This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft
File:                     wk1b087qqweGzhUaMXja3BB78oA.mft (raw, json)
Hash identifier:          LZIpGMrdou1Ds78MDO/8pYmJoUptCBer+M31oYN291A=
Subject key identifier:   59:71:6B:1F:AD:0F:BB:72:89:F6:91:DB:1A:64:E2:71:07:32:FF:F5
Authority key identifier: C2:4D:5B:D3:CE:EA:AB:07:86:CE:15:1A:31:78:DA:DC:10:7B:F2:80
Certificate issuer:       /CN=c24d5bd3ceeaab0786ce151a3178dadc107bf280
Certificate serial:       019BFA643E6499BD2AC335BCCE4311DF3248
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft
Manifest number:          1602
Signing time:             Mon 26 Jan 2026 13:00:32 +0000
Manifest this update:     Mon 26 Jan 2026 13:00:32 +0000
Manifest next update:     Tue 27 Jan 2026 13:00:32 +0000
Files and hashes:         1: 8o82eGnMQ9kdXbjLZCmd88Y3NYk.roa (hash: lQLIuazU2M1Mw2xConB6RbtwCMEC7BRrPajBXYv168c=)
                          2: a3C7IbzkbaswXsbovboq2w9BwGQ.roa (hash: ZSzg7SMIqSibkb5Y6lnFSEbHePc9+LOJ33oGgEo573Q=)
                          3: sbMhgOAQnNAhPG-zeDNTfwUQSzE.roa (hash: 0fsrSElISGl5fc2Oeen1Zkemgio3HCia7HQB3m6xfVc=)
                          4: wk1b087qqweGzhUaMXja3BB78oA.crl (hash: F0bmGyNdHLd8hENXa7wmzu+4tylP2QppaNnDO+iYaVQ=)
                          5: z9e4MYEp5ML-wSYz0dIO1W_R8-M.roa (hash: 9rf8k+M//WSQYyuu/prsp6q1l8xGdsVv2M04htviNLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:64:3e:64:99:bd:2a:c3:35:bc:ce:43:11:df:32:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c24d5bd3ceeaab0786ce151a3178dadc107bf280
        Validity
            Not Before: Jan 26 13:00:32 2026 GMT
            Not After : Jan 27 13:00:32 2026 GMT
        Subject: CN=59716b1fad0fbb7289f691db1a64e2710732fff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:10:e2:cf:10:e8:0b:08:20:9d:b4:94:ac:83:
                    09:9e:f4:a9:f8:da:56:e0:f3:a0:ee:c2:96:50:60:
                    74:e8:2a:50:68:74:b8:24:61:14:a9:90:d9:19:c9:
                    2e:b2:67:70:c9:42:d5:dd:39:b0:8f:f6:27:60:6e:
                    60:b9:54:92:06:17:c5:1d:94:09:8f:ca:3a:6e:e0:
                    d0:6f:36:cc:0b:fd:c4:73:56:b0:29:37:2d:5a:d9:
                    2b:70:1e:31:d0:7b:ab:98:e8:96:8f:e1:37:3e:3c:
                    f7:08:e0:fe:a9:45:ba:a2:29:cb:9d:41:1a:38:4f:
                    b0:6f:86:c7:73:84:a4:47:9d:72:d8:c2:5b:a5:82:
                    3a:30:90:33:f8:94:6a:7d:c5:d9:4e:4e:8b:42:62:
                    b6:22:e9:13:14:49:2b:23:a9:e7:15:87:fb:2c:51:
                    5d:4f:19:3c:cc:9a:f6:fd:34:2d:29:7a:3c:0f:09:
                    c1:c5:8e:4d:55:e7:e0:f8:71:85:2f:15:4b:17:ac:
                    5f:63:96:ea:42:f6:a2:93:e8:5b:11:75:04:b4:79:
                    e0:12:86:35:cb:1c:2c:a2:75:f1:b1:1d:3a:b9:67:
                    58:9c:90:94:32:4c:34:ad:34:d0:4f:29:d4:95:90:
                    bc:3b:b9:66:65:5a:05:b5:d7:e0:3b:5b:87:d5:7d:
                    f9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:71:6B:1F:AD:0F:BB:72:89:F6:91:DB:1A:64:E2:71:07:32:FF:F5
            X509v3 Authority Key Identifier:
                keyid:C2:4D:5B:D3:CE:EA:AB:07:86:CE:15:1A:31:78:DA:DC:10:7B:F2:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:ca:87:85:d0:ad:83:be:2a:04:bc:28:9b:ff:08:27:10:d8:
         c6:88:d5:c6:87:eb:36:02:da:f0:62:dc:4d:7e:5c:1f:98:5f:
         32:58:99:f5:c0:e3:c0:f3:54:1a:b5:1c:3f:c2:37:1d:d6:d5:
         57:32:70:5f:ef:eb:2c:33:b8:01:eb:e6:f1:be:32:fc:84:cd:
         90:5e:a6:70:60:00:bc:e1:5a:07:b8:80:c1:1b:45:f3:fb:45:
         36:c7:13:bb:be:85:2c:60:26:a3:67:19:93:0c:27:08:76:60:
         81:35:04:d5:e4:3d:e9:46:dd:b0:18:ee:61:ec:9a:4d:49:15:
         47:c8:bc:23:6c:14:16:0d:24:22:12:53:3b:a4:bb:12:35:32:
         e9:4a:c3:f4:69:84:57:92:d1:ac:8b:da:be:bb:85:be:2c:d1:
         c4:00:b0:cc:97:32:54:65:75:ed:b9:79:3c:70:fa:29:4e:38:
         6e:ba:85:2d:b3:c9:f8:6e:27:e5:8a:8f:6d:18:02:7b:ea:07:
         f0:37:04:45:0e:b7:2f:0d:d4:d1:56:0e:10:46:b4:1a:00:d4:
         61:b7:ff:c9:fc:3f:4a:c3:38:5c:cd:64:a5:b3:3b:26:a2:48:
         ac:e5:30:70:50:1e:8d:c6:3b:71:a3:fc:2b:56:3f:7d:a8:47:
         8a:62:73:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 15:39:48 2026 by rpki-client