This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
File:                     WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft (raw, json)
Hash identifier:          AW/WzhkEPuztw/cOtM7eSZQWIF9rT+pizF2tKsm4PmU=
Subject key identifier:   21:8C:88:2B:F0:CF:D2:4F:90:A1:34:30:D9:8B:60:AC:F4:B0:20:82
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Certificate issuer:       /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial:       019AF2764A115B26DCA5C21CF043E749960B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
Manifest number:          1785
Signing time:             Sat 06 Dec 2025 07:00:29 +0000
Manifest this update:     Sat 06 Dec 2025 07:00:29 +0000
Manifest next update:     Sun 07 Dec 2025 07:00:29 +0000
Files and hashes:         1: 0g_w6YcqkLlM__RNoeM89PgWJVY.roa (hash: qsdLqRictbPhgpS0iJ/gJd3ajZW+7hAH4PSI2td7aI4=)
                          2: 0yv-YpT7EAlDFfaPmF8_vcpGZrw.roa (hash: FCFF4a6p1Kz9hIASitWn3Cuesp3ppA1vaf6u6HK9VUE=)
                          3: 2aZUesyn49QKctastVKzOPCfQ4w.roa (hash: HfxVkx+IdJ9mebTCZylb1qWvTCSUSDeW5EtiRH5D4Q8=)
                          4: 4hbMBM1nzDwcq0Z5poawjitTY60.roa (hash: XP1CU+CY23GAE6mFffgmeePRICbliFurLSIMPRQ5f40=)
                          5: 6u5_sP4IhyoWqEDQ2t9dx963QRY.roa (hash: Pbx79AK3bEc8t4PUDhO4smxz6yCZ8d6bcYa/ZleseH4=)
                          6: 7WcUp7VboIfJPuJw_2eN0YJowc0.roa (hash: hMptUTx/SKmaFCbNu4ZMxGpB4nXnLhPIpWMOPwFNEdE=)
                          7: 83DWjPDI0qHPOk7NLbQWjtD2D1c.roa (hash: AxnYuoBRuJSqvAH9Bx3fTRR+QoVXwEkv5G6gCkg2Bao=)
                          8: 9IywKX9fS2qo6y4BwiBKFOJ_RRo.roa (hash: Ac1uBlsnhCZRDyKHF7yrUh45o1zwGsvgTvH8xD0tKfw=)
                          9: D1fRR18dq9Gv4qp3l9TcLZyyEDI.roa (hash: +8YA8GsmgHc3axYa2P7GfhxaqtQ7FE/tjUAeHRPwr9g=)
                          10: GKke9u-g19ORaszjeZzhH6pAcUM.roa (hash: xdtY9xo6gnGlpB3ETcBJ3YBkjHIlQqwLDRHWq8GtahI=)
                          11: Ig1WTTEJWSAB8ImVaoKPLwHQgbc.roa (hash: UMRsVJllHBv632Y31OJYoImld0QNRvOFUdYe6AzQydE=)
                          12: LiXlLYugCW3RvOnr1LPH06hCFi0.roa (hash: AkKrdcEERtDNg9ZG/4NBwA8HSdB0PAY609q2G2KM1cI=)
                          13: MuhZENJ3uiS0ZLICsw8YvVd5XCg.roa (hash: GVdQwmm/GEsuTxQT2d82fu03I2oER6Gn8uNRiFIWe0Q=)
                          14: N5rVf1hY_OzEZp1xY8pg3j4it1A.roa (hash: Ue3CSgwWVTQ+G81bsGOQJFm164xkm8Ru6ylUCKhvmpA=)
                          15: NKkYiFJn1s2WgleQ4AP23RspTLQ.roa (hash: ZWB9OaLcmJzVZyAY2vxQN6pq/rnTZE2SqRawNV1XHtQ=)
                          16: NzEriaZTpDkqwVRNF_I3q26fJac.roa (hash: 5HBSEtVrkCJbGySatpCNL7zvqvX7ECzhRNaOA0/PR/E=)
                          17: SOIu77MViH9HrW2wOhBa4ctl-s4.roa (hash: EeJItN2QFTFRmLAW0Mvz7rV5W+XgeuLcsUy4tvkAsoI=)
