This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft
File:                     w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft (raw, json)
Hash identifier:          5b8Ksk52WLdjcJQ2m/3r0DBU2to73h36HWBuu4DrEoE=
Subject key identifier:   46:E1:04:8B:16:07:D5:F6:50:12:DC:2C:50:94:27:01:83:E0:19:B5
Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
Certificate issuer:       /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Certificate serial:       019AFC1F02EA3FFCE93426CD7A7FF0F3E879
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft
Manifest number:          179B
Signing time:             Mon 08 Dec 2025 04:01:22 +0000
Manifest this update:     Mon 08 Dec 2025 04:01:22 +0000
Manifest next update:     Tue 09 Dec 2025 04:01:22 +0000
Files and hashes:         1: 2JhXptnvhueVQmeHn25cz0kurHI.roa (hash: 8SozpyusIiaDiWUG+p4VEYgVUXO18QzNYiLErT92LEQ=)
                          2: 4UNuayKJ9SKFMuYEY-BWSB61PDo.roa (hash: VdmvXseDtE+yEFHvon3CqWBkcnp2a6Fyr5Xk6vQjKrA=)
                          3: 95EMcqjIsM9QeVWiI1F103-6l7Y.roa (hash: gu1FSS8hVzJF6G+fxoX4QZ/buhSiBu7AZC9ypB19V18=)
                          4: AOHo_zNkn17jUlogxpO30pi4vZk.roa (hash: +QPjJA3N7ss0yCIwrgcDQ/5UO7ASRz1q9sJuFdAbQnM=)
                          5: FC18L6lC5yaJe6exeGTUDqFYlIo.roa (hash: GydOuNkxodWdIUJZgEfyA03NGxGVxZmhiSQz6U5MpVU=)
                          6: R7hZWRZrAnJei2iE6wt7eIe4FZk.roa (hash: t2Z1XiCtqv1iQqmj18uapS137l9O9IhR3Vr8NcgP36M=)
                          7: TjCkJR8qj6olugjRfD8NHtt3pZQ.roa (hash: qhX3u+/8KbHWKUW3NatWO53LfU8WF9QKEMeAjJDe1Jc=)
                          8: WUkxlhH37biDOoJr2RmTg4NVgCE.roa (hash: zDj3jnhLIpXSjiKUFMHy4i1gCMbtJWvBoUe2dg1Y+M8=)
                          9: YVr0AF2c3KiDV-SjuPftS3CnSqY.roa (hash: ArqLxgm2U8vUhD9/kr3eJUcwEOkYGBgAWgDslpkJKrw=)
                          10: _j08j-2FDwC68rueaFbBqi1fpuA.roa (hash: qxS+XcpGtA2PtYARd7lBLLnmeCdljjuwyVVXC8rvxSU=)
                          11: hOu0RIEKB2ppqE90CKomzj_fPaU.roa (hash: 5puJ0YRx40NGpD/EpFU4mHjPixkjg4PxMixsFx+pf6M=)
                          12: jyuHoIpvGivbz5mzbJp3o-Fm4XE.roa (hash: L8QWmw7gSLTV6VDNnAdLsuvANJDNKaAv8M2I7z7lbPU=)
                          13: qs9auAFh2pBR3JizXaVl9ahPIZw.roa (hash: rWVPduWCAoKm2gglbIKEXbvoDR4rX+//s9Ke5NqI9jo=)
                          14: rC_bTep_k2W1swG7Jm4biitFHA4.roa (hash: Sbe+qsJH965cmbXMZY6OWU+P7tgNGwOdhieuhSBvccc=)
                          15: v8zUsRBNwECEAu2aOUDthF32Ldc.roa (hash: EgwEm0mHHZuzyt4EgzWtyJchZ9xyGDbUPpYJISyJCnY=)
                          16: w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl (hash: azpE6Dmov8VAK0S82BuLMDSiZ+V5zA7q/I20pObo3LU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:fc:1f:02:ea:3f:fc:e9:34:26:cd:7a:7f:f0:f3:e8:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
