This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
File:                     W1JjSi6wP4VlteM9wrn0kEH3z7A.mft (raw, json)
Hash identifier:          AHtJpmxTDbUe/RAH6RZ8hVtnkO7KUY6Hc40K7n3SjB8=
Subject key identifier:   CF:9A:7C:19:B2:41:29:B1:8C:4A:1B:2F:BE:04:0D:DF:B1:66:2E:D3
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Certificate issuer:       /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial:       019B3C101BAC7766CC48880F796BE3E011CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
Manifest number:          17C0
Signing time:             Sat 20 Dec 2025 14:00:47 +0000
Manifest this update:     Sat 20 Dec 2025 14:00:47 +0000
Manifest next update:     Sun 21 Dec 2025 14:00:47 +0000
Files and hashes:         1: 2WxqwaZAVv2dyvITo-AesFShXVA.roa (hash: 6t+meRGm9n30GD2goCpBFQRLPzip0i8RlRot9CqnzDs=)
                          2: 7sYC2HPXTRXSgFwGJBI_aMn1Sls.roa (hash: jNxwvCYUNHETc1lJzQ1miztj7GesEWdkNQJ05PgoDvM=)
                          3: GqSZzRT-6EUjEpPpSprb5uTXjdY.roa (hash: R5dBboLAVD51kW1cDVdwcoH+HEQsopVvdEZu8XFQjoA=)
                          4: IJUrnOsXqWHMR09b2WThxrOzZ7I.roa (hash: pLY1rvU8nCKjlyh0WPOsU89VyudJIjrK5QOTjl/IWbY=)
                          5: LRiyT-rlzmXrQXbcYMWhBU482eg.roa (hash: ICoe3kPCb8Fc28l3cr0GMLtrwRJd+KH/IvmqLhqbyWo=)
                          6: Nlgb7JYdYFon3ATeZJpEg1k27pw.roa (hash: NSOx98amr5Ih2M9Z5olSG0RUve4KE3kRKxU5Wk0rOgM=)
                          7: OL--k4HWjTYCqoOiHkb6J7Zbllc.roa (hash: JA4H42s/1jVK78rUsdByr4/C6vbBqxY7qzGRzKdj1HE=)
                          8: RdMfFmFjHDJDX_-5uaaUXQKDls0.roa (hash: O6jVvm7OX0OHLjep55ba573pokqJBTfgyVcBvBUtHtI=)
                          9: UtNq26d9JSb_Nw7v93_rZSfntfI.roa (hash: BwxbdOm0odI7W9CsiapOsPFRt2svrB57iDDfUu1jOsA=)
                          10: W1JjSi6wP4VlteM9wrn0kEH3z7A.crl (hash: 6b5S1yjquo//6OP3n382aLphoVKUqIMLeGlj6x1PmHg=)
                          11: XoEgN8Rzf-_O70nBq2ov0ajUPeY.roa (hash: Uqsa+8GNjpiZZotqp2+P9cchtd9l85RTnq9RE86H8w8=)
                          12: dx_5lNWl8316FN21jYYHgM9Omcg.roa (hash: Qr4/FlwcX1RS39pjsqMjlcq6atyfDlGR+M4UNYZEX2I=)
                          13: e2cInBTd-rmGJiE7XxhPPld1Ulg.roa (hash: IvekKh/rpFdvGGB9vKZ/0VojUSPhCbP5Lk2iZ/nlU9g=)
                          14: eRoiwHCGGWzsakU0Sd9_pvvGdAc.roa (hash: rIC53m0wk/AEJI6S30/Y82l7fTBuA5MUe7EOXE+qyks=)
                          15: iXyw4CJeCTCBDoOmqw9S5M03Oho.roa (hash: /0Njq6baGydQf0hCnZDNdpKQZB7dTLuwHGMng0slCJk=)
                          16: pM84h9NKkkwXGLtMIPbJpgkc55c.roa (hash: kTHVs/be3Tv2n1C0vv3DFuVKeuz0WY3EFxZXtvfz3Os=)
                          17: vQsJW15dMwHZY104nt15UgW_JpU.roa (hash: Wpy6rJjJCiowwMoCuc7Oz0XTeA0XwRwWa9jhMg3QDw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 09:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:10:1b:ac:77:66:cc:48:88:0f:79:6b:e3:e0:11:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
        Validity
            Not Before: Dec 20 14:00:47 2025 GMT
            Not After : Dec 21 14:00:47 2025 GMT
        Subject: CN=cf9a7c19b24129b18c4a1b2fbe040ddfb1662ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:22:a8:47:68:ba:03:f2:28:51:18:66:6c:60:
                    5b:70:d2:cf:e1:f6:5b:a1:4a:94:2e:cd:91:b3:23:
                    1c:c1:02:fa:bb:93:8e:0b:74:73:33:30:fe:78:ef:
                    c0:63:1c:f8:a2:ff:ef:4f:f8:63:87:c9:c6:60:31:
