This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
File:                     wOVJ_c7rApEsiodByBaAa74ZxEg.mft (raw, json)
Hash identifier:          0vljAVIcXK0I0JR5HeFbKPGejZKTVCAjHjxgtFeslWQ=
Subject key identifier:   EA:F7:3F:7D:B5:64:A1:44:CF:2D:34:93:86:B9:E9:53:C4:66:23:29
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Certificate issuer:       /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial:       019B08C73ED1F0B5323058423588B540F85C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
Manifest number:          0C1B
Signing time:             Wed 10 Dec 2025 15:00:33 +0000
Manifest this update:     Wed 10 Dec 2025 15:00:33 +0000
Manifest next update:     Thu 11 Dec 2025 15:00:33 +0000
Files and hashes:         1: 3O-D3rX4CFCdAkLP-WafPBWg7LI.roa (hash: ZjKqIVEFVR9cfjOaAvV16cE3fi3JRCek3PrT1Bdh+pE=)
                          2: 92v4gOX7Hd4VpBM47MNWwQITmiQ.roa (hash: IYC56kc9QpO1Lz7tXp5PsrYKm5wg9hGG4hbFTisgloQ=)
                          3: BJ6lsg-DXRJALTpWPFS2koaTAyY.roa (hash: IiHbLMYyBvv8idUUWBs1VcBi/2+qrySt01qtestuj3U=)
                          4: DO5idF7JefFWyUYzkZhYwCuZL6c.roa (hash: AJ1wLkAbsKPjn/aeUEI+0wqiFAaro9i62bH223sEeJk=)
                          5: YxVBGHzpZ098_zTBEpObTl9p4Eg.roa (hash: JesGckTpDCNMKUvtvdV1ogwXfe3HeaDGJnDqvGhYCXo=)
                          6: aF1yx_YEkb4qte3WK4cEGVa4EaM.roa (hash: TFXwtunVP236lozfleJ3EGHJe+mWp3dn3FUFV/gu6fM=)
                          7: iDdiLh5kCcnVhEcS17XeyUklRpU.roa (hash: vH9FgKr3O/PWH1F99+7VS2TIiEwAAU+Q3wu4ESVAvX4=)
                          8: lb8SvljV7v-gn9cpNcy7VFlIW4U.roa (hash: TMosDmxteJN205Un1BL0SVx3OHQURc2E5+W3ttZ+rDY=)
                          9: qkGOcb9ML1ScPc6ocdkEc-fJdPo.roa (hash: rOYR9Hc2I/xQX5WTMTMX9NryWoJMfSMzeGQ9FnM3vXE=)
                          10: v4giAVOJMEch9tYcozCGJgelH1M.roa (hash: OUMy4ShdW4gTpBY9LdojzedOmb/sODuZT4FZY1l2uCM=)
                          11: wOVJ_c7rApEsiodByBaAa74ZxEg.crl (hash: CRfho+yQXO8LpRx2Pu60otCT4JyrnSTX+N7wdNKSWgg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:08:c7:3e:d1:f0:b5:32:30:58:42:35:88:b5:40:f8:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
        Validity
            Not Before: Dec 10 15:00:33 2025 GMT
            Not After : Dec 11 15:00:33 2025 GMT
        Subject: CN=eaf73f7db564a144cf2d349386b9e953c4662329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:dc:e8:47:15:eb:1e:15:5f:09:bb:6d:ae:68:
                    62:7a:6c:d0:a4:97:2f:6d:a0:31:b6:f5:b2:f9:4f:
                    b0:12:53:6e:9b:49:9e:52:8e:26:d1:f3:bc:29:ff:
                    fa:97:0c:c0:0f:e4:bc:e9:39:8b:ce:4a:e6:1f:a7:
                    f8:51:6a:67:ae:a5:c2:3e:5b:21:70:0d:00:30:a1:
                    78:b6:1c:d7:54:a3:e1:f0:76:e9:31:96:d3:9a:86:
                    1f:6f:05:50:18:ee:d2:ec:d3:41:66:b5:b3:f3:79:
                    69:9c:19:54:3e:07:0d:7b:83:38:44:38:31:38:9c:
                    ea:10:38:b5:84:5c:05:9c:1c:f0:56:d3:bb:68:dc:
                    4b:97:e9:74:99:fd:b3:bb:cd:b0:8b:70:33:76:83:
                    bd:18:d7:e3:b4:99:f3:4a:20:ab:23:04:de:cc:dc:
                    47:37:4e:17:96:d5:94:79:7d:0d:f1:82:a0:28:dc:
                    da:be:ee:c4:24:b4:bd:6b:62:ff:46:8e:da:73:92:
                    46:8f:81:49:b0:ed:d0:18:f5:6f:03:fd:f0:29:c8:
                    b7:ba:db:04:cc:ed:59:ad:52:30:e9:21:c7:ed:c8:
                    bb:c8:15:18:25:65:c0:09:f7:f3:81:a2:10:3f:0f:
                    73:33:e8:0c:7c:4d:37:e7:98:17:c4:a8:7a:03:35:
                    be:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F7:3F:7D:B5:64:A1:44:CF:2D:34:93:86:B9:E9:53:C4:66:23:29
            X509v3 Authority Key Identifier:
                keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ea:e6:54:89:ea:d6:07:13:b3:1f:74:b4:6b:c9:11:60:d3:
         59:80:21:c8:98:43:83:8f:82:b0:7f:3a:a9:bc:c9:f4:c9:8c:
         e0:d3:82:90:79:d2:52:51:b6:c4:fa:02:ec:46:cf:e1:a3:7c:
         1e:62:f4:cd:02:e5:b2:c0:13:84:77:d5:a8:8f:06:6c:5c:61:
         c7:0a:c6:27:4f:8a:1c:4f:5e:17:ac:2c:f4:20:75:ae:08:40:
         aa:4a:bf:1b:32:d8:52:fd:63:48:88:55:c4:a4:52:ed:41:bd:
         b9:0c:56:e1:17:ed:2d:ff:fc:34:f6:91:61:23:a7:69:9c:fa:
         75:31:8c:df:7a:ed:a2:2b:33:02:a0:ca:86:99:7c:3f:c9:a2:
         09:4b:46:d5:18:f6:70:99:04:d4:00:2e:1d:e5:f0:cb:4a:52:
         ea:4b:89:8e:c0:6b:8d:07:01:61:5d:ab:c2:4b:ee:bb:80:34:
         c4:c0:94:23:b7:db:8c:97:fa:39:37:21:2c:f5:ba:fa:2c:82:
         51:90:6c:ad:0f:93:1e:68:61:ed:df:47:38:71:1f:b9:99:a5:
         7b:17:0e:40:4b:ac:7d:07:fd:3f:82:dd:99:d2:ac:d2:cd:2d:
         a0:bd:83:c1:7d:00:09:6f:0f:9d:17:49:a1:ca:38:38:95:90:
         60:f7:fb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 18:45:48 2025 by rpki-client