This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
File:                     wessYB-m0HUHlzCB-qEyX-GQsnY.mft (raw, json)
Hash identifier:          bIXJ0k9U4sz2MtEtUVeidArS1yWFtq7EaBSZ5rxnmRQ=
Subject key identifier:   EA:A6:FB:68:EA:CB:3E:02:36:3F:E2:F8:19:36:46:8C:B6:D1:A5:26
Authority key identifier: C1:EB:2C:60:1F:A6:D0:75:07:97:30:81:FA:A1:32:5F:E1:90:B2:76
Certificate issuer:       /CN=c1eb2c601fa6d07507973081faa1325fe190b276
Certificate serial:       019B69C4CD491AB8EE6E3300900D0A3E8C75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
Manifest number:          061C
Signing time:             Mon 29 Dec 2025 11:01:03 +0000
Manifest this update:     Mon 29 Dec 2025 11:01:03 +0000
Manifest next update:     Tue 30 Dec 2025 11:01:03 +0000
Files and hashes:         1: 9VIpFT_uZfwTVVoxe7PNJO0XppE.roa (hash: dBqoAsOTvzrDylULyUsZPwgLS85TPwI2yvXP5iugyTk=)
                          2: v1vDCS3zEydWpnAi830GA_yQEHw.roa (hash: 3xFB/pduxsTBOKVMWYRZZ5LgXgY+cAqxpBeMHy8oimw=)
                          3: wessYB-m0HUHlzCB-qEyX-GQsnY.crl (hash: A09e9GUWvGEbaBAUzMf9BRsfIjw2hwa017IYlao5rkA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Dec 2025 10:15:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:69:c4:cd:49:1a:b8:ee:6e:33:00:90:0d:0a:3e:8c:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1eb2c601fa6d07507973081faa1325fe190b276
        Validity
            Not Before: Dec 29 11:01:03 2025 GMT
            Not After : Dec 30 11:01:03 2025 GMT
        Subject: CN=eaa6fb68eacb3e02363fe2f81936468cb6d1a526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:45:ed:fe:24:80:ea:82:37:13:4b:8e:55:6a:
                    89:e9:d9:9d:ca:e3:e2:9f:6c:7f:90:32:4e:c7:01:
                    d4:31:76:a1:25:bf:1f:87:af:29:2f:f9:0b:9b:db:
                    3a:e1:33:b1:f7:0a:68:ea:21:ce:cc:c4:f5:24:40:
                    51:cd:76:cb:5d:0b:28:a0:75:28:4d:0d:d2:6f:2b:
                    29:e3:68:9f:0a:b6:6d:d5:d7:e4:1b:b3:5d:a0:68:
                    8a:94:7d:90:ab:68:a6:b7:ae:b0:f6:4f:fd:b5:df:
                    1c:41:b6:d5:8b:50:fc:b2:4d:5d:83:ee:0c:36:59:
                    1f:c0:94:82:9a:59:e2:ed:5f:91:bc:74:26:f2:eb:
                    6f:82:9e:23:1e:71:c8:59:86:ea:1c:3a:6f:42:9a:
                    4c:cf:00:92:f1:a6:ae:09:83:40:97:04:60:db:f2:
                    ce:19:74:ec:12:3e:99:23:66:3c:eb:73:45:a5:f4:
                    8a:14:98:67:2b:17:14:7c:59:02:18:67:a0:77:3b:
                    8f:c0:e1:3d:f5:cf:fc:d0:75:98:c2:fb:26:ff:1f:
                    2e:05:dd:c7:d8:fd:90:5a:e5:92:e0:a5:4c:6c:7e:
                    9a:c3:81:42:ad:fd:b9:72:50:ec:a9:83:25:47:5e:
                    a8:a5:29:03:d9:30:b6:96:12:c1:12:6c:49:9c:10:
                    f6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A6:FB:68:EA:CB:3E:02:36:3F:E2:F8:19:36:46:8C:B6:D1:A5:26
