This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/Wanp-OpHSG2Aydbc_VaPZU1PB-4.mft
File:                     Wanp-OpHSG2Aydbc_VaPZU1PB-4.mft (raw, json)
Hash identifier:          wr4lRk1aDSxBh2XqgtKE3WCzyCMPK9Q/LAQN8n8MnZU=
Subject key identifier:   1C:39:B4:F6:7B:AD:E6:E9:9B:D7:03:2B:93:28:9F:87:38:2B:5E:B9
Authority key identifier: 59:A9:E9:F8:EA:47:48:6D:80:C9:D6:DC:FD:56:8F:65:4D:4F:07:EE
Certificate issuer:       /CN=59a9e9f8ea47486d80c9d6dcfd568f654d4f07ee
Certificate serial:       019B2D0B3E42ACB7283C08CBFDE6465BBE71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wanp-OpHSG2Aydbc_VaPZU1PB-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/Wanp-OpHSG2Aydbc_VaPZU1PB-4.mft
Manifest number:          0F36
Signing time:             Wed 17 Dec 2025 16:01:10 +0000
Manifest this update:     Wed 17 Dec 2025 16:01:10 +0000
Manifest next update:     Thu 18 Dec 2025 16:01:10 +0000
Files and hashes:         1: EBOIj8lPqb1xDaW8RBbB1Ok6-LE.roa (hash: QTASo2dR9S0FHaEMTzsEAOKw6oKeRRFkI+5ogAhRzoY=)
                          2: Wanp-OpHSG2Aydbc_VaPZU1PB-4.crl (hash: H4T5SujzJ0SmGH4hJMXa+6drFxOZ+4y3o28213oTZ9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/Wanp-OpHSG2Aydbc_VaPZU1PB-4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/Wanp-OpHSG2Aydbc_VaPZU1PB-4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wanp-OpHSG2Aydbc_VaPZU1PB-4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2d:0b:3e:42:ac:b7:28:3c:08:cb:fd:e6:46:5b:be:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59a9e9f8ea47486d80c9d6dcfd568f654d4f07ee
        Validity
            Not Before: Dec 17 16:01:10 2025 GMT
            Not After : Dec 18 16:01:10 2025 GMT
        Subject: CN=1c39b4f67bade6e99bd7032b93289f87382b5eb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ce:50:e8:c3:05:aa:aa:30:ec:01:c8:9c:ce:
                    7b:21:be:19:14:36:e3:05:c7:00:87:9a:8e:8f:d7:
                    d6:db:e2:5f:57:64:f6:17:93:7a:9e:2d:65:a7:90:
                    ce:3e:e3:ed:01:4e:a9:1d:93:82:62:a4:00:65:0e:
                    6a:79:98:cc:e7:5a:bd:e9:b2:56:2b:d5:85:07:6d:
                    ca:68:29:ef:91:9a:44:26:26:d9:a6:bf:62:2e:62:
                    41:bb:88:4b:6f:30:6b:49:7f:48:02:9b:27:cb:58:
                    3d:c5:ef:1b:4c:f3:44:6a:91:16:63:d7:7b:08:85:
                    e1:f9:08:c3:16:6e:28:e9:89:90:47:8d:48:5b:63:
                    2b:d9:dd:17:13:e9:0d:df:a3:12:42:e0:ae:f6:e9:
                    c7:dd:00:65:69:32:67:0a:a4:0f:a7:96:23:de:fd:
                    ea:06:a3:c5:ad:f6:61:94:c5:00:db:10:6a:02:ff:
                    7e:38:7a:82:02:53:0f:06:7d:53:b0:b8:e6:ec:80:
                    cd:c1:e0:54:3e:ed:35:e0:a3:73:3e:7f:a9:5d:4d:
                    c4:91:a4:64:6c:74:98:be:5a:4a:4f:9f:32:6f:34:
                    be:ef:94:4d:01:89:ca:e4:c8:d0:0d:84:63:8a:c6:
                    16:e8:53:b9:08:5f:96:d2:fa:11:2b:32:24:6d:a4:
                    5a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:39:B4:F6:7B:AD:E6:E9:9B:D7:03:2B:93:28:9F:87:38:2B:5E:B9
