This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
File:                     wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft (raw, json)
Hash identifier:          Qcg6x59ASX7utYbkJsXJj3j3+h7vrN2xFMLpQR1BzUA=
Subject key identifier:   86:38:7C:5C:A3:05:9A:B3:F7:67:12:D8:2A:B2:DB:82:E8:FE:74:32
Authority key identifier: C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
Certificate issuer:       /CN=c1dc2f85026158cbd9ff49da15db225f053074ac
Certificate serial:       019BE06DF46A4AA2036D952219232290132D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
Manifest number:          17DF
Signing time:             Wed 21 Jan 2026 12:01:00 +0000
Manifest this update:     Wed 21 Jan 2026 12:01:00 +0000
Manifest next update:     Thu 22 Jan 2026 12:01:00 +0000
Files and hashes:         1: 4OUSsPf2UIj1ENWFeSqwKcIXtl0.roa (hash: CU7VD/QjDqVmViCVGjB9C2Hx1kxI21aZllJ4lWIgq7k=)
                          2: J6xC5e6lIltoyJBn6SlWZlAQvIA.roa (hash: LNgbfTK70EVkXbHrJjUfQKsiK79uROdYKu4IkzoIDQ0=)
                          3: wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl (hash: Nwbad28cTtbvEp5YBiu3O+HLvtnxDB0WOGiJ1JETAnI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e0:6d:f4:6a:4a:a2:03:6d:95:22:19:23:22:90:13:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1dc2f85026158cbd9ff49da15db225f053074ac
        Validity
            Not Before: Jan 21 12:01:00 2026 GMT
            Not After : Jan 22 12:01:00 2026 GMT
        Subject: CN=86387c5ca3059ab3f76712d82ab2db82e8fe7432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:84:54:29:d9:13:28:cb:42:a3:4b:10:fa:09:
                    b3:b7:31:e5:2e:bc:37:a6:8b:c2:b4:f9:ab:e9:aa:
                    90:77:68:fe:a8:ff:38:e9:dc:07:f2:78:5b:14:68:
                    28:42:8a:8a:a6:ee:8c:ab:64:50:52:85:e3:71:2b:
                    cd:78:0d:41:c0:d8:d2:a2:cc:1a:db:2a:eb:0c:99:
                    f8:86:78:52:8d:28:74:69:48:15:ff:56:9d:62:5b:
                    73:33:2a:20:ea:f9:0e:d4:f1:ce:66:18:b8:96:c9:
                    55:82:ae:d8:e7:5e:23:99:87:0f:3e:6d:c6:b8:e2:
                    cc:41:d5:d4:7d:9d:96:01:45:77:2e:c1:f7:94:6d:
                    bb:4b:fd:c1:c0:a3:95:fb:32:c4:09:92:57:e4:0d:
                    2e:fb:e0:1f:34:e6:55:69:ad:f6:6d:0c:ad:39:f2:
                    5e:8c:37:61:bf:8d:48:e9:18:b3:59:19:bd:fc:70:
                    f1:a2:09:71:56:dc:d9:cc:ec:a0:3d:99:ca:f2:76:
                    dc:e2:a0:f2:66:85:16:5b:5b:1f:29:c2:34:be:a9:
                    36:44:a7:27:d9:96:c9:39:5c:c2:96:61:7b:4b:47:
                    98:79:ec:77:12:79:28:0f:f5:5d:18:f4:e8:d0:12:
                    10:8a:26:ec:30:03:3a:49:31:03:de:08:6a:cc:a4:
                    53:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:38:7C:5C:A3:05:9A:B3:F7:67:12:D8:2A:B2:DB:82:E8:FE:74:32
            X509v3 Authority Key Identifier:
                keyid:C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:39:c0:73:bc:b1:68:14:48:e5:ab:88:72:a9:a2:67:d0:99:
         93:e8:1a:18:74:e2:3f:25:a9:50:de:d1:80:30:db:93:4f:05:
         42:0a:1e:f7:7c:5e:b8:3d:74:ad:0f:c7:9c:98:a9:02:40:a3:
         b7:60:50:05:87:dd:5c:3d:17:65:e5:58:8a:f3:a5:08:1a:4e:
         06:0f:79:d5:07:bf:0f:04:77:73:66:f2:b8:4a:2d:3e:b4:ed:
         72:4d:1c:9a:d0:e0:3f:12:fd:f6:b9:e7:b2:aa:c1:0e:78:d1:
         b9:90:9e:6b:28:80:cf:d9:2b:7c:68:83:d2:e7:18:c3:0f:0d:
         d9:86:01:85:d6:fd:54:4f:2b:e9:01:9a:79:8f:51:25:26:8a:
         2b:67:f9:a8:18:64:b5:8e:8a:eb:ef:6e:ac:bc:ea:f0:54:3a:
         4d:60:6b:67:db:c4:17:f7:b5:6b:61:f1:c5:b6:40:b4:c8:c9:
         0e:35:a7:ef:b7:30:89:6e:e5:d9:0e:ce:e2:52:73:91:b1:4b:
         4e:1f:26:96:f3:6a:f5:6c:b7:62:f8:90:7e:90:5a:9a:eb:3b:
         65:fb:b6:cb:4b:cb:04:74:74:ce:e9:81:65:e5:8b:d4:41:69:
         c1:78:21:65:3c:de:e3:92:93:11:9b:a7:de:8b:eb:6c:db:d9:
         b1:0a:e2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:34:21 2026 by rpki-client