This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft
File:                     wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft (raw, json)
Hash identifier:          T4JRMDhWARE3C/jGMgl1Q4VxZ7RqTDlt9WxqF/tlKeA=
Subject key identifier:   AD:70:AB:8E:23:64:B5:3C:01:C7:4E:30:A7:4F:11:24:33:CA:23:37
Authority key identifier: C1:5F:06:08:29:7E:9F:94:37:1A:72:D9:3A:D7:B1:1F:79:C1:F8:3F
Certificate issuer:       /CN=c15f0608297e9f94371a72d93ad7b11f79c1f83f
Certificate serial:       019B1B72723CB9E372AA84C88E348E376405
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wV8GCCl-n5Q3GnLZOtexH3nB-D8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft
Manifest number:          0130
Signing time:             Sun 14 Dec 2025 06:00:43 +0000
Manifest this update:     Sun 14 Dec 2025 06:00:43 +0000
Manifest next update:     Mon 15 Dec 2025 06:00:43 +0000
Files and hashes:         1: Lhy8SYG2GhG0L5kTN-q8cr7WG-c.roa (hash: h3RdkKZeJn3Jmuk2vF/0N6uD1EiWryKCe7zVgNp/r4E=)
                          2: XAqZSHGYbVZ8IVjpfkIZ3OOxyw0.asa (hash: D9+uwp/SVl/G8D9e3Ypn/QFE4kK3yPqHkRBxjTbJYGo=)
                          3: cIXDfR-Jle5Jda3lToN6L1RqtVs.asa (hash: 0Czg9gaAGKAEq6Rfn/gJ1HPiXTpLu7e+YQAdkMW2/O4=)
                          4: wV8GCCl-n5Q3GnLZOtexH3nB-D8.crl (hash: NleHs4m8iDdQKbzbSfjGVlnZPpuL5h+slruGqvqiRNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wV8GCCl-n5Q3GnLZOtexH3nB-D8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1b:72:72:3c:b9:e3:72:aa:84:c8:8e:34:8e:37:64:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c15f0608297e9f94371a72d93ad7b11f79c1f83f
        Validity
            Not Before: Dec 14 06:00:43 2025 GMT
            Not After : Dec 15 06:00:43 2025 GMT
        Subject: CN=ad70ab8e2364b53c01c74e30a74f112433ca2337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:88:d3:73:1b:0d:4b:2f:8f:aa:2e:fb:e5:10:
                    72:a0:89:45:64:9c:ca:60:3e:81:c1:da:9d:97:b9:
                    42:d4:69:6b:b5:b2:99:72:a6:e1:1d:8f:6a:9b:0f:
                    ef:68:4a:85:d1:3e:33:bc:1a:f1:8c:18:a9:6f:84:
                    c2:5c:6d:b3:05:d5:ec:8f:66:a0:2e:cb:5f:9b:17:
                    65:1a:45:7e:d5:c4:6d:b7:aa:65:01:dd:e3:1e:60:
                    6d:bc:da:5d:4f:a7:9f:ec:f0:b1:7a:1c:3f:1b:75:
                    68:e3:3f:a2:dc:22:e8:66:04:85:57:f0:85:04:b9:
                    cd:02:06:22:88:3f:0f:de:67:c0:a5:5d:0f:82:84:
                    b4:02:72:13:c0:34:96:fd:d3:5c:6a:dd:51:1a:9c:
                    1b:13:cc:ac:52:b6:77:d3:2b:fd:6e:32:40:a1:6e:
                    24:ea:b2:41:32:f2:31:6c:cd:c9:04:37:d4:1a:8c:
                    ff:55:ec:b1:6b:cf:17:e5:47:96:a4:25:5e:86:ab:
                    56:8d:48:d1:0a:d3:d5:9c:08:31:4b:b7:2e:54:fb:
                    df:e4:8f:1c:0c:0c:66:2e:af:12:d2:46:3f:ff:d3:
                    e3:fc:76:a2:0e:47:0c:9f:dd:55:65:f8:9f:36:5f:
                    a0:83:98:3d:aa:e0:4c:43:3a:37:2d:0b:14:35:e1:
                    f6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:70:AB:8E:23:64:B5:3C:01:C7:4E:30:A7:4F:11:24:33:CA:23:37
            X509v3 Authority Key Identifier:
                keyid:C1:5F:06:08:29:7E:9F:94:37:1A:72:D9:3A:D7:B1:1F:79:C1:F8:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV8GCCl-n5Q3GnLZOtexH3nB-D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:a9:c9:bf:31:45:eb:e4:b2:f8:df:f9:b7:6d:ac:10:0b:ae:
         4c:7c:51:06:8d:ad:fc:5f:61:5a:ff:8a:7f:c4:9a:2a:48:90:
         f5:07:44:53:f9:8e:d9:3e:b7:89:d1:e1:90:30:92:21:8f:a3:
         41:ed:3f:47:23:75:9d:86:e4:e4:40:c6:bc:21:37:76:3c:bd:
         45:45:82:92:25:84:fe:bf:92:d3:fe:e4:ad:d7:de:01:15:56:
         b2:b7:c2:e3:b0:65:df:37:ce:f0:16:3c:71:42:05:20:77:3f:
         79:62:39:30:37:e2:18:2a:40:0c:17:c3:ef:6c:b4:9c:6d:6f:
         9e:02:7c:6b:ed:e3:1b:63:d1:53:a0:28:c5:19:ed:b5:18:82:
         4f:26:0f:36:09:5f:25:d6:1c:5d:02:7c:dc:dc:68:ff:99:74:
         65:c9:f5:22:55:03:f0:a5:de:d4:da:fd:0a:8f:ab:c2:da:16:
         60:ce:58:b6:50:a4:37:9f:54:59:bb:55:67:eb:a5:b5:06:c0:
         f4:e7:38:f8:65:ba:85:ab:b1:33:2d:05:4f:4a:4c:a0:f9:b5:
         13:66:fb:71:7d:14:dc:73:20:99:fb:aa:72:0a:53:1b:d5:46:
         fc:3c:b9:d9:f9:48:90:88:6e:a7:48:39:f4:97:ca:aa:f0:07:
         3d:c6:a8:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsbcnI8ueNyqoTIjjSON2QFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNWYwNjA4Mjk3ZTlmOTQzNzFhNzJkOTNhZDdiMTFmNzlj
MWY4M2YwHhcNMjUxMjE0MDYwMDQzWhcNMjUxMjE1MDYwMDQzWjAzMTEwLwYDVQQD
EyhhZDcwYWI4ZTIzNjRiNTNjMDFjNzRlMzBhNzRmMTEyNDMzY2EyMzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54jTcxsNSy+Pqi775RByoIlFZJzK
YD6Bwdqdl7lC1GlrtbKZcqbhHY9qmw/vaEqF0T4zvBrxjBipb4TCXG2zBdXsj2ag
LstfmxdlGkV+1cRtt6plAd3jHmBtvNpdT6ef7PCxehw/G3Vo4z+i3CLoZgSFV/CF
BLnNAgYiiD8P3mfApV0PgoS0AnITwDSW/dNcat1RGpwbE8ysUrZ30yv9bjJAoW4k
6rJBMvIxbM3JBDfUGoz/Veyxa88X5UeWpCVehqtWjUjRCtPVnAgxS7cuVPvf5I8c
DAxmLq8S0kY//9Pj/HaiDkcMn91VZfifNl+gg5g9quBMQzo3LQsUNeH2DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1wq44jZLU8AcdOMKdPESQzyiM3MB8GA1UdIwQY
MBaAFMFfBggpfp+UNxpy2TrXsR95wfg/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1Y4R0NDbC1uNVEzR25MWk90ZXhIM25CLUQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC81OTBlNmEtYzRmYi00ZTRkLTlmZjQt
NzE3Y2Y3ZDczNTg3LzEvd1Y4R0NDbC1uNVEzR25MWk90ZXhIM25CLUQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC81OTBlNmEtYzRmYi00ZTRkLTlmZjQtNzE3Y2Y3ZDczNTg3
LzEvd1Y4R0NDbC1uNVEzR25MWk90ZXhIM25CLUQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6nJvzFF
6+Sy+N/5t22sEAuuTHxRBo2t/F9hWv+Kf8SaKkiQ9QdEU/mO2T63idHhkDCSIY+j
Qe0/RyN1nYbk5EDGvCE3djy9RUWCkiWE/r+S0/7krdfeARVWsrfC47Bl3zfO8BY8
cUIFIHc/eWI5MDfiGCpADBfD72y0nG1vngJ8a+3jG2PRU6AoxRnttRiCTyYPNglf
JdYcXQJ83Nxo/5l0Zcn1IlUD8KXe1Nr9Co+rwtoWYM5YtlCkN59UWbtVZ+ultQbA
9Oc4+GW6hauxMy0FT0pMoPm1E2b7cX0U3HMgmfuqcgpTG9VG/Dy52flIkIhup0g5
9JfKqvAHPcao3Q==
-----END CERTIFICATE-----
Generated at Sun Dec 14 11:44:33 2025 by rpki-client