This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f9f131-2ded-4754-884c-c9a80f53fc0e/1/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.mft
File:                     WMPEO0RMqDXMdvTEw8Y5dS7Rqns.mft (raw, json)
Hash identifier:          +UJI7kXD4JePhF/FMjcD9H4dCa8L+BYh9U7bBJocmqk=
Subject key identifier:   0B:A3:68:EC:A8:3B:2A:5C:67:0B:61:67:0B:8E:4A:92:97:D4:8B:80
Authority key identifier: 58:C3:C4:3B:44:4C:A8:35:CC:76:F4:C4:C3:C6:39:75:2E:D1:AA:7B
Certificate issuer:       /CN=58c3c43b444ca835cc76f4c4c3c639752ed1aa7b
Certificate serial:       019B3532BF464E2F6EE09AE2E63FBCEBE4FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/f9f131-2ded-4754-884c-c9a80f53fc0e/1/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.mft
Manifest number:          049D
Signing time:             Fri 19 Dec 2025 06:01:16 +0000
Manifest this update:     Fri 19 Dec 2025 06:01:16 +0000
Manifest next update:     Sat 20 Dec 2025 06:01:16 +0000
Files and hashes:         1: WMPEO0RMqDXMdvTEw8Y5dS7Rqns.crl (hash: fz8p8KF+4HAV95OfXFW90aJnkMnFKIT3imO08B4Ofhg=)
                          2: Z2JDU3PNXto61tujLWtOdksDxYw.roa (hash: XDiLVtUbcUm1U7CtOsqMZFEyrN50eh3zLLtFQ3J984U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/f9f131-2ded-4754-884c-c9a80f53fc0e/1/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/f9f131-2ded-4754-884c-c9a80f53fc0e/1/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 06:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:35:32:bf:46:4e:2f:6e:e0:9a:e2:e6:3f:bc:eb:e4:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58c3c43b444ca835cc76f4c4c3c639752ed1aa7b
        Validity
            Not Before: Dec 19 06:01:16 2025 GMT
            Not After : Dec 20 06:01:16 2025 GMT
        Subject: CN=0ba368eca83b2a5c670b61670b8e4a9297d48b80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d1:b6:2c:f5:df:b7:eb:2f:f0:03:3f:46:5f:
                    94:c3:7c:49:bc:c8:ef:72:01:ed:83:75:6a:c7:dc:
                    cd:df:de:73:38:e5:59:cb:32:32:f4:41:f0:ab:b8:
                    a2:f0:98:07:7e:19:57:16:8d:27:ad:4b:e0:fd:1b:
                    98:53:79:9f:5a:96:de:c5:35:40:ec:9d:5b:a5:26:
                    b5:7f:4d:4d:78:2a:5d:10:a3:13:6a:fd:b2:19:3c:
                    c3:8b:47:dc:3a:6b:52:4f:e7:18:c1:ed:41:83:4e:
                    fa:ec:6c:fa:d9:76:9b:bf:39:3e:b5:0c:10:e4:da:
                    c3:d1:9a:7b:16:31:69:bc:b6:a0:87:b1:72:17:02:
                    13:59:6c:6a:1a:ea:f4:46:ba:d9:ae:48:8c:3b:00:
                    17:d4:71:68:13:83:89:1f:e3:96:ca:3c:88:64:15:
                    ab:43:3b:bd:9e:f4:2a:0c:67:78:bb:1c:c9:37:a7:
                    83:f9:78:10:ad:5d:b2:3f:45:73:19:55:d5:7d:46:
                    65:27:de:d9:f3:f8:f5:4c:29:27:40:4f:f4:29:f7:
                    57:77:9a:8c:ee:66:27:44:d7:e6:4a:81:a2:20:ed:
                    d0:37:22:ec:91:e4:e5:d4:15:b7:2e:cf:84:e5:07:
                    3c:87:8f:c3:52:77:4f:68:d5:7d:be:bf:4d:f2:22:
                    f9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A3:68:EC:A8:3B:2A:5C:67:0B:61:67:0B:8E:4A:92:97:D4:8B:80
            X509v3 Authority Key Identifier:
                keyid:58:C3:C4:3B:44:4C:A8:35:CC:76:F4:C4:C3:C6:39:75:2E:D1:AA:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f9f131-2ded-4754-884c-c9a80f53fc0e/1/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f9f131-2ded-4754-884c-c9a80f53fc0e/1/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:36:4b:de:9b:62:0d:53:df:f3:a1:4a:5a:5a:88:e8:1e:c7:
         3c:fe:ba:0d:0f:81:cc:81:c3:d6:65:8a:a2:82:91:bd:cb:e4:
         cc:02:d2:a2:e2:b8:2a:4b:c4:62:a6:b0:36:32:36:de:0f:ea:
         78:28:87:56:1c:4b:5d:60:d9:03:09:a6:43:71:b7:4d:c4:77:
         7b:8a:6d:14:22:78:ed:96:ef:b3:ea:17:a2:30:20:9a:b0:b5:
         5d:6d:cd:b3:e0:1f:bd:a4:44:9a:41:62:10:c9:da:de:5a:2c:
         2a:d8:c4:4a:bd:73:92:97:1a:22:a3:cb:a8:2a:2e:d6:16:10:
         98:cf:57:7d:e4:e5:15:a7:ac:21:d6:90:26:50:f3:da:1a:b4:
         9a:b5:34:ee:8d:83:f0:f1:85:58:ef:af:d6:d9:bd:40:41:eb:
         da:c5:49:ce:2a:9e:b6:de:1c:0c:b6:43:d7:87:d7:57:08:a6:
         09:e1:24:1e:aa:01:40:45:0f:4c:5f:1e:9a:8a:dd:54:c7:7d:
         12:fc:dd:2b:38:ab:b5:d5:a2:08:52:d8:b4:d3:63:c1:94:a0:
         9f:a9:0e:31:3b:6d:78:b5:0f:18:cc:b4:32:55:e9:a0:92:b9:
         59:10:f7:22:4d:50:f2:78:13:ab:9f:13:6c:17:3a:e7:9a:00:
         ca:68:54:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:59:09 2025 by rpki-client