This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
File:                     WK1g2lJnHpCDzzmGTsoqojJBvp4.mft (raw, json)
Hash identifier:          y6sCNkMau5wDs/pWc934ZrInVh/fyqgv7VSLWR1wo+I=
Subject key identifier:   A6:E4:7F:4B:46:64:C3:76:F6:48:FB:3F:7D:0C:39:F3:20:C2:F2:05
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Certificate issuer:       /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial:       019AF50A267F6695C1237A1E0FD1382D7E4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
Manifest number:          094A
Signing time:             Sat 06 Dec 2025 19:01:14 +0000
Manifest this update:     Sat 06 Dec 2025 19:01:14 +0000
Manifest next update:     Sun 07 Dec 2025 19:01:14 +0000
Files and hashes:         1: 4ZArBLnLocPpGHsaVFtOWy1GsWA.roa (hash: pqXDsHt86t8zsxtaFtGXKbg4QUfmimTh3EtiWAKZzkQ=)
                          2: 5mio1ajLw-tS7XgQP9oqa-mUdGw.roa (hash: rc8Oh5sP4syl67QRNGDros7CDOOG+uK5Sqe6YBh3o04=)
                          3: 9i-xHF3Tpk-LvSL2lSXbWX3TAPE.roa (hash: GhnJ6RKe7wEuZR796fCpS4DNXR1C/VooXMXrXuKzk28=)
                          4: AosAQto_z9OqcwqeC_SZWECJeJM.roa (hash: yf8rKxe7cxV+hvRaeqOv00ssVciIq9eecdLxMG0bKBI=)
                          5: ERe51qclsX1vtlIYSnp9k4CtxTU.roa (hash: kRCA0E3LofkB2UCr2ORCJ295mGOQpRVa8ZmBK6mCChQ=)
                          6: Me2_Prx_OH84___bzQH13Qqoab0.roa (hash: ly5wVLFcaAnRwLR2NQqlItbttmYZEyy9kWeipxzWvug=)
                          7: P3r8oITRtebSeW0p5g8ljrH9RWE.roa (hash: q/U3845DVzpfmos9VO8HLLXFHPxn17BOa+RRG773ocI=)
                          8: U-Ph48laIxEbF24jH6nOMT3OpLA.roa (hash: h/z1tS8nUsqG42P90V9Offm2msIM9SciPTSWhkVK3yE=)
                          9: U-gTB136QQdQ6GNss6ZeRtIvG2w.roa (hash: 9Vc5S53HpbiVtc7GbEZ9M6eKX4INi6kd2mbzaga/l+g=)
                          10: W5pOqAkgjpYDOeHPc58PpPg4eC8.roa (hash: yL5+pJ+Yw2Ubc1IA7l2rXuOrE0qVTT2bXY3YTNagTw0=)
                          11: WK1g2lJnHpCDzzmGTsoqojJBvp4.crl (hash: T/s+f7rMDFMyfe2yWrCglaPWRIrC6WbqB9PNKgeuuHE=)
                          12: YhUiBt6aWDxfUxxlX_f5An_H3Vw.roa (hash: UUlZjHLoXxN7b5MRYoyNUfcSFhA/gMCkcrXZjW9BfPs=)
                          13: jnLGWKb8iggQl-Vb0CzNnJG3Cy4.roa (hash: sUjFFwQVQZt9Fjo+3Lho911bfG5hBRxCh635GQzd9TA=)
                          14: kPsDUSBkqswfaMzVi1Cye0vM8ks.roa (hash: w+xp6HNKwTbsH2m8GWhBFiGbaO4PIv65OfaGPcmfyUs=)
                          15: lUfZhOt-wvUulei1P4O40ILh6W4.roa (hash: KvgRSxa7IHlLzvxb6tBzeiNZVGLjogvJrOdyYd+Hhtw=)
                          16: nMNUMFD0D6QsYK_jnD6pqYmeXsk.roa (hash: cEJMwKIA2yxBnNxWn1mu5jHlICkXHOt6q6vHqbiLucg=)
                          17: om7cnxirwY1mF6WG8GSa3rsaVqw.roa (hash: +3vNfJz4iobOk77Hgvoshz1u99toaeiukQN3KQqch5c=)
                          18: pSPQssN5kDIUCVU97gVJ5sRDFrA.roa (hash: 2T2Pj/Lur1RrWbVnX6sEjqE6EYLVtljOc+B0vUZ0Otg=)
                          19: qzz9nJu7BG1fsmJZr7nugjHmA4k.roa (hash: ovLgRlHBUUAKK9984wcZaSkMR8RGwPfbP0tBvz1JoVk=)
                          20: ra3KqgTuCiwRC0PZJRve-Bdxvjg.roa (hash: mcABOKGSXtu9A2WM6jvcZmDeS/Ld950DxdjwmVB9gHU=)
