This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
File:                     wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft (raw, json)
Hash identifier:          P6xcjdVYJs54UyMLuGCsm81XGCgGD+n5hfi5NtccrPs=
Subject key identifier:   A2:85:56:2C:77:32:47:2C:EC:6F:25:88:E3:54:EA:A8:91:81:46:69
Authority key identifier: C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
Certificate issuer:       /CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Certificate serial:       019B5229EA85D11FB7A46746ACC228F8BAB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
Manifest number:          179E
Signing time:             Wed 24 Dec 2025 21:00:37 +0000
Manifest this update:     Wed 24 Dec 2025 21:00:37 +0000
Manifest next update:     Thu 25 Dec 2025 21:00:37 +0000
Files and hashes:         1: DIDvdbb3GKHM4R0fThp87ONTKIg.roa (hash: PpLadHjUjIbh3z8TdW7x9p2zKoB60tTFsLSNrfKJGP0=)
                          2: NiiYntce0l2g8rM0crSiQd9ju9Q.roa (hash: dXNA4zFEqgeMGWVbP7xCDHL9Yv22/YkYEyRq1Xgq0Qk=)
                          3: TKLzQ3aUn5r9wRqdWWY_X3np5Nw.roa (hash: FHEE5b54dYwOgG8q4mFeJQWJCBG47+yi4U4T7p61+TU=)
                          4: UwTNWro9evVq9A2tmjUi9EC7e1U.roa (hash: blbaLMvxLnOeS1jYks60LVjVa40KZBXbFkM1K6NYTsw=)
                          5: YD46-wu1gX9Rfc3-h0IJxr5M_6I.roa (hash: eydJEhyuH7mmIcl4Z67qIv5vGkaTb2dD7M7gIFncDbg=)
                          6: awX-yLV9QhTtYIRH8dzM3NZ-YyE.roa (hash: cUBeWKNk+8N9DHilcnVglMXRUVzQzFqcjW7BKF+It/4=)
                          7: hXz87hx_B-hbL3xb1XWOpeq_ghU.roa (hash: qgegZ0Q4MVtx4Pfhi+QnSP0PfWput13BxQSPM+9zyGM=)
                          8: nGG-OUODAxwLxi6jNHbpt8RGNb8.roa (hash: CE5MyGR9lb1V5N4ocRK2ocMWINjBM6Y8ecSTUiTujPU=)
                          9: wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl (hash: /lFii83pb39FAGxvywPh9J7UHCpU4Q1ZiIQPUGM5Vb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Dec 2025 18:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:52:29:ea:85:d1:1f:b7:a4:67:46:ac:c2:28:f8:ba:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
        Validity
            Not Before: Dec 24 21:00:37 2025 GMT
            Not After : Dec 25 21:00:37 2025 GMT
        Subject: CN=a285562c7732472cec6f2588e354eaa891814669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bb:19:f6:97:dd:f7:ea:17:dc:19:9b:2b:a7:
                    66:16:98:a3:76:01:f5:b8:ae:65:d8:f8:68:df:08:
                    f1:b5:45:a2:95:e2:20:36:1d:00:d3:07:5b:25:58:
                    8b:aa:8d:ed:37:9a:6a:0c:bc:92:d1:ac:19:0a:de:
                    ca:e8:8c:bc:bf:a6:fd:55:78:1a:f3:ad:93:1c:a8:
                    38:af:8e:e1:f1:12:11:4a:7c:64:d4:52:11:72:ac:
                    b2:2c:a5:0a:ec:43:ab:9d:40:20:46:32:39:84:4d:
                    c0:64:e6:bb:b3:a0:e9:90:2f:8a:a4:7d:e6:25:32:
                    fc:f9:eb:b2:42:64:69:d9:1a:a2:b5:da:e1:d3:a9:
                    d6:e3:8c:70:e1:6e:be:5c:84:4b:a7:d7:b8:55:1d:
                    4e:76:2b:9a:42:9c:68:cf:eb:29:60:22:be:c0:92:
                    f0:70:10:35:e8:5a:47:ed:49:9f:74:a0:19:c7:d3:
                    77:9b:e5:a4:b2:ba:75:05:9c:e3:7b:7f:75:36:7c:
                    70:6e:6d:c0:c2:44:b0:db:31:50:55:18:76:35:bf:
                    48:9a:9f:43:08:ea:dd:b2:a6:ac:69:d1:8e:ad:ff:
                    31:29:35:2a:c9:1d:16:10:b7:23:bb:84:09:9c:a2:
                    b8:8b:d3:cf:f7:c1:ba:04:b4:3b:9c:49:ba:f9:82:
                    ea:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:85:56:2C:77:32:47:2C:EC:6F:25:88:E3:54:EA:A8:91:81:46:69
            X509v3 Authority Key Identifier:
                keyid:C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:06:6a:2b:9c:b9:85:6e:8a:7f:ef:18:d1:c9:82:40:1f:d9:
         f4:5a:b0:52:9e:e4:fb:52:5e:24:8b:e3:fe:1a:7e:9c:9d:c2:
         a3:61:f1:fc:7a:f0:cd:6c:88:1c:c8:11:14:36:4f:c1:7d:2b:
         92:6a:be:71:56:90:22:05:2e:70:b1:ce:38:7a:41:18:c7:2d:
         ee:52:3e:1c:20:74:b2:fc:ff:93:6a:ba:a4:f5:66:e9:c1:21:
         4b:c2:2d:a5:ba:3f:73:ef:4d:21:3f:74:5c:53:43:23:ca:55:
         cf:35:09:fe:13:00:ec:8a:08:cd:cf:53:c4:e1:b7:7f:b8:a7:
         f3:fb:0b:fb:d2:14:69:35:52:51:49:0a:e3:8e:2b:e9:75:85:
         fd:33:ae:90:87:b7:e3:9d:f5:24:3b:48:58:3e:61:17:c8:56:
         88:fe:fe:38:a6:77:82:60:f8:7f:3e:11:03:af:f2:06:44:e1:
         f0:e6:7c:b2:8c:85:51:a1:bc:e0:0d:fc:b2:0f:24:4e:44:11:
         4b:fd:55:34:35:a0:99:02:ad:16:c3:2c:9c:e7:eb:b6:c1:d2:
         80:0f:91:47:22:66:10:91:f0:c4:9e:bb:6c:25:7a:d5:e8:b8:
         63:9d:5c:6e:bd:d3:3b:ec:99:0e:8a:46:cb:6d:93:35:78:64:
         32:7c:b5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 04:32:59 2025 by rpki-client