This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
File:                     W1JjSi6wP4VlteM9wrn0kEH3z7A.mft (raw, json)
Hash identifier:          LZpzLRcMQwCdUHXEgHplYOrWTbsJeMjEZfIe//AKl3A=
Subject key identifier:   1C:C7:7F:78:50:14:72:74:23:D0:39:F5:1D:25:90:F7:78:24:3A:8C
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Certificate issuer:       /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial:       019B0DB6D41E68B081102A0268B687A646E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
Manifest number:          17A8
Signing time:             Thu 11 Dec 2025 14:00:44 +0000
Manifest this update:     Thu 11 Dec 2025 14:00:44 +0000
Manifest next update:     Fri 12 Dec 2025 14:00:44 +0000
Files and hashes:         1: 2WxqwaZAVv2dyvITo-AesFShXVA.roa (hash: 6t+meRGm9n30GD2goCpBFQRLPzip0i8RlRot9CqnzDs=)
                          2: 7sYC2HPXTRXSgFwGJBI_aMn1Sls.roa (hash: jNxwvCYUNHETc1lJzQ1miztj7GesEWdkNQJ05PgoDvM=)
                          3: GqSZzRT-6EUjEpPpSprb5uTXjdY.roa (hash: R5dBboLAVD51kW1cDVdwcoH+HEQsopVvdEZu8XFQjoA=)
                          4: IJUrnOsXqWHMR09b2WThxrOzZ7I.roa (hash: pLY1rvU8nCKjlyh0WPOsU89VyudJIjrK5QOTjl/IWbY=)
                          5: LRiyT-rlzmXrQXbcYMWhBU482eg.roa (hash: ICoe3kPCb8Fc28l3cr0GMLtrwRJd+KH/IvmqLhqbyWo=)
                          6: Nlgb7JYdYFon3ATeZJpEg1k27pw.roa (hash: NSOx98amr5Ih2M9Z5olSG0RUve4KE3kRKxU5Wk0rOgM=)
                          7: OL--k4HWjTYCqoOiHkb6J7Zbllc.roa (hash: JA4H42s/1jVK78rUsdByr4/C6vbBqxY7qzGRzKdj1HE=)
                          8: RdMfFmFjHDJDX_-5uaaUXQKDls0.roa (hash: O6jVvm7OX0OHLjep55ba573pokqJBTfgyVcBvBUtHtI=)
                          9: UtNq26d9JSb_Nw7v93_rZSfntfI.roa (hash: BwxbdOm0odI7W9CsiapOsPFRt2svrB57iDDfUu1jOsA=)
                          10: W1JjSi6wP4VlteM9wrn0kEH3z7A.crl (hash: aEhVTvMAYHmUS9bg0/5I7vejXhGw6DFrIwyyXwCfSHg=)
                          11: XoEgN8Rzf-_O70nBq2ov0ajUPeY.roa (hash: Uqsa+8GNjpiZZotqp2+P9cchtd9l85RTnq9RE86H8w8=)
                          12: dx_5lNWl8316FN21jYYHgM9Omcg.roa (hash: Qr4/FlwcX1RS39pjsqMjlcq6atyfDlGR+M4UNYZEX2I=)
                          13: e2cInBTd-rmGJiE7XxhPPld1Ulg.roa (hash: IvekKh/rpFdvGGB9vKZ/0VojUSPhCbP5Lk2iZ/nlU9g=)
                          14: eRoiwHCGGWzsakU0Sd9_pvvGdAc.roa (hash: rIC53m0wk/AEJI6S30/Y82l7fTBuA5MUe7EOXE+qyks=)
                          15: iXyw4CJeCTCBDoOmqw9S5M03Oho.roa (hash: /0Njq6baGydQf0hCnZDNdpKQZB7dTLuwHGMng0slCJk=)
                          16: pM84h9NKkkwXGLtMIPbJpgkc55c.roa (hash: kTHVs/be3Tv2n1C0vv3DFuVKeuz0WY3EFxZXtvfz3Os=)
                          17: vQsJW15dMwHZY104nt15UgW_JpU.roa (hash: Wpy6rJjJCiowwMoCuc7Oz0XTeA0XwRwWa9jhMg3QDw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 14:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0d:b6:d4:1e:68:b0:81:10:2a:02:68:b6:87:a6:46:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
