This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
File:                     wOVJ_c7rApEsiodByBaAa74ZxEg.mft (raw, json)
Hash identifier:          tRDJH1d1XsQEflX5PRqq8D6HCp9AAe/Z0AcHBcmXtlg=
Subject key identifier:   D5:AB:FF:D9:DE:95:42:37:7A:FB:2F:EC:05:55:3A:2A:53:29:CF:F2
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Certificate issuer:       /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial:       019B2F671A86A1D3DAD9A3FB6B1A746DBB93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
Manifest number:          0C2F
Signing time:             Thu 18 Dec 2025 03:00:44 +0000
Manifest this update:     Thu 18 Dec 2025 03:00:44 +0000
Manifest next update:     Fri 19 Dec 2025 03:00:44 +0000
Files and hashes:         1: 3O-D3rX4CFCdAkLP-WafPBWg7LI.roa (hash: ZjKqIVEFVR9cfjOaAvV16cE3fi3JRCek3PrT1Bdh+pE=)
                          2: 92v4gOX7Hd4VpBM47MNWwQITmiQ.roa (hash: IYC56kc9QpO1Lz7tXp5PsrYKm5wg9hGG4hbFTisgloQ=)
                          3: BJ6lsg-DXRJALTpWPFS2koaTAyY.roa (hash: IiHbLMYyBvv8idUUWBs1VcBi/2+qrySt01qtestuj3U=)
                          4: DO5idF7JefFWyUYzkZhYwCuZL6c.roa (hash: AJ1wLkAbsKPjn/aeUEI+0wqiFAaro9i62bH223sEeJk=)
                          5: YxVBGHzpZ098_zTBEpObTl9p4Eg.roa (hash: JesGckTpDCNMKUvtvdV1ogwXfe3HeaDGJnDqvGhYCXo=)
                          6: aF1yx_YEkb4qte3WK4cEGVa4EaM.roa (hash: TFXwtunVP236lozfleJ3EGHJe+mWp3dn3FUFV/gu6fM=)
                          7: iDdiLh5kCcnVhEcS17XeyUklRpU.roa (hash: vH9FgKr3O/PWH1F99+7VS2TIiEwAAU+Q3wu4ESVAvX4=)
                          8: lb8SvljV7v-gn9cpNcy7VFlIW4U.roa (hash: TMosDmxteJN205Un1BL0SVx3OHQURc2E5+W3ttZ+rDY=)
                          9: qkGOcb9ML1ScPc6ocdkEc-fJdPo.roa (hash: rOYR9Hc2I/xQX5WTMTMX9NryWoJMfSMzeGQ9FnM3vXE=)
                          10: v4giAVOJMEch9tYcozCGJgelH1M.roa (hash: OUMy4ShdW4gTpBY9LdojzedOmb/sODuZT4FZY1l2uCM=)
                          11: wOVJ_c7rApEsiodByBaAa74ZxEg.crl (hash: a+SJk4nwAsQIVpahwepR1IAKdf8a6jLGDOgT49K5kv4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 03:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2f:67:1a:86:a1:d3:da:d9:a3:fb:6b:1a:74:6d:bb:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
        Validity
            Not Before: Dec 18 03:00:44 2025 GMT
            Not After : Dec 19 03:00:44 2025 GMT
        Subject: CN=d5abffd9de9542377afb2fec05553a2a5329cff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2e:75:e6:df:32:d7:06:f2:97:23:49:b9:12:
                    b0:d1:8b:c6:4f:3f:c2:20:55:79:39:7a:44:62:4a:
                    41:b9:d4:61:b2:0a:fd:30:0b:c6:58:dc:3f:c4:64:
                    2d:54:c8:61:ab:49:b3:0a:28:81:31:41:aa:99:95:
                    b1:11:d2:73:59:23:ed:16:69:1b:23:b3:ae:57:72:
                    9a:6b:75:4f:9b:63:4c:70:01:99:2e:47:a1:6f:e3:
                    69:10:a0:e2:c4:3d:c2:c3:4e:31:c5:cd:b5:72:26:
                    a1:44:45:79:2f:6f:4c:11:38:c9:a8:16:09:cf:7f:
                    3e:dd:51:84:98:e7:45:66:22:96:a1:93:35:12:32:
                    4b:18:5b:76:09:3b:d8:a3:6b:02:c0:34:6d:02:ad:
                    b0:ed:a0:c8:68:1e:8e:c6:f1:58:3f:b3:de:24:e4:
                    9d:3d:81:18:6b:1a:02:32:15:d3:59:d8:2e:ea:55:
                    7a:2c:20:08:b3:ae:f2:f5:19:79:af:f5:7e:5a:9f:
                    d2:d6:b8:e9:91:3d:62:c9:80:77:79:72:8a:b5:bd:
                    72:6b:de:29:c6:61:47:f3:cf:84:23:41:d6:6c:c9:
                    52:68:75:ab:58:a8:d1:a1:09:f4:b8:e1:7f:4a:f6:
                    63:73:a0:50:bf:ce:14:65:72:5f:49:d2:7e:fa:e9:
                    83:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:AB:FF:D9:DE:95:42:37:7A:FB:2F:EC:05:55:3A:2A:53:29:CF:F2
            X509v3 Authority Key Identifier:
                keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:4d:ac:12:8f:61:88:94:a0:da:99:1d:ec:cf:b1:5f:51:69:
         19:95:30:af:6e:3a:14:c4:61:25:a5:e1:b7:07:aa:a1:4a:69:
         4e:e3:24:d1:48:e7:97:d2:69:35:e9:40:12:c1:ea:be:99:9c:
         d0:7a:bd:86:09:9d:69:78:db:26:de:08:61:e5:21:ea:42:18:
         7c:92:fa:98:09:8b:18:96:98:bb:1c:9b:17:df:56:24:38:ec:
         81:ef:6a:16:31:b8:37:bc:50:11:4d:6e:14:83:96:ae:8b:01:
         c9:3e:ba:14:5e:16:b0:b3:e3:40:94:06:a8:54:1e:56:54:00:
         c6:fd:11:39:19:68:5f:bb:24:53:07:e4:ff:27:aa:29:45:6a:
         05:c7:1b:cb:15:a0:9c:bb:59:8a:1d:19:b2:df:07:57:82:2a:
         fb:84:7c:97:d3:62:41:e5:66:50:f5:60:3f:53:e6:b0:2b:69:
         f5:0e:49:09:99:be:1d:13:af:f6:38:0e:20:f2:c8:84:81:08:
         f7:17:fe:9a:93:c2:6f:99:5c:45:d5:01:a6:8a:a7:03:9a:03:
         44:72:7e:0c:57:49:7c:ed:b7:7e:a9:07:ba:b1:78:6c:93:bc:
         dc:5f:b4:3c:94:bb:7b:a8:ff:7c:8c:c5:cd:68:5a:7e:4d:a7:
         78:ac:0e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 11:55:27 2025 by rpki-client