This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
File:                     W1JjSi6wP4VlteM9wrn0kEH3z7A.mft (raw, json)
Hash identifier:          /TCQRgKkqjdWlwBKBBDhXZzz0Nnj+8l27TVCDy3MwvU=
Subject key identifier:   64:28:A4:9E:23:68:52:B0:14:9A:57:6C:E8:0C:45:F6:61:88:69:8A
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Certificate issuer:       /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial:       019BFAD2429745C4F6C1D0DAD6604392F287
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
Manifest number:          1826
Signing time:             Mon 26 Jan 2026 15:00:42 +0000
Manifest this update:     Mon 26 Jan 2026 15:00:42 +0000
Manifest next update:     Tue 27 Jan 2026 15:00:42 +0000
Files and hashes:         1: 1-_hRQxZhaZSgfD2pRQoh9nJtMVI.roa (hash: /H8upwgkCFqbFIOohJPx8dMhV/hnbJnCuEGMSV+zLs0=)
                          2: B9bDnFJ0Z_m4nm9NyQ0zVMEbmmA.roa (hash: SEltG6CcX4YsTGQ9C3CIwloWPPOisv1HL/KHIEv3qMY=)
                          3: Cs2Zd6251zSrXetle0RtfRConbA.roa (hash: KkGAJBf83tGNHk/erAN4nfXgLUS3Li7zOHUT08OSsww=)
                          4: DcPJY2T-iadNWVBVg9TulaMJxgU.roa (hash: Sc0jVXAeKo7uCrOmz/45A6u6jOCVJZAN2NhxbFpBFAs=)
                          5: Gi_wkUk1O19_KmaHsQsDFBOXTIE.roa (hash: 2T32K0VJv8Ggm1hzjm3o1OxWBTjf+TvCCcIN+lwHDQs=)
                          6: PgIPYwyvLlFrlDL1OcN1KHfq_nk.roa (hash: lRQU/FRaygR7Dce1LG6adooBtMcSBRllXgx3nAIvIXA=)
                          7: R9oqRXkDi9NstDQGawy9QSNPBao.roa (hash: K+X7cAVkozGC4gsHVnnMuzT6rGGVtiBQVtV5xTEy+RY=)
                          8: VKXxOgyJHe3appcdWiLeWe8_fUo.roa (hash: h/W9WCGUyJYCh1KYoDWAiD2M4C6vtEkuFV/oHnqf2gY=)
                          9: VeHqLROfdS_jL-AwmtThhDT6_is.roa (hash: bthkP9gtLN/4aiiE6DC2cKIrlkuNIheKgwvQOnnXSN8=)
                          10: W1JjSi6wP4VlteM9wrn0kEH3z7A.crl (hash: wdT/agQU8uMTwVXpZkFEMO+Ke5wXtMRfM43V3OhOIss=)
                          11: W2jeEkJFTO9bACNffoYk-rjSW8Q.roa (hash: m4jSnkSV7Yo4l9lkgzwkyhUhUusXlTKCtLHnJjH21k0=)
                          12: WmRvkZMy2Hjm5w-_D5nk-YDinqM.roa (hash: Fv3Rkdc6wkfFjBuPF/b3LY9M+HiVMJiwVC83qqA5+wA=)
                          13: XPEjOR9wfMRq3tc6C9A_BMhG_wo.roa (hash: GmkdYdin0NadahEWqjYD5B4MFdZI4+3bV+vumXZ+bRQ=)
                          14: a4QitiFkvHlyADqZPe61hq4QSJo.roa (hash: ZflxZn/wYuAC4bp1wfswm6AML7gKo+CZIuAoV9rW0yQ=)
                          15: rDwGu9ius0Iys44GbQFnwlznBbg.roa (hash: 6W6SljJLEnVIuQM1Wqui/VKmw47Cj6szip/P8PaEH1A=)
                          16: taO64xY4tC0rzgQTKi7mNXkODLo.roa (hash: QcXuD3pXS6J3VZtZ+rKhps2cHVZUWXecszaJ6HFj8OY=)
                          17: xONbiFdv7WgdPOzaSwULCD22ElY.roa (hash: Ekujh3YjMgKH3iZJ1wo4eY8GMUVTfT7Ex6aMEVCo3TE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:d2:42:97:45:c4:f6:c1:d0:da:d6:60:43:92:f2:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