                    b5:81:0a:b0:3a:39:17:f8:77:14:75:34:fb:ae:9c:
                    29:67:fa:02:4b:e2:19:52:68:15:6e:70:b2:a9:97:
                    06:f8:c6:47:e3:3d:cf:24:72:ac:3f:99:a5:76:af:
                    33:09:17:f0:74:16:e3:77:87:1c:48:d8:ed:53:e1:
                    3f:8f:3e:f2:6b:41:59:73:91:f9:38:bd:a7:9d:d5:
                    5b:bd:52:90:06:59:df:3e:a0:b7:a9:2a:9e:74:5c:
                    5a:dd:1e:03:3c:de:31:0f:d8:c6:4d:fa:c5:2c:ee:
                    3b:b5:ab:2b:5c:d6:ea:40:dd:49:1e:30:01:e4:ff:
                    c6:7c:89:a7:81:9e:77:3f:01:03:d7:88:ea:11:eb:
                    f9:8f:ef:f2:df:c7:8d:b7:5a:c2:b9:53:a8:ab:21:
                    a3:e9:77:30:a3:16:87:54:83:4d:81:53:93:53:25:
                    2f:f3:4f:51:38:c7:e5:62:44:2a:2d:6d:06:6e:a0:
                    68:6c:10:27:76:e6:78:d1:9f:f0:aa:04:d4:63:46:
                    8a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9A:7C:19:B2:41:29:B1:8C:4A:1B:2F:BE:04:0D:DF:B1:66:2E:D3
            X509v3 Authority Key Identifier:
                keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:42:64:1e:31:da:e9:64:66:46:b7:34:68:c1:1c:b7:b6:41:
         8d:84:0d:c4:d7:98:21:5e:68:9b:9f:38:cd:da:96:77:4b:b6:
         fa:31:3d:07:86:4f:ef:46:b0:ca:cd:23:21:91:09:57:3d:b6:
         fc:cb:5f:20:d9:17:91:cb:09:c0:00:26:52:01:7d:62:c1:d5:
         bd:9f:85:b1:c2:fa:e4:48:55:56:0c:f2:5a:e1:e5:5c:39:9f:
         39:ff:e5:44:f1:1a:7f:87:2f:f7:c2:11:c3:de:4d:8b:1b:6f:
         04:dc:ca:32:a3:12:3b:c5:65:ef:66:94:87:90:98:e5:e6:90:
         b0:8e:ef:66:e1:01:11:ae:70:c6:42:57:15:e6:88:1d:74:80:
         40:b3:dc:7a:46:e8:ec:05:d5:7a:cb:c8:03:00:bf:7e:da:d1:
         06:2e:34:83:88:52:0a:c1:d5:9d:e6:6b:b4:ce:b9:1f:5d:0e:
         0a:e1:59:dc:04:d2:6f:54:8e:72:1e:9d:56:6f:ef:86:33:7e:
         f5:85:27:02:13:e7:a3:fd:89:b7:7d:c7:ff:e1:83:1f:8a:b4:
         f9:29:12:34:26:7b:3f:2c:af:3d:2a:40:6c:1e:ff:13:e5:8a:
         6f:48:4f:55:0d:4e:40:31:b4:26:37:84:49:2c:f4:32:f3:35:
         e2:fc:44:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs8EBusd2bMSIgPeWvj4BHPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm
N2NmYjAwHhcNMjUxMjIwMTQwMDQ3WhcNMjUxMjIxMTQwMDQ3WjAzMTEwLwYDVQQD
EyhjZjlhN2MxOWIyNDEyOWIxOGM0YTFiMmZiZTA0MGRkZmIxNjYyZWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyKoR2i6A/IoURhmbGBbcNLP4fZb
oUqULs2RsyMcwQL6u5OOC3RzMzD+eO/AYxz4ov/vT/hjh8nGYDG1gQqwOjkX+HcU
dTT7rpwpZ/oCS+IZUmgVbnCyqZcG+MZH4z3PJHKsP5mldq8zCRfwdBbjd4ccSNjt
U+E/jz7ya0FZc5H5OL2nndVbvVKQBlnfPqC3qSqedFxa3R4DPN4xD9jGTfrFLO47
tasrXNbqQN1JHjAB5P/GfImngZ53PwED14jqEev5j+/y38eNt1rCuVOoqyGj6Xcw
oxaHVINNgVOTUyUv809ROMflYkQqLW0GbqBobBAnduZ40Z/wqgTUY0aKIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+afBmyQSmxjEobL74EDd+xZi7TMB8GA1UdIwQY
MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt
ZGM2NTU0ZmQxMjM1LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1
LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE0JkHjHa
6WRmRrc0aMEct7ZBjYQNxNeYIV5om584zdqWd0u2+jE9B4ZP70awys0jIZEJVz22
/MtfINkXkcsJwAAmUgF9YsHVvZ+FscL65EhVVgzyWuHlXDmfOf/lRPEaf4cv98IR
w95NixtvBNzKMqMSO8Vl72aUh5CY5eaQsI7vZuEBEa5wxkJXFeaIHXSAQLPcekbo
7AXVesvIAwC/ftrRBi40g4hSCsHVneZrtM65H10OCuFZ3ATSb1SOch6dVm/vhjN+
9YUnAhPno/2Jt33H/+GDH4q0+SkSNCZ7PyyvPSpAbB7/E+WKb0hPVQ1OQDG0JjeE
SSz0MvM14vxEYw==
-----END CERTIFICATE-----
Generated at Sat Dec 20 16:16:52 2025 by rpki-client