This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft
File:                     WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft (raw, json)
Hash identifier:          mKK0werpXMoqfIIl5DIj9cnR19I5+xAeOHp9koEz0xg=
Subject key identifier:   F1:0B:77:5F:9D:E5:FB:3D:B2:A3:A3:A1:32:9D:47:46:83:BB:DD:AA
Authority key identifier: 58:8C:AB:F6:F5:23:F2:6E:26:7D:B0:3B:52:43:47:84:1A:AA:A4:65
Certificate issuer:       /CN=588cabf6f523f26e267db03b524347841aaaa465
Certificate serial:       019B0F372F78F1DE9E612404A53558F603AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft
Manifest number:          0C98
Signing time:             Thu 11 Dec 2025 21:00:33 +0000
Manifest this update:     Thu 11 Dec 2025 21:00:33 +0000
Manifest next update:     Fri 12 Dec 2025 21:00:33 +0000
Files and hashes:         1: B8UFPGQw9x1qghEKWHyh34dW9Oc.roa (hash: ywFYtvx0NroO2K3FRCIUWY9DywW+W/YxpiNCO/8quMc=)
                          2: FdWV2F8xywrkJr_ZVSWY8qWRv_A.roa (hash: X0QnMJo/L6uBm6V2nWu9aN26xqXlZf++2BNldb6DVIg=)
                          3: WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl (hash: 0oLYSvV85GHCNDw4TPoa2chnR9AfLL836uX2AC3QcqM=)
                          4: b2nv7c16taiMY7lqlyo1vW0yars.roa (hash: cEulSKA26PCcgT5q7VJTUwPAnJnY+2U0A9I6b42tRhY=)
                          5: tizL6qWbIsOeypyIPPPfmLusGE0.roa (hash: sAyubtv15VYxRHUf9fkBNCBE+xwZmyTEiVd/Zqvt42M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 14:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0f:37:2f:78:f1:de:9e:61:24:04:a5:35:58:f6:03:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=588cabf6f523f26e267db03b524347841aaaa465
        Validity
            Not Before: Dec 11 21:00:33 2025 GMT
            Not After : Dec 12 21:00:33 2025 GMT
        Subject: CN=f10b775f9de5fb3db2a3a3a1329d474683bbddaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:72:f0:52:39:f7:c5:34:c1:b2:6b:52:1f:83:
                    94:8f:60:f1:1d:55:76:da:72:44:98:83:bd:17:3c:
                    bb:26:c0:6c:05:44:2c:01:79:eb:31:a0:a8:c1:8b:
                    fc:20:24:e8:b1:3c:ad:8e:d2:eb:f5:7c:02:76:35:
                    b0:53:c8:17:b2:ae:f7:6e:12:66:64:be:c5:a9:09:
                    a2:71:68:7c:0b:13:a8:49:3c:f2:f0:58:b6:ce:59:
                    a6:32:2e:8b:33:ab:64:ca:d5:00:eb:a4:fe:5f:95:
                    7d:6e:fd:a4:78:83:e3:c6:f3:b7:8d:b8:22:c5:4e:
                    97:3e:91:7e:62:61:78:b1:8f:7c:3c:7d:d8:1d:d6:
                    15:52:28:33:dd:4f:9a:e9:1a:c3:a2:b0:b2:40:0a:
                    fe:e2:9f:1a:d2:38:7e:bb:09:a3:e7:98:00:11:86:
                    81:54:57:5c:44:a2:71:12:f9:6e:95:92:3f:dc:c6:
                    62:a6:2c:f1:00:68:22:3b:9e:b8:12:bf:3f:ba:e5:
                    8e:46:6f:05:9b:c3:2c:46:57:4d:e6:6a:9f:21:9e:
                    64:70:81:cb:74:31:6f:27:fd:fd:71:a5:2e:7d:0f:
                    76:57:65:14:d8:bb:41:ea:ec:2f:e5:2b:8c:3e:bc:
                    f7:06:e9:be:48:c7:b1:bd:8d:69:44:1a:12:9e:7f:
                    50:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:0B:77:5F:9D:E5:FB:3D:B2:A3:A3:A1:32:9D:47:46:83:BB:DD:AA
            X509v3 Authority Key Identifier:
                keyid:58:8C:AB:F6:F5:23:F2:6E:26:7D:B0:3B:52:43:47:84:1A:AA:A4:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:ed:46:7c:11:96:1f:80:a1:8c:b4:92:6d:9b:ae:c2:72:ff:
         49:fa:a1:9a:1e:3b:a9:44:7a:70:af:ef:9a:23:4c:43:23:13:
         5c:1c:1e:85:2e:11:bd:a0:38:01:82:f6:ff:28:fc:46:ee:a3:
         cf:19:e2:64:0e:76:ba:fd:30:f5:1d:49:f6:2b:0e:77:ed:fd:
         25:6d:38:67:bf:88:57:e7:63:ab:18:d1:07:99:64:db:2e:7d:
         1a:c0:cd:74:bc:2b:42:66:27:b3:9a:25:a7:5b:0c:d4:83:3d:
         23:78:59:49:de:f8:09:34:90:0d:24:c0:27:55:ce:91:e7:c2:
         a6:23:5e:17:11:3b:fd:ee:cc:0b:6c:e2:6a:a1:8d:73:2a:70:
         a5:e9:1d:7b:17:8c:b9:86:59:fc:c9:f7:39:dc:0d:95:0b:b1:
         58:d7:af:0f:2f:fb:f1:74:d3:9b:7b:f8:8c:8e:a2:c4:d8:8f:
         a9:b2:e1:56:53:ec:73:ad:08:bb:25:43:84:0e:67:cc:18:15:
         4c:c5:53:84:6d:ef:69:a4:71:9b:be:49:09:75:5d:de:2d:8e:
         ee:24:20:a5:ba:1f:41:5f:f4:f8:09:62:ff:5b:1c:98:f6:a1:
         db:10:20:11:fb:f9:c8:01:00:8e:40:e5:29:30:45:f7:68:99:
         7c:20:d4:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsPNy948d6eYSQEpTVY9gOvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4OGNhYmY2ZjUyM2YyNmUyNjdkYjAzYjUyNDM0Nzg0MWFh
YWE0NjUwHhcNMjUxMjExMjEwMDMzWhcNMjUxMjEyMjEwMDMzWjAzMTEwLwYDVQQD
EyhmMTBiNzc1ZjlkZTVmYjNkYjJhM2EzYTEzMjlkNDc0NjgzYmJkZGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonLwUjn3xTTBsmtSH4OUj2DxHVV2
2nJEmIO9Fzy7JsBsBUQsAXnrMaCowYv8ICTosTytjtLr9XwCdjWwU8gXsq73bhJm
ZL7FqQmicWh8CxOoSTzy8Fi2zlmmMi6LM6tkytUA66T+X5V9bv2keIPjxvO3jbgi
xU6XPpF+YmF4sY98PH3YHdYVUigz3U+a6RrDorCyQAr+4p8a0jh+uwmj55gAEYaB
VFdcRKJxEvlulZI/3MZipizxAGgiO564Er8/uuWORm8Fm8MsRldN5mqfIZ5kcIHL
dDFvJ/39caUufQ92V2UU2LtB6uwv5SuMPrz3Bum+SMexvY1pRBoSnn9QzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPELd1+d5fs9sqOjoTKdR0aDu92qMB8GA1UdIwQY
MBaAFFiMq/b1I/JuJn2wO1JDR4QaqqRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0l5cjl2VWo4bTRtZmJBN1VrTkhoQnFxcEdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wMTg3ZDYtOGJmYy00YzU5LWE2YzQt
NmFkMzI1MmExNDI3LzEvV0l5cjl2VWo4bTRtZmJBN1VrTkhoQnFxcEdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wMTg3ZDYtOGJmYy00YzU5LWE2YzQtNmFkMzI1MmExNDI3
LzEvV0l5cjl2VWo4bTRtZmJBN1VrTkhoQnFxcEdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwe1GfBGW
H4ChjLSSbZuuwnL/Sfqhmh47qUR6cK/vmiNMQyMTXBwehS4RvaA4AYL2/yj8Ru6j
zxniZA52uv0w9R1J9isOd+39JW04Z7+IV+djqxjRB5lk2y59GsDNdLwrQmYns5ol
p1sM1IM9I3hZSd74CTSQDSTAJ1XOkefCpiNeFxE7/e7MC2ziaqGNcypwpekdexeM
uYZZ/Mn3OdwNlQuxWNevDy/78XTTm3v4jI6ixNiPqbLhVlPsc60IuyVDhA5nzBgV
TMVThG3vaaRxm75JCXVd3i2O7iQgpbofQV/0+Ali/1scmPah2xAgEfv5yAEAjkDl
KTBF92iZfCDUxg==
-----END CERTIFICATE-----
Generated at Thu Dec 11 23:06:59 2025 by rpki-client