This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft
File:                     FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft (raw, json)
Hash identifier:          jwEEYUXBghlLKr/vnJx+fQmeQlN50XgwC0g+ynGIt7k=
Subject key identifier:   D6:93:1C:CD:DA:C1:0F:5A:4C:58:C9:6E:5B:55:EA:D1:0F:30:08:67
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Certificate issuer:       /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial:       019BD5B38CB0B36196B2E452E65C641CE3A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft
Manifest number:          1387
Signing time:             Mon 19 Jan 2026 10:01:12 +0000
Manifest this update:     Mon 19 Jan 2026 10:01:12 +0000
Manifest next update:     Tue 20 Jan 2026 10:01:12 +0000
Files and hashes:         1: 0ZP8S6iuoWh8xgt74BfX9FsiWUE.roa (hash: 3Aof+qdhL+cCGNe+hdtvcBXfSgz4KVlL9GS8+nK3Uo0=)
                          2: 1-zo-vu3H5BPZZ7kya3z7KQG-O8M.roa (hash: wO9W+0kJ3rqdKQX4KDV5BoK4htjNlrERtnZ8OUi4AyI=)
                          3: 22SPH9Kn4UuhJDJeWUsULSj1wfk.roa (hash: kUif3GPLDkHnCQM50oWOp3AQz4WltfWKqH9gIzLBLmk=)
                          4: 3ln1x2g8OU-tXC-DrXz9jW0X1gU.roa (hash: 2zWvHVgpKzwH8CHKZuYT/C7gjaJxfSRA4wNx6aFsjNQ=)
                          5: 6WfI7AreDwm37Fgy62Hm_HjVPIM.roa (hash: G4TpNMLm1OunCQZoJ8h7rE+E9esfv1Zs5yi2Rv7QUx0=)
                          6: B4wYxFww_X_iDCxVsYXjZhIjnK4.roa (hash: zX0gMbFt42KJdtED5J978ZIE/4qbULnV//fheUtafIs=)
                          7: E4moO9CLoHXgoV6vrJXJQ_jxi14.roa (hash: FEDRVix5XZV3UfT/XzbBUvsMscccpO5HTNPW06itXAo=)
                          8: FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl (hash: Yk/UNWIsWQ/Vh05DN90ecsiHj9enehrvRYwx5KASXVM=)
                          9: IU6sqSJ6F2MiSf9zhO7VOkBsYbo.roa (hash: xDuhG5k3COqjsQtFYv6XULPASeM/eKdDCyUmbyjzEd0=)
                          10: IazmGoMrfFtTUWHrMtD4VT_a5xM.roa (hash: mmhAv5nf447caUzE6DBRCP1tjF3/Qt3PMJlp3sCBJV0=)
                          11: O54_4ra4X-58spPAHkZ96hK7Qd4.roa (hash: XMs23QJlM6k+FT4zVzoAiwVW1XAJLfr2hocnSVKE0hM=)
                          12: PxwyiW3Tjn8aEe60HunYWfpdc1w.roa (hash: +CB624H0aM2+6WeM1dGm74K9HqVEUvwZQ+MNE6guhOM=)
                          13: SnOKGw0nptLHAZFrTKooq1F6qbg.roa (hash: FBxvVsJwAoWPoNCciGoRN36HxI3NjSXsokWPlQeHLYs=)
                          14: UrEDh6hvw8hbPuXz5C0d7RpFA2Y.roa (hash: QPMTalfou9LaFpwA/B5NGhDC6sC72kNZYa3gwVEFw+o=)
                          15: Zn2F_GITaJUFXYczVsLI2VOyKdU.roa (hash: CEg2vq6S7OzyDS7MVIrVNzF15tpZ2z6WrwU8c/VyAWA=)
                          16: aojI_JsDEIxXnOz4PZxsAnlJa3o.roa (hash: PJic4it1tGPs9tX49/CnUprlHognZespLJ+dZ7W4/TY=)
                          17: bCOP39p472Lk-lkmW7HPI2seXtc.roa (hash: LFvAsIyeBJmUq7QEzxWZPznh8Eot8p72RV5zfPuvMYU=)
                          18: dPcC6P2Ub94KhMYnU4O-c5682vk.roa (hash: g/ztEAIPkKUjRwwmBVeCjJEZxo+DRe9x5QOVITmEu/0=)
                          19: nv3XJW4SHiYOrTQVrxnoavOvwJ0.roa (hash: FchrHLVpTQQsdpH665V5pFmlLVhCeW2ycJA4HdohxTU=)
