This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
File:                     w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft (raw, json)
Hash identifier:          kBKqSbqZhayDluL7c/sbWJltcBJkWbN8uodxmPbv8xg=
Subject key identifier:   84:61:A9:AC:8B:18:81:60:79:20:3D:1D:0B:CF:89:02:AE:0A:43:F0
Authority key identifier: C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
Certificate issuer:       /CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Certificate serial:       019BFB7751684CA2D017A8A63649E6C1FA5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
Manifest number:          17F6
Signing time:             Mon 26 Jan 2026 18:00:59 +0000
Manifest this update:     Mon 26 Jan 2026 18:00:59 +0000
Manifest next update:     Tue 27 Jan 2026 18:00:59 +0000
Files and hashes:         1: 77h1Q6qUz5qlMm7h_AznswYtOZ0.roa (hash: sRXxLopp6/463zgP26zWNJzhuSr+AeItnoxYVZGJazU=)
                          2: HN1urgNHkidDzjrtQwQt8embI9M.roa (hash: EeB/nRcF8dH+A2iZTqxjbaTiyibP5r0zfqmmI1yddPU=)
                          3: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl (hash: 36ub0nziUC/UqUbQIaUvWKh4wYc9mBUYcnMnVMKE+Ww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 18:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:77:51:68:4c:a2:d0:17:a8:a6:36:49:e6:c1:fa:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
        Validity
            Not Before: Jan 26 18:00:59 2026 GMT
            Not After : Jan 27 18:00:59 2026 GMT
        Subject: CN=8461a9ac8b18816079203d1d0bcf8902ae0a43f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a9:17:72:72:6d:81:f9:2e:aa:eb:68:8f:90:
                    56:c3:6b:0a:fd:78:ba:b1:04:a7:72:f1:61:1c:dd:
                    00:45:a2:a7:0a:5e:c0:bc:c2:18:2c:32:d6:60:ea:
                    07:49:72:3d:75:d2:2a:1b:7d:d7:6d:69:1a:68:89:
                    96:65:ad:e3:da:53:82:a2:8c:8b:93:23:92:eb:00:
                    5a:b1:57:e9:e0:ba:a3:72:63:7f:82:4b:41:34:47:
                    bc:a8:54:64:73:f3:9a:ad:d5:72:fe:bb:d0:12:ae:
                    aa:5f:43:c9:5d:98:a4:9e:bf:4b:07:a9:04:e3:da:
                    8b:ce:87:31:be:09:2c:2c:8b:3e:32:43:1e:96:21:
                    6a:ed:ce:8d:79:22:f4:46:b9:27:c4:ce:71:df:e8:
                    18:77:8a:92:cb:10:98:52:ed:53:a3:25:e6:a9:56:
                    87:e9:c7:99:96:9d:b1:7f:6b:7c:c7:3c:8c:ac:37:
                    4c:19:f6:71:cd:55:2f:83:2d:36:86:a9:30:a1:46:
                    9b:c3:28:2b:87:f9:6e:66:d1:47:6c:f9:87:e7:42:
                    66:3a:67:b1:ce:76:11:f6:86:43:2f:5f:b8:83:21:
                    e3:8d:ba:76:18:cc:c2:52:91:00:87:0e:08:3b:7e:
                    d1:ef:34:3b:87:e5:c6:10:e8:36:e0:47:df:04:71:
                    be:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:61:A9:AC:8B:18:81:60:79:20:3D:1D:0B:CF:89:02:AE:0A:43:F0
