This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
File:                     wessYB-m0HUHlzCB-qEyX-GQsnY.mft (raw, json)
Hash identifier:          19mc0y5xuUmldpwRQYYbVaPn7LxKuIHc/W4tLYA1UaA=
Subject key identifier:   D2:C9:8D:B1:35:95:E7:E0:05:B4:98:F5:AF:E7:4A:CC:10:C6:3A:13
Authority key identifier: C1:EB:2C:60:1F:A6:D0:75:07:97:30:81:FA:A1:32:5F:E1:90:B2:76
Certificate issuer:       /CN=c1eb2c601fa6d07507973081faa1325fe190b276
Certificate serial:       019B5A51D9D3E3DFC7A6E4FAB599E991927A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
Manifest number:          0614
Signing time:             Fri 26 Dec 2025 11:01:12 +0000
Manifest this update:     Fri 26 Dec 2025 11:01:12 +0000
Manifest next update:     Sat 27 Dec 2025 11:01:12 +0000
Files and hashes:         1: 9VIpFT_uZfwTVVoxe7PNJO0XppE.roa (hash: dBqoAsOTvzrDylULyUsZPwgLS85TPwI2yvXP5iugyTk=)
                          2: v1vDCS3zEydWpnAi830GA_yQEHw.roa (hash: 3xFB/pduxsTBOKVMWYRZZ5LgXgY+cAqxpBeMHy8oimw=)
                          3: wessYB-m0HUHlzCB-qEyX-GQsnY.crl (hash: SZnAjDo285BqB5zOifwx3W4Dy2U8TWDHG474GDgjpuQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5a:51:d9:d3:e3:df:c7:a6:e4:fa:b5:99:e9:91:92:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1eb2c601fa6d07507973081faa1325fe190b276
        Validity
            Not Before: Dec 26 11:01:12 2025 GMT
            Not After : Dec 27 11:01:12 2025 GMT
        Subject: CN=d2c98db13595e7e005b498f5afe74acc10c63a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bb:a6:1f:9e:cd:77:5a:96:cc:e8:3a:e5:8f:
                    b0:f8:06:7b:dd:7e:e9:13:ea:45:a6:5c:15:a2:35:
                    bf:f0:d2:34:6d:b1:e3:25:72:fd:e0:c8:1a:2c:59:
                    72:07:ad:34:cf:09:62:41:97:65:f9:c6:2c:82:5c:
                    0d:cd:bd:0d:2f:4f:72:b8:07:a1:44:38:67:f5:5a:
                    2a:b5:84:46:8b:36:5b:45:00:e1:9e:5f:5f:31:df:
                    81:9e:93:e1:ac:32:9e:73:94:32:a1:13:70:8b:76:
                    21:43:74:6f:51:80:e0:49:82:22:d3:34:57:72:30:
                    52:65:2c:c8:2b:dd:f8:ee:d7:18:d3:dd:e7:be:f9:
                    46:e6:76:28:e3:91:07:39:41:cb:8d:a2:01:c3:f4:
                    9f:4a:2b:b3:85:65:02:17:d2:e8:fc:a0:2e:0b:f4:
                    a4:1b:44:01:a8:04:11:e8:fb:1e:c2:ad:1d:1a:bd:
                    50:79:1a:82:a5:cf:74:e0:c7:72:9e:fe:be:12:66:
                    70:87:51:f6:e3:d1:86:38:a5:0b:8c:b3:69:49:3f:
                    b1:e8:b1:6c:0b:0b:90:a1:7f:59:ba:44:9e:76:a9:
                    11:42:7b:ed:34:e4:b9:9f:83:29:50:6e:75:1b:62:
                    21:99:2d:fb:fe:09:08:a1:6e:b1:16:8a:44:8e:87:
                    6a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C9:8D:B1:35:95:E7:E0:05:B4:98:F5:AF:E7:4A:CC:10:C6:3A:13
