This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
File:                     WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft (raw, json)
Hash identifier:          jewVR26YWlzaAe5PH8YHATi9zsMfQ+FblgKPIIJ7lwk=
Subject key identifier:   76:26:B4:9B:99:5E:EA:F4:06:02:C7:DF:FD:69:60:54:B6:E8:F3:16
Authority key identifier: 58:2C:74:FC:59:B7:AB:09:6A:25:7D:3B:62:99:D2:F6:FD:A4:6A:80
Certificate issuer:       /CN=582c74fc59b7ab096a257d3b6299d2f6fda46a80
Certificate serial:       019BE0A4E990E3C1BF12C14D0A826E6B3432
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
Manifest number:          0742
Signing time:             Wed 21 Jan 2026 13:01:02 +0000
Manifest this update:     Wed 21 Jan 2026 13:01:02 +0000
Manifest next update:     Thu 22 Jan 2026 13:01:02 +0000
Files and hashes:         1: WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl (hash: AuGm4ydVyhcQxHvK02aHsIUZ+/278mjnylwsUoxQm3g=)
                          2: pCg_IO1cPrzNc2xa1m7otiwxh4Y.roa (hash: xhDhbtSEarX85N5AGFHu5oduKKvgeHiQNe7PQ5nfYFQ=)
                          3: zuaIfcfFIX5EeM-omKdGGgGs_mY.roa (hash: CvfuaqVfIoNAv4R8GIVYc0kHxO/XnZ6ljRU5mOaCsoE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 13:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e0:a4:e9:90:e3:c1:bf:12:c1:4d:0a:82:6e:6b:34:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=582c74fc59b7ab096a257d3b6299d2f6fda46a80
        Validity
            Not Before: Jan 21 13:01:02 2026 GMT
            Not After : Jan 22 13:01:02 2026 GMT
        Subject: CN=7626b49b995eeaf40602c7dffd696054b6e8f316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:05:54:10:90:20:c6:4d:bf:ab:14:15:a6:32:
                    13:19:fd:5f:60:58:4c:53:83:82:89:12:ae:ae:db:
                    cd:a9:d7:f7:97:42:eb:49:78:cb:95:22:a5:2e:ff:
                    6e:d7:0a:91:e3:5f:b4:cb:a8:8f:8e:68:28:55:48:
                    ee:09:91:94:b1:be:5e:46:fb:7d:04:8c:c2:d3:00:
                    91:81:19:2b:47:35:91:71:85:09:75:84:6c:55:1d:
                    5a:a9:1f:c9:5d:4d:fc:c6:db:a2:d8:2b:cd:84:78:
                    ab:01:53:f8:66:eb:6a:7b:1c:cb:db:8c:7b:6e:3c:
                    b0:af:26:65:ff:fb:9b:14:3f:cb:0f:65:d4:9a:d2:
                    7a:79:96:74:d2:d9:1f:26:20:dd:4e:62:11:44:e1:
                    dd:f4:f6:b8:a6:2d:39:d7:28:b1:7b:d5:21:66:55:
                    24:31:6e:c8:e0:32:be:a8:cf:63:60:78:cd:93:21:
                    aa:f9:9e:c1:61:08:09:73:53:59:ab:df:c1:59:07:
                    86:64:7b:b2:64:32:e1:c3:0d:f5:7e:5e:f4:49:1a:
                    43:ed:a7:d0:9a:b2:96:35:07:5c:44:d3:92:ea:38:
                    d6:77:79:23:0d:11:8c:49:8d:1b:ff:91:02:65:39:
                    b1:58:35:d6:d8:f2:6f:19:ce:4d:65:fa:38:3e:2a:
                    c0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:26:B4:9B:99:5E:EA:F4:06:02:C7:DF:FD:69:60:54:B6:E8:F3:16
