This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft
File:                     Wm-SlVId8woVj1Brp8uHOrlSncM.mft (raw, json)
Hash identifier:          uYJy4C3fT4JUJP5R+O2SQt/tcr3+TArV4n5kbi4DRMg=
Subject key identifier:   68:9D:00:95:F3:02:C9:10:50:4F:5D:57:8C:FA:0B:63:14:61:3A:FD
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Certificate issuer:       /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial:       019C1D27CCC3BCD948C23D8404811B35D210
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft
Manifest number:          1805
Signing time:             Mon 02 Feb 2026 07:01:13 +0000
Manifest this update:     Mon 02 Feb 2026 07:01:13 +0000
Manifest next update:     Tue 03 Feb 2026 07:01:13 +0000
Files and hashes:         1: 1fCKtzPJ1_45f-LiWD3bxmByJVY.roa (hash: S5MFM5vElDoehjQ4z/xQ1lwyRX3CEWSME3qF1TOOSoM=)
                          2: 1lNJKR9iUF03AqUwYvGN1H-zICg.roa (hash: julCQgodaXBo2t/gasolmPBMIBIGzLIIQb6BvnJlHag=)
                          3: 1qW--QY8J1san0DCq3XFGd9u7ik.roa (hash: bJslM3RYasT/v3+ePs6DdTJE6TErE+KsU8otE8iOBSk=)
                          4: 2-5KrVXjH6eEZSodttKuQguzdvY.roa (hash: XmDzvGkMNalxbWNFOkKZfG0r/SFAaUoj/XtwKlCaXKo=)
                          5: 8CiwIwX0E5g2Q9ZTzxP1iNDAoUA.roa (hash: IPPB248lwbrp4GTrEGt/3IeWtg0h4LuOalLrUQZfNfw=)
                          6: 9fygxgPENVIvZQfoRPu5xWm5fP0.roa (hash: NERurGMvuWpT735e9RelslwR2hGh8/G3a9Go5nrjDxc=)
                          7: D0vBlaEi7A0rX8awdZxOMYCwSCs.roa (hash: qntk8plrSMnKOv10bs2fGlY/KSg3rGJtKokmVQuz1LQ=)
                          8: F-7S1HSbGkkCpgyYEJTyKuPXX8I.roa (hash: QiyTfxENgQqPVV66UHt5INHcvss6VEj4aW8BtRGcZLY=)
                          9: F2IsQbg11ZmJTAfceLyJa_u04dg.roa (hash: yrXOIgV2Evo1BQL02zZOaj4XM50H8UtRL74oK0VXAus=)
                          10: GM-hF-feyLJqoIO_MV3n-jaEaWI.roa (hash: Sg9PfccYLEq5GpJah8X3K8/QZ1cbByPjRTf3MZDTFfQ=)
                          11: HH19122CelF2CYu9NGeiskT2zfQ.roa (hash: d36L3R0df2y04YpprZZx3+ZOSVeyL0BD9l+o3g16VZ8=)
                          12: IRmRd1Y4JopkYhaXvtdFcCh6RXg.roa (hash: y3RTYueSvr/rBXupUy3jCI814s8gR2UAnVrdBOUjP48=)
                          13: J3f-oBarbdMFBw_Rea3on7AIvfk.roa (hash: lUbUL/5rB8/1hqYE2Zia9KQqNaYUxE2i7pUQtbuy0yA=)
                          14: JghQOiEDzpJycuTslNM8Zv_p_jY.roa (hash: LAxiB3cO1subHRNY8UjJnx3IdDCMN2IQ7MrqfJcC4T0=)
                          15: LsQpr4jR6UNzulN8mVl3gCD3vNw.roa (hash: n0eNLqhK8AP34V/cEhfJjvQ6T1kJKY04UuXwXq2zIAM=)
                          16: O8IeWVoWdsPGIKoKpygT-0Hdiis.roa (hash: rLYN8mRFFy4t/xSsv5WQega2gQ4e0wWE3nxgW/gKR7E=)
                          17: OH0fOXq_6EsT3aKlr7ZZrv4sV6I.roa (hash: FLFCrwPPJhuPUaS222PemjeBNo7gcU+ThIJnhpcn6UQ=)
                          18: UBFnHJZftNQO1qu-E-ov5vmyXLU.roa (hash: YH8/i2G9ICy6W3gDNpFmS7iYXtvYsBQ0DJI48fY9bwA=)
                          19: WUXb-p2bwi8my27KJmefSQDxFng.roa (hash: +UWsoZIc3QFjDTn9cLGvdthjCv+sSjp1Ho47a8q1MC0=)