            X509v3 Authority Key Identifier:
                keyid:C1:EB:2C:60:1F:A6:D0:75:07:97:30:81:FA:A1:32:5F:E1:90:B2:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:84:cc:3e:3b:61:bb:cd:b7:94:c4:f3:6d:f2:34:6a:c7:b9:
         fc:6d:cd:24:ad:37:a5:64:f6:55:f9:f5:f7:d6:84:8d:f4:ff:
         88:08:9f:54:82:73:41:a2:1f:eb:65:c1:6e:d1:30:4f:4b:21:
         9c:65:b4:9a:bf:0a:e5:ab:e5:e1:fd:f7:b0:98:7d:bb:f2:10:
         d5:81:97:7e:87:c8:f3:cc:55:ed:74:5a:bd:07:53:d8:d0:81:
         f0:fb:73:47:2e:57:3b:2c:63:40:35:48:e9:a5:10:a4:3c:53:
         ef:3f:4e:5f:b1:0c:da:a8:e7:c3:ae:16:67:10:ad:5f:1d:4f:
         87:2d:50:4b:47:b9:5c:fa:41:19:ac:39:93:74:0d:dd:7c:67:
         fa:92:aa:71:93:6c:7e:f1:83:d0:f5:f4:1f:5e:5a:3a:47:8f:
         5f:06:12:3e:3d:87:e3:cd:4e:75:75:01:0e:f5:33:f2:d3:3b:
         6c:2d:ae:73:d5:76:5c:f5:27:92:4e:cb:dd:89:ff:5c:7b:b3:
         36:49:de:79:97:72:e5:2b:bf:e0:81:ec:cf:ba:b7:b7:06:e4:
         c4:42:6b:97:6c:2a:6f:3d:bd:26:57:f6:fc:36:0e:e2:e2:ec:
         38:90:ee:b9:98:99:8c:7e:ad:bb:f0:09:af:3e:42:99:bb:42:
         ea:d2:7b:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtaUdnT49/HpuT6tZnpkZJ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZWIyYzYwMWZhNmQwNzUwNzk3MzA4MWZhYTEzMjVmZTE5
MGIyNzYwHhcNMjUxMjI2MTEwMTEyWhcNMjUxMjI3MTEwMTEyWjAzMTEwLwYDVQQD
EyhkMmM5OGRiMTM1OTVlN2UwMDViNDk4ZjVhZmU3NGFjYzEwYzYzYTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLumH57Nd1qWzOg65Y+w+AZ73X7p
E+pFplwVojW/8NI0bbHjJXL94MgaLFlyB600zwliQZdl+cYsglwNzb0NL09yuAeh
RDhn9VoqtYRGizZbRQDhnl9fMd+BnpPhrDKec5QyoRNwi3YhQ3RvUYDgSYIi0zRX
cjBSZSzIK9347tcY093nvvlG5nYo45EHOUHLjaIBw/SfSiuzhWUCF9Lo/KAuC/Sk
G0QBqAQR6Psewq0dGr1QeRqCpc904Mdynv6+EmZwh1H249GGOKULjLNpST+x6LFs
CwuQoX9ZukSedqkRQnvtNOS5n4MpUG51G2IhmS37/gkIoW6xFopEjodq/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLJjbE1lefgBbSY9a/nSswQxjoTMB8GA1UdIwQY
MBaAFMHrLGAfptB1B5cwgfqhMl/hkLJ2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2Vzc1lCLW0wSFVIbHpDQi1xRXlYLUdRc25ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81Y2Y0MzEtNGQ1Ny00NTAzLWIyOGEt
OTBlZjdiZGExZGMzLzEvd2Vzc1lCLW0wSFVIbHpDQi1xRXlYLUdRc25ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC81Y2Y0MzEtNGQ1Ny00NTAzLWIyOGEtOTBlZjdiZGExZGMz
LzEvd2Vzc1lCLW0wSFVIbHpDQi1xRXlYLUdRc25ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACITMPjth
u823lMTzbfI0ase5/G3NJK03pWT2Vfn199aEjfT/iAifVIJzQaIf62XBbtEwT0sh
nGW0mr8K5avl4f33sJh9u/IQ1YGXfofI88xV7XRavQdT2NCB8PtzRy5XOyxjQDVI
6aUQpDxT7z9OX7EM2qjnw64WZxCtXx1Phy1QS0e5XPpBGaw5k3QN3Xxn+pKqcZNs
fvGD0PX0H15aOkePXwYSPj2H481OdXUBDvUz8tM7bC2uc9V2XPUnkk7L3Yn/XHuz
NkneeZdy5Su/4IHsz7q3twbkxEJrl2wqbz29Jlf2/DYO4uLsOJDuuZiZjH6tu/AJ
rz5CmbtC6tJ7Gg==
-----END CERTIFICATE-----
Generated at Fri Dec 26 16:02:26 2025 by rpki-client