        Validity
            Not Before: Dec 11 14:00:44 2025 GMT
            Not After : Dec 12 14:00:44 2025 GMT
        Subject: CN=1cc77f785014727423d039f51d2590f778243a8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ba:eb:37:a5:73:1d:9a:83:71:fc:e8:d6:0b:
                    c0:f6:5f:5a:bc:f2:b6:90:f1:ad:ea:85:f8:70:04:
                    01:8a:7e:48:a0:b0:04:e7:41:4a:23:de:8e:a5:88:
                    d0:0e:49:37:93:dc:f0:9c:98:b5:b7:eb:64:54:34:
                    1a:ac:50:92:d8:84:4d:5e:2b:f7:bb:15:53:bd:32:
                    fd:dc:cd:f9:57:b4:a1:77:22:b8:c8:bb:c4:b5:0f:
                    48:d7:34:5b:55:b9:8f:9f:93:f6:48:75:13:dc:47:
                    35:fa:e0:10:c7:86:93:82:45:81:8a:a4:3b:db:db:
                    ad:73:be:e6:f0:51:c0:23:fb:2c:d9:85:96:e1:58:
                    9d:c3:c8:5e:7a:40:32:a0:71:f1:ef:64:d6:be:f5:
                    50:fb:d2:08:c0:6a:4d:6e:d5:80:65:fd:6a:3a:82:
                    f4:76:a5:82:23:b5:30:3d:c7:43:54:2d:d6:53:30:
                    ac:8f:72:f4:bc:f6:2e:4b:44:4f:96:5c:9e:ba:fe:
                    f8:8f:e6:8d:eb:6d:e0:6a:d4:8a:86:f0:17:2c:cc:
                    98:69:c7:bb:d5:62:31:d9:67:26:76:a9:f2:1c:1f:
                    15:5e:e9:92:58:36:f2:25:2d:1a:d4:47:7d:c9:08:
                    f0:c8:de:c9:83:43:eb:e4:41:e0:af:00:1e:d3:d2:
                    16:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C7:7F:78:50:14:72:74:23:D0:39:F5:1D:25:90:F7:78:24:3A:8C
            X509v3 Authority Key Identifier:
                keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:2e:7f:07:7b:db:4a:9c:e9:74:ac:5b:37:06:b2:88:f9:06:
         94:4d:d4:e3:43:ef:c2:fb:5a:dc:66:5f:f7:a6:dc:07:78:f9:
         02:a1:da:c0:d8:db:83:b9:74:ef:3e:06:37:14:8a:3e:d3:91:
         b7:5f:cd:e6:5f:7a:ed:80:6e:7d:86:b4:5c:92:5e:2c:eb:7a:
         ad:9c:5f:42:bc:c3:29:80:3c:06:4b:1d:04:72:00:67:d4:2e:
         84:dd:71:b7:0d:2c:0e:d1:3f:dc:dc:aa:b7:ce:fc:72:4f:8a:
         a6:e8:3b:4f:65:6f:5a:51:ad:38:04:57:3d:9a:89:49:82:37:
         8e:c0:a2:5b:37:b0:07:e8:62:bc:aa:71:7f:97:a1:3c:6b:39:
         56:43:85:83:2e:30:05:9a:df:e4:39:9d:8d:9a:97:4d:fc:81:
         2b:4a:7f:10:63:2f:0e:4f:bb:8c:3d:90:99:33:1c:77:32:1a:
         0a:f6:97:4a:6a:4a:b0:4c:f8:f3:a4:e7:dd:93:c1:76:56:7c:
         a2:77:a4:e2:c7:a7:95:a2:68:d4:0b:ac:36:8e:4b:6d:79:1c:
         26:1c:ee:c0:c2:60:6b:b5:4c:2c:c7:6a:98:75:29:fb:8e:24:
         b7:36:c1:e8:16:ed:58:fa:69:7c:44:03:42:46:24:29:6a:48:
         ae:98:46:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 19:40:59 2025 by rpki-client