This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft
File:                     W-4FGpOQHswBdEB5qkrC-wd7n8E.mft (raw, json)
Hash identifier:          usmDbHge8ONfyEuNHUUt1saeSqj0F23wz3P0jy550DM=
Subject key identifier:   B8:A7:E4:34:A4:A2:4C:4D:01:9B:92:14:28:40:E4:24:40:79:85:47
Authority key identifier: 5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1
Certificate issuer:       /CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1
Certificate serial:       019C29D06C8A5D1A5592D4B9D37EB96D08D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft
Manifest number:          15B0
Signing time:             Wed 04 Feb 2026 18:00:50 +0000
Manifest this update:     Wed 04 Feb 2026 18:00:50 +0000
Manifest next update:     Thu 05 Feb 2026 18:00:50 +0000
Files and hashes:         1: 64UrNhO-yhL_6jtEq_sOPTQqUvc.roa (hash: +CPphRjKF0mGtBaISMxsgnOh0Y9eRFrzJ9s0lpnBfdM=)
                          2: 9W-sVvMy13GLR4bbPPLCQvrGLHo.roa (hash: EJwwxWojl4w/mIha2WIBg+zVGwGxcfT99iGNUwoFXk0=)
                          3: NCqlkqIGFzrndqpB8YVxVNI4IxU.roa (hash: i1ZWD83oqkyY29wCd2f8eqlgp7kieNaGZPaKStI96uI=)
                          4: W-4FGpOQHswBdEB5qkrC-wd7n8E.crl (hash: EIiIsQpM+a89RZROYPeGVOavgKTahlsuZpIHx9lq+6s=)
                          5: a5s-gMpktaLGZlzOxR33lFo6dOo.roa (hash: mXjJlbND9S4u74dBiV73zdpj+RxHFakUZvkXy0yG2t8=)
                          6: b5VYobcNABOZ3pZpzr_Z2VMIJQg.roa (hash: 3z9pFcvlvHR8WeaMomT0XyypusVaLwrNb+iTXt458xE=)
                          7: dwN1ES-e_dzEpA_B5HNXTPN2H7o.roa (hash: 7mqKzDtZCBpy6SjmOuWOhasnbkifwwXKeh+byniPaMA=)
                          8: oiozD2e9K7oF6d0dsqEIt1wRmUs.roa (hash: 4Bkg0miagTFlr1mUr9BPWElNFeQdQ0Ya6nOjCsn7J9w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 18:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:29:d0:6c:8a:5d:1a:55:92:d4:b9:d3:7e:b9:6d:08:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1
        Validity
            Not Before: Feb  4 18:00:50 2026 GMT
            Not After : Feb  5 18:00:50 2026 GMT
        Subject: CN=b8a7e434a4a24c4d019b92142840e42440798547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:96:61:b5:78:1d:fe:d3:65:56:d7:99:73:25:
                    ae:13:22:20:5b:98:33:f0:37:cc:45:a6:5e:a9:47:
                    fb:b6:ff:4b:d7:15:06:e0:60:3a:7f:35:f2:82:09:
                    db:9c:c8:33:c7:00:ae:ab:58:ca:18:2f:d1:8c:8a:
                    ca:a1:ef:5d:03:d5:7b:e8:53:05:6f:37:98:9b:01:
                    3c:51:ba:b4:c9:41:60:a8:56:6f:cb:6a:60:ec:7f:
                    47:c3:cb:5d:03:b5:c9:67:f8:8e:98:95:8f:35:13:
                    2e:69:a8:a4:32:f7:bc:9a:52:1c:ff:b5:ea:b6:2a:
                    af:8e:e3:41:4c:42:ac:d4:b7:e0:89:13:f3:cb:05:
                    58:3c:e0:80:88:c8:68:f2:95:61:7f:22:57:0a:ae:
                    e9:d1:8f:f8:70:1f:6b:7e:73:d6:f1:5a:05:69:12:
                    ed:21:bf:38:d2:39:64:f8:5f:4d:b3:89:4e:c9:76:
                    1f:2a:8d:05:bb:bf:7a:4f:f5:e0:01:58:0c:85:3c:
                    78:88:c6:34:da:c3:ac:2f:2e:05:a2:ed:f6:44:43:
                    c5:bb:53:ad:d8:1d:e0:89:90:20:12:e5:90:2d:90:
                    57:6a:18:62:5e:f3:d7:04:01:7e:3c:e8:a0:1b:1a:
                    0f:64:1a:38:8b:f9:86:9a:28:65:c4:ce:8a:49:2b:
                    c3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A7:E4:34:A4:A2:4C:4D:01:9B:92:14:28:40:E4:24:40:79:85:47
            X509v3 Authority Key Identifier:
                keyid:5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:d0:87:c9:84:f1:ce:2f:98:9e:41:a0:3a:74:e7:c3:b9:32:
         ac:d8:60:c3:c6:88:7b:c3:60:f8:f8:fd:ce:60:00:b5:66:46:
         ff:04:88:c1:96:1c:e1:05:c0:5e:2b:3f:f9:65:1c:d3:2a:ad:
         a6:72:16:e4:98:8e:94:87:d1:72:eb:28:67:fd:d1:15:24:e2:
         7a:84:2a:85:4d:84:f6:a9:fc:2d:28:90:75:c3:f6:5b:de:e1:
         b7:93:d7:d3:4f:49:e1:db:51:13:7d:96:73:4d:b9:38:68:23:
         73:b4:78:bf:d5:92:36:fd:e9:f7:99:c8:bd:d1:b6:fd:85:86:
         1c:a3:17:e1:7a:29:29:fe:61:67:e0:f4:a3:3c:9b:ed:76:94:
         3e:50:92:aa:ba:f3:1a:8e:2b:1e:e9:75:fe:6f:19:82:80:61:
         92:f4:4b:1c:6a:5b:6c:45:bd:b1:32:af:58:bd:1b:c1:35:62:
         ee:8d:1d:d8:d0:f1:d3:bd:71:8a:2b:70:6f:4b:58:37:4b:1a:
         5a:cc:31:54:e4:9a:fd:a8:f3:26:51:e7:5b:d5:5c:9a:69:91:
         50:54:30:77:d0:01:cc:69:d3:c7:3a:4a:ff:56:b9:fd:f8:34:
         59:e6:11:1c:94:74:06:01:04:2d:3d:da:36:76:29:b5:d3:a7:
         85:61:71:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 22:09:52 2026 by rpki-client