This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft
File:                     Wm-SlVId8woVj1Brp8uHOrlSncM.mft (raw, json)
Hash identifier:          X1Qsk458o7vV1zmzWp1cBz5rCCQNmovoyoAvtftbtTU=
Subject key identifier:   21:14:D9:00:A6:30:47:05:F0:EB:32:21:9A:12:47:89:51:F7:B5:B3
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Certificate issuer:       /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial:       019AF31BF0F9A353ED6C470F4C616BE4028E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft
Manifest number:          176A
Signing time:             Sat 06 Dec 2025 10:01:25 +0000
Manifest this update:     Sat 06 Dec 2025 10:01:25 +0000
Manifest next update:     Sun 07 Dec 2025 10:01:25 +0000
Files and hashes:         1: 0vJZAjQvOCM778zt-GYlV7PZJes.roa (hash: ekSkLieH0kRfHZqT/hdlf3jfvG90gwQFHGxyQ06GDNk=)
                          2: 0y3N67LCUpNE8qDxAyk9Z69NdRo.roa (hash: 4ON69D+MoQp5v8V+mHpb3oC3nxI4fYbnRstqxpwuft8=)
                          3: 3Jp97JUe3gWKYF84NM2iFfloREw.roa (hash: VNFR7b84l18qK1EKYiFN7wA+p6c65UHU5/wSsOrBu1E=)
                          4: 7t5qNC9gChKbH2IkmVh6cPdeOtI.roa (hash: NF6uDXY5xoJw3nsW1WUZ4W7bZINqOVbB+Z7X2JaeA7w=)
                          5: ESr9zioHCBYZ86HDg4eovEqdX6M.roa (hash: MYFTzIM52H5hH9HHF0ZyBDCjsvixX7YrAYb/vviEJWk=)
                          6: Ek2l-YiuT-e2fHybRh910Hl0naA.roa (hash: 7WvXC1kAkz2uymr7M3eP0NEdt5n2kLa0OAs0qb1KF9s=)
                          7: HVDZDhI_37xAwlJHexTnzDzb8E0.roa (hash: Ji8VlsF3ugwSnv+9ttxfjrdS99znlwRonFvgsU5yaHA=)
                          8: IUIiI3li7YoLPJeUmaTA8dmy_po.roa (hash: EvM1k6d8ML+eRQxy3VLzpGXHMs8VcPAPax2Hjv6TVOo=)
                          9: LZikoJCXDFhkGudMxFeDLLtpIuQ.roa (hash: TV25uGSXRbCMi70Aq/wXKeSpPXfsa0L2gc6TZogEOew=)
                          10: P0IM0BwexC2MANUe2SCNAEvr-IU.roa (hash: LlLmPApAonXXNr8lq4az4y+1qifsiG6uuBOQAupNk9o=)
                          11: QE1wNjReZLHRZoqYKvUle-6e4Dk.roa (hash: ukToAurzb9W43fVHpwe3mg9WsScCO5NT6kui9MqbkFw=)
                          12: QW82bbA2PdJZpw1C6gyeaMVnHV4.roa (hash: ZpyO/+DpzBzvkiI2D1/biyd4cZbG4LPtFBNWf54il9M=)
                          13: VkH0cj8lgb77NMiD01XPf4phEhM.roa (hash: U26pinzt/BXl8f62bXFtVf5wmaisdJZr6IFBUK+wLzA=)
                          14: Vkjqd6XqVIhc1qZ8t4QEMova_Nw.roa (hash: udtEnyf8wReTGJ0z2VEzoYaPCi1MBiq/jFYXiWnF0p8=)
                          15: Wm-SlVId8woVj1Brp8uHOrlSncM.crl (hash: yGD6m9tu02mGbr836XUpxHS6jVGqqGH/eLnkcrjq+6c=)
                          16: X5XVqWgdEw3BemC13fzjf0fPePQ.roa (hash: qs+9y7O5toIGLZI56PNRUO4vwR65yR7np8j1ISWn3P0=)
                          17: Z31WjdQFDmrm3H3vpTgCYNrTNJU.roa (hash: +gbB7qFdsZ9xFXoII4KgpUuO3N5IwHlojgzUCF3L91o=)
                          18: aERiXJi-EsvazEbk44CS-WkGiEs.roa (hash: HUnYx0jl9+OjQ9buE7/u1GgujFHF7Z7dmoigFaNPOHw=)
                          19: eUpqiXGXLspopV2JOefdNZxivoo.roa (hash: NmTA5ikQb8YHI1Ls+UlB/LFj90mCzv7v9aa/fWXYCBc=)
                          20: kdLvrEBXn-CHh74t-w6MV1EGNHo.roa (hash: gyiLAbj2kYbSToHhx7++uI/ewpeHDKzVyci4zfX1uw4=)
                          21: nnFLZYtjtx-X0WRobB_f15ily1s.roa (hash: Tzdy7+8EMdLR1O65cNg5h5JGGJxkW4u3GOZ3xfXLOic=)
                          22: o_IvgBnOjTy1j7d72GzK6oM4hfw.roa (hash: YBqaZ6LWvVycNbV8oafe8kViFmPnqTKuZYSmWMyAc/4=)
                          23: t-V-YRRY8cp_fI39ql4lLgfLb4k.roa (hash: ZSmoHBFVUUkvEp8EwCgwGR3HKFwutMlOmb9X19Ah+cA=)
                          24: u9vtufdQeD6Gp2gsOoVPleakbQs.roa (hash: jqziqEIAhQzAZhdIm9v3y5ugqInsG16PaBcDYGSnoFA=)