            X509v3 Authority Key Identifier:
                keyid:C1:EB:2C:60:1F:A6:D0:75:07:97:30:81:FA:A1:32:5F:E1:90:B2:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:0f:c8:62:50:6a:05:10:08:f6:63:e6:d3:f5:3f:46:8b:af:
         40:3f:6a:56:06:8c:93:54:a9:a6:a9:f4:bc:7c:fb:43:00:16:
         9b:16:42:fe:5c:85:03:e4:ad:33:e5:85:cb:03:dd:d8:8c:ba:
         35:ec:c9:f3:fb:44:b1:d3:f5:8d:aa:81:e9:fe:f9:e6:f2:9c:
         22:4d:8c:8a:47:a6:1a:11:b1:b0:ce:a8:15:be:8e:d6:0e:4f:
         7a:ef:94:d8:f8:f9:c4:2a:5f:08:8b:19:bc:6f:ae:79:95:67:
         b4:8b:27:aa:76:24:2c:f8:d2:f8:c6:b0:2a:13:8b:f0:ca:9a:
         4a:7d:f1:0b:b4:fc:58:69:b2:fe:69:c5:14:0f:34:0b:6e:c3:
         31:1c:00:f6:86:cc:7e:69:a4:3f:bc:13:f9:01:95:18:7f:03:
         34:0f:33:25:c0:3b:7a:41:53:db:cf:48:94:dc:8a:fb:cd:0a:
         c9:35:4d:6b:f3:b0:7f:39:da:33:8b:f5:77:84:03:9a:2a:05:
         f0:e4:bb:5b:4d:2e:58:43:96:38:e2:85:08:8b:5f:4f:fc:a2:
         83:44:f1:25:e3:0e:16:41:25:86:72:ee:7d:19:d0:89:45:ba:
         d8:f2:d1:34:0a:63:ff:21:4d:f8:36:ae:a6:52:59:b1:8a:85:
         4a:36:1e:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtpxM1JGrjubjMAkA0KPox1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZWIyYzYwMWZhNmQwNzUwNzk3MzA4MWZhYTEzMjVmZTE5
MGIyNzYwHhcNMjUxMjI5MTEwMTAzWhcNMjUxMjMwMTEwMTAzWjAzMTEwLwYDVQQD
EyhlYWE2ZmI2OGVhY2IzZTAyMzYzZmUyZjgxOTM2NDY4Y2I2ZDFhNTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEXt/iSA6oI3E0uOVWqJ6dmdyuPi
n2x/kDJOxwHUMXahJb8fh68pL/kLm9s64TOx9wpo6iHOzMT1JEBRzXbLXQsooHUo
TQ3Sbysp42ifCrZt1dfkG7NdoGiKlH2Qq2imt66w9k/9td8cQbbVi1D8sk1dg+4M
NlkfwJSCmlni7V+RvHQm8utvgp4jHnHIWYbqHDpvQppMzwCS8aauCYNAlwRg2/LO
GXTsEj6ZI2Y863NFpfSKFJhnKxcUfFkCGGegdzuPwOE99c/80HWYwvsm/x8uBd3H
2P2QWuWS4KVMbH6aw4FCrf25clDsqYMlR16opSkD2TC2lhLBEmxJnBD22QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqm+2jqyz4CNj/i+Bk2Roy20aUmMB8GA1UdIwQY
MBaAFMHrLGAfptB1B5cwgfqhMl/hkLJ2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2Vzc1lCLW0wSFVIbHpDQi1xRXlYLUdRc25ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81Y2Y0MzEtNGQ1Ny00NTAzLWIyOGEt
OTBlZjdiZGExZGMzLzEvd2Vzc1lCLW0wSFVIbHpDQi1xRXlYLUdRc25ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC81Y2Y0MzEtNGQ1Ny00NTAzLWIyOGEtOTBlZjdiZGExZGMz
LzEvd2Vzc1lCLW0wSFVIbHpDQi1xRXlYLUdRc25ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGQ/IYlBq
BRAI9mPm0/U/RouvQD9qVgaMk1Sppqn0vHz7QwAWmxZC/lyFA+StM+WFywPd2Iy6
NezJ8/tEsdP1jaqB6f755vKcIk2MikemGhGxsM6oFb6O1g5Peu+U2Pj5xCpfCIsZ
vG+ueZVntIsnqnYkLPjS+MawKhOL8MqaSn3xC7T8WGmy/mnFFA80C27DMRwA9obM
fmmkP7wT+QGVGH8DNA8zJcA7ekFT289IlNyK+80KyTVNa/OwfznaM4v1d4QDmioF
8OS7W00uWEOWOOKFCItfT/yig0TxJeMOFkElhnLufRnQiUW62PLRNApj/yFN+Dau
plJZsYqFSjYetw==
-----END CERTIFICATE-----
Generated at Mon Dec 29 14:41:47 2025 by rpki-client