This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
File:                     WVUSBp5lxZCALs5b972H5muPNdM.mft (raw, json)
Hash identifier:          QDmpgTR4ZD9Pg0hElqbyK8h9oB1FPUSvrTf6p2qbhR4=
Subject key identifier:   9B:13:61:14:DE:29:5F:E1:D3:38:88:BF:A0:A4:DE:E7:9C:7F:E8:7B
Authority key identifier: 59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3
Certificate issuer:       /CN=595512069e65c590802ece5bf7bd87e66b8f35d3
Certificate serial:       019AF12DEEA55DD42D201425A66B87A4F89C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
Manifest number:          0629
Signing time:             Sat 06 Dec 2025 01:01:50 +0000
Manifest this update:     Sat 06 Dec 2025 01:01:50 +0000
Manifest next update:     Sun 07 Dec 2025 01:01:50 +0000
Files and hashes:         1: 7485auk2FDtBGR6oa8FdWj6iC9A.roa (hash: gAb9u27puREkir1jRu5k57wijR8DHlE5Q3l2c3l5EWQ=)
                          2: WVUSBp5lxZCALs5b972H5muPNdM.crl (hash: IJNN6pHmSbabfNn6y5i3oEcLA1ZqleOl0exMq7wmsoU=)
                          3: Zvz3oDW3cSyOvmrblBnpsILjfO8.roa (hash: h4T4wUccOgORC438fwXvR3MkqbaHMSWQOxEx8sOZySQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2d:ee:a5:5d:d4:2d:20:14:25:a6:6b:87:a4:f8:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=595512069e65c590802ece5bf7bd87e66b8f35d3
        Validity
            Not Before: Dec  6 01:01:50 2025 GMT
            Not After : Dec  7 01:01:50 2025 GMT
        Subject: CN=9b136114de295fe1d33888bfa0a4dee79c7fe87b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:02:da:2c:7d:10:46:01:b7:5c:30:38:88:c6:
                    3a:2a:29:c8:d1:15:35:f2:9b:7d:c1:08:d4:58:6d:
                    29:9f:f4:a0:02:8b:87:c6:5f:55:20:7e:c2:d3:5d:
                    fb:50:fd:2f:ff:33:68:1a:a6:11:f8:6a:ec:eb:a5:
                    5a:f4:c1:5f:7f:39:83:84:1e:46:82:e9:a1:bc:ca:
                    db:c6:dc:b6:c9:0b:60:3c:c7:87:fb:0b:07:90:66:
                    00:6b:ff:55:8b:95:12:fb:2d:79:be:2d:43:39:5f:
                    b9:73:66:8f:61:05:23:38:14:e5:cd:43:29:89:e6:
                    c9:c5:fb:ee:d0:ee:f1:48:24:8a:7d:b4:bd:92:dd:
                    be:5c:d1:43:ee:e8:d4:ab:8f:f4:57:58:f6:ee:33:
                    87:2c:34:e1:dc:fa:4e:49:3f:8b:19:60:fd:5e:44:
                    f7:d0:6f:36:9c:ac:68:11:41:94:83:8f:c3:2c:26:
                    e3:d5:93:8b:c2:61:17:39:97:9f:41:63:36:af:e8:
                    7f:83:0b:31:86:94:f7:d4:ea:29:d4:74:1e:b9:c6:
                    73:a7:da:d6:b0:f0:f5:c5:d0:d9:c4:56:32:19:50:
                    b8:7c:a3:ee:b8:1a:82:83:02:a6:ad:4b:f2:ca:9c:
                    e0:da:cc:d0:5b:47:41:de:73:f2:0c:83:18:f4:ea:
                    1a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:13:61:14:DE:29:5F:E1:D3:38:88:BF:A0:A4:DE:E7:9C:7F:E8:7B