                          25: w7GBFFW-fOGU9AymO9FYwt-abI0.roa (hash: hEWFJH6MzSsYg+SOu0owoWWjOMGAE6GO6uzEJvBdjVs=)
                          26: wIeSRAw34EsRmUA-LRcG5YPXVbY.roa (hash: VjcBo62PQSvDoTKKQreeGuDHp0CAXYkaVOqzZhzGpes=)
                          27: x3I4XFLPkKB0I5raydIIJRGLjyU.roa (hash: D4KBC4PnKVMhAPMumEie+uljGtb5tJcwU0lNDesvPH4=)
                          28: xi12IPMtRFELHYWtjJr4YufGkQA.roa (hash: QhkRcFPqputToi/TJTBVbZlzaHzFcDSuse3D4N1xAF0=)
                          29: yYWhaIMfViLSRK7iCwEAT16QCWQ.roa (hash: yffkf4KTnpRp9maayh8gyACoZv6UI+i5f7qUIcHlPJY=)
                          30: ymcFi0Unv8tqKhnuGUaMgOd0ViE.roa (hash: f0WdduUrR9SROhLlbzPFXawGGf+Q6kZ6bNMiip9BKUI=)
                          31: z4sJr3r2j6ymXhBKx8CeW6DdxPI.roa (hash: /g2w6QUo80ITgWZBBKLdiFMSGoLIreelX1kumLV5XQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1b:f0:f9:a3:53:ed:6c:47:0f:4c:61:6b:e4:02:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
        Validity
            Not Before: Dec  6 10:01:25 2025 GMT
            Not After : Dec  7 10:01:25 2025 GMT
        Subject: CN=2114d900a6304705f0eb32219a12478951f7b5b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9e:4e:3e:5f:0b:d5:b1:a6:ab:bd:9d:a6:cc:
                    d4:e4:11:ca:6b:7d:4f:d2:6d:ba:e7:7f:40:ca:34:
                    d5:a1:18:16:55:87:15:d5:f2:69:73:e0:45:88:2a:
                    81:10:48:2d:11:b8:c7:0f:10:ed:93:50:60:db:c3:
                    e9:1e:09:4c:88:5b:87:d8:d1:bd:a1:fe:00:95:47:
                    c3:bb:d7:56:b1:0c:16:98:d4:6b:d1:aa:2e:6c:bb:
                    89:cf:d2:f1:bc:f5:6d:18:64:5c:32:e2:c1:25:c4:
                    d4:be:20:50:f1:f7:73:03:2c:69:ce:6f:8b:8a:24:
                    cb:1a:77:c5:c8:c5:d7:e7:56:8a:2c:31:01:1c:24:
                    c4:83:26:2c:6e:9b:41:cb:d1:23:25:cf:df:b9:35:
                    57:c1:30:9f:36:fd:71:2f:9e:81:7a:23:aa:b3:bd:
                    db:17:1e:42:b7:fe:a6:2d:d4:a9:d7:8e:93:77:82:
                    27:0b:2f:b3:d0:93:1f:09:77:7d:11:f3:cc:0d:53:
                    d8:aa:f1:92:dd:90:71:eb:d0:56:4c:ee:cc:fd:83:
                    bd:9c:cc:7a:93:af:da:d7:7c:3b:a2:c7:30:7f:cb:
                    b0:b0:f6:6e:0e:c4:93:ca:8f:96:40:74:d8:54:f9:
                    80:ad:0a:6d:60:08:4a:11:42:6e:42:30:a6:60:c4:
                    12:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:14:D9:00:A6:30:47:05:F0:EB:32:21:9A:12:47:89:51:F7:B5:B3
            X509v3 Authority Key Identifier:
                keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:c6:f8:66:a3:ef:df:bc:21:d1:42:87:db:39:44:a0:f9:c2:
         3b:5c:6b:d6:f8:e0:1a:fa:d1:ff:48:a0:5c:44:e2:3d:70:bb:
         fe:78:67:1b:18:62:f1:af:b6:7b:a6:6c:15:16:56:74:80:0d:
         92:91:17:29:c8:65:83:bf:73:24:bf:23:3c:a7:67:1c:cc:f7:
         97:eb:54:67:d5:72:d9:5a:91:55:51:17:e2:c9:e4:72:62:65:
         aa:11:ad:a3:54:98:02:6d:f5:b8:5f:0a:73:d7:a2:15:a1:c9:
         10:cc:34:5d:51:b6:b7:97:4a:8a:51:fa:e0:14:34:f6:09:57:
         df:15:9f:cf:d0:f7:91:eb:ab:0e:5b:db:e1:cb:68:eb:a6:92:
         6d:04:cb:b9:64:e0:e2:63:72:ce:79:3c:8e:2f:02:c7:94:6a:
         46:34:50:1c:96:f0:a9:8b:34:da:df:06:32:42:ee:f8:d0:7a:
         3b:6d:8d:aa:28:97:e2:b4:60:8f:5d:2c:fa:d7:53:e6:34:f8:
         0e:06:1f:05:c6:14:ef:27:0e:b9:1d:e5:ad:78:a8:96:90:a4:
         8f:83:a2:1c:d8:bf:53:11:7e:f0:8a:8e:b8:c3:af:33:5d:35:
         ca:24:68:5b:12:fc:0d:69:30:40:dc:5f:74:53:81:d8:c5:30:
         e9:76:87:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:11:10 2025 by rpki-client