                          20: sSsX9lAuTzO9VldLxQMeK-5adaY.roa (hash: iur8WTZ1EdrXyR3WNetyiFe4lZT9wDb3S5el30eYdBE=)
                          21: vrcNcGLKzc4126aByqCn10xR7hw.roa (hash: BJLHLu3Ei5L0mbo/lskPrmlmi+TRNkPtsukA9ptks7A=)
                          22: zh_Jy2MqKKarC-MDKrza1hiz6Ck.roa (hash: YXMs2R7ig2C7zGo2CvCc44PcqUIofxwBlRKFLyt5A3U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d5:b3:8c:b0:b3:61:96:b2:e4:52:e6:5c:64:1c:e3:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
        Validity
            Not Before: Jan 19 10:01:12 2026 GMT
            Not After : Jan 20 10:01:12 2026 GMT
        Subject: CN=d6931ccddac10f5a4c58c96e5b55ead10f300867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9c:a7:b3:37:e1:29:47:4c:08:54:aa:84:a2:
                    0f:81:d1:27:9e:f8:75:34:de:0e:00:68:69:0e:30:
                    2e:d6:16:fb:b3:35:4b:1e:4f:83:50:61:72:0f:63:
                    6a:36:67:2c:2d:3e:16:66:59:37:28:a1:69:41:f4:
                    c6:eb:24:c8:cb:aa:8a:77:51:c5:2f:29:1f:78:2d:
                    85:6a:bc:c6:bd:c8:20:1d:25:75:9c:19:91:02:90:
                    f8:f5:7d:fc:07:06:09:59:c0:66:2a:60:d0:8d:74:
                    86:3e:6b:e5:11:b9:a8:52:f9:7a:bf:58:c7:53:c8:
                    6b:02:2e:52:30:c6:5b:0e:9c:d9:41:18:f3:ca:4e:
                    2b:ea:35:5a:de:0a:a1:2b:75:93:55:e4:24:0d:c9:
                    f5:ee:9f:a2:cc:46:ef:3d:d3:32:9a:7f:0d:7a:29:
                    55:60:1a:12:8d:94:0e:47:d7:0d:00:8d:67:17:f3:
                    c7:14:49:0e:1a:16:be:c9:38:7b:1a:c6:c6:44:61:
                    47:fd:3a:92:ec:ad:18:92:e5:41:71:40:79:45:d6:
                    15:96:29:04:64:93:25:a0:27:5c:05:69:48:48:3f:
                    02:cd:9d:06:15:a2:c6:26:f3:70:e4:1b:f5:e7:c3:
                    0f:d8:cc:ba:b9:7e:ca:c7:74:83:d6:9d:66:02:2a:
                    65:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:93:1C:CD:DA:C1:0F:5A:4C:58:C9:6E:5B:55:EA:D1:0F:30:08:67
            X509v3 Authority Key Identifier:
                keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:e1:32:00:5a:3b:14:9d:cc:e7:0e:e8:b3:48:26:a0:01:63:
         2a:ed:6c:1b:13:2c:49:3c:3a:86:78:a3:11:d5:e5:40:f0:2a:
         70:68:fa:60:85:78:01:63:d5:97:27:87:1d:3d:7c:0a:cb:f5:
         4b:8f:0f:85:d7:4b:3c:75:32:29:d7:df:39:e1:f2:70:c9:3d:
         df:68:f8:53:a9:7d:84:e8:33:8f:f9:02:e9:e4:84:6b:40:6b:
         9c:bf:e5:1c:4f:c5:3f:4d:b1:21:43:ba:b4:e6:4d:54:6e:cf:
         e5:05:f3:2e:14:ca:35:5d:b3:03:24:0e:8d:d7:dc:8b:9c:01:
         2d:cd:47:0e:e1:35:c0:2b:1c:dc:ad:b2:11:7d:a1:ad:1f:0f:
         64:5f:01:af:5b:71:78:61:3c:0f:a4:ee:a7:c8:dc:89:5e:7f:
         8d:6a:05:01:73:ef:9b:a0:3b:27:a9:29:c9:5e:eb:c9:bd:76:
         43:ac:56:92:b0:81:d8:fa:86:52:17:6c:62:e2:39:86:b9:e8:
         64:5f:ae:0d:29:c8:c0:66:89:fc:d6:6a:ae:34:f9:45:b5:16:
         9b:d9:40:61:5d:8d:c3:bc:ed:98:e9:da:58:5e:29:65:11:c7:
         ea:39:b0:58:0d:a3:08:95:0e:89:3e:e1:9c:2a:54:e1:99:b0:
         62:c1:ca:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 18:20:26 2026 by rpki-client