This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
File:                     1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft (raw, json)
Hash identifier:          r9qHPAcLeOTSQrgL8J+AWKQv3Z6OW/LdAUlS1urUNi0=
Subject key identifier:   D4:D0:76:55:53:2A:BF:C1:C6:E6:DB:EA:9B:79:9D:DD:B4:40:04:01
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Certificate issuer:       /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial:       019C2060492AE8B52A6BF09BC5E9FB2F62B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
Manifest number:          0E17
Signing time:             Mon 02 Feb 2026 22:01:46 +0000
Manifest this update:     Mon 02 Feb 2026 22:01:46 +0000
Manifest next update:     Tue 03 Feb 2026 22:01:46 +0000
Files and hashes:         1: 02DR5VqiImR1ELzoMhmN2MgdJEw.roa (hash: A46KCkLXFpYgdMenUrWnd1pDGxM359G65Rk9wVjYrCI=)
                          2: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl (hash: vzn3oYjijpuxxo6ERrmQ14pXOSGsUxDTz5VqHslfKfw=)
                          3: 66ry_Oqrn2z2VQi36erLm_YTas8.roa (hash: 8++6k+ANwssYLtGuRElIJ17chl0LvEvv8esMVg7kfIE=)
                          4: 8P-jAkBcMOaRIUETkZOwY2giLXE.roa (hash: JFv+n+pyR4z+68wZuOFM0scuNRmrUJ1Wb5COfkBUH5E=)
                          5: KpUnWVUlULWTTS0J2TLqceBjzCk.roa (hash: 76AJtOxzTxnr9dKExR5Nj079cdfCs06aPInHb2LSvtc=)
                          6: M1M4SZxijFqkEMcpuoh8wBj0AUk.roa (hash: TBmTs46fkZq8k45UtUwTHkdq79SukWOajOuDorotmjE=)
                          7: Xpfmc5Pj6g7rym3j_1LXYJ9AL1s.roa (hash: MovlI65q4mVYc3DNO4AqCJ9iCuS7hY789BB33mIixAc=)
                          8: aXG7NaIqGWKi7o6aHjPRE8HPFiA.roa (hash: jDv0yDp23XKkwYEhPArJWGx2AbgEczFY3DeF1dGUSmY=)
                          9: b2A87lKXZV-LA0ZGDO4bCLP_qZk.roa (hash: fj4a7LJXRs7D1MouPdKAx8xun8DGteQiIPGE+YxQovY=)
                          10: bzP88qk3s6ARiJlGywZ2317-Qkk.roa (hash: rTe2kXa8ciYIeylVjero2gdZ6EZEe9lmQgdYKe0pvzc=)
                          11: eqwxW_73SsfybtamGFjU8BT6lss.roa (hash: eZIEEacqr0QeRaw//AWmV7fNo+uhUfn87QEEoeHj8N4=)
                          12: fHiLAjeGI5fzHUJT-wjG-vUQaUc.roa (hash: b2nJsInyFTD4R4jnJKV9oymyFGug4tERm9L1VVzvdQU=)
                          13: gcxp-EWnfFLHMrONlRoutn-Z7U8.roa (hash: pfCAICQ/vVikMpFdMBXvwM28HdJs0Hi4u8HPJ1KDTPI=)
                          14: l1LATFY_vdostbB9Lz5ULV3obQg.roa (hash: g5dMlB8SMZ/AEHbTJXc8VAsuZMEmjzmc7YnjTo/UDz8=)
                          15: lmwUE6-sNDETCNSEMoLU5Q6laJU.roa (hash: 8qCzxJz2lk/vBKmrmfwaSNgolO5upfvcwLUosHTaWSo=)
                          16: pMRzd49PJuC_a8isaKVdx-y6R6E.roa (hash: vS6bWVrCBd2U3yUpSsw/bcztmwQtyHAUDWfNv8cokkA=)