            X509v3 Authority Key Identifier:
                keyid:59:A9:E9:F8:EA:47:48:6D:80:C9:D6:DC:FD:56:8F:65:4D:4F:07:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wanp-OpHSG2Aydbc_VaPZU1PB-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/Wanp-OpHSG2Aydbc_VaPZU1PB-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/Wanp-OpHSG2Aydbc_VaPZU1PB-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:37:d4:c3:33:69:56:ab:e7:77:54:71:04:ff:0c:f9:81:18:
         db:10:6a:32:ee:47:82:c8:ee:72:c4:5a:37:f3:e9:f8:b9:fe:
         4d:d2:4f:5c:87:16:2a:ae:48:a3:64:07:d8:ab:47:38:1a:d4:
         b1:b6:5d:e1:b2:33:f0:fa:d2:21:5e:b6:f3:7d:3e:e4:8d:00:
         e7:da:5b:df:06:36:ac:a0:8e:7a:f9:5c:18:ba:a1:7a:d8:f5:
         33:06:2f:cc:24:41:d7:57:01:5b:e0:d1:ba:f5:dc:f7:ca:82:
         fa:f4:ed:5d:f0:28:d3:01:d6:8d:e9:e1:b0:69:31:d2:f5:29:
         74:7f:64:a9:6c:ec:c5:54:74:03:c4:53:c8:f1:ec:9c:24:2b:
         78:55:d5:5c:45:08:9c:ba:bb:a9:b3:90:da:29:2c:ee:9c:ea:
         c5:d5:e8:38:2f:58:a6:2f:c9:7a:57:cb:f9:23:70:a4:6a:96:
         21:7d:53:01:7b:44:02:65:b9:67:11:9f:6e:c9:a9:cc:c5:84:
         72:91:8d:c7:80:be:46:c1:3c:da:a5:4a:84:c1:90:d3:9a:5d:
         83:80:77:f7:c2:54:96:76:86:60:87:7b:3b:d9:49:7c:c1:a8:
         e6:68:98:3c:13:15:6f:24:4d:7e:e9:11:1e:87:63:af:db:28:
         40:4b:7e:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZstCz5CrLcoPAjL/eZGW75xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5YTllOWY4ZWE0NzQ4NmQ4MGM5ZDZkY2ZkNTY4ZjY1NGQ0
ZjA3ZWUwHhcNMjUxMjE3MTYwMTEwWhcNMjUxMjE4MTYwMTEwWjAzMTEwLwYDVQQD
EygxYzM5YjRmNjdiYWRlNmU5OWJkNzAzMmI5MzI4OWY4NzM4MmI1ZWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0c5Q6MMFqqow7AHInM57Ib4ZFDbj
BccAh5qOj9fW2+JfV2T2F5N6ni1lp5DOPuPtAU6pHZOCYqQAZQ5qeZjM51q96bJW
K9WFB23KaCnvkZpEJibZpr9iLmJBu4hLbzBrSX9IApsny1g9xe8bTPNEapEWY9d7
CIXh+QjDFm4o6YmQR41IW2Mr2d0XE+kN36MSQuCu9unH3QBlaTJnCqQPp5Yj3v3q
BqPFrfZhlMUA2xBqAv9+OHqCAlMPBn1TsLjm7IDNweBUPu014KNzPn+pXU3EkaRk
bHSYvlpKT58ybzS+75RNAYnK5MjQDYRjisYW6FO5CF+W0voRKzIkbaRaCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBw5tPZ7rebpm9cDK5Mon4c4K165MB8GA1UdIwQY
MBaAFFmp6fjqR0htgMnW3P1Wj2VNTwfuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2FucC1PcEhTRzJBeWRiY19WYVBaVTFQQi00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81M2FkMmItMzU5Yi00MzZhLWEyZWIt
YWZlODRlMThkNTZmLzEvV2FucC1PcEhTRzJBeWRiY19WYVBaVTFQQi00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy81M2FkMmItMzU5Yi00MzZhLWEyZWItYWZlODRlMThkNTZm
LzEvV2FucC1PcEhTRzJBeWRiY19WYVBaVTFQQi00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIjfUwzNp
Vqvnd1RxBP8M+YEY2xBqMu5HgsjucsRaN/Pp+Ln+TdJPXIcWKq5Io2QH2KtHOBrU
sbZd4bIz8PrSIV62830+5I0A59pb3wY2rKCOevlcGLqhetj1MwYvzCRB11cBW+DR
uvXc98qC+vTtXfAo0wHWjenhsGkx0vUpdH9kqWzsxVR0A8RTyPHsnCQreFXVXEUI
nLq7qbOQ2iks7pzqxdXoOC9Ypi/JelfL+SNwpGqWIX1TAXtEAmW5ZxGfbsmpzMWE
cpGNx4C+RsE82qVKhMGQ05pdg4B398JUlnaGYId7O9lJfMGo5miYPBMVbyRNfukR
Hodjr9soQEt+kQ==
-----END CERTIFICATE-----
Generated at Wed Dec 17 18:45:53 2025 by rpki-client