This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
File:                     WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft (raw, json)
Hash identifier:          a2s7BOFh/xnnhLBSxQiXyTvjyVb/o6k0lQlJSWn+qzo=
Subject key identifier:   9A:69:28:8A:1C:B4:E1:8D:DE:20:15:7A:48:B1:11:91:B7:03:63:29
Authority key identifier: 58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
Certificate issuer:       /CN=58a127453dfba17e10c347fa34bbebab14905a57
Certificate serial:       019AF1D24A0C49F37F7C358469A54D52326F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
Manifest number:          086F
Signing time:             Sat 06 Dec 2025 04:01:21 +0000
Manifest this update:     Sat 06 Dec 2025 04:01:21 +0000
Manifest next update:     Sun 07 Dec 2025 04:01:21 +0000
Files and hashes:         1: 2symQxt9tiTp5JPRu9SVrhpHnoI.roa (hash: ETxwfWEk5Ji119X6QNRzmnwtDjfSz5qCO5WUq2I4qpI=)
                          2: WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl (hash: tjCBIPTKp1MN9oaZYGbmsnfqJ+gcNGelogvauOAWoTs=)
                          3: aiepDcInSC7XQM1NAo38Ltggcos.roa (hash: 6COc/WNOkQasZPkjRm4nKC/vd3bNAbojTsGDQ+J1+tY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 04:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d2:4a:0c:49:f3:7f:7c:35:84:69:a5:4d:52:32:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58a127453dfba17e10c347fa34bbebab14905a57
        Validity
            Not Before: Dec  6 04:01:21 2025 GMT
            Not After : Dec  7 04:01:21 2025 GMT
        Subject: CN=9a69288a1cb4e18dde20157a48b11191b7036329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f1:f0:99:f4:6b:3f:aa:3a:ae:8a:a4:a4:8c:
                    01:c1:f9:7c:26:65:90:37:ce:bc:93:a2:3f:2f:cf:
                    cf:66:37:7d:7a:2e:9b:16:8d:3c:b5:bc:2b:13:89:
                    c3:d1:c9:4c:f7:04:5a:97:2c:ed:c3:e7:e8:34:fe:
                    76:87:c0:58:06:30:43:dc:1a:ad:27:a1:b1:7e:23:
                    6e:31:df:a1:2e:7d:0a:f2:9e:04:07:2c:7a:20:36:
                    d8:cb:bc:c0:8a:1f:42:02:bd:54:bb:06:14:c8:28:
                    b8:ad:73:e0:a9:e0:4e:6f:7b:04:9e:a8:ec:d1:7f:
                    32:cb:41:a6:fc:d4:a5:bc:9a:e6:2c:1b:13:45:6c:
                    5a:19:e6:d3:5e:aa:1f:ea:42:b9:d0:3c:94:8f:d1:
                    1a:a7:8b:47:38:23:f1:9a:cb:b7:cf:4c:6c:42:d8:
                    1e:5c:a8:17:a9:25:25:08:77:88:75:3b:96:e4:f8:
                    0d:12:79:af:6d:e4:1d:16:7a:0f:9b:a3:8c:ab:d9:
                    cf:13:0b:c3:e1:57:65:57:03:8c:95:60:83:f7:d7:
                    7a:60:52:21:08:38:4e:9e:c0:ff:27:2e:cf:ba:9f:
                    65:7d:d5:3b:bf:5c:fb:67:0b:4b:f3:fe:4d:62:e4:
                    06:7c:8c:98:ab:59:aa:c4:f1:eb:22:05:32:74:6a:
                    90:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:69:28:8A:1C:B4:E1:8D:DE:20:15:7A:48:B1:11:91:B7:03:63:29
            X509v3 Authority Key Identifier:
                keyid:58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:80:ce:c3:6a:92:60:2e:81:ac:bf:3d:e1:66:c4:a9:fa:e9:
         eb:6f:4c:2c:bb:38:2b:bc:55:2f:18:9c:d3:b1:e0:ed:dc:f7:
         0c:fb:47:3e:e0:db:d9:90:aa:2f:fb:2c:46:b2:d0:2f:d2:86:
         ef:7c:f4:e8:9e:91:dd:62:42:fc:57:7b:04:da:5c:d3:cb:45:
         84:f7:bd:d7:e7:36:78:cc:0f:98:19:8a:bc:7d:10:a8:60:73:
         77:11:14:e7:c9:ca:82:8e:3e:63:b0:bc:b4:fe:b6:af:54:03:
         a7:d9:fe:52:f4:de:ef:4f:b7:36:d3:28:fb:44:81:1b:d2:71:
         80:e9:22:17:8b:84:ea:aa:3b:be:e7:08:86:9d:c8:24:75:21:
         12:ab:d8:ff:40:0e:46:f1:e1:7a:ce:f1:6a:89:fc:32:52:d0:
         51:f9:fb:d9:03:d3:a6:74:58:f2:c8:f0:77:b8:3a:e9:e2:04:
         ef:00:e0:f5:93:1b:c8:b5:10:6c:ca:87:24:27:86:11:6b:92:
         5f:e6:7c:73:e6:82:88:b0:d9:53:e0:9c:7b:b2:52:4e:1e:be:
         93:67:8f:ed:80:16:ef:37:fc:4f:d7:cd:bf:fc:4e:1a:c9:d1:
         9d:66:2c:50:bb:b3:c7:2e:25:e4:7e:d0:d4:19:d2:ac:88:66:
         eb:6a:fc:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrx0koMSfN/fDWEaaVNUjJvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YTEyNzQ1M2RmYmExN2UxMGMzNDdmYTM0YmJlYmFiMTQ5
MDVhNTcwHhcNMjUxMjA2MDQwMTIxWhcNMjUxMjA3MDQwMTIxWjAzMTEwLwYDVQQD
Eyg5YTY5Mjg4YTFjYjRlMThkZGUyMDE1N2E0OGIxMTE5MWI3MDM2MzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfHwmfRrP6o6roqkpIwBwfl8JmWQ
N868k6I/L8/PZjd9ei6bFo08tbwrE4nD0clM9wRalyztw+foNP52h8BYBjBD3Bqt
J6GxfiNuMd+hLn0K8p4EByx6IDbYy7zAih9CAr1UuwYUyCi4rXPgqeBOb3sEnqjs
0X8yy0Gm/NSlvJrmLBsTRWxaGebTXqof6kK50DyUj9Eap4tHOCPxmsu3z0xsQtge
XKgXqSUlCHeIdTuW5PgNEnmvbeQdFnoPm6OMq9nPEwvD4VdlVwOMlWCD99d6YFIh
CDhOnsD/Jy7Pup9lfdU7v1z7ZwtL8/5NYuQGfIyYq1mqxPHrIgUydGqQCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJppKIoctOGN3iAVekixEZG3A2MpMB8GA1UdIwQY
MBaAFFihJ0U9+6F+EMNH+jS766sUkFpXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0tFblJUMzdvWDRRdzBmNk5MdnJxeFNRV2xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9mMWRmZTMtMjYwOS00NmI4LWIwM2Yt
ZGE5NjAxOWQ0YzIwLzEvV0tFblJUMzdvWDRRdzBmNk5MdnJxeFNRV2xjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9mMWRmZTMtMjYwOS00NmI4LWIwM2YtZGE5NjAxOWQ0YzIw
LzEvV0tFblJUMzdvWDRRdzBmNk5MdnJxeFNRV2xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcoDOw2qS
YC6BrL894WbEqfrp629MLLs4K7xVLxic07Hg7dz3DPtHPuDb2ZCqL/ssRrLQL9KG
73z06J6R3WJC/Fd7BNpc08tFhPe91+c2eMwPmBmKvH0QqGBzdxEU58nKgo4+Y7C8
tP62r1QDp9n+UvTe70+3NtMo+0SBG9JxgOkiF4uE6qo7vucIhp3IJHUhEqvY/0AO
RvHhes7xaon8MlLQUfn72QPTpnRY8sjwd7g66eIE7wDg9ZMbyLUQbMqHJCeGEWuS
X+Z8c+aCiLDZU+Cce7JSTh6+k2eP7YAW7zf8T9fNv/xOGsnRnWYsULuzxy4l5H7Q
1BnSrIhm62r8OA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:32:55 2025 by rpki-client