This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.mft
File:                     wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.mft (raw, json)
Hash identifier:          Bsjdjrom05tBA1qHl1BsQFJup1NTEOfCzVuNuXIGyaQ=
Subject key identifier:   56:B9:FE:6E:C9:98:AA:29:31:A5:EA:D4:64:DC:59:76:F4:60:39:0A
Authority key identifier: C0:FE:C1:78:76:3A:70:1E:22:11:67:2E:2E:36:E6:D5:27:F4:1F:3D
Certificate issuer:       /CN=c0fec178763a701e2211672e2e36e6d527f41f3d
Certificate serial:       019AF088B8CA92AC3BC0EE553A6B8844F758
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.mft
Manifest number:          16F6
Signing time:             Fri 05 Dec 2025 22:01:23 +0000
Manifest this update:     Fri 05 Dec 2025 22:01:23 +0000
Manifest next update:     Sat 06 Dec 2025 22:01:23 +0000
Files and hashes:         1: 1gW4wInA_dSwaTybzK2cECnN9GM.roa (hash: lDMswWk6x4gxqUk8wVyldaT2YU119AYZXfT2M/CJ54Y=)
                          2: wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.crl (hash: tTdfrY9UO3ScgxjxD44MT4OYSuGdxb+EH+DelPOzXdk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 22:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:88:b8:ca:92:ac:3b:c0:ee:55:3a:6b:88:44:f7:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0fec178763a701e2211672e2e36e6d527f41f3d
        Validity
            Not Before: Dec  5 22:01:23 2025 GMT
            Not After : Dec  6 22:01:23 2025 GMT
        Subject: CN=56b9fe6ec998aa2931a5ead464dc5976f460390a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:43:5f:0b:01:3b:f9:d5:6e:7b:c0:0b:9f:49:
                    cf:7b:bc:b8:53:b3:98:28:be:a5:d6:3b:64:65:77:
                    a1:46:2f:bc:fd:93:ea:3e:a8:a0:0c:60:f2:2b:4f:
                    25:b6:df:02:aa:9f:be:43:7c:33:6c:2c:19:20:41:
                    72:5b:56:40:2b:0f:f8:3c:3b:65:5e:34:c0:bc:07:
                    ba:34:2d:c3:5d:1c:80:58:df:06:11:11:57:15:22:
                    f5:87:4f:70:ab:f9:f1:9a:40:a0:c9:47:87:ff:37:
                    0e:c0:2f:31:94:6e:3b:b7:91:95:47:ca:6b:91:f4:
                    5f:26:b6:58:89:0b:66:f4:d4:a1:a5:f1:b9:49:5b:
                    ba:24:eb:18:a6:57:d7:72:c2:fe:ad:2f:db:c2:54:
                    a3:d5:34:11:07:f3:3b:fd:cd:6f:3d:7a:70:8c:1f:
                    ee:91:e5:5d:6c:7b:c9:b6:e8:e2:98:56:58:94:37:
                    84:5d:fc:63:41:f8:f8:15:59:ed:3e:f3:ec:48:07:
                    e8:8c:c1:1a:e6:b2:25:c4:a9:43:a0:be:b6:94:b5:
                    a5:01:9b:21:6b:39:54:bf:08:f4:e1:69:63:87:41:
                    d3:d9:c7:48:3e:c4:1c:15:43:d0:08:07:b4:75:af:
                    bb:75:e0:95:e5:7b:0d:a0:0d:bd:23:8d:b6:88:a3:
                    7e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B9:FE:6E:C9:98:AA:29:31:A5:EA:D4:64:DC:59:76:F4:60:39:0A
