This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft
File:                     Wm-SlVId8woVj1Brp8uHOrlSncM.mft (raw, json)
Hash identifier:          b6Ap/bh6Qaxaab4P80tFbKWsAOi7Q4vSY/7s/rKt+FM=
Subject key identifier:   72:CC:FF:AB:81:EC:A4:70:12:17:04:3D:7B:44:B6:0F:92:AD:15:69
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Certificate issuer:       /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial:       019B2EFA7F49600D93A1DCF66B41B28A1DDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft
Manifest number:          1789
Signing time:             Thu 18 Dec 2025 01:02:07 +0000
Manifest this update:     Thu 18 Dec 2025 01:02:07 +0000
Manifest next update:     Fri 19 Dec 2025 01:02:07 +0000
Files and hashes:         1: 0vJZAjQvOCM778zt-GYlV7PZJes.roa (hash: ekSkLieH0kRfHZqT/hdlf3jfvG90gwQFHGxyQ06GDNk=)
                          2: 0y3N67LCUpNE8qDxAyk9Z69NdRo.roa (hash: 4ON69D+MoQp5v8V+mHpb3oC3nxI4fYbnRstqxpwuft8=)
                          3: 3Jp97JUe3gWKYF84NM2iFfloREw.roa (hash: VNFR7b84l18qK1EKYiFN7wA+p6c65UHU5/wSsOrBu1E=)
                          4: 7t5qNC9gChKbH2IkmVh6cPdeOtI.roa (hash: NF6uDXY5xoJw3nsW1WUZ4W7bZINqOVbB+Z7X2JaeA7w=)
                          5: ESr9zioHCBYZ86HDg4eovEqdX6M.roa (hash: MYFTzIM52H5hH9HHF0ZyBDCjsvixX7YrAYb/vviEJWk=)
                          6: Ek2l-YiuT-e2fHybRh910Hl0naA.roa (hash: 7WvXC1kAkz2uymr7M3eP0NEdt5n2kLa0OAs0qb1KF9s=)
                          7: HVDZDhI_37xAwlJHexTnzDzb8E0.roa (hash: Ji8VlsF3ugwSnv+9ttxfjrdS99znlwRonFvgsU5yaHA=)
                          8: IUIiI3li7YoLPJeUmaTA8dmy_po.roa (hash: EvM1k6d8ML+eRQxy3VLzpGXHMs8VcPAPax2Hjv6TVOo=)
                          9: LZikoJCXDFhkGudMxFeDLLtpIuQ.roa (hash: TV25uGSXRbCMi70Aq/wXKeSpPXfsa0L2gc6TZogEOew=)
                          10: P0IM0BwexC2MANUe2SCNAEvr-IU.roa (hash: LlLmPApAonXXNr8lq4az4y+1qifsiG6uuBOQAupNk9o=)
                          11: QE1wNjReZLHRZoqYKvUle-6e4Dk.roa (hash: ukToAurzb9W43fVHpwe3mg9WsScCO5NT6kui9MqbkFw=)
                          12: QW82bbA2PdJZpw1C6gyeaMVnHV4.roa (hash: ZpyO/+DpzBzvkiI2D1/biyd4cZbG4LPtFBNWf54il9M=)
                          13: VkH0cj8lgb77NMiD01XPf4phEhM.roa (hash: U26pinzt/BXl8f62bXFtVf5wmaisdJZr6IFBUK+wLzA=)
                          14: Vkjqd6XqVIhc1qZ8t4QEMova_Nw.roa (hash: udtEnyf8wReTGJ0z2VEzoYaPCi1MBiq/jFYXiWnF0p8=)
                          15: Wm-SlVId8woVj1Brp8uHOrlSncM.crl (hash: 21+//OhXFRmM2VFiIeYVQn+ZV7uUu2U/hCD/mLekf8E=)
                          16: X5XVqWgdEw3BemC13fzjf0fPePQ.roa (hash: qs+9y7O5toIGLZI56PNRUO4vwR65yR7np8j1ISWn3P0=)
                          17: Z31WjdQFDmrm3H3vpTgCYNrTNJU.roa (hash: +gbB7qFdsZ9xFXoII4KgpUuO3N5IwHlojgzUCF3L91o=)
                          18: aERiXJi-EsvazEbk44CS-WkGiEs.roa (hash: HUnYx0jl9+OjQ9buE7/u1GgujFHF7Z7dmoigFaNPOHw=)
                          19: eUpqiXGXLspopV2JOefdNZxivoo.roa (hash: NmTA5ikQb8YHI1Ls+UlB/LFj90mCzv7v9aa/fWXYCBc=)
                          20: kdLvrEBXn-CHh74t-w6MV1EGNHo.roa (hash: gyiLAbj2kYbSToHhx7++uI/ewpeHDKzVyci4zfX1uw4=)
                          21: nnFLZYtjtx-X0WRobB_f15ily1s.roa (hash: Tzdy7+8EMdLR1O65cNg5h5JGGJxkW4u3GOZ3xfXLOic=)
                          22: o_IvgBnOjTy1j7d72GzK6oM4hfw.roa (hash: YBqaZ6LWvVycNbV8oafe8kViFmPnqTKuZYSmWMyAc/4=)
                          23: t-V-YRRY8cp_fI39ql4lLgfLb4k.roa (hash: ZSmoHBFVUUkvEp8EwCgwGR3HKFwutMlOmb9X19Ah+cA=)
                          24: u9vtufdQeD6Gp2gsOoVPleakbQs.roa (hash: jqziqEIAhQzAZhdIm9v3y5ugqInsG16PaBcDYGSnoFA=)
