This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
File:                     W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft (raw, json)
Hash identifier:          tbqGRPXTamubtd9iU7Pp/g3JFoaO4aXrldIZ8a3MdqI=
Subject key identifier:   08:BE:FB:14:83:A0:50:C6:43:C4:40:09:D2:34:EF:91:D8:33:71:13
Authority key identifier: 5B:F5:BD:A5:83:65:2E:05:87:FE:F8:41:66:B4:1F:6C:DA:8F:1F:78
Certificate issuer:       /CN=5bf5bda583652e0587fef84166b41f6cda8f1f78
Certificate serial:       019C2472E98AD4368A6BF9147D99EE481253
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
Manifest number:          05AB
Signing time:             Tue 03 Feb 2026 17:00:36 +0000
Manifest this update:     Tue 03 Feb 2026 17:00:36 +0000
Manifest next update:     Wed 04 Feb 2026 17:00:36 +0000
Files and hashes:         1: 39VInJLJ3qnhvx5iqjcKdFwEBpE.roa (hash: 6TDRzvB/lwrBZbsPGcbo4Dm9ksXI0q4yNjFzox4eAaA=)
                          2: W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl (hash: hLfvHajFmaIt1rmREBR0WAjELkCmaqBSV0FgW+n6dCA=)
                          3: ub5Gbn-YsJ-NB5WNKq2Bt_YSsCA.roa (hash: 1K2JkD0zvoEdDQMkDBZtkD/kPzcmNeVAmBs9rlyU3HQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Feb 2026 17:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:24:72:e9:8a:d4:36:8a:6b:f9:14:7d:99:ee:48:12:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bf5bda583652e0587fef84166b41f6cda8f1f78
        Validity
            Not Before: Feb  3 17:00:36 2026 GMT
            Not After : Feb  4 17:00:36 2026 GMT
        Subject: CN=08befb1483a050c643c44009d234ef91d8337113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0e:1c:85:4d:d0:95:b1:19:a0:d3:30:7e:ea:
                    5c:f7:a1:c6:85:b3:b2:9a:67:31:67:80:19:66:01:
                    e8:9b:12:38:2b:95:77:76:21:f1:4c:fe:04:1a:7a:
                    d2:d4:4f:9f:14:3f:74:03:7a:f6:88:b7:ab:20:30:
                    a3:f9:6c:86:80:19:4f:1c:be:83:2c:a5:d2:a1:3f:
                    42:c3:9c:f2:d8:90:fa:3d:27:5f:75:70:b2:af:46:
                    91:db:7d:a8:b0:69:5e:83:04:bf:44:89:22:13:a7:
                    54:fa:0a:23:45:a6:2c:cd:14:7c:1a:3a:60:bc:49:
                    4d:9b:3c:a8:f7:b6:14:49:5c:08:17:cc:3b:f8:c2:
                    51:53:90:53:40:85:f5:71:12:e9:b8:1f:83:cb:16:
                    49:58:4d:92:d9:20:c1:da:2e:63:51:ce:ee:71:9f:
                    a2:d5:cd:32:cd:75:aa:5d:d3:b3:6e:0b:35:80:84:
                    f6:35:21:5c:3d:10:10:77:77:c7:a7:8e:c2:a1:cc:
                    b2:ad:4a:41:4a:00:f4:72:78:63:60:c9:63:71:d4:
                    e5:de:1c:32:50:4b:c1:87:b0:be:2a:21:2b:d4:e6:
                    4b:5e:54:6e:03:da:d5:a3:1f:6d:f8:96:e5:de:9c:
                    24:41:0b:98:2d:02:59:53:9e:ff:35:28:41:04:ee:
                    83:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:BE:FB:14:83:A0:50:C6:43:C4:40:09:D2:34:EF:91:D8:33:71:13