                          18: TDV0BLKDE1p7Ns450Mfu7Kq6ad8.roa (hash: lTO5embQ4JVR03qf/66D4vxj/cbH77aYRTX0QvQ4wLY=)
                          19: TaAWX6RunIkoavVYyto4LyLZbsg.roa (hash: LLRLNHFstGywhUJHWDeOxplmy9vdy8UuI67N0/rWKkI=)
                          20: TrNpgEA5Yo4G8pYTiDEEM8RTN1Q.roa (hash: B5zXgfACIl25xPnTSaAHMdsXteG31N7jakFIWo/jhH4=)
                          21: UQnmCoONwiJ5kPJipbbPRWpehRQ.roa (hash: R7SJq+v1gPef9CcZYgNLA5yueggHvGhRS4pnX+i+42s=)
                          22: WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl (hash: 0TCsDGhM8qbSlz07XAnZc2l5fj2QrSqzf+kqtImIPyI=)
                          23: WJFDvIJS5VxJPhXMRZ7xWWjaaEY.roa (hash: OpV4tgEanecwJP3L/2htD3wFwFErrWLFYPu5S83daZo=)
                          24: Wj9UBZ8lyGpizZyCVs5Soop7w2k.roa (hash: nghObD8IVMMvgf7Cs34GYm/ZtGFtMr/E9cOGO8F0TDk=)
                          25: iystaYSJXuGKhhCiyAWE4u7UEyk.roa (hash: XXypNZES5+tt8lWlXBej3/0Gq3tgIRPeDyU4cGhm/qQ=)
                          26: j8S8_OZUpxB9k7LHRFPXRAKfkWU.roa (hash: k8mQUf/NuQPokL0zcpiZfvFdtMY/J1/bRRQuRB+KB/M=)
                          27: qMr-LBReCBqYRhVBoJttXFZAERs.roa (hash: +wcj7meQsd/DFjEen1Pm4EtbrLhEFNBjzasK/qwIzFY=)
                          28: skag_VnN9GBJjb3tko75iVexHSM.roa (hash: C1SS1bYL61kZQdi8QWgGkq7ptTOfGOQLi9q7iiXlFU0=)
                          29: tyXTbOM2aibhtKIwqQDtVCtGWJA.roa (hash: cM4UhLIAVQkV+usljCsAJQWlgEI7aeqYZYi2MZfQYFw=)
                          30: vWXWhkktZWC2_i0zKz5vdi-IvuE.roa (hash: D7lRMIA1f5sBgefITMxbK3yGHotRr10qyY6m4yVQx28=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:4a:11:5b:26:dc:a5:c2:1c:f0:43:e7:49:96:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
        Validity
            Not Before: Dec  6 07:00:29 2025 GMT
            Not After : Dec  7 07:00:29 2025 GMT
        Subject: CN=218c882bf0cfd24f90a13430d98b60acf4b02082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:23:b9:0d:ff:50:4c:c3:09:89:0b:c0:2c:09:
                    60:88:3a:7c:2a:d2:9b:ac:f6:c4:67:7c:db:f4:48:
                    8e:d5:b2:ac:a0:45:66:95:d8:86:b1:75:1f:fe:8c:
                    a2:4a:76:ce:96:73:e7:31:0f:1e:d1:1b:f8:9a:f2:
                    65:e9:cf:df:a8:a5:07:49:f0:1f:dc:f0:84:d5:09:
                    dc:c8:c4:8f:16:c1:bb:25:f5:91:41:44:84:25:01:
                    41:2f:75:67:fd:ef:fd:87:ee:7e:75:72:4d:a5:60:
                    e4:ad:fe:7d:15:43:94:7b:61:c3:c7:7e:09:32:90:
                    1e:10:e5:3c:13:83:d0:e2:97:6f:99:d9:04:5f:6c:
                    24:b3:7e:98:a2:c3:48:ee:e7:23:52:c0:00:10:fe:
                    5a:28:ea:22:04:00:af:ba:4d:ba:9f:43:76:8e:2e:
                    eb:79:1d:37:5a:3b:ac:a2:68:83:e0:94:80:b2:ad:
                    f2:29:d3:a0:6e:c4:79:ff:4e:b8:90:bf:be:26:90:
                    4c:2a:ba:9e:3c:78:96:22:52:c8:9d:59:05:5d:90:
                    17:2f:f6:48:23:86:66:49:19:5e:8b:bb:a1:8b:08:
                    b9:85:bb:52:fe:e9:b6:44:d1:8e:46:f7:a2:e7:89:
                    c6:06:7d:7f:9d:cc:97:5b:55:7a:a1:f8:01:7a:6b:
                    45:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:8C:88:2B:F0:CF:D2:4F:90:A1:34:30:D9:8B:60:AC:F4:B0:20:82
            X509v3 Authority Key Identifier:
                keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:5b:db:f8:43:ca:0d:64:48:51:64:63:62:4d:54:54:8b:29:
         a9:1a:ed:b6:b7:b2:0c:03:79:e2:cc:6e:78:d4:9e:be:c0:70:
         6b:7b:de:3e:02:f8:03:fa:ee:e3:83:f6:29:b8:63:20:bc:59:
         ce:43:dc:29:02:62:0c:9e:2c:0a:71:50:31:7e:ba:3c:d6:67:
         9c:e9:66:dc:04:93:05:ee:c2:f8:69:fd:10:93:db:09:bf:f1:
         08:9d:67:7f:77:61:41:9d:b2:e1:f9:19:f9:73:a9:b7:8f:86:
         eb:5f:f4:4b:4b:c7:3a:08:ef:c7:e4:1b:3f:72:ef:88:0d:de:
         a4:58:af:1f:53:3f:ac:5c:da:c3:63:a1:f3:11:f4:a9:ca:0a:
         ee:4e:4e:fe:e2:22:0c:90:ed:8c:5b:95:76:f7:33:f6:2e:d9:
         1a:74:7a:85:90:86:7c:14:a4:69:20:c1:3e:a0:cd:52:17:cd:
         7f:d2:07:9d:e5:aa:0c:90:04:a6:57:a0:db:6d:2d:04:cd:c0:
         35:66:0b:8d:a6:c6:ad:a2:b0:1a:96:6c:db:24:ec:39:42:20:
         e9:2d:47:52:82:91:87:e9:01:ce:e7:49:72:84:f5:3a:d5:ce:
         19:da:fe:20:d1:82:18:bd:51:01:50:8d:dd:92:de:b8:c6:e3:
         f7:cb:4a:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrydkoRWybcpcIc8EPnSZYLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3
YjBhODgwHhcNMjUxMjA2MDcwMDI5WhcNMjUxMjA3MDcwMDI5WjAzMTEwLwYDVQQD
EygyMThjODgyYmYwY2ZkMjRmOTBhMTM0MzBkOThiNjBhY2Y0YjAyMDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyO5Df9QTMMJiQvALAlgiDp8KtKb
rPbEZ3zb9EiO1bKsoEVmldiGsXUf/oyiSnbOlnPnMQ8e0Rv4mvJl6c/fqKUHSfAf
3PCE1QncyMSPFsG7JfWRQUSEJQFBL3Vn/e/9h+5+dXJNpWDkrf59FUOUe2HDx34J
MpAeEOU8E4PQ4pdvmdkEX2wks36YosNI7ucjUsAAEP5aKOoiBACvuk26n0N2ji7r
eR03WjusomiD4JSAsq3yKdOgbsR5/064kL++JpBMKrqePHiWIlLInVkFXZAXL/ZI
I4ZmSRlei7uhiwi5hbtS/um2RNGORvei54nGBn1/ncyXW1V6ofgBemtFnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCGMiCvwz9JPkKE0MNmLYKz0sCCCMB8GA1UdIwQY
MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt
ZGE2MTUzODg1ZjNiLzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGItZGE2MTUzODg1ZjNi
LzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjFvb+EPK
DWRIUWRjYk1UVIspqRrttreyDAN54sxueNSevsBwa3vePgL4A/ru44P2KbhjILxZ
zkPcKQJiDJ4sCnFQMX66PNZnnOlm3ASTBe7C+Gn9EJPbCb/xCJ1nf3dhQZ2y4fkZ
+XOpt4+G61/0S0vHOgjvx+QbP3LviA3epFivH1M/rFzaw2Oh8xH0qcoK7k5O/uIi
DJDtjFuVdvcz9i7ZGnR6hZCGfBSkaSDBPqDNUhfNf9IHneWqDJAEpleg220tBM3A
NWYLjabGraKwGpZs2yTsOUIg6S1HUoKRh+kBzudJcoT1OtXOGdr+INGCGL1RAVCN
3ZLeuMbj98tKHw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:22:02 2025 by rpki-client