            X509v3 Authority Key Identifier:
                keyid:58:2C:74:FC:59:B7:AB:09:6A:25:7D:3B:62:99:D2:F6:FD:A4:6A:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:0b:11:4a:8f:16:df:b6:52:7f:6a:fe:00:40:b5:74:13:c4:
         71:45:2d:2a:2b:4a:6f:88:84:8d:c1:48:e7:f0:a2:58:b1:b8:
         40:82:90:da:f6:dd:ae:b3:af:c6:97:e1:b7:b3:f8:93:56:db:
         4b:e8:07:85:03:64:c6:98:f8:9a:a1:52:d5:aa:3d:46:0b:bb:
         06:d2:66:66:c8:bd:e0:5f:42:19:42:44:f5:8f:6e:39:d3:65:
         ed:64:10:44:4b:28:b5:38:83:98:5a:1a:b1:ab:2b:55:b8:4f:
         91:81:55:c0:9c:35:5f:5b:7d:b2:39:cd:a0:e2:eb:e6:b2:58:
         68:d5:b7:b0:98:76:f2:dc:7f:f6:56:61:45:eb:76:f0:4f:a4:
         54:3d:55:23:9d:84:1a:9d:7e:65:96:0f:dc:3b:f9:88:89:44:
         ad:58:89:b6:1d:ef:dc:61:bc:b0:bd:54:7a:fe:93:41:5f:b7:
         b4:73:fa:e3:95:7f:95:85:ae:1b:55:d9:ec:ea:74:d2:59:c5:
         4d:1c:8f:2c:b3:2e:1d:f4:a3:83:5d:f1:a8:2a:3b:fc:66:17:
         ca:07:c8:bd:2c:59:a1:0e:a0:19:c9:32:36:3a:61:54:09:3e:
         67:fc:b1:1e:4d:63:5a:e8:76:a8:a6:c0:3b:b5:34:d0:10:1e:
         97:51:9e:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvgpOmQ48G/EsFNCoJuazQyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MmM3NGZjNTliN2FiMDk2YTI1N2QzYjYyOTlkMmY2ZmRh
NDZhODAwHhcNMjYwMTIxMTMwMTAyWhcNMjYwMTIyMTMwMTAyWjAzMTEwLwYDVQQD
Eyg3NjI2YjQ5Yjk5NWVlYWY0MDYwMmM3ZGZmZDY5NjA1NGI2ZThmMzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAVUEJAgxk2/qxQVpjITGf1fYFhM
U4OCiRKurtvNqdf3l0LrSXjLlSKlLv9u1wqR41+0y6iPjmgoVUjuCZGUsb5eRvt9
BIzC0wCRgRkrRzWRcYUJdYRsVR1aqR/JXU38xtui2CvNhHirAVP4ZutqexzL24x7
bjywryZl//ubFD/LD2XUmtJ6eZZ00tkfJiDdTmIRROHd9Pa4pi051yixe9UhZlUk
MW7I4DK+qM9jYHjNkyGq+Z7BYQgJc1NZq9/BWQeGZHuyZDLhww31fl70SRpD7afQ
mrKWNQdcRNOS6jjWd3kjDRGMSY0b/5ECZTmxWDXW2PJvGc5NZfo4PirAowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYmtJuZXur0BgLH3/1pYFS26PMWMB8GA1UdIwQY
MBaAFFgsdPxZt6sJaiV9O2KZ0vb9pGqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0N4MF9GbTNxd2xxSlgwN1lwblM5djJrYW9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iMTU4NTEtYTgzYi00MTVjLWFlZTUt
ZjllZmMwNDU3ZmI5LzEvV0N4MF9GbTNxd2xxSlgwN1lwblM5djJrYW9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9iMTU4NTEtYTgzYi00MTVjLWFlZTUtZjllZmMwNDU3ZmI5
LzEvV0N4MF9GbTNxd2xxSlgwN1lwblM5djJrYW9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYwsRSo8W
37ZSf2r+AEC1dBPEcUUtKitKb4iEjcFI5/CiWLG4QIKQ2vbdrrOvxpfht7P4k1bb
S+gHhQNkxpj4mqFS1ao9Rgu7BtJmZsi94F9CGUJE9Y9uOdNl7WQQREsotTiDmFoa
sasrVbhPkYFVwJw1X1t9sjnNoOLr5rJYaNW3sJh28tx/9lZhRet28E+kVD1VI52E
Gp1+ZZYP3Dv5iIlErViJth3v3GG8sL1Uev6TQV+3tHP645V/lYWuG1XZ7Op00lnF
TRyPLLMuHfSjg13xqCo7/GYXygfIvSxZoQ6gGckyNjphVAk+Z/yxHk1jWuh2qKbA
O7U00BAel1GeLw==
-----END CERTIFICATE-----
Generated at Wed Jan 21 18:49:08 2026 by rpki-client