This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft
File:                     Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft (raw, json)
Hash identifier:          i84k1TXXFdt6wkxrcvAOGVYpalgHWJDB8ISu+BRE3fY=
Subject key identifier:   5D:DE:EA:DB:ED:49:90:0C:98:A9:50:05:ED:70:0B:1B:EE:3A:DC:77
Authority key identifier: 5B:08:7D:1D:C9:8E:26:E4:C9:59:D0:9F:61:46:D7:FD:F8:69:E4:FC
Certificate issuer:       /CN=5b087d1dc98e26e4c959d09f6146d7fdf869e4fc
Certificate serial:       019B36E98CD895BF63A3485D4BB79D8919EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft
Manifest number:          07F1
Signing time:             Fri 19 Dec 2025 14:00:34 +0000
Manifest this update:     Fri 19 Dec 2025 14:00:34 +0000
Manifest next update:     Sat 20 Dec 2025 14:00:34 +0000
Files and hashes:         1: 4utseU6Q3hlSlIBKbVfQJ2ZOYjU.roa (hash: rTdAUHdl5wiC79NgKtzrfB/hwpa04O/1YKALBUA/O1M=)
                          2: 6q2XvWJDNyZHxwhNEFaixSgzMO0.roa (hash: SodjqclNB5A2qS0eo5CdNTzrUFgVRNH441CvrbgX6vE=)
                          3: Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl (hash: xLwcoBBVbQJq+2GDATxCveXgRi+CtuTPsY9vsM/m3BA=)
                          4: g1RkWavRHDLIMciTbQ2oPMtXKtc.roa (hash: +9+QsepfCqVXx8S9YRw8NNKDXd346R/NXG9imOdNPxY=)
                          5: vrfv77jJYuxmSZEVkmyNCntD1Fk.roa (hash: xlpnBzbGV6oY57oPpaVnACDRZObeSx9+3WvllQ26oOs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:36:e9:8c:d8:95:bf:63:a3:48:5d:4b:b7:9d:89:19:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b087d1dc98e26e4c959d09f6146d7fdf869e4fc
        Validity
            Not Before: Dec 19 14:00:34 2025 GMT
            Not After : Dec 20 14:00:34 2025 GMT
        Subject: CN=5ddeeadbed49900c98a95005ed700b1bee3adc77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c1:39:25:11:2b:28:12:84:42:cb:90:06:69:
                    8f:01:39:5f:9b:a6:ed:71:35:94:61:35:b4:6a:0b:
                    4b:3e:8c:9c:2c:72:0c:24:ea:f2:3f:da:4f:3d:47:
                    a3:00:85:36:ff:84:68:bc:3b:b0:1e:93:fb:7c:cd:
                    a2:9d:c2:cd:01:94:41:93:ad:b3:c0:54:1b:36:6a:
                    7a:41:d0:a0:b0:50:e8:b8:07:f9:9b:98:0e:78:b2:
                    c4:b6:44:61:68:ab:05:4c:92:0d:7f:3b:10:89:6d:
                    c6:7c:68:57:14:cf:f7:98:c3:ab:b5:6b:36:85:ee:
                    4b:3d:dd:e0:e2:33:de:0b:f2:b4:9d:c2:96:71:b5:
                    36:24:7d:a5:ae:7b:ae:aa:c3:f9:f9:46:05:8d:81:
                    93:a0:ad:cf:e1:e6:22:ae:b7:12:ff:28:85:7e:2c:
                    2d:ab:b5:09:95:f8:13:6e:4e:b5:80:24:24:20:64:
                    93:c4:4e:35:86:0f:b9:11:ef:b5:3b:42:9d:b9:e2:
                    13:cf:c4:93:9e:ac:7a:1f:ca:ae:d6:a8:c8:cb:60:
                    6d:fd:18:39:34:44:6b:45:01:fd:f4:bd:1f:4b:3a:
                    4e:33:dc:3e:9c:c9:ad:0a:14:29:74:8b:1e:f8:6c:
                    82:3b:2c:34:9c:e5:6b:bc:3f:ee:9a:a7:71:28:b7:
                    dd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:DE:EA:DB:ED:49:90:0C:98:A9:50:05:ED:70:0B:1B:EE:3A:DC:77
            X509v3 Authority Key Identifier:
                keyid:5B:08:7D:1D:C9:8E:26:E4:C9:59:D0:9F:61:46:D7:FD:F8:69:E4:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:f9:a4:c6:f0:e6:41:06:97:09:f3:3b:12:d4:cb:9b:d3:56:
         21:a9:48:f8:2f:49:0f:3f:4f:8a:2c:6e:91:d1:61:30:b5:17:
         d8:66:a9:ff:61:42:96:79:fe:c3:8e:f3:a6:e2:3a:32:8d:2f:
         9c:20:e2:09:21:e1:9d:85:ba:2e:e6:7c:92:9c:5a:4c:75:1b:
         d4:2e:07:b6:22:e2:70:f0:89:25:1d:5d:8f:e7:af:10:56:9d:
         73:4b:d0:30:73:04:7a:d6:7e:36:16:86:4a:0a:40:a6:20:11:
         8c:8a:50:cd:7c:e9:46:fa:c5:7b:2e:95:7a:7d:8a:16:a0:2a:
         b5:57:79:00:ec:76:f1:cb:5e:6f:4e:b2:20:6a:1c:ef:ff:aa:
         44:08:97:b6:bd:2f:b2:fa:18:88:79:22:39:33:74:e8:35:ff:
         18:16:b3:fc:cc:fa:07:8e:99:a4:5b:48:87:33:ec:5b:28:4f:
         78:79:37:15:e1:1e:38:04:32:7f:66:43:25:df:1e:84:17:1a:
         16:94:0f:1c:3e:b2:e7:63:d6:3f:e7:aa:52:2a:f9:d1:99:3f:
         89:f6:ae:a9:3a:f2:08:6c:ce:6b:d7:c1:86:c7:98:b4:94:d4:
         2b:d8:f7:ea:dd:8b:ca:48:bf:f4:b7:e9:e7:21:17:7f:32:1c:
         d7:83:d9:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs26YzYlb9jo0hdS7ediRnsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMDg3ZDFkYzk4ZTI2ZTRjOTU5ZDA5ZjYxNDZkN2ZkZjg2
OWU0ZmMwHhcNMjUxMjE5MTQwMDM0WhcNMjUxMjIwMTQwMDM0WjAzMTEwLwYDVQQD
Eyg1ZGRlZWFkYmVkNDk5MDBjOThhOTUwMDVlZDcwMGIxYmVlM2FkYzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8E5JRErKBKEQsuQBmmPATlfm6bt
cTWUYTW0agtLPoycLHIMJOryP9pPPUejAIU2/4RovDuwHpP7fM2incLNAZRBk62z
wFQbNmp6QdCgsFDouAf5m5gOeLLEtkRhaKsFTJINfzsQiW3GfGhXFM/3mMOrtWs2
he5LPd3g4jPeC/K0ncKWcbU2JH2lrnuuqsP5+UYFjYGToK3P4eYirrcS/yiFfiwt
q7UJlfgTbk61gCQkIGSTxE41hg+5Ee+1O0KdueITz8STnqx6H8qu1qjIy2Bt/Rg5
NERrRQH99L0fSzpOM9w+nMmtChQpdIse+GyCOyw0nOVrvD/umqdxKLfdpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3e6tvtSZAMmKlQBe1wCxvuOtx3MB8GA1UdIwQY
MBaAFFsIfR3JjibkyVnQn2FG1/34aeT8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3doOUhjbU9KdVRKV2RDZllVYlhfZmhwNVB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hOWEwNmUtNjlhYy00NWNlLWJhZGMt
MDlkYmQwOGNiZTJkLzEvV3doOUhjbU9KdVRKV2RDZllVYlhfZmhwNVB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9hOWEwNmUtNjlhYy00NWNlLWJhZGMtMDlkYmQwOGNiZTJk
LzEvV3doOUhjbU9KdVRKV2RDZllVYlhfZmhwNVB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo/mkxvDm
QQaXCfM7EtTLm9NWIalI+C9JDz9PiixukdFhMLUX2Gap/2FClnn+w47zpuI6Mo0v
nCDiCSHhnYW6LuZ8kpxaTHUb1C4HtiLicPCJJR1dj+evEFadc0vQMHMEetZ+NhaG
SgpApiARjIpQzXzpRvrFey6Ven2KFqAqtVd5AOx28cteb06yIGoc7/+qRAiXtr0v
svoYiHkiOTN06DX/GBaz/Mz6B46ZpFtIhzPsWyhPeHk3FeEeOAQyf2ZDJd8ehBca
FpQPHD6y52PWP+eqUir50Zk/ifauqTryCGzOa9fBhseYtJTUK9j36t2Lyki/9Lfp
5yEXfzIc14PZBA==
-----END CERTIFICATE-----
Generated at Fri Dec 19 23:23:31 2025 by rpki-client