        Validity
            Not Before: Jan 26 15:00:42 2026 GMT
            Not After : Jan 27 15:00:42 2026 GMT
        Subject: CN=6428a49e236852b0149a576ce80c45f66188698a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e3:6e:be:7c:9a:93:6a:59:72:68:26:f8:0c:
                    3e:fe:85:5e:b9:59:be:9d:ea:18:e0:01:b9:ea:d6:
                    e8:3f:4f:66:be:a4:90:a8:c7:81:44:4a:1c:c8:09:
                    9b:17:6e:72:86:2a:be:32:00:bc:46:0b:4c:28:45:
                    a3:cd:34:d3:a8:dc:30:39:9e:d9:c0:d5:92:3b:7c:
                    31:eb:d9:80:70:73:3a:3a:d4:67:55:c9:59:92:82:
                    df:50:4e:e6:38:00:7b:c5:b9:17:41:fa:84:d4:ad:
                    4c:d0:fb:64:d1:e4:39:3c:90:c0:b8:85:f6:39:d8:
                    d6:90:08:f5:35:ed:d1:56:bb:95:7a:b7:9f:88:21:
                    c7:b6:c1:9a:44:51:ef:7a:bb:38:2a:89:47:15:e5:
                    c1:cc:50:b0:f5:bf:54:cf:ed:03:81:35:5c:06:8d:
                    a8:cb:f9:47:33:d2:ca:e3:32:4b:c7:c6:c5:33:85:
                    2c:4b:65:3e:e6:3b:9a:61:0c:4d:eb:9f:0d:78:58:
                    e2:8b:d2:6a:67:1a:16:03:31:8f:9e:b8:3f:23:2a:
                    8a:ee:7b:c9:57:f8:57:c7:c0:71:ea:1b:dd:29:78:
                    eb:9d:f5:7f:91:d4:19:ed:51:b9:97:dc:0b:6c:a6:
                    c6:c9:dc:5b:d2:3d:31:cc:e6:02:17:63:2b:46:3b:
                    8b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:28:A4:9E:23:68:52:B0:14:9A:57:6C:E8:0C:45:F6:61:88:69:8A
            X509v3 Authority Key Identifier:
                keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:ba:7e:8c:7d:ab:87:96:af:7e:eb:a5:29:d7:e7:e3:cb:66:
         33:63:a7:b6:62:c3:e8:2f:85:38:fb:83:fb:c7:97:22:be:59:
         be:ea:c2:2d:22:ca:cd:07:44:ae:46:98:07:ad:57:82:7b:cf:
         cb:06:0d:67:21:45:61:86:5b:59:32:7a:db:1f:69:c1:51:9d:
         81:fc:e0:43:37:98:fd:38:df:74:11:50:2f:ba:05:49:b7:a6:
         d4:5a:f2:54:0b:49:22:ba:42:bb:9f:18:10:40:6b:87:9c:e4:
         8b:6a:62:47:5b:0f:ae:9f:8c:45:80:50:ff:e6:ab:ad:fd:a5:
         0a:0c:8b:90:f7:81:e4:3b:2f:a8:4a:99:b9:2c:bb:76:63:71:
         55:dd:b3:08:65:3c:2d:00:0f:eb:47:a7:e3:6b:b5:bb:b8:8a:
         b7:9b:be:32:01:1d:66:2e:7d:e8:6d:84:02:02:5d:68:29:ab:
         f9:d1:e2:95:02:dd:9a:b5:25:8e:e7:82:da:ad:d7:ce:a3:e0:
         63:de:a7:5f:3d:78:42:5b:e3:4c:b3:ad:11:94:3b:ee:e2:74:
         14:ed:7a:03:2e:26:3c:6a:0b:57:a7:9b:2d:44:4f:38:ef:08:
         54:38:65:0e:62:95:88:1a:3c:4f:ea:35:11:82:e0:dc:5d:5e:
         6f:71:4d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 01:07:31 2026 by rpki-client