This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
File:                     W1JjSi6wP4VlteM9wrn0kEH3z7A.mft (raw, json)
Hash identifier:          dDnzziqvivWOwjWa5AQS7AiLgA33sPazQkblNegBBIY=
Subject key identifier:   B2:79:BE:E9:09:BB:CB:D7:AA:73:D3:54:92:22:CF:B1:E8:74:6D:1A
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Certificate issuer:       /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial:       019AF49BDF7E7C91F057284FB32A0F2C5E09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
Manifest number:          179B
Signing time:             Sat 06 Dec 2025 17:00:47 +0000
Manifest this update:     Sat 06 Dec 2025 17:00:47 +0000
Manifest next update:     Sun 07 Dec 2025 17:00:47 +0000
Files and hashes:         1: 2WxqwaZAVv2dyvITo-AesFShXVA.roa (hash: 6t+meRGm9n30GD2goCpBFQRLPzip0i8RlRot9CqnzDs=)
                          2: 7sYC2HPXTRXSgFwGJBI_aMn1Sls.roa (hash: jNxwvCYUNHETc1lJzQ1miztj7GesEWdkNQJ05PgoDvM=)
                          3: GqSZzRT-6EUjEpPpSprb5uTXjdY.roa (hash: R5dBboLAVD51kW1cDVdwcoH+HEQsopVvdEZu8XFQjoA=)
                          4: IJUrnOsXqWHMR09b2WThxrOzZ7I.roa (hash: pLY1rvU8nCKjlyh0WPOsU89VyudJIjrK5QOTjl/IWbY=)
                          5: LRiyT-rlzmXrQXbcYMWhBU482eg.roa (hash: ICoe3kPCb8Fc28l3cr0GMLtrwRJd+KH/IvmqLhqbyWo=)
                          6: Nlgb7JYdYFon3ATeZJpEg1k27pw.roa (hash: NSOx98amr5Ih2M9Z5olSG0RUve4KE3kRKxU5Wk0rOgM=)
                          7: OL--k4HWjTYCqoOiHkb6J7Zbllc.roa (hash: JA4H42s/1jVK78rUsdByr4/C6vbBqxY7qzGRzKdj1HE=)
                          8: RdMfFmFjHDJDX_-5uaaUXQKDls0.roa (hash: O6jVvm7OX0OHLjep55ba573pokqJBTfgyVcBvBUtHtI=)
                          9: UtNq26d9JSb_Nw7v93_rZSfntfI.roa (hash: BwxbdOm0odI7W9CsiapOsPFRt2svrB57iDDfUu1jOsA=)
                          10: W1JjSi6wP4VlteM9wrn0kEH3z7A.crl (hash: ohaXhFPlDz+lFAkobBvTwCa1qPWP/cRVkHtm/dBa87U=)
                          11: XoEgN8Rzf-_O70nBq2ov0ajUPeY.roa (hash: Uqsa+8GNjpiZZotqp2+P9cchtd9l85RTnq9RE86H8w8=)
                          12: dx_5lNWl8316FN21jYYHgM9Omcg.roa (hash: Qr4/FlwcX1RS39pjsqMjlcq6atyfDlGR+M4UNYZEX2I=)
                          13: e2cInBTd-rmGJiE7XxhPPld1Ulg.roa (hash: IvekKh/rpFdvGGB9vKZ/0VojUSPhCbP5Lk2iZ/nlU9g=)
                          14: eRoiwHCGGWzsakU0Sd9_pvvGdAc.roa (hash: rIC53m0wk/AEJI6S30/Y82l7fTBuA5MUe7EOXE+qyks=)
                          15: iXyw4CJeCTCBDoOmqw9S5M03Oho.roa (hash: /0Njq6baGydQf0hCnZDNdpKQZB7dTLuwHGMng0slCJk=)
                          16: pM84h9NKkkwXGLtMIPbJpgkc55c.roa (hash: kTHVs/be3Tv2n1C0vv3DFuVKeuz0WY3EFxZXtvfz3Os=)
                          17: vQsJW15dMwHZY104nt15UgW_JpU.roa (hash: Wpy6rJjJCiowwMoCuc7Oz0XTeA0XwRwWa9jhMg3QDw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:9b:df:7e:7c:91:f0:57:28:4f:b3:2a:0f:2c:5e:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
