This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
File:                     WAbaWlklEnXOsYaU4XQVNSrt1qo.mft (raw, json)
Hash identifier:          BDtjdFcL/1SU/IgfI7jrW+RO0U9ccdDyHNmihibZEZw=
Subject key identifier:   1B:00:9B:03:19:CE:CE:43:94:62:7A:A7:F4:4F:F2:CC:FE:43:FE:87
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Certificate issuer:       /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial:       019C269939839AE720F3194294E401AD8212
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
Manifest number:          1538
Signing time:             Wed 04 Feb 2026 03:01:41 +0000
Manifest this update:     Wed 04 Feb 2026 03:01:41 +0000
Manifest next update:     Thu 05 Feb 2026 03:01:41 +0000
Files and hashes:         1: 3wUGAUyz1DeLwdPPyYEFDfRHGKE.roa (hash: Ps7kDJqtUtMVk+txzusu+REbzqUZZVNNkH7s/aWePGw=)
                          2: BtUA2-QGGIyBXkmFJIe0B4eXMlU.roa (hash: tTSYTotdr59pRvOsLoZT5KBfp7cm9a+uAAcxr/IgYbo=)
                          3: BtURCAmIgtDu64QigBUBa6gylG4.roa (hash: EZlHSwaxDQsHx/M77NPKc6ECDdAHIX3bdhXQYLBYcek=)
                          4: D7D_loV99KzoBrA79hPAtRanPvk.roa (hash: O6QCYb3KNoLWisMlEhgzHwO6cpGleN+OsVoAzaeYAvk=)
                          5: QPAwFxKhLOr2EBOg8RMCPgRX1JI.roa (hash: 4jaZ2Xw/f7AOu8MDDRl82FNESKf2rbMsQNvg3ZzXbGE=)
                          6: QwGBspDsi-qrPiNF2EDb3iI_pek.roa (hash: 6Z3sQwhkjCN46fJrGzzk3Wow4eW2/hmelPF5s8l9o4U=)
                          7: RHLFI0WIkcoxPB1kgL13NUw9Uhg.roa (hash: wG3CzCC6NTqC8LK8AAHM8aeSYhL3RSu1rtkFhvs3qUE=)
                          8: WAbaWlklEnXOsYaU4XQVNSrt1qo.crl (hash: tGfINJqTUTJfeMiJIubBPFDsgTCvcUpWp2XF+Iu61tE=)
                          9: WrRssx1T7W4FbMdccsG8zhPbvH0.roa (hash: soZuFyq441oI7pIn/lzNh4/678kQBCzmWyVNMg7qyfs=)
                          10: j2N6XHOuJrcF9YKszFUeO9utvU8.roa (hash: CnNuflG+4w3FSr1FwKhAAykLHeCSavmEwXUoJB0QPSY=)
                          11: knbZTkeQonjHgAjkDQ5BiABLPk0.roa (hash: 6z0JXF2+Tz6UX2zmjqr0hILFhd91GxoHq3PFQZKWs5E=)
                          12: t8_eAr8m1XQ9EztDOpyeXpfZBPU.roa (hash: 0uzPzAl2BTt7yUaKYAhuSXCA7BbVVQEBGvtYZp9iO+0=)
                          13: z8IV8jvVZ1vjvDfMDMPriKkCrQY.roa (hash: hWBFg4xHF5lQKrKNCM53lJJPmzmnxClUeWhPU/kjmE0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:26:99:39:83:9a:e7:20:f3:19:42:94:e4:01:ad:82:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
        Validity
            Not Before: Feb  4 03:01:41 2026 GMT
            Not After : Feb  5 03:01:41 2026 GMT
        Subject: CN=1b009b0319cece4394627aa7f44ff2ccfe43fe87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:be:8a:da:63:f3:d4:39:ba:49:73:b8:f4:fc:
                    6a:5b:0f:a8:d9:0d:07:17:f3:ff:e5:16:61:28:3a:
                    83:5b:29:79:91:01:ec:83:14:de:5d:ac:be:d6:97:
                    bc:37:8c:44:79:97:55:97:eb:71:e6:ad:f2:de:7d:
                    c3:0c:01:59:bd:93:58:2c:6d:f5:6d:99:03:ac:f3:
                    33:4d:3b:ba:14:eb:eb:d4:1b:0a:dc:5f:84:fd:52:
                    20:04:49:b8:e8:e8:e1:bb:5b:d5:ea:5a:94:9e:69:
                    81:6f:98:6b:1a:19:12:1d:fd:ee:81:be:6b:52:54:
                    04:d8:54:21:d3:79:0a:9d:48:52:95:af:68:e2:09:
