This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft
File:                     wolzr_qpk205FGqhNvvLBRua-Z8.mft (raw, json)
Hash identifier:          3xFQnDqglICCCLXeF31Gy+LyVi0agjBQkb6Mgp6Wboc=
Subject key identifier:   70:39:4B:C0:9F:76:01:CA:D2:EE:6B:59:7E:46:66:E4:CA:31:8F:7C
Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
Certificate issuer:       /CN=c28973affaa9936d39146aa136fbcb051b9af99f
Certificate serial:       019B2C9D426F76398BA2BC39040926C7AC7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft
Manifest number:          08E7
Signing time:             Wed 17 Dec 2025 14:01:02 +0000
Manifest this update:     Wed 17 Dec 2025 14:01:02 +0000
Manifest next update:     Thu 18 Dec 2025 14:01:02 +0000
Files and hashes:         1: 1-IUX-5a8mzNC982IYo8McsQxwVM.roa (hash: DZTDftcGrtJSd1vZUszhc3bZZu8OjhqggeTv0HYl57Q=)
                          2: CgLkc1SkIFf4pj0n2JX7alL00KE.roa (hash: MhOOK2DgwXLBocx/6QarDx4Ly7ohhneMABES0xkWluY=)
                          3: Ib580J_-DuFQb8u1VEIfvd9TW9w.roa (hash: LW93slSpEAA0H/x1PZsjVdKBOLrQSbjGY+wlbwVtJJY=)
                          4: J0FY3zyfHxNEB8yMdd7E1LW0KQY.roa (hash: T+h1CDVONxwGKPgdtsEQk8rhhIuKgrDFiOo2zZqI01s=)
                          5: O2jmvbfb7zAO9bVXb2l5Cf-GJs8.roa (hash: kLsZ6W0RC6vfo2/gdG7edT6iF0a/93JSKwh9HnjHQuY=)
                          6: Q7AnG09g2PozGdlVY_smEZGKack.roa (hash: ysxiWuXWS9QlhqjWIfOMiLgYTcf9utS8lXqLWsqqxw4=)
                          7: TIOgpAqSIhmr-mQktU-A3q-sqLA.roa (hash: vNARJyxoQHxKxJeM7Zd8IM9yK7mOkRBIUmvPJn+XWk0=)
                          8: ZTmk9xCKE74GLX8SpUbwD0iZMl8.roa (hash: NJNpHFqU3eZdkh0S0In7det3e4nV9b6dbPyoIemJGSM=)
                          9: nLf7EoxKFXRurdIRsSpBj3rxvrQ.roa (hash: ekP2PeDzC5rM/e3wynmYZx2+SLmE7vjJ/gaJYQtY74I=)
                          10: npd6gKJKim1KHOcjng1GmwEFA6I.roa (hash: KpUj9mG5FfwttSHfbtQ+ZC5OsG/BaXTGqzrV2frnyhg=)
                          11: pl_4_BDzXZjJ4TLe-idFQHoFcZ0.roa (hash: lpIAW5v+TxOADdZGRu2HZ/neoNrBr0yBzSa/bNi621Y=)
                          12: ptgZPu-492g6Q7iwwH9dUoGnT0U.roa (hash: JBJCHA3gJM+JGtkPyX8Ik7rcsfdQeHIxeViefGiKeVw=)
                          13: qvwTWo8vwE0rz_fPohNW5beAGWI.roa (hash: PNeWcvCSbFurrdLfUjVRTH5U2J/jIYTyYfXbXNGGz5Q=)
                          14: uJEaDEpEiCiiI2jnpM6Rsom68OQ.roa (hash: aCCCss4sR2kOYE37efJSQrx21z5wX5pn6fX7X5clN7w=)
                          15: wolzr_qpk205FGqhNvvLBRua-Z8.crl (hash: cu+c4tgQaFiGEbvCemiFiwrdlqO/7iIH3mo9EJiQgEA=)
                          16: y0bJ_FWEzre7hb_ba4ehOvpzP2w.roa (hash: kyISy4jMnE41+WEzWQUmi6BzD5u4+OVYr1N4+oQ5Rsg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2c:9d:42:6f:76:39:8b:a2:bc:39:04:09:26:c7:ac:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f