        Validity
            Not Before: Dec  8 04:01:22 2025 GMT
            Not After : Dec  9 04:01:22 2025 GMT
        Subject: CN=46e1048b1607d5f65012dc2c5094270183e019b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ea:a7:3b:61:d2:2e:c5:ac:03:27:5f:47:57:
                    92:eb:81:a8:48:5c:1f:98:e8:4a:98:91:55:84:e5:
                    aa:85:92:64:e8:82:88:5a:b9:2a:5a:3f:63:64:5c:
                    89:7c:b2:66:fc:72:6d:05:c8:94:45:87:a9:cc:f3:
                    6c:12:36:2a:9d:91:43:74:c5:3f:59:3d:df:57:5d:
                    1f:e6:f2:e9:ff:22:2a:52:22:78:74:6e:2f:81:44:
                    78:24:81:02:c7:21:c0:0e:1f:9c:3b:e3:45:0d:b1:
                    20:1b:29:be:55:99:96:7b:23:fe:21:11:96:ea:0a:
                    4c:6a:e9:a1:f1:37:95:d8:7f:58:8b:73:d4:64:ee:
                    b0:00:ea:bd:bc:8c:c9:f3:76:20:35:99:ad:98:26:
                    ae:05:0b:49:b3:cd:20:ea:56:bc:14:2b:c3:46:90:
                    a6:52:44:3b:76:bb:54:28:73:79:e1:79:f0:1a:63:
                    b7:db:50:24:55:b5:41:29:b3:c1:b3:13:69:99:6a:
                    e4:3e:6e:4d:68:00:1a:80:39:26:35:c3:48:08:a3:
                    ec:24:e5:43:df:83:08:b3:99:aa:fe:76:91:2f:89:
                    be:97:db:68:68:79:5b:f6:fd:1c:5b:24:ac:2b:3d:
                    42:49:c0:41:73:86:30:fe:ab:03:17:d3:c2:21:e4:
                    52:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E1:04:8B:16:07:D5:F6:50:12:DC:2C:50:94:27:01:83:E0:19:B5
            X509v3 Authority Key Identifier:
                keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:f1:c8:56:cb:c7:45:b0:57:a1:4d:aa:b0:e1:31:c9:bd:ae:
         50:92:33:a1:da:48:3f:d4:7c:13:7b:fd:61:77:8f:da:5f:d7:
         ab:dd:15:7b:0a:db:72:f2:2a:b6:a3:24:80:b7:11:26:9d:6e:
         81:57:8b:67:0c:f1:5c:c0:da:88:54:11:5f:9b:c4:d6:b7:2a:
         5b:49:bc:08:4d:d8:41:1e:62:82:56:cb:87:f4:0f:41:bd:48:
         4d:af:35:bd:a5:25:15:8b:0a:3f:86:d0:c7:cc:9e:7a:38:1f:
         67:8a:61:c6:27:0a:90:a5:7e:5a:a5:5e:89:f9:cf:df:85:a7:
         ba:df:66:f3:1e:13:12:04:94:3a:ea:5b:fd:53:cc:b9:1c:a6:
         83:4c:66:94:d6:f3:38:af:83:c9:88:d1:25:c3:e4:70:75:ae:
         c2:ce:ee:e8:5c:4f:6d:30:7b:6f:d3:ca:f6:cf:78:5a:d0:a7:
         e5:50:20:cc:e9:ea:a1:2e:2f:93:55:78:ae:b0:1f:f7:95:8d:
         bd:d5:e3:67:8d:1d:ea:7d:ac:55:79:39:2a:40:c7:ba:ad:08:
         26:09:66:be:16:e4:f4:c9:1d:ba:30:d6:4b:5a:40:60:c1:c3:
         f0:6e:79:f1:f0:cc:bd:59:dd:87:d0:9d:ea:26:6d:34:77:45:
         4f:d0:af:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 07:39:29 2025 by rpki-client