            X509v3 Authority Key Identifier:
                keyid:C0:FE:C1:78:76:3A:70:1E:22:11:67:2E:2E:36:E6:D5:27:F4:1F:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:60:e2:f2:1d:30:91:2f:15:c6:78:4d:82:01:08:4b:70:10:
         7d:0a:10:f5:72:d8:26:6f:de:8f:bd:d1:b2:04:9d:86:7f:b5:
         1e:77:65:9c:b1:b2:9a:37:c5:bb:72:8b:15:ff:35:d5:1e:f6:
         9b:a7:e6:f2:bc:ef:5e:a6:f8:73:8c:67:fe:60:76:be:b7:8a:
         4f:d8:9e:b2:a4:ee:fd:24:fa:3e:35:29:04:52:a7:4b:af:f6:
         18:a1:a8:65:55:c3:35:4c:3a:fd:85:11:5f:d7:1a:fc:20:10:
         42:a9:e0:59:b9:6e:6a:88:c7:34:2a:3d:62:88:aa:70:07:d9:
         b2:8f:dc:8a:5c:5d:20:77:64:5e:0b:87:3a:62:87:fb:90:62:
         51:0b:f7:9f:ac:37:62:a3:12:a9:34:7d:99:ab:d4:1d:ea:06:
         d7:91:93:a8:52:25:73:e8:f5:e3:e0:ed:17:fa:89:4a:3f:7e:
         3b:88:39:96:f6:0f:3d:00:fd:20:d0:af:38:f4:b6:dc:71:6a:
         f7:3a:39:2f:5d:37:9d:88:21:95:89:2d:7d:d1:dd:a9:b7:9c:
         26:cf:e1:b7:85:74:c3:da:d0:d9:aa:f5:ca:45:35:b5:de:7f:
         78:09:fc:1b:62:bd:5f:1b:e5:b7:10:4a:69:a9:a2:22:e4:2a:
         00:f1:d6:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrwiLjKkqw7wO5VOmuIRPdYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZmVjMTc4NzYzYTcwMWUyMjExNjcyZTJlMzZlNmQ1Mjdm
NDFmM2QwHhcNMjUxMjA1MjIwMTIzWhcNMjUxMjA2MjIwMTIzWjAzMTEwLwYDVQQD
Eyg1NmI5ZmU2ZWM5OThhYTI5MzFhNWVhZDQ2NGRjNTk3NmY0NjAzOTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0NfCwE7+dVue8ALn0nPe7y4U7OY
KL6l1jtkZXehRi+8/ZPqPqigDGDyK08ltt8Cqp++Q3wzbCwZIEFyW1ZAKw/4PDtl
XjTAvAe6NC3DXRyAWN8GERFXFSL1h09wq/nxmkCgyUeH/zcOwC8xlG47t5GVR8pr
kfRfJrZYiQtm9NShpfG5SVu6JOsYplfXcsL+rS/bwlSj1TQRB/M7/c1vPXpwjB/u
keVdbHvJtujimFZYlDeEXfxjQfj4FVntPvPsSAfojMEa5rIlxKlDoL62lLWlAZsh
azlUvwj04Wljh0HT2cdIPsQcFUPQCAe0da+7deCV5XsNoA29I422iKN+kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFa5/m7JmKopMaXq1GTcWXb0YDkKMB8GA1UdIwQY
MBaAFMD+wXh2OnAeIhFnLi425tUn9B89MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1A3QmVIWTZjQjRpRVdjdUxqYm0xU2YwSHowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi80OTJlNTYtMGJhZS00NjFhLThmNjUt
MDM5MGVkNzczMmE1LzEvd1A3QmVIWTZjQjRpRVdjdUxqYm0xU2YwSHowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi80OTJlNTYtMGJhZS00NjFhLThmNjUtMDM5MGVkNzczMmE1
LzEvd1A3QmVIWTZjQjRpRVdjdUxqYm0xU2YwSHowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf2Di8h0w
kS8VxnhNggEIS3AQfQoQ9XLYJm/ej73RsgSdhn+1HndlnLGymjfFu3KLFf811R72
m6fm8rzvXqb4c4xn/mB2vreKT9iesqTu/ST6PjUpBFKnS6/2GKGoZVXDNUw6/YUR
X9ca/CAQQqngWbluaojHNCo9YoiqcAfZso/cilxdIHdkXguHOmKH+5BiUQv3n6w3
YqMSqTR9mavUHeoG15GTqFIlc+j14+DtF/qJSj9+O4g5lvYPPQD9INCvOPS23HFq
9zo5L103nYghlYktfdHdqbecJs/ht4V0w9rQ2ar1ykU1td5/eAn8G2K9XxvltxBK
aamiIuQqAPHW9g==
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:55:23 2025 by rpki-client