            X509v3 Authority Key Identifier:
                keyid:C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:e9:e3:dc:3a:f6:a7:d5:9d:d5:bb:da:51:77:c1:7e:da:19:
         b3:90:c7:4e:6d:91:9c:b5:13:99:65:f5:a6:e9:cd:3a:ea:b8:
         3f:8a:67:35:81:ea:0a:4e:c0:b0:4c:f7:c6:e3:81:aa:8b:d8:
         38:8d:63:44:46:de:b7:06:07:a0:b9:d1:41:89:c0:24:c6:b9:
         28:2d:20:da:c7:67:58:86:79:f8:b4:b0:1d:06:51:73:7a:5c:
         34:8b:c8:a6:0e:75:fc:98:ae:52:f8:50:bf:c6:71:5f:97:d2:
         ea:2c:30:53:92:08:92:03:b6:63:04:60:ff:41:ff:05:f9:00:
         9d:37:3b:4a:18:15:c6:d2:fe:71:ad:6e:fc:c4:55:b2:de:a0:
         79:23:a1:d3:f2:49:6e:0c:92:a5:f1:36:1d:5e:92:fa:67:2b:
         0b:14:12:f1:16:06:0a:0a:2b:1e:bc:46:bd:5a:0e:a0:c3:28:
         21:3d:42:f1:ed:d8:4d:fe:c1:d4:e6:5f:73:4f:b1:ec:25:c1:
         c5:4b:2b:df:31:c1:fa:0e:88:f7:bb:7a:74:f4:3a:df:80:07:
         ce:95:b9:4c:a7:cb:28:d7:da:a1:c3:aa:f1:68:df:21:04:7a:
         94:ba:a5:51:f8:dd:15:e4:b0:ac:5a:72:03:66:0e:f8:68:63:
         e4:55:58:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv7d1FoTKLQF6imNknmwfpeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNWYwMzk0OWU2NjFlMjRiZTBmMWUwOGM2NGRhZDA1ZTMx
YzRlYWYwHhcNMjYwMTI2MTgwMDU5WhcNMjYwMTI3MTgwMDU5WjAzMTEwLwYDVQQD
Eyg4NDYxYTlhYzhiMTg4MTYwNzkyMDNkMWQwYmNmODkwMmFlMGE0M2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26kXcnJtgfkuqutoj5BWw2sK/Xi6
sQSncvFhHN0ARaKnCl7AvMIYLDLWYOoHSXI9ddIqG33XbWkaaImWZa3j2lOCooyL
kyOS6wBasVfp4LqjcmN/gktBNEe8qFRkc/OardVy/rvQEq6qX0PJXZiknr9LB6kE
49qLzocxvgksLIs+MkMeliFq7c6NeSL0RrknxM5x3+gYd4qSyxCYUu1ToyXmqVaH
6ceZlp2xf2t8xzyMrDdMGfZxzVUvgy02hqkwoUabwygrh/luZtFHbPmH50JmOmex
znYR9oZDL1+4gyHjjbp2GMzCUpEAhw4IO37R7zQ7h+XGEOg24EffBHG+XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRhqayLGIFgeSA9HQvPiQKuCkPwMB8GA1UdIwQY
MBaAFMNfA5SeZh4kvg8eCMZNrQXjHE6vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzE4RGxKNW1IaVMtRHg0SXhrMnRCZU1jVHE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8yODlmYzItZjI3OC00ZjY2LWI4ZWMt
Yzc0M2NiNmQyZmMzLzEvdzE4RGxKNW1IaVMtRHg0SXhrMnRCZU1jVHE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8yODlmYzItZjI3OC00ZjY2LWI4ZWMtYzc0M2NiNmQyZmMz
LzEvdzE4RGxKNW1IaVMtRHg0SXhrMnRCZU1jVHE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApenj3Dr2
p9Wd1bvaUXfBftoZs5DHTm2RnLUTmWX1punNOuq4P4pnNYHqCk7AsEz3xuOBqovY
OI1jREbetwYHoLnRQYnAJMa5KC0g2sdnWIZ5+LSwHQZRc3pcNIvIpg51/JiuUvhQ
v8ZxX5fS6iwwU5IIkgO2YwRg/0H/BfkAnTc7ShgVxtL+ca1u/MRVst6geSOh0/JJ
bgySpfE2HV6S+mcrCxQS8RYGCgorHrxGvVoOoMMoIT1C8e3YTf7B1OZfc0+x7CXB
xUsr3zHB+g6I97t6dPQ634AHzpW5TKfLKNfaocOq8WjfIQR6lLqlUfjdFeSwrFpy
A2YO+Ghj5FVY9A==
-----END CERTIFICATE-----
Generated at Tue Jan 27 04:28:25 2026 by rpki-client