This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft
File:                     Wm-SlVId8woVj1Brp8uHOrlSncM.mft (raw, json)
Hash identifier:          Gb5yFGgCNmEajX9+GnSwNiPVd0wSRh5k+UOP+yYuJhM=
Subject key identifier:   D5:D9:F0:47:6A:B4:BD:EF:BC:77:B3:1A:7E:D8:5E:AA:E8:5E:3F:9C
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Certificate issuer:       /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial:       019B3C7FAFCF75CA1BA3DA7C8241C983ED6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft
Manifest number:          1790
Signing time:             Sat 20 Dec 2025 16:02:39 +0000
Manifest this update:     Sat 20 Dec 2025 16:02:39 +0000
Manifest next update:     Sun 21 Dec 2025 16:02:39 +0000
Files and hashes:         1: 0vJZAjQvOCM778zt-GYlV7PZJes.roa (hash: ekSkLieH0kRfHZqT/hdlf3jfvG90gwQFHGxyQ06GDNk=)
                          2: 0y3N67LCUpNE8qDxAyk9Z69NdRo.roa (hash: 4ON69D+MoQp5v8V+mHpb3oC3nxI4fYbnRstqxpwuft8=)
                          3: 3Jp97JUe3gWKYF84NM2iFfloREw.roa (hash: VNFR7b84l18qK1EKYiFN7wA+p6c65UHU5/wSsOrBu1E=)
                          4: 7t5qNC9gChKbH2IkmVh6cPdeOtI.roa (hash: NF6uDXY5xoJw3nsW1WUZ4W7bZINqOVbB+Z7X2JaeA7w=)
                          5: ESr9zioHCBYZ86HDg4eovEqdX6M.roa (hash: MYFTzIM52H5hH9HHF0ZyBDCjsvixX7YrAYb/vviEJWk=)
                          6: Ek2l-YiuT-e2fHybRh910Hl0naA.roa (hash: 7WvXC1kAkz2uymr7M3eP0NEdt5n2kLa0OAs0qb1KF9s=)
                          7: HVDZDhI_37xAwlJHexTnzDzb8E0.roa (hash: Ji8VlsF3ugwSnv+9ttxfjrdS99znlwRonFvgsU5yaHA=)
                          8: IUIiI3li7YoLPJeUmaTA8dmy_po.roa (hash: EvM1k6d8ML+eRQxy3VLzpGXHMs8VcPAPax2Hjv6TVOo=)
                          9: LZikoJCXDFhkGudMxFeDLLtpIuQ.roa (hash: TV25uGSXRbCMi70Aq/wXKeSpPXfsa0L2gc6TZogEOew=)
                          10: P0IM0BwexC2MANUe2SCNAEvr-IU.roa (hash: LlLmPApAonXXNr8lq4az4y+1qifsiG6uuBOQAupNk9o=)
                          11: QE1wNjReZLHRZoqYKvUle-6e4Dk.roa (hash: ukToAurzb9W43fVHpwe3mg9WsScCO5NT6kui9MqbkFw=)
                          12: QW82bbA2PdJZpw1C6gyeaMVnHV4.roa (hash: ZpyO/+DpzBzvkiI2D1/biyd4cZbG4LPtFBNWf54il9M=)
                          13: VkH0cj8lgb77NMiD01XPf4phEhM.roa (hash: U26pinzt/BXl8f62bXFtVf5wmaisdJZr6IFBUK+wLzA=)
                          14: Vkjqd6XqVIhc1qZ8t4QEMova_Nw.roa (hash: udtEnyf8wReTGJ0z2VEzoYaPCi1MBiq/jFYXiWnF0p8=)
                          15: Wm-SlVId8woVj1Brp8uHOrlSncM.crl (hash: grvR50/mme7Q08V0p4PZWrfo6A0/uhHGgWBeBseBqVg=)
                          16: X5XVqWgdEw3BemC13fzjf0fPePQ.roa (hash: qs+9y7O5toIGLZI56PNRUO4vwR65yR7np8j1ISWn3P0=)
                          17: Z31WjdQFDmrm3H3vpTgCYNrTNJU.roa (hash: +gbB7qFdsZ9xFXoII4KgpUuO3N5IwHlojgzUCF3L91o=)
                          18: aERiXJi-EsvazEbk44CS-WkGiEs.roa (hash: HUnYx0jl9+OjQ9buE7/u1GgujFHF7Z7dmoigFaNPOHw=)
