This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft
File:                     Wm-SlVId8woVj1Brp8uHOrlSncM.mft (raw, json)
Hash identifier:          yDkaCs6+JfJNEBkzmlKa5ks44XKTIcMkjo2nbCkgMqg=
Subject key identifier:   23:18:92:71:89:DB:E7:A8:CC:91:13:D8:E1:62:9D:7D:2F:54:BE:11
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Certificate issuer:       /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial:       019C1B395D9F95A1E322A7148941762140E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft
Manifest number:          1804
Signing time:             Sun 01 Feb 2026 22:01:10 +0000
Manifest this update:     Sun 01 Feb 2026 22:01:10 +0000
Manifest next update:     Mon 02 Feb 2026 22:01:10 +0000
Files and hashes:         1: 1fCKtzPJ1_45f-LiWD3bxmByJVY.roa (hash: S5MFM5vElDoehjQ4z/xQ1lwyRX3CEWSME3qF1TOOSoM=)
                          2: 1lNJKR9iUF03AqUwYvGN1H-zICg.roa (hash: julCQgodaXBo2t/gasolmPBMIBIGzLIIQb6BvnJlHag=)
                          3: 1qW--QY8J1san0DCq3XFGd9u7ik.roa (hash: bJslM3RYasT/v3+ePs6DdTJE6TErE+KsU8otE8iOBSk=)
                          4: 2-5KrVXjH6eEZSodttKuQguzdvY.roa (hash: XmDzvGkMNalxbWNFOkKZfG0r/SFAaUoj/XtwKlCaXKo=)
                          5: 8CiwIwX0E5g2Q9ZTzxP1iNDAoUA.roa (hash: IPPB248lwbrp4GTrEGt/3IeWtg0h4LuOalLrUQZfNfw=)
                          6: 9fygxgPENVIvZQfoRPu5xWm5fP0.roa (hash: NERurGMvuWpT735e9RelslwR2hGh8/G3a9Go5nrjDxc=)
                          7: D0vBlaEi7A0rX8awdZxOMYCwSCs.roa (hash: qntk8plrSMnKOv10bs2fGlY/KSg3rGJtKokmVQuz1LQ=)
                          8: F-7S1HSbGkkCpgyYEJTyKuPXX8I.roa (hash: QiyTfxENgQqPVV66UHt5INHcvss6VEj4aW8BtRGcZLY=)
                          9: F2IsQbg11ZmJTAfceLyJa_u04dg.roa (hash: yrXOIgV2Evo1BQL02zZOaj4XM50H8UtRL74oK0VXAus=)
                          10: GM-hF-feyLJqoIO_MV3n-jaEaWI.roa (hash: Sg9PfccYLEq5GpJah8X3K8/QZ1cbByPjRTf3MZDTFfQ=)
                          11: HH19122CelF2CYu9NGeiskT2zfQ.roa (hash: d36L3R0df2y04YpprZZx3+ZOSVeyL0BD9l+o3g16VZ8=)
                          12: IRmRd1Y4JopkYhaXvtdFcCh6RXg.roa (hash: y3RTYueSvr/rBXupUy3jCI814s8gR2UAnVrdBOUjP48=)
                          13: J3f-oBarbdMFBw_Rea3on7AIvfk.roa (hash: lUbUL/5rB8/1hqYE2Zia9KQqNaYUxE2i7pUQtbuy0yA=)
                          14: JghQOiEDzpJycuTslNM8Zv_p_jY.roa (hash: LAxiB3cO1subHRNY8UjJnx3IdDCMN2IQ7MrqfJcC4T0=)
                          15: LsQpr4jR6UNzulN8mVl3gCD3vNw.roa (hash: n0eNLqhK8AP34V/cEhfJjvQ6T1kJKY04UuXwXq2zIAM=)
                          16: O8IeWVoWdsPGIKoKpygT-0Hdiis.roa (hash: rLYN8mRFFy4t/xSsv5WQega2gQ4e0wWE3nxgW/gKR7E=)
                          17: OH0fOXq_6EsT3aKlr7ZZrv4sV6I.roa (hash: FLFCrwPPJhuPUaS222PemjeBNo7gcU+ThIJnhpcn6UQ=)
                          18: UBFnHJZftNQO1qu-E-ov5vmyXLU.roa (hash: YH8/i2G9ICy6W3gDNpFmS7iYXtvYsBQ0DJI48fY9bwA=)
                          19: WUXb-p2bwi8my27KJmefSQDxFng.roa (hash: +UWsoZIc3QFjDTn9cLGvdthjCv+sSjp1Ho47a8q1MC0=)
                          20: Wm-SlVId8woVj1Brp8uHOrlSncM.crl (hash: v0qKI/OKRb6LfGKl3j46LNtZtGHo7IkebBvYGKUYiBQ=)
                          21: ZBKfWegwohJWnivWYtFI5nmS3VM.asa (hash: DqpV+UD9AKmkpajiSU0BmFB0lKmAM8QEl0HM4puI30U=)
                          22: _LXzoXP-0gRXE5Ciz-obdGZQXi8.roa (hash: Mr1ddYoxUqYSVNVomoM7yzaPVgUlQG4Fak/pkIn+dmA=)
                          23: _MJrKzAh7G2UHZAchpBgp1L7QDI.asa (hash: NxUcjZE3fyS6HKeTtb+sgrnCFDPsmJ+Qnbm9it3kRzo=)
                          24: aKzncqSnNDJ04kwW1sm7wIT5Nbk.roa (hash: 0YZIWdy8DpDNfejP3xMH84ZapJPrw+ElY6c4boXnYjM=)
                          25: aLiuNkELPVWARkkxMSEamxhaRc0.roa (hash: 9F0uso8gwgNQ/yBBmLF3VUVgpVnvmoqrTbV8HOJEknk=)