            X509v3 Authority Key Identifier:
                keyid:5B:F5:BD:A5:83:65:2E:05:87:FE:F8:41:66:B4:1F:6C:DA:8F:1F:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:d3:c5:20:fa:e3:41:de:10:7a:00:42:52:77:c6:ee:78:62:
         c6:7e:f4:67:36:1b:11:aa:30:3a:02:93:97:88:37:81:7b:a2:
         b0:9f:e4:7e:31:24:62:53:c0:d2:09:9e:9c:21:af:de:0f:02:
         79:7d:4b:64:76:f5:1a:cb:ee:80:8f:19:fb:12:9f:1c:01:75:
         a5:6f:c7:8a:05:e4:3e:ea:25:8c:30:b5:b9:ec:22:9b:45:4c:
         ef:af:4b:b6:38:52:7a:ed:e8:7b:d0:76:44:82:e7:ef:f2:b1:
         7e:0d:59:f7:9d:0c:11:d7:81:01:b9:8d:42:4f:e0:dd:e5:4d:
         3c:d3:27:bd:35:2d:b2:e9:bc:68:98:47:69:cc:07:20:f7:44:
         9c:57:50:53:7d:72:8b:5e:df:00:df:54:2e:75:b3:7e:cc:ce:
         1e:5a:04:5a:1a:8d:5e:76:9c:35:5b:15:93:16:ae:b9:26:72:
         93:0b:e9:17:e3:49:eb:be:1c:48:75:70:6c:13:5c:56:f1:6d:
         06:fa:a3:60:4e:5d:36:e9:67:1e:33:15:d5:2f:d4:97:cd:e6:
         b1:e2:ab:64:2c:0a:21:96:d1:28:d6:c0:75:3d:8f:75:d4:ce:
         06:8f:ac:2e:3a:c2:95:85:a7:55:9b:cf:0d:97:d9:d6:c6:04:
         37:19:d5:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwkcumK1DaKa/kUfZnuSBJTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZjViZGE1ODM2NTJlMDU4N2ZlZjg0MTY2YjQxZjZjZGE4
ZjFmNzgwHhcNMjYwMjAzMTcwMDM2WhcNMjYwMjA0MTcwMDM2WjAzMTEwLwYDVQQD
EygwOGJlZmIxNDgzYTA1MGM2NDNjNDQwMDlkMjM0ZWY5MWQ4MzM3MTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg4chU3QlbEZoNMwfupc96HGhbOy
mmcxZ4AZZgHomxI4K5V3diHxTP4EGnrS1E+fFD90A3r2iLerIDCj+WyGgBlPHL6D
LKXSoT9Cw5zy2JD6PSdfdXCyr0aR232osGlegwS/RIkiE6dU+gojRaYszRR8Gjpg
vElNmzyo97YUSVwIF8w7+MJRU5BTQIX1cRLpuB+DyxZJWE2S2SDB2i5jUc7ucZ+i
1c0yzXWqXdOzbgs1gIT2NSFcPRAQd3fHp47CocyyrUpBSgD0cnhjYMljcdTl3hwy
UEvBh7C+KiEr1OZLXlRuA9rVox9t+Jbl3pwkQQuYLQJZU57/NShBBO6DawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAi++xSDoFDGQ8RACdI075HYM3ETMB8GA1UdIwQY
MBaAFFv1vaWDZS4Fh/74QWa0H2zajx94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV19XOXBZTmxMZ1dIX3ZoQlpyUWZiTnFQSDNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9jN2I3ZGQtMWY3MC00YmFlLTlkNmMt
MmE3OWU1ZDIyYWUxLzEvV19XOXBZTmxMZ1dIX3ZoQlpyUWZiTnFQSDNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9jN2I3ZGQtMWY3MC00YmFlLTlkNmMtMmE3OWU1ZDIyYWUx
LzEvV19XOXBZTmxMZ1dIX3ZoQlpyUWZiTnFQSDNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwdPFIPrj
Qd4QegBCUnfG7nhixn70ZzYbEaowOgKTl4g3gXuisJ/kfjEkYlPA0gmenCGv3g8C
eX1LZHb1GsvugI8Z+xKfHAF1pW/HigXkPuoljDC1uewim0VM769LtjhSeu3oe9B2
RILn7/Kxfg1Z950MEdeBAbmNQk/g3eVNPNMnvTUtsum8aJhHacwHIPdEnFdQU31y
i17fAN9ULnWzfszOHloEWhqNXnacNVsVkxauuSZykwvpF+NJ674cSHVwbBNcVvFt
BvqjYE5dNulnHjMV1S/Ul83mseKrZCwKIZbRKNbAdT2PddTOBo+sLjrClYWnVZvP
DZfZ1sYENxnVgg==
-----END CERTIFICATE-----
Generated at Wed Feb 4 02:18:17 2026 by rpki-client