This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.mft
File:                     W1v_nUH3GfYmAMMtNBDduZ7Msww.mft (raw, json)
Hash identifier:          hXSrQYYuUQvNRI3W6JzmNNcDudXXrpl5FqRnNSC8xfI=
Subject key identifier:   FF:5C:51:42:87:64:DF:E7:7E:1D:29:BB:C9:81:E9:12:EA:CD:22:81
Authority key identifier: 5B:5B:FF:9D:41:F7:19:F6:26:00:C3:2D:34:10:DD:B9:9E:CC:B3:0C
Certificate issuer:       /CN=5b5bff9d41f719f62600c32d3410ddb99eccb30c
Certificate serial:       019BF499ABAA0B08FDF67E16DE01BE57F461
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W1v_nUH3GfYmAMMtNBDduZ7Msww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.mft
Manifest number:          120E
Signing time:             Sun 25 Jan 2026 10:01:10 +0000
Manifest this update:     Sun 25 Jan 2026 10:01:10 +0000
Manifest next update:     Mon 26 Jan 2026 10:01:10 +0000
Files and hashes:         1: DIGCQbMEvX3S2DQ7VERDwaNmPgI.roa (hash: vrQP6CoSztwA+KPM4HiP9pP5zfEZ7MxF+t1JeC7UBYM=)
                          2: W1v_nUH3GfYmAMMtNBDduZ7Msww.crl (hash: 0eGZEiI+k2/GltpYE/fwnt5tpkNPVrrFuhkeO2jYg+w=)
                          3: ubWTx4s1XitX6PHQT8bII0Sr8VA.roa (hash: OkiBE/NUzkKV+xXfw7sua6AgcBbcZ2vjT39S06HxuOw=)
                          4: uhG95XF25QmjvzLstx1n9pIbB5g.roa (hash: nKE/loz1ortOdOeQYwJVvnlVW4oJD/w1eygAfQW6kko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W1v_nUH3GfYmAMMtNBDduZ7Msww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:99:ab:aa:0b:08:fd:f6:7e:16:de:01:be:57:f4:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b5bff9d41f719f62600c32d3410ddb99eccb30c
        Validity
            Not Before: Jan 25 10:01:10 2026 GMT
            Not After : Jan 26 10:01:10 2026 GMT
        Subject: CN=ff5c51428764dfe77e1d29bbc981e912eacd2281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:68:39:6d:b4:e0:33:84:09:c3:75:90:35:db:
                    70:51:62:0b:de:e9:51:28:9d:25:60:66:d3:67:96:
                    c2:95:8d:4a:46:53:cb:64:40:d3:8d:de:9f:86:7d:
                    89:71:9c:a9:ab:7e:fe:01:5c:17:0e:e2:dc:6f:f4:
                    7b:ab:8d:dc:db:83:fa:61:d9:5d:3e:cf:82:1e:49:
                    ea:46:13:8a:a9:19:ae:08:fa:4a:62:d9:6a:46:27:
                    b2:f0:ba:01:1a:a8:d9:7d:c9:34:ee:15:b1:da:ef:
                    a4:40:41:52:30:c7:6f:e8:93:56:d0:cc:f7:23:18:
                    36:4c:d0:fb:9c:46:c8:4d:6b:5c:41:27:aa:b1:2a:
                    1b:68:e2:9a:01:ba:d9:0f:c8:ee:1e:5a:c9:aa:1e:
                    5c:f1:34:99:fc:8b:ee:67:61:80:02:46:94:24:15:
                    d0:39:f1:ff:7d:cf:8f:7a:73:21:c6:77:48:a8:9d:
                    27:d8:7e:c9:d6:77:0e:82:e8:03:39:8d:6f:dc:8b:
                    ba:76:2c:6d:97:9e:63:40:af:1b:4e:20:e4:ed:2c:
                    bc:a2:61:2a:0c:dd:fa:14:28:c3:2b:ae:e2:d2:d7:
                    52:1a:08:fc:0d:a5:66:07:f0:ea:9c:e1:1d:04:fd:
                    af:db:81:03:72:ac:d9:a1:ab:40:54:7a:bb:d1:2b:
                    52:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:5C:51:42:87:64:DF:E7:7E:1D:29:BB:C9:81:E9:12:EA:CD:22:81
            X509v3 Authority Key Identifier:
                keyid:5B:5B:FF:9D:41:F7:19:F6:26:00:C3:2D:34:10:DD:B9:9E:CC:B3:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1v_nUH3GfYmAMMtNBDduZ7Msww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:78:c3:ff:af:ce:da:44:7f:8b:a8:5b:55:0d:55:70:76:17:
         54:bc:71:ff:63:40:ac:1c:14:ae:0f:97:5f:d1:b0:d2:19:16:
         08:47:26:26:bd:12:5e:2b:37:bf:cd:0d:8f:80:f8:d5:49:0f:
         c3:24:8a:17:d9:ec:b1:6c:5a:a3:bb:e8:d4:25:96:e1:2c:1f:
         b0:b7:02:d4:e0:3b:38:62:d3:a0:30:3f:c6:6c:62:02:d3:a0:
         66:ca:b2:a6:71:ae:2c:43:e6:61:27:fc:6f:15:9d:15:1c:7e:
         23:56:e4:f6:a1:3c:fa:e2:27:92:7f:46:df:cd:40:51:58:23:
         77:b4:e6:05:60:da:54:fa:34:52:d9:0d:b5:18:dc:d6:d6:24:
         0f:d3:66:87:2c:05:db:ae:65:0b:55:fc:a6:b6:2b:1e:65:a5:
         4f:b2:69:7d:e2:00:e8:18:5b:95:03:7d:8a:36:fb:41:48:93:
         58:15:1d:3d:6f:bf:e9:dd:3e:46:7f:89:7b:14:0d:d9:19:31:
         47:6f:cf:a7:34:48:50:f4:91:b1:54:2e:2d:ca:46:52:ec:c5:
         a7:89:81:0b:34:0d:e4:c1:95:3b:ed:81:95:a0:7f:81:37:ba:
         0e:fb:38:36:88:cb:42:7f:3e:12:02:d7:c1:f7:a1:cf:b3:76:
         5b:ae:d6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:29:51 2026 by rpki-client