c:70:41:a3:a7:d6:74:34:8d:cd:
         3b:16:88:cd:5c:fd:4b:07:cd:c5:39:22:4a:7d:07:87:bc:68:
         86:fc:0e:d3:08:54:3c:55:01:c0:2b:4a:f6:d6:84:ce:8a:b8:
         99:8d:a3:49:6c:fb:9e:c8:7e:d1:b9:00:42:90:85:f5:4b:e3:
         17:be:55:c8:29:2d:6d:f5:82:f0:0e:55:f2:73:f8:32:f8:5d:
         a4:2b:37:f4:84:06:71:8e:27:ce:0c:ad:c3:9d:3f:13:48:a4:
         e7:fd:8f:2d:9a:14:8d:60:b2:da:c8:33:23:f0:d3:af:b9:13:
         4f:dd:a4:f1:c4:ee:0d:9d:65:fe:95:cc:d6:1d:a6:d8:a4:7c:
         3f:51:e4:8c:a3:3c:eb:7c:a7:fe:f4:b1:19:89:47:c4:12:c3:
         b4:77:1e:7b:b4:f5:81:e5:9c:98:b6:de:82:50:53:f5:b6:14:
         94:5a:3a:dd:00:c3:93:40:96:32:69:eb:5c:57:77:15:7f:6e:
         06:77:ad:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:38:45 2025 by rpki-client