                          19: eUpqiXGXLspopV2JOefdNZxivoo.roa (hash: NmTA5ikQb8YHI1Ls+UlB/LFj90mCzv7v9aa/fWXYCBc=)
                          20: kdLvrEBXn-CHh74t-w6MV1EGNHo.roa (hash: gyiLAbj2kYbSToHhx7++uI/ewpeHDKzVyci4zfX1uw4=)
                          21: nnFLZYtjtx-X0WRobB_f15ily1s.roa (hash: Tzdy7+8EMdLR1O65cNg5h5JGGJxkW4u3GOZ3xfXLOic=)
                          22: o_IvgBnOjTy1j7d72GzK6oM4hfw.roa (hash: YBqaZ6LWvVycNbV8oafe8kViFmPnqTKuZYSmWMyAc/4=)
                          23: t-V-YRRY8cp_fI39ql4lLgfLb4k.roa (hash: ZSmoHBFVUUkvEp8EwCgwGR3HKFwutMlOmb9X19Ah+cA=)
                          24: u9vtufdQeD6Gp2gsOoVPleakbQs.roa (hash: jqziqEIAhQzAZhdIm9v3y5ugqInsG16PaBcDYGSnoFA=)
                          25: w7GBFFW-fOGU9AymO9FYwt-abI0.roa (hash: hEWFJH6MzSsYg+SOu0owoWWjOMGAE6GO6uzEJvBdjVs=)
                          26: wIeSRAw34EsRmUA-LRcG5YPXVbY.roa (hash: VjcBo62PQSvDoTKKQreeGuDHp0CAXYkaVOqzZhzGpes=)
                          27: x3I4XFLPkKB0I5raydIIJRGLjyU.roa (hash: D4KBC4PnKVMhAPMumEie+uljGtb5tJcwU0lNDesvPH4=)
                          28: xi12IPMtRFELHYWtjJr4YufGkQA.roa (hash: QhkRcFPqputToi/TJTBVbZlzaHzFcDSuse3D4N1xAF0=)
                          29: yYWhaIMfViLSRK7iCwEAT16QCWQ.roa (hash: yffkf4KTnpRp9maayh8gyACoZv6UI+i5f7qUIcHlPJY=)
                          30: ymcFi0Unv8tqKhnuGUaMgOd0ViE.roa (hash: f0WdduUrR9SROhLlbzPFXawGGf+Q6kZ6bNMiip9BKUI=)
                          31: z4sJr3r2j6ymXhBKx8CeW6DdxPI.roa (hash: /g2w6QUo80ITgWZBBKLdiFMSGoLIreelX1kumLV5XQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:7f:af:cf:75:ca:1b:a3:da:7c:82:41:c9:83:ed:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
        Validity
            Not Before: Dec 20 16:02:39 2025 GMT
            Not After : Dec 21 16:02:39 2025 GMT
        Subject: CN=d5d9f0476ab4bdefbc77b31a7ed85eaae85e3f9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:12:83:d4:03:3d:50:6d:2d:a3:ca:49:3c:d5:
                    31:99:d7:16:a7:66:c2:54:b6:02:28:17:bf:e0:54:
                    9e:d8:76:e9:79:60:36:35:a6:64:42:55:d4:2a:77:
                    14:cf:ac:9c:78:d4:84:bf:e0:3f:95:61:82:75:32:
                    86:1d:fd:be:6f:ac:b3:4e:0a:37:72:fb:63:64:01:
                    86:1c:d9:39:24:ea:26:10:f2:fd:1b:60:64:95:f0:
                    32:34:ee:16:8e:ad:39:94:c9:85:19:82:9c:3a:25:
                    b2:f1:3f:c2:71:f8:ed:2f:72:a1:bb:aa:8c:71:d2:
                    56:d9:85:96:fc:fd:bc:f3:84:07:5a:dc:19:11:f5:
                    75:d7:11:f1:cd:74:7e:7e:e3:fd:63:0f:9f:57:f6:
                    98:a2:30:77:2f:a1:e7:92:f8:c3:61:39:da:94:0a:
                    05:a9:76:5e:7b:45:b3:2f:96:31:89:09:72:0f:7b:
                    2d:0d:32:72:1e:79:57:5d:5b:ba:86:58:40:79:1c:
                    9c:db:42:f1:a7:30:26:a7:df:51:1b:3e:27:8e:18:
                    82:e5:56:db:96:f6:9c:4d:65:b6:78:21:99:b2:ec:
                    39:49:4c:62:aa:2a:8a:ac:d1:4a:6c:0e:ae:79:ff:
                    a4:ef:5b:8c:97:fb:08:78:e2:92:73:25:3a:e9:63:
                    30:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D9:F0:47:6A:B4:BD:EF:BC:77:B3:1A:7E:D8:5E:AA:E8:5E:3F:9C
            X509v3 Authority Key Identifier:
                keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:53:6d:cc:78:09:5b:e3:b7:44:99:83:80:f7:6a:d0:4c:2f:
         df:a8:88:60:ee:b8:04:3a:94:83:8f:a0:e0:c7:07:51:1c:f9:
         46:79:db:86:07:7f:5d:e5:1e:28:09:30:8d:61:d3:bf:2a:fe:
         27:7d:76:16:79:72:30:f2:64:00:76:6a:48:a6:4c:19:b2:74:
         89:cd:1c:81:13:5a:9b:25:2f:20:a0:55:a1:51:be:ac:c2:5a:
         52:b9:80:c4:f5:39:6c:6e:86:eb:36:9f:87:bd:5d:b1:b7:78:
         5b:89:37:6f:1b:87:75:88:0b:68:58:ee:a4:90:f5:8c:75:79:
         49:6d:41:c3:8d:2a:56:fc:32:86:2f:48:1f:a0:e5:28:66:54:
         21:e4:25:d2:35:e8:28:07:6c:36:3d:1c:bf:96:1a:a1:4c:44:
         73:f6:92:8b:89:9a:23:a2:8b:e8:9e:a3:ce:88:3f:f7:67:3a:
         8e:aa:cc:2b:59:f6:d2:f7:13:8d:20:06:21:83:f3:f6:c3:c8:
         b0:63:7a:af:c9:4a:48:0b:97:8e:4e:50:cf:b9:63:0b:de:76:
         0d:24:3e:c5:21:65:ba:9b:8d:2a:0b:07:75:5e:dc:88:a5:f8:
         a1:dc:0a:13:a0:3c:b2:9f:ca:4c:e8:64:5d:77:16:93:92:4e:
         8b:aa:bd:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs8f6/Pdcobo9p8gkHJg+1sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNmY5Mjk1NTIxZGYzMGExNThmNTA2YmE3Y2I4NzNhYjk1
MjlkYzMwHhcNMjUxMjIwMTYwMjM5WhcNMjUxMjIxMTYwMjM5WjAzMTEwLwYDVQQD
EyhkNWQ5ZjA0NzZhYjRiZGVmYmM3N2IzMWE3ZWQ4NWVhYWU4NWUzZjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBKD1AM9UG0to8pJPNUxmdcWp2bC
VLYCKBe/4FSe2HbpeWA2NaZkQlXUKncUz6yceNSEv+A/lWGCdTKGHf2+b6yzTgo3
cvtjZAGGHNk5JOomEPL9G2BklfAyNO4Wjq05lMmFGYKcOiWy8T/CcfjtL3Khu6qM
cdJW2YWW/P2884QHWtwZEfV11xHxzXR+fuP9Yw+fV/aYojB3L6HnkvjDYTnalAoF
qXZee0WzL5YxiQlyD3stDTJyHnlXXVu6hlhAeRyc20LxpzAmp99RGz4njhiC5Vbb
lvacTWW2eCGZsuw5SUxiqiqKrNFKbA6uef+k71uMl/sIeOKScyU66WMwMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXZ8EdqtL3vvHezGn7YXqroXj+cMB8GA1UdIwQY
MBaAFFpvkpVSHfMKFY9Qa6fLhzq5Up3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2Ut
YWFhNDU1M2QyYWJkLzEvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2UtYWFhNDU1M2QyYWJk
LzEvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADlNtzHgJ
W+O3RJmDgPdq0Ewv36iIYO64BDqUg4+g4McHURz5Rnnbhgd/XeUeKAkwjWHTvyr+
J312FnlyMPJkAHZqSKZMGbJ0ic0cgRNamyUvIKBVoVG+rMJaUrmAxPU5bG6G6zaf
h71dsbd4W4k3bxuHdYgLaFjupJD1jHV5SW1Bw40qVvwyhi9IH6DlKGZUIeQl0jXo
KAdsNj0cv5YaoUxEc/aSi4maI6KL6J6jzog/92c6jqrMK1n20vcTjSAGIYPz9sPI
sGN6r8lKSAuXjk5Qz7ljC952DSQ+xSFlupuNKgsHdV7ciKX4odwKE6A8sp/KTOhk
XXcWk5JOi6q9UQ==
-----END CERTIFICATE-----
Generated at Sat Dec 20 22:02:43 2025 by rpki-client