This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft
File:                     W0lMbhb0nQi-dhyowOqnEihy-oI.mft (raw, json)
Hash identifier:          KsZrtP9STBMECRFWayV0v0ITlXW8kO+I6MZa/lLn6hE=
Subject key identifier:   C1:0B:9D:90:51:68:9E:80:9F:50:90:28:B4:D0:7A:F0:B5:56:28:7C
Authority key identifier: 5B:49:4C:6E:16:F4:9D:08:BE:76:1C:A8:C0:EA:A7:12:28:72:FA:82
Certificate issuer:       /CN=5b494c6e16f49d08be761ca8c0eaa7122872fa82
Certificate serial:       019AF0BF2272449DE122AE90F07BCD9FFF5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft
Manifest number:          1761
Signing time:             Fri 05 Dec 2025 23:00:49 +0000
Manifest this update:     Fri 05 Dec 2025 23:00:49 +0000
Manifest next update:     Sat 06 Dec 2025 23:00:49 +0000
Files and hashes:         1: 3K3BWWtJTikdCXD1GiHEAWkWrNM.roa (hash: 8sWSqC8Ih92DS5DdfTRJP5hCXAztrqlMm3kUKR0XOZc=)
                          2: TJ2hwoBGgOzkeWhqHN6Mxx7QhtA.roa (hash: 3R7yJP25UZbo9ce0Ffrs5KJBp9yypSbTdrsjbTzVD5w=)
                          3: W0lMbhb0nQi-dhyowOqnEihy-oI.crl (hash: 8hV24oLbWCBngkssw1KXyhacgVaX/VzDBpq2IgYKhGc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 23:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:bf:22:72:44:9d:e1:22:ae:90:f0:7b:cd:9f:ff:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b494c6e16f49d08be761ca8c0eaa7122872fa82
        Validity
            Not Before: Dec  5 23:00:49 2025 GMT
            Not After : Dec  6 23:00:49 2025 GMT
        Subject: CN=c10b9d9051689e809f509028b4d07af0b556287c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:60:a5:60:9b:7f:e2:21:64:28:9e:d9:2f:fa:
                    79:fa:be:24:e0:b1:34:9b:90:8f:f9:63:53:7d:e5:
                    42:bb:70:d0:da:bf:4b:82:bc:be:4c:a0:da:3d:a8:
                    3c:87:cc:47:ee:e6:b3:0b:cf:3b:bb:1c:01:36:e3:
                    8d:66:de:ff:bb:e2:94:bb:e4:e8:f1:32:ba:15:5f:
                    81:be:5a:2d:52:30:41:b2:9a:82:7f:8c:27:ee:27:
                    84:f3:72:67:52:2b:fe:e0:91:fb:01:2a:eb:c4:18:
                    28:12:47:f6:a4:1b:4a:64:41:bf:7a:38:e5:cf:cf:
                    3a:2e:c1:f2:1e:7a:55:ca:b5:44:bf:62:fd:47:6a:
                    d1:0d:ed:c5:f0:3c:13:31:58:c9:af:6a:a2:69:ba:
                    06:dc:40:61:8f:3e:26:1d:a1:a0:04:bd:a6:a8:56:
                    6f:34:35:23:98:a3:f7:c2:d7:c3:5b:fe:63:d6:55:
                    cc:2b:30:52:c9:78:c9:1a:a4:fa:93:16:49:82:c7:
                    34:d5:72:4b:66:fe:00:bc:b1:bc:ce:21:0e:d5:24:
                    84:34:27:21:c6:bc:e4:28:1d:27:52:38:82:c8:6b:
                    81:90:74:c1:1b:0c:3d:20:d6:d2:5c:86:57:c6:58:
                    56:97:db:0f:0d:48:35:ea:3a:e5:77:a5:a5:21:43:
                    53:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:0B:9D:90:51:68:9E:80:9F:50:90:28:B4:D0:7A:F0:B5:56:28:7C
