This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
File:                     WK1g2lJnHpCDzzmGTsoqojJBvp4.mft (raw, json)
Hash identifier:          y0VQlEViGokgI58DNnd1QNN3EcuLisRj0k6/m7U1EjY=
Subject key identifier:   FC:87:B1:3C:74:A0:AD:84:10:C9:B2:4D:D8:4B:FC:FF:40:3A:C2:F5
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Certificate issuer:       /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial:       019AED67BC5DAD269958456B1F33B892874C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
Manifest number:          0946
Signing time:             Fri 05 Dec 2025 07:26:29 +0000
Manifest this update:     Fri 05 Dec 2025 07:26:29 +0000
Manifest next update:     Sat 06 Dec 2025 07:26:29 +0000
Files and hashes:         1: 4ZArBLnLocPpGHsaVFtOWy1GsWA.roa (hash: pqXDsHt86t8zsxtaFtGXKbg4QUfmimTh3EtiWAKZzkQ=)
                          2: 5mio1ajLw-tS7XgQP9oqa-mUdGw.roa (hash: rc8Oh5sP4syl67QRNGDros7CDOOG+uK5Sqe6YBh3o04=)
                          3: 9i-xHF3Tpk-LvSL2lSXbWX3TAPE.roa (hash: GhnJ6RKe7wEuZR796fCpS4DNXR1C/VooXMXrXuKzk28=)
                          4: AosAQto_z9OqcwqeC_SZWECJeJM.roa (hash: yf8rKxe7cxV+hvRaeqOv00ssVciIq9eecdLxMG0bKBI=)
                          5: ERe51qclsX1vtlIYSnp9k4CtxTU.roa (hash: kRCA0E3LofkB2UCr2ORCJ295mGOQpRVa8ZmBK6mCChQ=)
                          6: Me2_Prx_OH84___bzQH13Qqoab0.roa (hash: ly5wVLFcaAnRwLR2NQqlItbttmYZEyy9kWeipxzWvug=)
                          7: P3r8oITRtebSeW0p5g8ljrH9RWE.roa (hash: q/U3845DVzpfmos9VO8HLLXFHPxn17BOa+RRG773ocI=)
                          8: U-Ph48laIxEbF24jH6nOMT3OpLA.roa (hash: h/z1tS8nUsqG42P90V9Offm2msIM9SciPTSWhkVK3yE=)
                          9: U-gTB136QQdQ6GNss6ZeRtIvG2w.roa (hash: 9Vc5S53HpbiVtc7GbEZ9M6eKX4INi6kd2mbzaga/l+g=)
                          10: W5pOqAkgjpYDOeHPc58PpPg4eC8.roa (hash: yL5+pJ+Yw2Ubc1IA7l2rXuOrE0qVTT2bXY3YTNagTw0=)
                          11: WK1g2lJnHpCDzzmGTsoqojJBvp4.crl (hash: drTDrsv5/cgsVV7AOZ4znWOA+iRdEKDQk3vTbf5G2Ig=)
                          12: YhUiBt6aWDxfUxxlX_f5An_H3Vw.roa (hash: UUlZjHLoXxN7b5MRYoyNUfcSFhA/gMCkcrXZjW9BfPs=)
                          13: jnLGWKb8iggQl-Vb0CzNnJG3Cy4.roa (hash: sUjFFwQVQZt9Fjo+3Lho911bfG5hBRxCh635GQzd9TA=)
                          14: kPsDUSBkqswfaMzVi1Cye0vM8ks.roa (hash: w+xp6HNKwTbsH2m8GWhBFiGbaO4PIv65OfaGPcmfyUs=)
                          15: lUfZhOt-wvUulei1P4O40ILh6W4.roa (hash: KvgRSxa7IHlLzvxb6tBzeiNZVGLjogvJrOdyYd+Hhtw=)
                          16: nMNUMFD0D6QsYK_jnD6pqYmeXsk.roa (hash: cEJMwKIA2yxBnNxWn1mu5jHlICkXHOt6q6vHqbiLucg=)
                          17: om7cnxirwY1mF6WG8GSa3rsaVqw.roa (hash: +3vNfJz4iobOk77Hgvoshz1u99toaeiukQN3KQqch5c=)
                          18: pSPQssN5kDIUCVU97gVJ5sRDFrA.roa (hash: 2T2Pj/Lur1RrWbVnX6sEjqE6EYLVtljOc+B0vUZ0Otg=)
                          19: qzz9nJu7BG1fsmJZr7nugjHmA4k.roa (hash: ovLgRlHBUUAKK9984wcZaSkMR8RGwPfbP0tBvz1JoVk=)
                          20: ra3KqgTuCiwRC0PZJRve-Bdxvjg.roa (hash: mcABOKGSXtu9A2WM6jvcZmDeS/Ld950DxdjwmVB9gHU=)
