This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft
File:                     w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft (raw, json)
Hash identifier:          9XbQ2pMoRMH3WSBLbzB/6Z+lnAGJGy2KP+6f3p2Z/RM=
Subject key identifier:   69:3E:84:AB:E8:2A:FA:9E:40:F8:E0:D9:9B:A5:B8:62:F9:C9:38:2E
Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
Certificate issuer:       /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Certificate serial:       019B39EAB80F64F4366BE5B41A413A71BEC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft
Manifest number:          17BB
Signing time:             Sat 20 Dec 2025 04:00:42 +0000
Manifest this update:     Sat 20 Dec 2025 04:00:42 +0000
Manifest next update:     Sun 21 Dec 2025 04:00:42 +0000
Files and hashes:         1: 2JhXptnvhueVQmeHn25cz0kurHI.roa (hash: 8SozpyusIiaDiWUG+p4VEYgVUXO18QzNYiLErT92LEQ=)
                          2: 4UNuayKJ9SKFMuYEY-BWSB61PDo.roa (hash: VdmvXseDtE+yEFHvon3CqWBkcnp2a6Fyr5Xk6vQjKrA=)
                          3: 95EMcqjIsM9QeVWiI1F103-6l7Y.roa (hash: gu1FSS8hVzJF6G+fxoX4QZ/buhSiBu7AZC9ypB19V18=)
                          4: AOHo_zNkn17jUlogxpO30pi4vZk.roa (hash: +QPjJA3N7ss0yCIwrgcDQ/5UO7ASRz1q9sJuFdAbQnM=)
                          5: FC18L6lC5yaJe6exeGTUDqFYlIo.roa (hash: GydOuNkxodWdIUJZgEfyA03NGxGVxZmhiSQz6U5MpVU=)
                          6: R7hZWRZrAnJei2iE6wt7eIe4FZk.roa (hash: t2Z1XiCtqv1iQqmj18uapS137l9O9IhR3Vr8NcgP36M=)
                          7: TjCkJR8qj6olugjRfD8NHtt3pZQ.roa (hash: qhX3u+/8KbHWKUW3NatWO53LfU8WF9QKEMeAjJDe1Jc=)
                          8: WUkxlhH37biDOoJr2RmTg4NVgCE.roa (hash: zDj3jnhLIpXSjiKUFMHy4i1gCMbtJWvBoUe2dg1Y+M8=)
                          9: YVr0AF2c3KiDV-SjuPftS3CnSqY.roa (hash: ArqLxgm2U8vUhD9/kr3eJUcwEOkYGBgAWgDslpkJKrw=)
                          10: _j08j-2FDwC68rueaFbBqi1fpuA.roa (hash: qxS+XcpGtA2PtYARd7lBLLnmeCdljjuwyVVXC8rvxSU=)
                          11: hOu0RIEKB2ppqE90CKomzj_fPaU.roa (hash: 5puJ0YRx40NGpD/EpFU4mHjPixkjg4PxMixsFx+pf6M=)
                          12: jyuHoIpvGivbz5mzbJp3o-Fm4XE.roa (hash: L8QWmw7gSLTV6VDNnAdLsuvANJDNKaAv8M2I7z7lbPU=)
                          13: qs9auAFh2pBR3JizXaVl9ahPIZw.roa (hash: rWVPduWCAoKm2gglbIKEXbvoDR4rX+//s9Ke5NqI9jo=)
                          14: rC_bTep_k2W1swG7Jm4biitFHA4.roa (hash: Sbe+qsJH965cmbXMZY6OWU+P7tgNGwOdhieuhSBvccc=)
                          15: v8zUsRBNwECEAu2aOUDthF32Ldc.roa (hash: EgwEm0mHHZuzyt4EgzWtyJchZ9xyGDbUPpYJISyJCnY=)
                          16: w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl (hash: CwF/vhWVw1+0m8W5A9GZ+3QYVEoyPR3fQLMJVipVJy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:ea:b8:0f:64:f4:36:6b:e5:b4:1a:41:3a:71:be:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
        Validity
            Not Before: Dec 20 04:00:42 2025 GMT
            Not After : Dec 21 04:00:42 2025 GMT
        Subject: CN=693e84abe82afa9e40f8e0d99ba5b862f9c9382e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7e:0a:c7:b0:8f:39:55:f8:aa:11:7e:0d:c4:
                    61:cd:f0:16:0f:a2:11:cc:96:40:ce:cb:db:3d:de:
                    52:01:4f:45:0a:49:4a:6e:48:52:21:60:b3:e0:ce:
                    39:ad:1b:f7:ee:ba:70:3e:51:45:f4:fc:a4:ba:97:
                    de:93:90:46:4d:93:b8:46:d2:dc:c5:86:63:dd:bf:
                    2d:45:2a:d4:d1:4b:e4:f3:c6:dd:91:ab:49:3b:f1:
