This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/bebb6f-947a-4eac-85b1-36313c532d04/1/WP-JAjuHwL-Eebn_RyUlhhPk8LU.mft
File:                     WP-JAjuHwL-Eebn_RyUlhhPk8LU.mft (raw, json)
Hash identifier:          I789yKWJhOOLJUn5mNmYvrkRkZtb93RTqfI1AAwHLHA=
Subject key identifier:   7C:8E:C7:58:00:5E:71:51:48:8D:A2:27:4F:FA:F3:09:F3:CE:4D:EE
Authority key identifier: 58:FF:89:02:3B:87:C0:BF:84:79:B9:FF:47:25:25:86:13:E4:F0:B5
Certificate issuer:       /CN=58ff89023b87c0bf8479b9ff4725258613e4f0b5
Certificate serial:       019B394627101FB5FD13FD3D1C936AEDAC7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WP-JAjuHwL-Eebn_RyUlhhPk8LU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/bebb6f-947a-4eac-85b1-36313c532d04/1/WP-JAjuHwL-Eebn_RyUlhhPk8LU.mft
Manifest number:          0CCE
Signing time:             Sat 20 Dec 2025 01:00:57 +0000
Manifest this update:     Sat 20 Dec 2025 01:00:57 +0000
Manifest next update:     Sun 21 Dec 2025 01:00:57 +0000
Files and hashes:         1: WP-JAjuHwL-Eebn_RyUlhhPk8LU.crl (hash: yavNjt/yqjANcOMZfFoRFZ+wEmq/koQpoivrQeU4CmY=)
                          2: Y6SdS7_7cQktx4cR08ZLLgujlqg.roa (hash: 75KZUCkhH+J82qWJFgv8s/z3YIr1qIHL4XhPmP5V+V8=)
                          3: ZHdRHQbq9RdpwxPcagNf8YQQV1I.roa (hash: oqeq1XmqzUbnhfhvQ0hO2K8HUX1JZvHn7wFgkj1mzYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/bebb6f-947a-4eac-85b1-36313c532d04/1/WP-JAjuHwL-Eebn_RyUlhhPk8LU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/bebb6f-947a-4eac-85b1-36313c532d04/1/WP-JAjuHwL-Eebn_RyUlhhPk8LU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WP-JAjuHwL-Eebn_RyUlhhPk8LU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:46:27:10:1f:b5:fd:13:fd:3d:1c:93:6a:ed:ac:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58ff89023b87c0bf8479b9ff4725258613e4f0b5
        Validity
            Not Before: Dec 20 01:00:57 2025 GMT
            Not After : Dec 21 01:00:57 2025 GMT
        Subject: CN=7c8ec758005e7151488da2274ffaf309f3ce4dee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:11:c0:48:c9:b5:23:49:bf:16:38:13:07:6d:
                    1e:60:1f:14:68:54:40:3f:ea:ba:0f:6e:da:82:37:
                    50:55:07:87:68:db:37:f7:28:34:f4:f9:2f:77:2d:
                    cf:fb:8f:ad:14:45:ca:f0:b0:c4:b4:59:21:b3:d4:
                    19:0b:54:d3:c9:b5:65:16:77:07:d5:4b:fb:ef:78:
                    ad:1d:d7:be:f8:33:40:b3:33:fd:45:b6:84:d6:07:
                    ef:5a:f0:36:9a:87:e1:05:a3:89:9e:68:5e:75:25:
                    6f:91:7f:37:89:35:d7:8a:b0:fa:e5:43:00:a4:fb:
                    4b:57:10:21:c8:17:a3:78:b5:c5:3a:0e:b5:ce:2e:
                    b6:06:3b:38:6e:d0:39:dc:1c:e6:b1:13:83:4e:bc:
                    eb:ed:9e:d9:be:dc:00:8a:66:1e:cd:22:53:e1:fc:
                    84:eb:79:7d:e3:c0:ac:9c:f0:2d:6a:ed:6d:bc:14:
                    4e:9a:2e:e0:c3:6d:c2:59:95:1b:fa:38:42:c8:f6:
                    21:a2:8c:5e:36:83:8a:7d:d7:ef:ad:04:9d:b9:63:
                    2b:ff:fe:23:a8:61:2b:a0:61:05:d7:bb:4f:a2:af:
                    22:36:79:48:f1:1f:44:4d:ec:c1:8d:b0:29:26:e5:
                    a8:1e:38:b9:1c:7b:d9:83:7c:fe:fa:47:7e:ef:8b:
                    d0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:8E:C7:58:00:5E:71:51:48:8D:A2:27:4F:FA:F3:09:F3:CE:4D:EE
            X509v3 Authority Key Identifier:
                keyid:58:FF:89:02:3B:87:C0:BF:84:79:B9:FF:47:25:25:86:13:E4:F0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WP-JAjuHwL-Eebn_RyUlhhPk8LU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/bebb6f-947a-4eac-85b1-36313c532d04/1/WP-JAjuHwL-Eebn_RyUlhhPk8LU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/bebb6f-947a-4eac-85b1-36313c532d04/1/WP-JAjuHwL-Eebn_RyUlhhPk8LU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:23:b3:f7:84:db:8e:db:69:97:e4:d1:62:ed:89:6d:4b:0d:
         5e:d9:ae:3e:12:81:d2:85:65:59:0d:68:a8:40:b4:ef:21:2c:
         f7:51:4b:46:f0:f6:8a:d8:81:c0:b8:dc:1d:05:d4:29:d2:13:
         81:57:38:b8:b9:48:58:70:28:8e:ed:1b:dc:16:a1:6c:da:f9:
         9c:61:3f:53:e0:35:75:a8:27:c2:7c:fa:3d:b2:98:88:5c:e0:
         4e:61:ab:1e:81:4e:39:0c:d5:7d:d6:26:03:28:e8:a5:08:90:
         8d:a0:51:b8:62:7c:c0:d0:2a:7b:f1:aa:22:29:c6:9d:c5:64:
         9e:35:4d:46:e1:41:d3:c0:3b:6b:34:91:e4:fb:fc:8d:ef:0b:
         62:5e:6d:7e:78:f8:53:6f:09:b3:9e:d2:a5:e7:25:93:71:d5:
         dd:e4:20:1f:1c:d9:2b:80:c0:31:5a:8a:71:79:44:b0:f9:80:
         14:11:4e:d8:9b:98:33:50:35:ab:78:7d:62:0c:54:e5:ff:69:
         e6:e6:c3:5b:c0:2f:b8:8b:c5:19:b8:07:21:1b:9d:b9:e9:19:
         1f:05:5f:29:71:aa:93:13:a9:98:73:20:15:86:73:60:2d:48:
         a1:00:a3:f2:2e:ab:a6:27:73:41:ff:8e:b2:aa:db:85:09:65:
         bd:a7:a0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:46:15 2025 by rpki-client