This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft
File:                     WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft (raw, json)
Hash identifier:          yzM5CAWzLIfGx4ijgQpSeMWZ27P/aRcsM1vf+9xTOPk=
Subject key identifier:   BA:FA:AE:39:0D:07:6C:EF:87:36:68:ED:DB:96:22:A1:9E:8F:63:EE
Authority key identifier: 5A:94:C4:BC:4D:25:63:E2:52:EB:FC:C0:FB:C2:AC:19:9C:CE:60:8A
Certificate issuer:       /CN=5a94c4bc4d2563e252ebfcc0fbc2ac199cce608a
Certificate serial:       019B3C104325E9E470B885E35545A759BD55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft
Manifest number:          178F
Signing time:             Sat 20 Dec 2025 14:00:57 +0000
Manifest this update:     Sat 20 Dec 2025 14:00:57 +0000
Manifest next update:     Sun 21 Dec 2025 14:00:57 +0000
Files and hashes:         1: 9fwoj_X2tHpCghfejRb6ra1gTZc.roa (hash: VcsRDD+GofeQD9oKWI4zahEGiyHHMwhCi+kgIO2Xtcs=)
                          2: DLcmVggPxlYicd1UJ74OUmjpAhM.roa (hash: Znonzij//XWf2yzkuH8Mh75Es0bpLodvR5ACxP5Yyz8=)
                          3: WpTEvE0lY-JS6_zA-8KsGZzOYIo.crl (hash: rn4gcajCJLudTCcs40dl+hMM4/7+DbaH0JMcBT/9d+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:10:43:25:e9:e4:70:b8:85:e3:55:45:a7:59:bd:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a94c4bc4d2563e252ebfcc0fbc2ac199cce608a
        Validity
            Not Before: Dec 20 14:00:57 2025 GMT
            Not After : Dec 21 14:00:57 2025 GMT
        Subject: CN=bafaae390d076cef873668eddb9622a19e8f63ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:f4:54:f8:54:e5:05:66:d3:75:f3:88:44:01:
                    79:08:dc:6f:5e:17:0f:f6:35:0c:a9:da:78:18:91:
                    8b:f2:03:19:38:fa:b3:69:64:55:5c:30:e4:7f:cd:
                    41:c5:10:be:bc:a4:51:1b:43:2a:4d:80:8e:2a:3a:
                    5d:e7:de:d2:cb:6d:ba:cf:f3:a8:4d:c3:72:97:95:
                    58:a6:84:5d:88:05:8d:8c:95:a2:b0:82:8e:64:f5:
                    bd:0d:75:6c:c2:e4:99:b7:6d:ed:63:15:f2:9f:c5:
                    84:90:ee:ce:58:52:4c:19:2f:3f:e8:a6:32:b4:b9:
                    25:2f:72:ed:67:e4:74:0e:55:0a:0f:23:4c:7c:db:
                    04:b9:59:05:b6:6b:3a:eb:21:a2:29:ab:56:5f:fe:
                    3d:d3:94:b1:64:e0:86:02:f4:2f:a2:a9:f4:7a:84:
                    96:47:bf:67:45:4d:5e:3e:80:b7:54:63:5a:6e:c5:
                    ad:4a:62:28:1f:5c:95:d0:c2:48:a4:a8:3c:ac:8d:
                    46:a1:f3:3f:3a:a2:72:be:47:c9:a8:ea:5d:0e:6c:
                    19:7c:34:17:91:fb:62:91:3a:e7:9a:24:90:98:fc:
                    bc:c6:91:f2:a5:05:52:8c:ae:7b:50:f1:27:60:2c:
                    01:f9:c2:ce:4b:45:52:b3:da:8b:1c:4e:68:0b:dc:
                    97:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FA:AE:39:0D:07:6C:EF:87:36:68:ED:DB:96:22:A1:9E:8F:63:EE
            X509v3 Authority Key Identifier:
                keyid:5A:94:C4:BC:4D:25:63:E2:52:EB:FC:C0:FB:C2:AC:19:9C:CE:60:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:21:c9:4f:ca:42:76:e2:46:e1:53:34:8c:ff:c8:4d:a5:0c:
         45:e5:92:06:0a:6d:b6:7a:c1:21:66:3e:54:16:15:10:f8:58:
         eb:b1:35:61:8b:b1:34:70:08:bf:b0:6b:5f:b4:98:61:db:d8:
         03:8d:f9:9e:2d:67:8a:6e:cf:66:cc:6f:b3:ac:e2:1b:f1:53:
         20:3e:ac:0f:93:25:e5:a3:44:7a:89:5e:f6:05:47:d2:5f:f0:
         09:56:57:b6:73:49:98:06:92:f1:96:86:d9:a9:f5:92:3b:db:
         73:35:61:ff:48:52:dc:01:4d:0e:c5:17:46:42:44:10:f1:98:
         66:5b:82:40:8a:b2:39:8c:29:00:97:c6:99:02:0a:06:21:a7:
         f2:f6:4b:3b:91:2d:08:75:74:a5:05:31:e4:a7:93:a8:49:c3:
         7c:34:77:26:6b:2b:21:83:e8:de:8b:a8:9e:76:ea:ca:24:4e:
         91:a9:90:5f:be:40:57:e8:32:1d:e5:d8:96:42:82:9c:9e:15:
         7a:84:ed:58:99:19:e9:60:22:e1:54:8c:8f:41:44:d3:28:d5:
         1a:ad:6b:94:4a:b7:eb:e0:3f:80:ac:f8:75:f2:66:28:d6:81:
         a2:05:44:c7:ac:61:3c:67:3d:c2:f4:68:ba:5a:f4:18:eb:e3:
         81:8e:e3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:16:24 2025 by rpki-client