                          20: Wm-SlVId8woVj1Brp8uHOrlSncM.crl (hash: silCedRftBkwGbixZwLEEJdIRNYoPIdAGUxsbhPewSk=)
                          21: ZBKfWegwohJWnivWYtFI5nmS3VM.asa (hash: DqpV+UD9AKmkpajiSU0BmFB0lKmAM8QEl0HM4puI30U=)
                          22: _LXzoXP-0gRXE5Ciz-obdGZQXi8.roa (hash: Mr1ddYoxUqYSVNVomoM7yzaPVgUlQG4Fak/pkIn+dmA=)
                          23: _MJrKzAh7G2UHZAchpBgp1L7QDI.asa (hash: NxUcjZE3fyS6HKeTtb+sgrnCFDPsmJ+Qnbm9it3kRzo=)
                          24: aKzncqSnNDJ04kwW1sm7wIT5Nbk.roa (hash: 0YZIWdy8DpDNfejP3xMH84ZapJPrw+ElY6c4boXnYjM=)
                          25: aLiuNkELPVWARkkxMSEamxhaRc0.roa (hash: 9F0uso8gwgNQ/yBBmLF3VUVgpVnvmoqrTbV8HOJEknk=)
                          26: dcwzVtxFMl-uycadjDp2YPHFIfY.roa (hash: ci5fz0WaMOXPmIodLOVUNbGP6z8z3MQcOEOaQoctOyY=)
                          27: g4kMsI7mDD8Zz9b-7Splu6_9U2Q.roa (hash: uqeYCAovLAjiwKwZva7wOJzBJ3ICRJEBjm9gy8NhZYc=)
                          28: jArwDQhgf-OQEPRcAKlO11cnSfU.roa (hash: V4+R7avAqMkdvxIuR210FAGJtjpBNoAuWb9jTKzrVeo=)
                          29: l9MFgJue1EzXCuODxtcBx9qlmeE.roa (hash: fuHWs+WUDTAY3xy40ymHyTUSZ7zMZKYvLtqA+opm1q8=)
                          30: mNxGt9qb_iycY-k9T9Xk7VdVdK4.roa (hash: yOZN/l16jnDDJZqC6JGLhuV6WIELWRxBgaUyq9ISi7Q=)
                          31: n9HVc9jXy-5kSTXXda8Xr34gSvU.roa (hash: MqEDA2fkjY/ksPoKTLXf6vTXjBjZBwdFpg8kiND3eJ8=)
                          32: nscvIQ-HKyKd2314qNqqfxtlTZs.roa (hash: iY/bTniafSCv7m3teDVSPjjrFhE1uRc44nLZI9DFYqk=)
                          33: ue_Gh1l0t3knLCASFwUNeJAIkx0.roa (hash: 1pjYSr/W+zP5viSFVkMhp73vUcBE03OWMQPqP7OyN2Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1d:27:cc:c3:bc:d9:48:c2:3d:84:04:81:1b:35:d2:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
        Validity
            Not Before: Feb  2 07:01:13 2026 GMT
            Not After : Feb  3 07:01:13 2026 GMT
        Subject: CN=689d0095f302c910504f5d578cfa0b6314613afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f4:fe:be:11:89:fd:e0:4c:5a:bd:b2:db:04:
                    7a:0d:55:e9:a1:05:a5:ed:83:cd:5e:93:f0:a0:de:
                    70:c6:ef:75:68:28:b3:05:dc:f2:c7:2e:19:9f:79:
                    3e:f9:12:4b:50:78:f1:50:df:96:18:36:57:2b:b3:
                    88:86:fa:eb:00:28:10:c0:04:c8:7d:01:51:51:27:
                    8f:3d:09:3a:4e:11:67:41:9c:ee:07:d3:61:65:9c:
                    80:7b:13:00:78:e3:4c:07:c6:ca:ef:78:d5:02:4f:
                    32:7a:3d:0e:57:5d:32:f1:5a:60:57:86:58:67:38:
                    c3:c9:07:6f:6b:f6:7c:9a:11:ea:8a:ae:cd:3a:ef:
                    60:78:26:cc:4c:c3:16:37:ab:12:53:bd:29:d5:fe:
                    65:a0:3d:1d:5c:9d:8a:a1:12:0e:ad:de:48:c9:a6:
                    56:f2:67:bb:85:c3:58:38:08:fe:3b:a0:f3:ea:3d:
                    01:42:a5:6e:e1:86:04:3f:16:28:77:85:97:b9:86:
                    9d:48:73:72:f6:70:32:dd:03:84:67:19:1e:3b:df:
                    c5:3d:15:85:d6:70:8e:51:0a:3e:25:f0:be:a0:c9:
                    42:ef:c6:08:ac:50:dd:81:51:3b:bf:9d:fe:92:84:
                    98:ad:7c:8a:23:2f:ed:80:32:e7:39:36:f2:03:cd:
                    f1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:9D:00:95:F3:02:C9:10:50:4F:5D:57:8C:FA:0B:63:14:61:3A:FD
            X509v3 Authority Key Identifier:
                keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:2e:7c:5f:26:bd:a6:9d:09:f0:63:29:85:3e:1b:e3:38:43:
         a3:a9:94:ed:f8:6b:2e:c7:27:77:dc:da:74:e5:e0:58:c2:43:
         6c:b1:7a:dd:65:80:24:34:79:9e:c5:eb:94:07:7f:fc:44:cc:
         07:f8:e7:00:d5:17:17:ce:fc:fc:ee:c1:83:1d:6b:8c:30:4e:
         87:99:d3:b3:94:06:e2:59:33:3a:c4:a3:76:52:fc:da:c9:98:
         e7:ee:a1:ab:83:f1:d6:10:40:49:1b:3e:81:8f:03:51:6e:22:
         c9:25:f8:a8:fb:b6:9a:f0:69:e0:16:7e:fe:39:2e:20:6d:c1:
         4f:4c:8f:86:c8:0e:61:25:90:73:9b:56:28:21:c2:b1:de:bc:
         5b:8f:81:32:4a:42:7b:b3:38:29:e1:7c:57:8e:a7:da:5c:50:
         f9:17:f5:f2:85:31:7f:bd:f8:ac:f4:71:da:2a:73:fd:62:f0:
         d8:71:a8:e1:59:e3:55:65:ed:07:10:ed:92:26:72:54:47:8c:
         83:f8:73:32:1f:9c:8b:1e:d6:11:8a:37:b1:7c:61:f3:11:e4:
         22:96:63:2b:8e:16:c7:f6:e5:e8:67:a0:67:a1:a5:bc:c5:e8:
         be:f0:73:ba:c3:ab:a5:69:ff:81:8f:ec:c7:e6:f6:0d:34:e1:
         9f:53:ca:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwdJ8zDvNlIwj2EBIEbNdIQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNmY5Mjk1NTIxZGYzMGExNThmNTA2YmE3Y2I4NzNhYjk1
MjlkYzMwHhcNMjYwMjAyMDcwMTEzWhcNMjYwMjAzMDcwMTEzWjAzMTEwLwYDVQQD
Eyg2ODlkMDA5NWYzMDJjOTEwNTA0ZjVkNTc4Y2ZhMGI2MzE0NjEzYWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvT+vhGJ/eBMWr2y2wR6DVXpoQWl
7YPNXpPwoN5wxu91aCizBdzyxy4Zn3k++RJLUHjxUN+WGDZXK7OIhvrrACgQwATI
fQFRUSePPQk6ThFnQZzuB9NhZZyAexMAeONMB8bK73jVAk8yej0OV10y8VpgV4ZY
ZzjDyQdva/Z8mhHqiq7NOu9geCbMTMMWN6sSU70p1f5loD0dXJ2KoRIOrd5IyaZW
8me7hcNYOAj+O6Dz6j0BQqVu4YYEPxYod4WXuYadSHNy9nAy3QOEZxkeO9/FPRWF
1nCOUQo+JfC+oMlC78YIrFDdgVE7v53+koSYrXyKIy/tgDLnOTbyA83xhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGidAJXzAskQUE9dV4z6C2MUYTr9MB8GA1UdIwQY
MBaAFFpvkpVSHfMKFY9Qa6fLhzq5Up3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2Ut
YWFhNDU1M2QyYWJkLzEvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2UtYWFhNDU1M2QyYWJk
LzEvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjS58Xya9
pp0J8GMphT4b4zhDo6mU7fhrLscnd9zadOXgWMJDbLF63WWAJDR5nsXrlAd//ETM
B/jnANUXF878/O7Bgx1rjDBOh5nTs5QG4lkzOsSjdlL82smY5+6hq4Px1hBASRs+
gY8DUW4iySX4qPu2mvBp4BZ+/jkuIG3BT0yPhsgOYSWQc5tWKCHCsd68W4+BMkpC
e7M4KeF8V46n2lxQ+Rf18oUxf734rPRx2ipz/WLw2HGo4VnjVWXtBxDtkiZyVEeM
g/hzMh+cix7WEYo3sXxh8xHkIpZjK44Wx/bl6GegZ6GlvMXovvBzusOrpWn/gY/s
x+b2DTThn1PKOg==
-----END CERTIFICATE-----
Generated at Mon Feb 2 09:29:00 2026 by rpki-client