            X509v3 Authority Key Identifier:
                keyid:5B:49:4C:6E:16:F4:9D:08:BE:76:1C:A8:C0:EA:A7:12:28:72:FA:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:69:88:a9:69:c7:df:2d:6e:76:17:90:86:1b:ef:a2:b4:3a:
         ba:1b:51:f2:ce:69:0b:f7:45:a8:e5:3d:7d:0e:c5:4e:95:73:
         97:17:7d:fa:99:3c:54:df:b5:89:6c:8a:a8:61:ba:bd:56:41:
         5c:d5:1d:6d:0c:d3:ee:e4:34:9f:83:92:c0:59:5f:78:5a:c4:
         49:6a:e9:02:66:0b:fc:78:7e:2a:3e:70:7e:30:6c:a8:42:4a:
         6b:cb:9f:bd:21:14:73:63:09:77:e3:7b:ed:23:40:3e:1a:ab:
         fc:68:eb:a5:1f:fc:57:4c:27:ec:c9:63:d1:e2:38:1d:00:13:
         30:80:fb:4d:5c:2b:71:1b:5c:6e:2e:af:9d:94:51:b4:c5:b3:
         9e:f7:0f:ab:46:a9:81:4a:5c:59:5d:2c:55:3d:3d:a8:d8:8b:
         d4:59:85:7c:45:83:d3:ef:ba:cf:2b:f4:24:ee:a6:98:d3:a2:
         80:9b:66:7e:e5:5e:5b:ff:2a:82:46:53:f3:40:e3:e1:d4:4e:
         9d:fc:10:d3:be:5a:80:d8:56:31:63:81:77:04:8f:bd:88:58:
         c9:cd:5d:5d:9c:27:bf:ff:1b:0e:e1:9c:11:29:e0:4d:b9:b8:
         a3:f3:d2:6b:19:e5:01:33:55:2e:b1:7d:8e:af:bf:13:71:dc:
         69:34:f6:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrwvyJyRJ3hIq6Q8HvNn/9bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNDk0YzZlMTZmNDlkMDhiZTc2MWNhOGMwZWFhNzEyMjg3
MmZhODIwHhcNMjUxMjA1MjMwMDQ5WhcNMjUxMjA2MjMwMDQ5WjAzMTEwLwYDVQQD
EyhjMTBiOWQ5MDUxNjg5ZTgwOWY1MDkwMjhiNGQwN2FmMGI1NTYyODdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWClYJt/4iFkKJ7ZL/p5+r4k4LE0
m5CP+WNTfeVCu3DQ2r9Lgry+TKDaPag8h8xH7uazC887uxwBNuONZt7/u+KUu+To
8TK6FV+BvlotUjBBspqCf4wn7ieE83JnUiv+4JH7ASrrxBgoEkf2pBtKZEG/ejjl
z886LsHyHnpVyrVEv2L9R2rRDe3F8DwTMVjJr2qiaboG3EBhjz4mHaGgBL2mqFZv
NDUjmKP3wtfDW/5j1lXMKzBSyXjJGqT6kxZJgsc01XJLZv4AvLG8ziEO1SSENCch
xrzkKB0nUjiCyGuBkHTBGww9INbSXIZXxlhWl9sPDUg16jrld6WlIUNTCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMELnZBRaJ6An1CQKLTQevC1Vih8MB8GA1UdIwQY
MBaAFFtJTG4W9J0IvnYcqMDqpxIocvqCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzBsTWJoYjBuUWktZGh5b3dPcW5FaWh5LW9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85MmJjZjQtZDBmMi00ZjllLTg3NGQt
YzJjNmY2YTQwOTdmLzEvVzBsTWJoYjBuUWktZGh5b3dPcW5FaWh5LW9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy85MmJjZjQtZDBmMi00ZjllLTg3NGQtYzJjNmY2YTQwOTdm
LzEvVzBsTWJoYjBuUWktZGh5b3dPcW5FaWh5LW9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV2mIqWnH
3y1udheQhhvvorQ6uhtR8s5pC/dFqOU9fQ7FTpVzlxd9+pk8VN+1iWyKqGG6vVZB
XNUdbQzT7uQ0n4OSwFlfeFrESWrpAmYL/Hh+Kj5wfjBsqEJKa8ufvSEUc2MJd+N7
7SNAPhqr/GjrpR/8V0wn7Mlj0eI4HQATMID7TVwrcRtcbi6vnZRRtMWznvcPq0ap
gUpcWV0sVT09qNiL1FmFfEWD0++6zyv0JO6mmNOigJtmfuVeW/8qgkZT80Dj4dRO
nfwQ075agNhWMWOBdwSPvYhYyc1dXZwnv/8bDuGcESngTbm4o/PSaxnlATNVLrF9
jq+/E3HcaTT23w==
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:49:14 2025 by rpki-client