            X509v3 Authority Key Identifier:
                keyid:59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:b9:c0:61:51:13:9b:2a:f3:14:3c:cb:15:7b:84:1b:af:5a:
         10:c6:6f:a2:1f:52:db:79:79:2d:6a:55:4c:89:1e:0d:bf:2b:
         01:16:4b:1f:b7:f4:e3:9b:f0:06:84:f2:33:f0:8f:0d:06:d7:
         16:92:da:97:eb:0d:ec:51:99:4c:65:73:30:8b:09:fc:d6:c9:
         93:5a:d0:fb:49:b2:59:83:fb:a8:bd:e0:a6:5a:9b:cc:67:1f:
         a1:e9:dc:b1:8d:80:cd:b3:db:d3:21:62:fa:a3:f9:c3:b1:0e:
         d5:0c:9d:1a:77:68:06:3f:fb:49:d8:49:ba:02:5a:72:4e:ad:
         56:bc:9a:6f:05:b1:65:ba:97:a7:2a:7b:98:5e:94:06:b2:ad:
         e1:93:a4:1a:bf:ae:4f:9a:55:08:0d:66:2d:a8:3f:fa:53:14:
         ca:ca:f5:0d:0d:c8:33:a1:e4:f5:18:65:4d:a0:6f:73:66:83:
         db:14:6f:b8:b2:f9:e2:d4:1b:9a:fb:8b:7c:d7:fd:39:01:5c:
         20:1c:b6:1c:3d:58:f7:8b:1c:19:41:ec:17:60:c5:03:31:77:
         6d:29:9d:27:40:10:0e:ab:57:f9:7b:fb:59:8f:d6:16:8b:91:
         73:83:e9:6a:e2:15:da:6d:67:09:0d:30:62:b8:1b:47:c3:32:
         93:1c:8c:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxLe6lXdQtIBQlpmuHpPicMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NTUxMjA2OWU2NWM1OTA4MDJlY2U1YmY3YmQ4N2U2NmI4
ZjM1ZDMwHhcNMjUxMjA2MDEwMTUwWhcNMjUxMjA3MDEwMTUwWjAzMTEwLwYDVQQD
Eyg5YjEzNjExNGRlMjk1ZmUxZDMzODg4YmZhMGE0ZGVlNzljN2ZlODdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9gLaLH0QRgG3XDA4iMY6KinI0RU1
8pt9wQjUWG0pn/SgAouHxl9VIH7C0137UP0v/zNoGqYR+Grs66Va9MFffzmDhB5G
gumhvMrbxty2yQtgPMeH+wsHkGYAa/9Vi5US+y15vi1DOV+5c2aPYQUjOBTlzUMp
iebJxfvu0O7xSCSKfbS9kt2+XNFD7ujUq4/0V1j27jOHLDTh3PpOST+LGWD9XkT3
0G82nKxoEUGUg4/DLCbj1ZOLwmEXOZefQWM2r+h/gwsxhpT31Oop1HQeucZzp9rW
sPD1xdDZxFYyGVC4fKPuuBqCgwKmrUvyypzg2szQW0dB3nPyDIMY9OoaqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJsTYRTeKV/h0ziIv6Ck3uecf+h7MB8GA1UdIwQY
MBaAFFlVEgaeZcWQgC7OW/e9h+ZrjzXTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1ZVU0JwNWx4WkNBTHM1Yjk3Mkg1bXVQTmRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8xYmVkMTctNWUzMy00M2ExLWJiOGYt
NDNhNDNkYTkyODlhLzEvV1ZVU0JwNWx4WkNBTHM1Yjk3Mkg1bXVQTmRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8xYmVkMTctNWUzMy00M2ExLWJiOGYtNDNhNDNkYTkyODlh
LzEvV1ZVU0JwNWx4WkNBTHM1Yjk3Mkg1bXVQTmRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn7nAYVET
myrzFDzLFXuEG69aEMZvoh9S23l5LWpVTIkeDb8rARZLH7f045vwBoTyM/CPDQbX
FpLal+sN7FGZTGVzMIsJ/NbJk1rQ+0myWYP7qL3gplqbzGcfoencsY2AzbPb0yFi
+qP5w7EO1QydGndoBj/7SdhJugJack6tVryabwWxZbqXpyp7mF6UBrKt4ZOkGr+u
T5pVCA1mLag/+lMUysr1DQ3IM6Hk9RhlTaBvc2aD2xRvuLL54tQbmvuLfNf9OQFc
IBy2HD1Y94scGUHsF2DFAzF3bSmdJ0AQDqtX+Xv7WY/WFouRc4PpauIV2m1nCQ0w
YrgbR8MykxyMDA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:09:46 2025 by rpki-client