                          17: yeEWbOYgX_Oncu1Rzgm_LkCjWSg.roa (hash: SuLBsAyJ9wMKUX8JJrXZ9GO0IIZWlW+vtwNA4dWtXb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 15:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:20:60:49:2a:e8:b5:2a:6b:f0:9b:c5:e9:fb:2f:62:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
        Validity
            Not Before: Feb  2 22:01:46 2026 GMT
            Not After : Feb  3 22:01:46 2026 GMT
        Subject: CN=d4d07655532abfc1c6e6dbea9b799dddb4400401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1b:41:35:73:d1:38:57:70:b1:0b:c6:36:60:
                    72:f8:18:b1:33:fc:48:09:58:e8:0c:95:50:27:37:
                    1f:59:78:bc:b5:3b:1f:d5:db:6e:a2:91:14:06:b2:
                    8e:75:75:09:b9:9f:e2:de:79:65:e4:0d:e8:3b:92:
                    c0:f2:d5:16:ce:07:2d:20:62:6f:1d:23:dc:99:6d:
                    33:64:0d:00:f9:5d:ed:3b:ca:57:d1:c6:e3:fd:77:
                    03:c3:e0:b1:66:f8:aa:c9:d6:02:71:e8:91:5e:6a:
                    e1:43:b3:6c:a0:83:3f:13:04:2d:82:64:dd:1f:04:
                    88:97:72:8e:98:c2:35:aa:7e:2d:e5:44:5a:9c:d7:
                    b1:f8:93:1f:5c:fe:65:e1:e1:1a:9c:e7:f2:73:42:
                    0d:9c:60:c6:7a:85:93:5d:88:42:4f:75:aa:b3:f3:
                    ca:6c:c7:0e:be:15:f7:58:ee:38:47:a2:14:c7:61:
                    59:c1:77:b8:bd:76:4c:20:97:b0:e5:d6:80:98:cd:
                    69:38:c2:76:e1:12:39:df:c9:75:48:0b:3d:0f:95:
                    7f:30:29:58:16:08:f3:e3:ad:9c:0d:09:f8:5b:0c:
                    01:c6:6f:4c:99:29:26:33:47:d4:f0:b0:07:04:32:
                    0d:a5:ed:10:34:cb:39:de:1f:49:46:10:b0:cf:b9:
                    4a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D0:76:55:53:2A:BF:C1:C6:E6:DB:EA:9B:79:9D:DD:B4:40:04:01
            X509v3 Authority Key Identifier:
                keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:23:b4:ab:70:41:ba:01:3d:3b:4f:e0:8e:ac:d5:81:51:12:
         ca:ff:1d:a5:45:f3:40:d7:1f:40:8e:a6:13:a6:d0:51:2e:10:
         26:64:2e:74:81:b5:96:be:28:95:15:ce:d8:c8:9c:fd:09:35:
         ab:a2:22:91:7f:28:d1:d3:16:3b:3b:f8:c4:0b:44:fb:81:46:
         03:b6:62:47:3a:a0:d7:b6:9f:47:32:76:ad:c5:87:45:14:7c:
         d3:34:e3:2a:1c:25:28:85:e5:2e:62:71:12:f0:83:ae:51:55:
         8d:62:be:4d:7a:65:93:27:04:63:8a:10:d8:11:54:42:9d:e3:
         ba:bc:84:93:f8:31:af:39:05:5e:a7:a1:eb:f1:5f:f7:31:6b:
         94:a7:28:c9:1d:b1:5c:54:18:05:ca:11:6e:fd:d5:4f:cb:fc:
         7c:e2:88:26:c0:4c:dd:11:8b:47:6b:a9:d6:80:98:5b:f7:4b:
         06:c4:da:52:f4:6e:04:99:9e:84:db:34:c0:22:06:f4:79:e7:
         49:2a:eb:a6:b2:24:a5:e6:08:49:dc:1b:e2:f5:b5:8b:bd:1b:
         43:21:39:2e:8c:96:13:d0:94:c3:bd:8d:a8:5a:83:70:88:ff:
         c5:c2:99:2c:44:b6:a9:4a:58:f9:ae:73:b2:7e:f8:0a:67:8d:
         49:d3:6a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 01:22:45 2026 by rpki-client