                    6a:84:e6:1e:7e:1f:e3:04:b8:ca:a0:ea:2d:d7:1a:
                    97:25:14:22:71:bc:be:bf:fd:cf:e5:09:f3:f0:94:
                    dc:18:ae:31:23:8c:56:ec:16:01:48:9b:65:3d:b0:
                    d9:b3:25:84:fa:ab:05:fc:a8:9f:6c:56:7b:ba:e1:
                    cd:9e:e7:23:e8:17:a6:1a:cd:8e:18:b2:de:75:c7:
                    e3:a6:84:d0:89:82:af:04:0d:a2:9b:c2:33:6a:9d:
                    b2:2a:9c:91:2e:47:e0:dc:0f:21:03:0d:cc:ec:19:
                    a6:05:7b:f9:7f:c8:ec:fc:86:47:70:c6:06:04:dc:
                    25:68:07:74:4f:41:33:62:f1:23:fc:81:8e:3b:40:
                    ce:6f:bf:39:19:87:63:ed:7b:a4:0b:d9:34:40:9a:
                    17:83:e8:11:6e:3f:98:a2:85:4a:b3:7d:c9:1b:a6:
                    5f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3E:84:AB:E8:2A:FA:9E:40:F8:E0:D9:9B:A5:B8:62:F9:C9:38:2E
            X509v3 Authority Key Identifier:
                keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:f8:7c:b2:8b:4a:a2:34:1d:52:8f:5c:e9:5c:cc:bd:c8:ee:
         28:57:44:e2:14:90:03:f0:66:ed:da:b2:da:79:9c:91:c8:91:
         04:0a:0e:b2:27:3a:af:b3:ae:01:f3:05:37:94:26:39:17:ff:
         b1:6b:cb:0a:93:39:c5:46:ec:75:aa:02:e0:ad:fb:fe:af:66:
         f6:b3:89:67:87:01:65:86:61:52:41:11:6b:a7:d8:e5:d9:d7:
         0b:5e:78:28:1a:78:1c:f7:0b:da:0d:04:48:27:23:79:a8:c6:
         0b:dd:e4:2b:0d:ae:d3:f7:a4:7d:24:21:fa:37:21:dc:e5:68:
         59:7e:d8:2a:ee:38:75:f3:5f:18:e9:20:8f:11:bd:52:4a:12:
         9d:41:ee:28:cd:f9:45:72:b6:1b:e3:d8:a1:03:29:29:f5:b7:
         d6:3f:e0:37:ff:25:2f:32:ea:76:e4:8a:56:0c:e1:48:2f:ca:
         d7:d2:9f:8c:f8:da:89:d6:f7:93:a1:4e:59:a6:eb:50:01:eb:
         6f:4a:e1:e0:c3:0f:ba:f8:fc:21:e9:1c:c8:f6:c5:be:4d:3d:
         3b:b9:1f:75:b1:ee:c4:f3:f8:74:53:40:a8:31:52:2b:36:37:
         c0:b8:61:34:65:b4:92:0c:34:1d:d8:e2:cd:82:5b:55:87:24:
         ce:a6:26:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs56rgPZPQ2a+W0GkE6cb7DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzOTgwNjBmMWJmMjJmMDk5OWNiMDcxYjFiNDI2OTZkYmM0
M2UxMGMwHhcNMjUxMjIwMDQwMDQyWhcNMjUxMjIxMDQwMDQyWjAzMTEwLwYDVQQD
Eyg2OTNlODRhYmU4MmFmYTllNDBmOGUwZDk5YmE1Yjg2MmY5YzkzODJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhX4Kx7CPOVX4qhF+DcRhzfAWD6IR
zJZAzsvbPd5SAU9FCklKbkhSIWCz4M45rRv37rpwPlFF9Pykupfek5BGTZO4RtLc
xYZj3b8tRSrU0Uvk88bdkatJO/FqhOYefh/jBLjKoOot1xqXJRQicby+v/3P5Qnz
8JTcGK4xI4xW7BYBSJtlPbDZsyWE+qsF/KifbFZ7uuHNnucj6BemGs2OGLLedcfj
poTQiYKvBA2im8Izap2yKpyRLkfg3A8hAw3M7BmmBXv5f8js/IZHcMYGBNwlaAd0
T0EzYvEj/IGOO0DOb785GYdj7XukC9k0QJoXg+gRbj+YooVKs33JG6ZfTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGk+hKvoKvqeQPjg2ZuluGL5yTguMB8GA1UdIwQY
MBaAFMOYBg8b8i8JmcsHGxtCaW28Q+EMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAt
YzkyN2I4YzJjN2M0LzEvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAtYzkyN2I4YzJjN2M0
LzEvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgfh8sotK
ojQdUo9c6VzMvcjuKFdE4hSQA/Bm7dqy2nmckciRBAoOsic6r7OuAfMFN5QmORf/
sWvLCpM5xUbsdaoC4K37/q9m9rOJZ4cBZYZhUkERa6fY5dnXC154KBp4HPcL2g0E
SCcjeajGC93kKw2u0/ekfSQh+jch3OVoWX7YKu44dfNfGOkgjxG9UkoSnUHuKM35
RXK2G+PYoQMpKfW31j/gN/8lLzLqduSKVgzhSC/K19KfjPjaidb3k6FOWabrUAHr
b0rh4MMPuvj8IekcyPbFvk09O7kfdbHuxPP4dFNAqDFSKzY3wLhhNGW0kgw0Hdji
zYJbVYckzqYmNA==
-----END CERTIFICATE-----
Generated at Sat Dec 20 13:58:54 2025 by rpki-client