                          21: uk6hH9Dzzgnima7moKdlChvbIco.roa (hash: Ow8Zi7vnC95cw7Q9hThm4tV+bwQ4iwBNuOeb1FUz8n8=)
                          22: vU2HddgRMZd-n9GXfaubZsaeTag.roa (hash: fORgxQlTLiLIEJTKyJ2i2MnWHaJ55TGjD8VWzhhqp5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:0a:26:7f:66:95:c1:23:7a:1e:0f:d1:38:2d:7e:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
        Validity
            Not Before: Dec  6 19:01:14 2025 GMT
            Not After : Dec  7 19:01:14 2025 GMT
        Subject: CN=a6e47f4b4664c376f648fb3f7d0c39f320c2f205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9e:5a:d7:30:20:b2:b8:8c:26:ec:40:6c:7c:
                    9e:ca:0e:3d:52:52:0b:3d:6a:9e:da:3e:0a:d1:7b:
                    10:7e:7e:d7:ca:4f:33:fd:b6:87:0d:b8:10:13:30:
                    35:b2:ad:44:5a:8f:e1:79:33:e8:56:6b:0d:9b:e8:
                    91:71:3a:29:51:fa:7c:e5:3f:f8:87:62:ed:14:7e:
                    d9:3e:5e:00:6b:9d:d4:8b:6e:b3:1b:c3:b6:52:54:
                    39:cc:61:e6:6e:8b:86:9f:60:cc:b4:75:b7:23:c0:
                    bb:48:dd:46:77:11:c3:5f:09:f2:99:98:89:96:b7:
                    14:e4:06:64:19:67:ca:ee:b2:a7:4c:02:44:82:f5:
                    69:a7:37:37:8f:b8:0d:ad:ea:cc:b7:06:4a:5c:7b:
                    e4:32:b0:c8:bc:30:6d:10:44:16:45:34:c1:53:cf:
                    ab:b5:a3:26:c2:98:00:04:16:96:ee:b0:a8:ad:c8:
                    e7:b0:6c:77:f2:7b:38:b1:5b:d6:b6:94:14:3d:41:
                    01:c9:fe:13:18:ab:3c:78:8c:2a:8b:1e:b7:5f:7e:
                    d4:94:48:22:54:26:35:e9:92:0f:06:93:57:21:bb:
                    b3:a1:91:86:cd:d6:75:35:51:c7:09:e1:5a:d3:eb:
                    77:92:de:3b:83:53:e7:29:12:e4:bb:19:bd:8e:65:
                    0a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E4:7F:4B:46:64:C3:76:F6:48:FB:3F:7D:0C:39:F3:20:C2:F2:05
            X509v3 Authority Key Identifier:
                keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:51:3f:83:c8:58:28:39:f4:c7:ec:12:82:89:94:8f:12:41:
         1b:60:4e:bd:8a:b1:e1:8d:9a:c5:ae:f7:ac:1a:6e:50:c9:12:
         ce:3e:18:7d:cd:7b:d3:4a:7d:1a:ce:eb:2e:67:e7:a8:e2:10:
         3e:d3:20:e3:e8:8f:4b:29:26:a4:71:16:7d:3e:9d:1e:65:13:
         72:8a:82:59:8b:34:da:9b:4d:86:dc:a7:63:17:16:7f:22:fa:
         bb:2f:b8:61:dc:14:c7:ef:54:2f:dd:1b:9b:a3:a9:af:89:c3:
         5a:53:3d:28:15:a8:b7:3e:af:1f:93:cd:3c:7c:26:28:61:96:
         66:a4:ae:38:cf:e4:76:4b:ec:16:2a:6d:a3:2c:c0:26:23:3c:
         df:93:b2:2a:bb:20:8d:52:1b:61:03:38:9d:f6:0f:63:fa:4c:
         38:26:11:0b:3f:ea:ac:a8:a0:41:be:2c:75:2b:c6:4c:70:28:
         67:eb:b0:86:f8:f4:75:e1:ae:86:8d:88:58:7f:23:73:df:2a:
         51:02:31:a3:ea:ad:30:7c:10:a0:44:43:d8:10:2c:eb:35:58:
         21:89:7b:fa:66:31:1b:38:df:38:d6:86:78:ab:9f:32:a4:dd:
         e5:95:52:c8:e6:43:86:4b:cd:8e:62:8b:0d:bc:20:a1:90:e9:
         36:e3:de:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:17:19 2025 by rpki-client