This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
File:                     WGesaYXMCz_qIWlFyS6y6TIYlAM.mft (raw, json)
Hash identifier:          1RcvP20mrCRKmyibd2leV96EWUWGb+rcGJPY5ALSlvU=
Subject key identifier:   74:D1:34:19:52:BD:9B:BA:C3:62:3A:69:7C:20:BD:77:95:6B:FD:26
Authority key identifier: 58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03
Certificate issuer:       /CN=5867ac6985cc0b3fea216945c92eb2e932189403
Certificate serial:       019B39465DD6240A3F7C6124F71C5E652592
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
Manifest number:          0965
Signing time:             Sat 20 Dec 2025 01:01:11 +0000
Manifest this update:     Sat 20 Dec 2025 01:01:11 +0000
Manifest next update:     Sun 21 Dec 2025 01:01:11 +0000
Files and hashes:         1: WGesaYXMCz_qIWlFyS6y6TIYlAM.crl (hash: CZdLhdFjReW6e9MGcUqzCXkboCHrTAzKvrhOlzjmVws=)
                          2: bnhhztuxFibvur8FNpe0Q4uP7wo.roa (hash: KQsITvPg/PJVER0mAbZoTouNCOSRyBSHFqtg7Z3silI=)
                          3: hPuuxvG6wf_iyGajLZm0PrPRNTE.roa (hash: SqhFWrnGhewNDVxVRZLbY/mjVnrnZ6zHK448/hSwl8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:46:5d:d6:24:0a:3f:7c:61:24:f7:1c:5e:65:25:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5867ac6985cc0b3fea216945c92eb2e932189403
        Validity
            Not Before: Dec 20 01:01:11 2025 GMT
            Not After : Dec 21 01:01:11 2025 GMT
        Subject: CN=74d1341952bd9bbac3623a697c20bd77956bfd26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d6:9f:11:a3:0a:b4:4a:c6:dc:2b:97:0e:85:
                    9e:21:ef:e2:ba:33:49:8f:bb:63:3c:84:a8:dd:af:
                    9b:54:76:01:cf:e1:ad:ab:dd:41:e6:d7:10:17:0f:
                    ef:eb:de:f9:66:9b:54:e6:00:62:fc:9b:37:1f:30:
                    ac:94:eb:53:52:c2:ba:ac:b6:2e:d7:14:0a:03:e2:
                    9a:7a:30:d4:d1:f6:b3:92:1f:03:c6:0c:45:a4:96:
                    87:af:da:af:4a:af:f1:97:3b:71:1e:e5:65:e3:db:
                    c9:43:f7:ba:3d:27:9e:36:1c:1a:a5:31:40:e8:b3:
                    8a:e5:34:a3:c8:92:3b:c9:47:46:db:cf:74:ca:9b:
                    d4:fb:17:01:fc:31:57:85:af:cf:1b:d2:43:10:4d:
                    93:d8:27:4e:84:d1:c3:08:bb:50:bb:1d:b5:cc:22:
                    3c:2b:e1:b9:bd:72:2f:27:fc:93:b9:42:cb:d6:dc:
                    02:1d:11:1a:ac:cf:91:e7:4f:dd:d8:39:61:f2:a9:
                    96:81:e2:fc:8d:7c:8f:56:a0:0d:8c:35:9a:7f:28:
                    0a:a3:89:c5:7d:cf:8d:a9:ad:c7:7a:02:52:ff:40:
                    2c:1b:17:55:16:1c:a3:8f:21:cb:64:e1:7c:17:53:
                    72:42:b9:82:0b:b5:57:0b:e1:e2:83:d2:b1:4e:b3:
                    68:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D1:34:19:52:BD:9B:BA:C3:62:3A:69:7C:20:BD:77:95:6B:FD:26
            X509v3 Authority Key Identifier:
                keyid:58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:51:92:f7:2e:b8:31:57:8d:c0:6e:99:90:5b:db:f6:ce:83:
         5a:a6:c2:c5:d8:18:01:2e:25:ac:01:15:34:60:1f:27:c5:83:
         89:ce:4b:17:4a:5a:e1:cf:4e:47:30:76:05:4a:de:cd:62:8d:
         a1:ec:81:73:05:9f:cb:f7:02:05:c8:58:48:71:43:d0:59:41:
         9d:e5:9b:11:51:10:01:0a:cc:a6:f8:78:5b:9f:23:d5:3a:e7:
         91:40:fe:ca:02:9c:99:c5:b2:27:ab:ca:ad:c8:59:87:fd:43:
         d7:2e:ba:40:b3:0f:9a:f1:c2:95:83:5a:e0:f1:6f:8e:d0:10:
         61:fa:f5:c2:a5:8b:af:c1:f8:1c:27:bb:a9:eb:6d:51:3f:26:
         69:b2:a4:8d:0a:d9:15:3e:8a:aa:70:fb:f9:be:8d:9d:9d:6d:
         14:bc:38:e9:dd:97:f7:4d:e2:3d:86:cf:eb:e6:b2:ed:b1:0f:
         15:30:aa:aa:0c:0d:06:49:7f:22:a0:1b:20:35:46:01:89:2f:
         d4:33:81:92:1f:5f:00:f5:f2:62:23:57:23:b3:de:8c:7f:9d:
         78:3e:88:25:bf:1b:61:53:b4:e2:cd:d7:51:71:96:53:0a:21:
         e1:3b:88:7c:5a:0b:e8:b3:83:b1:6d:bc:86:00:e1:77:6e:34:
         03:56:85:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:31:07 2025 by rpki-client