                          26: dcwzVtxFMl-uycadjDp2YPHFIfY.roa (hash: ci5fz0WaMOXPmIodLOVUNbGP6z8z3MQcOEOaQoctOyY=)
                          27: g4kMsI7mDD8Zz9b-7Splu6_9U2Q.roa (hash: uqeYCAovLAjiwKwZva7wOJzBJ3ICRJEBjm9gy8NhZYc=)
                          28: jArwDQhgf-OQEPRcAKlO11cnSfU.roa (hash: V4+R7avAqMkdvxIuR210FAGJtjpBNoAuWb9jTKzrVeo=)
                          29: l9MFgJue1EzXCuODxtcBx9qlmeE.roa (hash: fuHWs+WUDTAY3xy40ymHyTUSZ7zMZKYvLtqA+opm1q8=)
                          30: mNxGt9qb_iycY-k9T9Xk7VdVdK4.roa (hash: yOZN/l16jnDDJZqC6JGLhuV6WIELWRxBgaUyq9ISi7Q=)
                          31: n9HVc9jXy-5kSTXXda8Xr34gSvU.roa (hash: MqEDA2fkjY/ksPoKTLXf6vTXjBjZBwdFpg8kiND3eJ8=)
                          32: nscvIQ-HKyKd2314qNqqfxtlTZs.roa (hash: iY/bTniafSCv7m3teDVSPjjrFhE1uRc44nLZI9DFYqk=)
                          33: ue_Gh1l0t3knLCASFwUNeJAIkx0.roa (hash: 1pjYSr/W+zP5viSFVkMhp73vUcBE03OWMQPqP7OyN2Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1b:39:5d:9f:95:a1:e3:22:a7:14:89:41:76:21:40:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
        Validity
            Not Before: Feb  1 22:01:10 2026 GMT
            Not After : Feb  2 22:01:10 2026 GMT
        Subject: CN=2318927189dbe7a8cc9113d8e1629d7d2f54be11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cc:d0:ee:c0:b3:00:81:93:b3:99:dc:be:10:
                    52:7b:1e:9e:5d:52:d2:1a:f0:ff:25:1d:e8:03:80:
                    0a:7e:6a:8c:db:bb:80:18:c9:2b:15:fa:27:62:ac:
                    95:fb:3f:37:2e:09:1b:be:fe:0c:ef:31:90:57:45:
                    c6:87:b4:ef:42:2e:8c:f8:2e:88:39:11:33:89:df:
                    aa:10:97:f0:fc:44:74:31:a9:9f:6d:bf:c3:14:2a:
                    35:7a:18:34:4d:d0:ec:9a:73:d3:32:be:9f:4d:4c:
                    cc:67:bc:b4:24:25:29:15:6a:1b:26:3e:6f:7b:53:
                    5e:c1:a7:53:42:e7:40:7a:fd:18:76:8a:d8:8a:2f:
                    1d:a1:5c:2a:7b:21:d0:3d:81:55:41:05:9f:07:1f:
                    03:32:a6:c0:46:6a:fe:dc:48:d3:e9:e2:d0:74:be:
                    ff:f1:f3:5f:a2:79:5c:28:8b:5f:00:46:ee:9f:49:
                    44:a8:b1:b5:ab:7e:14:72:ae:38:b6:5c:b9:a6:fd:
                    3e:da:bc:1a:c0:93:be:4d:e5:be:0a:37:40:7e:01:
                    85:b5:8c:84:e8:49:e7:bf:82:8f:2d:32:a8:4a:99:
                    fa:43:24:01:40:89:c7:3d:30:59:40:c5:1d:79:49:
                    7e:b8:3a:55:64:17:a7:87:5b:03:3b:e5:6f:0a:5b:
                    c8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:18:92:71:89:DB:E7:A8:CC:91:13:D8:E1:62:9D:7D:2F:54:BE:11
            X509v3 Authority Key Identifier:
                keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:0a:28:4c:0a:c6:82:75:df:0a:1e:6e:bd:a8:9f:b0:4e:99:
         75:8a:5e:31:f8:df:17:0a:9e:2d:c0:e8:42:c6:df:65:3f:c3:
         b4:80:01:52:41:04:c7:24:c4:43:86:8e:1f:36:d9:a3:ec:cf:
         47:fb:e3:1d:dd:72:3f:7c:b7:67:69:44:94:75:a9:d1:5f:a7:
         81:57:41:a2:e0:4c:c3:ed:c3:d0:b7:91:f2:04:e0:af:df:d2:
         85:39:3f:c6:64:36:84:ce:03:f0:a2:cb:6d:a6:e2:11:dd:62:
         f5:8c:be:28:30:4a:83:4c:f9:d3:a1:2f:a9:af:63:5a:d2:47:
         4b:3b:c6:1b:ce:95:04:d8:d0:d8:00:5d:79:71:da:b3:a3:8e:
         ee:27:c8:94:21:fc:e4:5d:e7:c3:54:c5:9e:2f:1b:9a:3d:8b:
         5a:7f:ed:24:5d:6f:5f:6e:d0:7f:40:fa:40:fb:49:ab:2e:1f:
         f9:e2:95:82:4e:53:9b:10:77:c3:5c:31:aa:30:52:dc:d0:3d:
         4d:d5:2c:09:37:bf:23:fe:ba:73:d2:b4:c6:96:39:d8:54:51:
         ec:b1:97:8b:4a:ef:e6:e7:12:c8:7d:6d:db:be:c9:c9:3b:d2:
         88:b2:b8:f4:7a:c9:71:b9:d7:6d:63:76:a2:f8:00:8c:e4:eb:
         3d:73:5e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:14:23 2026 by rpki-client