        Validity
            Not Before: Dec 17 14:01:02 2025 GMT
            Not After : Dec 18 14:01:02 2025 GMT
        Subject: CN=70394bc09f7601cad2ee6b597e4666e4ca318f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8e:ee:63:d1:36:84:4c:fa:c8:80:6b:b9:b1:
                    f8:db:31:8f:e1:2f:40:4e:af:c0:7d:8a:6c:c7:50:
                    c4:89:db:a9:6c:fc:e8:30:2e:11:1e:ee:c3:78:be:
                    fb:65:a4:11:25:e1:a7:21:90:f0:51:cf:22:a9:ae:
                    ac:3e:65:1a:a6:57:ad:0d:ad:35:d6:95:58:30:dc:
                    7e:f0:4d:bb:b8:ff:1e:0d:d3:b6:3f:ef:25:27:f2:
                    56:09:20:fb:83:68:ca:6c:d6:5f:26:77:50:be:2c:
                    1e:c1:30:f2:2c:a7:1a:c6:1e:de:b1:61:95:23:3f:
                    34:5e:c1:d5:13:35:ee:95:fd:f8:0c:43:8a:e2:2b:
                    5c:55:d7:d3:4d:5f:9a:3c:29:93:f8:22:e8:58:91:
                    d8:91:1c:bc:8e:34:98:65:fe:d7:2e:e4:48:f4:bd:
                    c4:b5:21:91:ec:7c:a5:26:a1:a0:07:91:83:10:ed:
                    bc:63:d5:0a:df:e9:b8:94:90:3f:3f:00:27:75:c7:
                    e4:0f:7f:cd:f7:24:e2:99:ca:78:df:57:32:40:36:
                    91:9d:47:f0:2e:72:e6:1b:7a:85:a1:16:71:c1:ab:
                    4b:b0:1c:be:ed:4c:8f:26:c3:33:2a:ad:24:08:4c:
                    c0:75:b7:34:c5:49:0e:f5:54:f2:e7:64:a5:f2:39:
                    e2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:39:4B:C0:9F:76:01:CA:D2:EE:6B:59:7E:46:66:E4:CA:31:8F:7C
            X509v3 Authority Key Identifier:
                keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:d4:9f:a1:f1:e7:96:bc:4e:cf:73:b6:fd:32:5c:e5:cf:a6:
         54:52:76:34:83:f4:83:8d:5d:a8:c5:c4:2e:ea:ad:26:64:2b:
         86:e4:41:d9:69:46:1a:df:64:df:3f:22:eb:cd:84:c6:79:ea:
         72:ff:0c:56:3e:6f:0d:6d:4e:32:57:45:d6:5a:26:cf:bc:0a:
         1b:d9:6c:64:f5:38:32:a5:45:cc:5d:32:e0:28:25:9d:a9:e1:
         70:e7:4e:95:c4:e3:44:bc:29:9a:0d:40:23:ce:6d:cd:54:e3:
         a2:b0:71:5e:e6:eb:5b:e4:ce:2a:44:58:ca:14:83:be:5f:b5:
         79:c2:de:8a:63:77:a3:36:88:bd:14:88:8f:86:6c:70:ee:39:
         62:c8:df:d8:db:56:c8:fa:8c:28:af:29:ad:ef:7f:bb:89:53:
         51:b5:ff:68:b9:23:e4:b4:3a:93:71:eb:7e:ba:5b:60:53:59:
         a3:4f:53:1d:db:05:e7:fa:a2:51:aa:8e:d2:25:50:36:17:79:
         8b:19:0f:33:44:ab:2a:23:43:a4:a0:b5:96:f0:98:f7:ed:eb:
         94:df:df:0f:40:5d:70:8d:f8:c7:f0:54:94:17:03:b3:6d:42:
         6f:60:4e:83:fc:87:a9:17:9f:f0:9f:91:98:ba:1b:e4:2c:42:
         82:0c:16:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 17:56:17 2025 by rpki-client