        Validity
            Not Before: Dec  6 17:00:47 2025 GMT
            Not After : Dec  7 17:00:47 2025 GMT
        Subject: CN=b279bee909bbcbd7aa73d3549222cfb1e8746d1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8f:8a:c0:b9:95:9a:eb:b5:1c:75:12:53:c9:
                    a0:21:e1:39:f6:ad:df:7f:21:1e:5d:b5:4c:69:a9:
                    41:63:86:78:21:35:78:b2:f1:e0:b9:03:8e:aa:19:
                    2b:fa:71:10:d3:10:5f:30:f0:f5:62:e4:af:8c:86:
                    44:2f:bc:a4:85:9b:06:6a:40:0b:53:5a:de:e4:50:
                    09:e7:32:5e:ed:c8:ee:d4:d3:61:1d:9e:ae:19:a8:
                    dd:71:8a:2e:0e:09:40:e1:a3:d5:5f:bc:75:0c:0e:
                    4a:70:96:68:ad:87:ba:3c:2a:e1:fd:97:5e:bf:0d:
                    a0:87:f7:a7:eb:22:7d:03:fd:e0:c8:11:9c:23:b3:
                    35:20:62:6e:58:09:38:73:e9:db:6b:46:93:ad:40:
                    c0:2e:68:3b:a7:6c:9d:c9:01:e6:2f:21:28:0c:77:
                    60:78:f5:19:13:08:4d:65:e0:3b:f1:1c:fd:50:e6:
                    22:85:3d:85:50:c8:09:29:4d:ce:07:30:e6:b5:05:
                    4d:97:b9:5a:83:b3:93:67:a3:cc:66:5a:e6:ff:03:
                    94:21:b9:9e:84:96:c4:cc:fa:4e:c4:3a:ec:e8:ef:
                    57:c4:7f:f4:ce:9e:04:bc:0e:bc:4d:25:45:a4:4d:
                    5e:78:13:94:9c:aa:57:6d:22:b0:6f:1e:60:b9:c9:
                    cb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:79:BE:E9:09:BB:CB:D7:AA:73:D3:54:92:22:CF:B1:E8:74:6D:1A
            X509v3 Authority Key Identifier:
                keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:35:a4:db:62:e1:66:a1:a2:5f:b0:c9:ee:e3:dc:a3:0a:09:
         56:25:90:62:cf:3d:0f:1b:73:c7:3d:4a:22:ce:07:9f:21:e9:
         29:f4:5b:59:00:d3:81:09:dd:f9:89:89:4b:ef:db:81:c8:c1:
         0b:5a:00:09:ed:e3:50:37:12:8c:2d:47:2b:6d:78:70:31:f0:
         98:3c:3a:88:5e:bb:20:a0:21:9f:b5:e5:e1:19:c5:25:7b:c5:
         34:c3:04:ac:6b:b7:84:18:f6:f7:fc:eb:de:df:19:c5:7a:00:
         46:b5:8d:d8:89:0d:63:44:78:6a:70:06:5c:55:77:27:cd:72:
         e9:90:13:99:a5:8e:02:1d:b0:ea:a2:0a:c1:86:11:c3:37:97:
         25:17:9e:71:50:6c:3f:74:0d:55:42:b3:63:dc:3a:7e:e2:4b:
         54:b5:04:71:2c:25:5d:6d:3d:d2:9c:af:04:29:53:73:9b:80:
         55:82:27:63:3a:4f:d7:df:58:fd:dd:1a:59:2d:ad:ba:0e:33:
         3e:2a:10:4a:c0:16:2a:28:dd:60:9a:64:6a:d6:99:5f:ac:ed:
         11:ae:5d:18:57:f6:a1:76:08:96:ea:99:aa:2e:d1:68:75:a1:
         76:a3:c0:79:e6:2b:f3:53:51:40:81:c8:96:17:4a:c9:60:76:
         b4:ff:79:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:06:52 2025 by rpki-client