                    31:54:62:26:57:53:97:69:aa:d1:97:61:e3:1d:d1:
                    3b:fc:4d:a7:9c:39:55:0c:9f:e6:cb:39:3b:dc:50:
                    f5:eb:62:ef:bc:fe:de:ba:ea:fd:6e:9b:34:a2:de:
                    4f:dd:02:fb:7c:83:9b:de:3b:f8:19:21:34:bc:e5:
                    ca:8f:68:85:d4:cd:cf:82:61:2d:39:02:fb:0e:dc:
                    5c:fe:d5:5f:b3:e0:32:f7:c7:a0:42:f3:d8:53:0a:
                    bc:0a:0b:5e:c7:d5:fd:ca:a2:60:4f:17:77:b7:05:
                    9e:0e:5f:77:22:b3:9d:6a:db:b2:99:8b:18:c4:0f:
                    ef:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:00:9B:03:19:CE:CE:43:94:62:7A:A7:F4:4F:F2:CC:FE:43:FE:87
            X509v3 Authority Key Identifier:
                keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:73:86:9c:47:53:e6:69:62:c0:18:98:4d:94:95:1b:15:61:
         97:fa:60:17:eb:88:c1:3c:35:75:30:78:42:73:a7:dc:59:04:
         87:91:f6:b4:44:de:40:d2:84:93:ae:e7:de:3b:ae:41:5d:b9:
         4d:92:39:ba:6b:05:ca:80:2f:d6:8e:1a:47:aa:76:64:cc:38:
         33:cd:0b:9b:6e:22:41:c6:4f:31:49:7d:09:9c:2d:d9:fa:5e:
         a3:7e:8a:85:40:4c:62:32:44:36:5e:ac:ed:b9:df:81:bb:ba:
         25:16:a9:69:69:e5:d0:02:06:9f:42:c8:42:ab:65:af:79:16:
         b4:67:6c:63:6b:04:14:69:41:45:a4:23:fb:2b:83:78:c3:84:
         c5:ad:13:80:07:66:bf:18:32:fb:99:48:73:9b:3f:43:bd:7d:
         07:c1:c0:df:8d:01:87:ad:bb:c6:83:9b:bc:4a:2e:65:1a:b9:
         db:30:de:9b:ab:ad:3d:06:3e:f2:f0:6f:2f:df:51:a0:73:17:
         aa:28:ee:0f:8b:f8:9a:3e:e0:86:1e:2a:08:eb:3b:46:f8:2b:
         fb:83:e5:c8:72:06:db:b8:2b:09:9b:61:53:f7:9a:96:01:bf:
         14:96:d4:b3:67:9d:64:84:3f:12:a5:71:cf:84:2f:22:ce:a9:
         89:3e:7a:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwmmTmDmucg8xlClOQBrYISMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MDZkYTVhNTkyNTEyNzVjZWIxODY5NGUxNzQxNTM1MmFl
ZGQ2YWEwHhcNMjYwMjA0MDMwMTQxWhcNMjYwMjA1MDMwMTQxWjAzMTEwLwYDVQQD
EygxYjAwOWIwMzE5Y2VjZTQzOTQ2MjdhYTdmNDRmZjJjY2ZlNDNmZTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi76K2mPz1Dm6SXO49PxqWw+o2Q0H
F/P/5RZhKDqDWyl5kQHsgxTeXay+1pe8N4xEeZdVl+tx5q3y3n3DDAFZvZNYLG31
bZkDrPMzTTu6FOvr1BsK3F+E/VIgBEm46Ojhu1vV6lqUnmmBb5hrGhkSHf3ugb5r
UlQE2FQh03kKnUhSla9o4gkxVGImV1OXaarRl2HjHdE7/E2nnDlVDJ/myzk73FD1
62LvvP7euur9bps0ot5P3QL7fIOb3jv4GSE0vOXKj2iF1M3PgmEtOQL7Dtxc/tVf
s+Ay98egQvPYUwq8Cgtex9X9yqJgTxd3twWeDl93IrOdatuymYsYxA/vOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBsAmwMZzs5DlGJ6p/RP8sz+Q/6HMB8GA1UdIwQY
MBaAFFgG2lpZJRJ1zrGGlOF0FTUq7daqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYt
Zjc5Y2NjM2Y0ZWFmLzEvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYtZjc5Y2NjM2Y0ZWFm
LzEvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQXOGnEdT
5mliwBiYTZSVGxVhl/pgF+uIwTw1dTB4QnOn3FkEh5H2tETeQNKEk67n3juuQV25
TZI5umsFyoAv1o4aR6p2ZMw4M80Lm24iQcZPMUl9CZwt2fpeo36KhUBMYjJENl6s
7bnfgbu6JRapaWnl0AIGn0LIQqtlr3kWtGdsY2sEFGlBRaQj+yuDeMOExa0TgAdm
vxgy+5lIc5s/Q719B8HA340Bh627xoObvEouZRq52zDem6utPQY+8vBvL99RoHMX
qijuD4v4mj7ghh4qCOs7Rvgr+4PlyHIG27grCZthU/ealgG/FJbUs2edZIQ/EqVx
z4QvIs6piT565w==
-----END CERTIFICATE-----
Generated at Wed Feb 4 08:29:55 2026 by rpki-client