                          25: w7GBFFW-fOGU9AymO9FYwt-abI0.roa (hash: hEWFJH6MzSsYg+SOu0owoWWjOMGAE6GO6uzEJvBdjVs=)
                          26: wIeSRAw34EsRmUA-LRcG5YPXVbY.roa (hash: VjcBo62PQSvDoTKKQreeGuDHp0CAXYkaVOqzZhzGpes=)
                          27: x3I4XFLPkKB0I5raydIIJRGLjyU.roa (hash: D4KBC4PnKVMhAPMumEie+uljGtb5tJcwU0lNDesvPH4=)
                          28: xi12IPMtRFELHYWtjJr4YufGkQA.roa (hash: QhkRcFPqputToi/TJTBVbZlzaHzFcDSuse3D4N1xAF0=)
                          29: yYWhaIMfViLSRK7iCwEAT16QCWQ.roa (hash: yffkf4KTnpRp9maayh8gyACoZv6UI+i5f7qUIcHlPJY=)
                          30: ymcFi0Unv8tqKhnuGUaMgOd0ViE.roa (hash: f0WdduUrR9SROhLlbzPFXawGGf+Q6kZ6bNMiip9BKUI=)
                          31: z4sJr3r2j6ymXhBKx8CeW6DdxPI.roa (hash: /g2w6QUo80ITgWZBBKLdiFMSGoLIreelX1kumLV5XQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 19:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2e:fa:7f:49:60:0d:93:a1:dc:f6:6b:41:b2:8a:1d:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
        Validity
            Not Before: Dec 18 01:02:07 2025 GMT
            Not After : Dec 19 01:02:07 2025 GMT
        Subject: CN=72ccffab81eca4701217043d7b44b60f92ad1569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:df:b7:c9:84:00:42:e9:e2:f4:50:98:b0:39:
                    cf:1f:04:7b:51:d1:cd:de:27:28:b7:95:44:c0:31:
                    16:ff:1a:27:12:f5:e8:d0:08:e1:e4:f7:f6:af:3a:
                    85:d9:66:7f:a1:45:f4:9a:c9:bc:a6:02:3a:c0:d7:
                    3c:f9:dd:a5:03:de:32:fb:68:c0:08:f8:78:e8:cd:
                    ae:39:ce:c4:88:69:de:1a:f7:ae:26:b8:e8:53:e8:
                    1d:81:35:e9:c3:7c:1d:00:74:0b:ea:53:9d:a6:8a:
                    dd:8a:32:6f:d9:b7:a8:83:d3:49:97:da:ed:a3:74:
                    31:8a:a1:06:95:13:7b:51:eb:fd:2a:ae:e7:c3:d7:
                    c4:58:79:d8:f0:fe:15:9c:4f:78:53:43:19:65:03:
                    75:83:df:d1:6b:2f:24:c2:f9:a1:29:c8:e6:cf:99:
                    e4:40:a1:7c:8c:25:68:de:e2:19:02:76:42:72:e2:
                    e4:ca:54:cf:bc:e8:17:80:c0:f7:fe:84:f2:93:e3:
                    79:ae:25:6d:6b:cc:a2:63:eb:8f:65:c4:29:8b:88:
                    a1:b8:f4:13:1e:89:ff:30:7c:8a:86:f6:1d:8f:38:
                    cc:53:48:6c:dd:23:29:34:12:1b:9e:67:a4:da:08:
                    c0:2d:33:f8:04:a5:42:cc:75:dd:11:14:e7:72:5a:
                    09:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:CC:FF:AB:81:EC:A4:70:12:17:04:3D:7B:44:B6:0F:92:AD:15:69
            X509v3 Authority Key Identifier:
                keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:d1:20:6d:7e:07:9a:f2:d7:94:16:3c:a6:29:7c:75:2b:25:
         95:2d:23:e7:b4:2c:5b:a8:05:d8:30:b4:73:56:21:0e:9c:e5:
         5c:8d:6c:23:41:e0:19:4d:6f:0e:67:6c:da:5e:c0:2d:64:45:
         d5:40:34:28:bd:a1:9a:b9:15:5c:55:78:c1:98:93:5c:f0:66:
         68:24:16:f5:20:d5:81:22:bc:cd:ab:8e:14:ec:93:b1:cc:03:
         b0:88:ea:46:5b:e8:2c:18:b3:4f:af:d5:e9:81:e7:28:71:6f:
         b8:20:44:37:ca:aa:08:e2:b4:7f:cf:8c:11:6e:3c:a5:e3:b1:
         9c:23:e2:c6:af:15:f2:e2:03:14:37:39:77:b0:dc:48:b5:22:
         e5:1b:23:ed:3d:f3:c7:9d:43:6f:43:b7:91:41:af:25:31:32:
         68:56:20:0a:c4:a0:24:cd:8c:e6:e9:ed:bc:46:61:75:1d:d2:
         2f:aa:d3:d6:3c:c4:2f:88:92:69:dc:d2:ef:eb:25:8d:e4:2c:
         32:fd:22:02:96:43:18:8e:6a:39:19:c3:9c:27:9f:fe:60:3f:
         66:86:c3:13:56:1f:c4:40:04:8c:58:ec:a5:57:0d:d3:44:0a:
         97:f2:05:47:a2:d4:ce:3b:30:27:b0:09:6f:3e:a5:1e:c5:b7:
         df:66:d9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 05:42:15 2025 by rpki-client