                          21: uk6hH9Dzzgnima7moKdlChvbIco.roa (hash: Ow8Zi7vnC95cw7Q9hThm4tV+bwQ4iwBNuOeb1FUz8n8=)
                          22: vU2HddgRMZd-n9GXfaubZsaeTag.roa (hash: fORgxQlTLiLIEJTKyJ2i2MnWHaJ55TGjD8VWzhhqp5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 07:26:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ed:67:bc:5d:ad:26:99:58:45:6b:1f:33:b8:92:87:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
        Validity
            Not Before: Dec  5 07:26:29 2025 GMT
            Not After : Dec  6 07:26:29 2025 GMT
        Subject: CN=fc87b13c74a0ad8410c9b24dd84bfcff403ac2f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d1:8a:60:9f:e4:06:5e:f8:b1:ef:62:30:3f:
                    4c:e0:75:6d:d3:e6:77:e1:a9:3b:8d:80:97:c9:53:
                    5f:8b:05:47:de:44:18:89:9c:e3:3a:0b:92:0f:96:
                    28:52:82:7a:da:e1:ec:40:09:ce:03:45:3a:c7:1c:
                    76:e9:64:a8:42:b5:31:f4:52:ab:6b:34:e5:d5:7d:
                    b0:8e:57:84:a8:a0:84:47:06:e2:6a:28:a7:9f:be:
                    6e:6c:f6:89:e2:da:cb:39:23:66:cf:17:e7:35:80:
                    bb:d8:95:3a:70:31:52:e1:23:12:56:7d:95:f5:cc:
                    c2:ca:4c:a2:c1:21:27:0a:03:5b:95:af:2f:6d:a0:
                    9c:13:2b:c3:08:21:ea:27:fa:9a:19:09:bb:11:26:
                    18:8d:5f:66:0f:3d:37:a6:5f:47:41:b3:0c:81:ff:
                    1c:77:fd:e4:b1:5b:64:1b:de:67:76:09:2b:13:9c:
                    91:20:35:ac:81:e9:c8:9d:0e:48:74:df:03:98:8c:
                    1a:c2:e8:f4:6f:5b:18:1a:f6:34:dc:5c:f5:f6:cb:
                    08:d1:e5:55:09:89:41:b9:16:65:2a:c0:cb:01:2a:
                    6c:1f:fd:92:85:c0:82:ba:0b:1d:10:64:eb:c8:3f:
                    a0:2d:73:ff:08:58:d6:55:00:7f:1f:31:e1:dc:8c:
                    ed:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:87:B1:3C:74:A0:AD:84:10:C9:B2:4D:D8:4B:FC:FF:40:3A:C2:F5
            X509v3 Authority Key Identifier:
                keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:79:c7:9c:bf:68:38:71:a4:57:5d:ee:16:70:01:78:50:ca:
         e7:2e:5c:69:c8:d7:75:1d:2b:61:44:a0:0d:3a:a2:ae:b5:1a:
         4e:cc:d6:be:32:ae:1a:a0:13:72:77:5a:c1:7c:3b:2d:84:9e:
         f5:fa:5f:10:4e:60:dc:4d:d2:ce:50:6b:9f:a6:72:dd:58:c7:
         fe:98:20:b5:53:d1:2c:59:5e:77:08:be:c9:0c:f4:8a:03:98:
         0e:d5:79:c3:c1:cb:90:d5:59:00:bb:d9:98:10:40:d2:82:0d:
         c4:b2:f2:44:69:38:12:61:a3:e2:15:f1:99:5f:02:57:96:20:
         4f:d7:cf:0e:6a:73:b8:55:3b:07:51:34:cf:ff:cc:13:4e:b4:
         f1:44:cc:28:00:1d:0c:3f:6c:c0:d6:48:6a:e3:8b:b6:ac:a9:
         d3:9c:c5:0f:e5:67:51:64:02:78:b7:3f:f4:a7:56:c8:52:b9:
         4e:5b:87:e2:6b:b9:26:7c:a8:a2:68:12:f9:27:41:88:43:8a:
         cb:30:e3:67:09:e9:6c:b1:b9:6b:65:ef:fa:b0:06:d9:9b:aa:
         9f:d3:74:e4:5b:6e:41:48:25:39:02:cd:ef:89:37:57:8a:be:
         14:29:54:cf:d7:8d:30:0a:c9:38:64:44:34:ab:2e:0e:67:d5:
         b0:3c:5d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 16:57:08 2025 by rpki-client