This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
File:                     WUlpi7zST8nhqfX0FIbDGvGaS8g.mft (raw, json)
Hash identifier:          0B/cQWKQpaL+J3jhggYHNukg/N/Qn4xFvtMcCfozEA0=
Subject key identifier:   54:66:B0:F3:34:70:20:84:53:7D:3B:36:01:5F:61:72:CB:CA:77:B3
Authority key identifier: 59:49:69:8B:BC:D2:4F:C9:E1:A9:F5:F4:14:86:C3:1A:F1:9A:4B:C8
Certificate issuer:       /CN=5949698bbcd24fc9e1a9f5f41486c31af19a4bc8
Certificate serial:       019B661EB602B70B07B50BC2193C12BC135B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
Manifest number:          179D
Signing time:             Sun 28 Dec 2025 18:00:47 +0000
Manifest this update:     Sun 28 Dec 2025 18:00:47 +0000
Manifest next update:     Mon 29 Dec 2025 18:00:47 +0000
Files and hashes:         1: WUlpi7zST8nhqfX0FIbDGvGaS8g.crl (hash: YET5pSSWBy/OUTH9PLD6ZxXWUosTf1G0fB0dtvf3OOA=)
                          2: vt15ABy3zJP47x5DikC4lY7LNe4.roa (hash: IdpTO09MEQGHcGdgBzndMJHenkqW9uYtr/gnL2zPkrU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Dec 2025 18:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:66:1e:b6:02:b7:0b:07:b5:0b:c2:19:3c:12:bc:13:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5949698bbcd24fc9e1a9f5f41486c31af19a4bc8
        Validity
            Not Before: Dec 28 18:00:47 2025 GMT
            Not After : Dec 29 18:00:47 2025 GMT
        Subject: CN=5466b0f334702084537d3b36015f6172cbca77b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f0:19:68:ce:1e:a6:74:06:ab:46:68:71:63:
                    48:1b:bc:e3:8c:3f:4e:27:1e:85:49:ad:b9:d3:4a:
                    32:7b:72:21:7a:16:c0:18:47:2a:23:71:18:26:bc:
                    d9:b3:26:e6:77:8d:d1:5b:0b:95:62:60:e2:01:8a:
                    f6:19:8c:67:f9:70:5e:59:66:1e:37:10:68:34:b1:
                    77:e0:18:5c:1b:d3:8c:08:d0:bc:81:48:27:d1:8c:
                    4a:a7:9c:ac:19:31:59:8a:6f:96:09:c9:13:f2:b2:
                    d8:4a:03:b8:75:fe:55:f3:58:03:02:70:1c:1d:31:
                    98:97:7a:91:66:ef:22:95:49:fc:10:c6:c9:be:ad:
                    f5:6f:f0:b6:09:b6:68:6f:9d:10:d4:c4:e4:e2:49:
                    a0:19:31:80:59:67:cd:fe:1e:db:c9:0d:10:b3:dd:
                    71:ac:02:17:c8:4c:a9:46:3b:82:e3:75:9b:d4:cc:
                    f7:1e:b8:a7:16:37:c4:97:5a:e7:df:f1:22:f8:d4:
                    eb:7e:1d:c9:71:dc:b0:a3:a9:fd:da:b5:28:be:78:
                    ae:6f:89:4c:fb:e1:78:50:1f:a5:70:3f:6b:59:5c:
                    1b:a1:1e:2b:bc:e0:9f:c5:1a:fb:e9:fc:30:8f:4b:
                    3a:79:bf:2f:96:e2:08:63:76:55:bc:6a:b4:b0:42:
                    37:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:66:B0:F3:34:70:20:84:53:7D:3B:36:01:5F:61:72:CB:CA:77:B3
            X509v3 Authority Key Identifier:
                keyid:59:49:69:8B:BC:D2:4F:C9:E1:A9:F5:F4:14:86:C3:1A:F1:9A:4B:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:77:75:d0:7b:68:fc:fc:65:ee:7c:49:fe:d4:f0:dc:e8:e7:
         4c:2e:5b:89:c1:ec:8f:e4:45:34:75:3c:80:58:33:0c:50:07:
         47:cd:72:da:e7:73:10:33:28:79:3a:49:f1:5d:16:93:3e:d6:
         86:93:33:1e:bf:7c:58:81:b7:2c:eb:e5:60:d7:69:9f:87:11:
         0d:7c:69:a3:20:f2:5b:40:aa:73:00:a5:91:7a:53:a8:31:e6:
         41:07:0c:42:07:dd:f4:07:5f:7e:5e:d1:14:6f:eb:76:e7:a8:
         a3:3a:c7:14:ed:e6:7b:6b:c1:c5:c1:45:f3:7a:1a:d6:ea:23:
         31:f4:88:ee:e3:eb:4f:15:7d:bb:b0:0d:44:95:9d:ee:7b:65:
         af:d9:e9:c4:77:7b:e8:11:84:c9:46:6b:f5:a7:4a:c1:8d:73:
         81:f5:91:5a:a5:47:8f:8c:d4:2d:ce:88:62:3c:71:06:78:48:
         c7:96:25:54:84:4e:81:88:97:14:6a:d4:dc:dd:77:92:45:68:
         40:9d:2e:53:95:4f:1a:c3:01:ce:f7:20:89:bf:1a:1a:02:0c:
         cc:8b:3f:d9:ca:52:15:0a:52:00:59:ed:e1:c6:81:e3:5e:6a:
         7e:c5:d5:0d:21:2d:83:5f:3e:3e:ca:f5:a2:42:e9:9c:cc:f5:
         e2:ac:a3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 23:23:28 2025 by rpki-client