This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft
File:                     Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft (raw, json)
Hash identifier:          8Y5qlLl3PeEzNmXebFXEF4clpvr797bBoZZTsXHbPsk=
Subject key identifier:   34:C2:46:30:42:EF:5A:9A:5A:A2:B3:C2:A9:3F:D3:26:EC:0C:7A:3C
Authority key identifier: 59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
Certificate issuer:       /CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Certificate serial:       019BF6512C9EB9B399728BDEF3546D0BFDE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft
Manifest number:          1513
Signing time:             Sun 25 Jan 2026 18:01:13 +0000
Manifest this update:     Sun 25 Jan 2026 18:01:13 +0000
Manifest next update:     Mon 26 Jan 2026 18:01:13 +0000
Files and hashes:         1: 2bkPk-Ot1qaZU9LokqaM6q6xdF0.roa (hash: FKs43X1xKZGBJpJSHiH34tt6wllzqU8nAr6+m1ghTU0=)
                          2: 4Zdg2MQSYklkR7c-l8IxUi_TKoU.roa (hash: nBkl98E0y+zp7UHLK7yW+DxyvmorfZ8LgRx1oXurW68=)
                          3: 4ycHfp1CoXFfjrLAJTQGtsTa-l8.roa (hash: 5TzAawGzbQ+BkfeGhAzCFqHBUQwaDb09xlhuP0hvLkc=)
                          4: TG3cV_k_6T9HbxHghkTkoJbXOL0.roa (hash: burWH/ULqeg/o8zbECBxBAYn5WigohJQk5bXldlsBxE=)
                          5: Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl (hash: oC/EQQjniIvdAdTE1gua4tOo5c8smFBta6zqBHA2dQE=)
                          6: YXwTm4AmXj7P3L-oHjQ9SCRkIB8.roa (hash: BEZ8noNyxFYH9s7y6LdJlLx1xzBr+aJybJ/406MKOQM=)
                          7: YYz0Ra-AyeN1y-x_tz99q6uROXw.roa (hash: d1wNmR3qGWlzOdOJM2Cg8ES808SIUCxvq3RhFeBu6hA=)
                          8: eq6O520dR9h5ZDTtwmQ1vFOWocg.roa (hash: WayNVSTyYUA3PrVVuq/1FxZpGE5s8+ZfaV8xAD2RAjQ=)
                          9: ioM3AXpUis9J40gGub2U9jhjnqY.roa (hash: FQpQflORWZoeyUv7a6WExDaKoi/29z9/D4oDeFDhbQc=)
                          10: qydP8Ocj7OIzj_U81Z5d_MW1T18.roa (hash: TfA/tv13aYJLnXxl1BypCd3xtsBlvQQuGSTtjj37SIo=)
                          11: x-4NJxZ2nwyfIPj7rGtcmDafiYQ.roa (hash: hbLajVkI4hSS08XndEILFj9TEfJ8gLTfZffiq7R2pbQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:51:2c:9e:b9:b3:99:72:8b:de:f3:54:6d:0b:fd:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
        Validity
            Not Before: Jan 25 18:01:13 2026 GMT
            Not After : Jan 26 18:01:13 2026 GMT
        Subject: CN=34c2463042ef5a9a5aa2b3c2a93fd326ec0c7a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dc:04:24:e9:72:91:cf:ac:6c:f3:82:81:20:
                    b0:fd:66:24:a8:2d:76:e1:36:76:8d:4c:eb:87:5a:
                    99:5d:59:81:2b:3a:06:8c:3e:79:44:60:fc:e7:20:
                    68:86:ea:d6:aa:ab:42:3e:a7:9e:a9:a5:4e:e0:a9:
                    ad:71:97:16:84:42:52:fb:66:0e:7a:46:ec:76:f0:
                    9c:d3:8f:39:76:42:36:91:7b:2c:a2:79:57:65:e5:
                    d0:0f:a9:97:4f:a3:57:43:0f:b2:14:e9:d2:08:75:
                    6f:16:b8:b7:c6:9e:3e:06:2a:eb:6c:7d:42:d6:ae:
                    0b:1e:36:97:35:96:42:c6:fd:1c:d0:8a:e6:c5:f0:
                    f4:dd:b0:98:80:12:37:2d:dd:e2:29:27:ec:0d:85:
                    cc:83:24:50:6f:d0:8c:e7:d2:78:fe:9c:d8:da:03:
                    de:05:24:d2:9b:74:e2:b2:98:5b:69:5a:b2:0e:39:
                    16:d6:6c:ee:7c:8c:37:59:85:a2:03:0a:4e:1b:b1:
                    53:21:cf:47:9b:cb:05:77:77:d1:4f:14:6d:9f:a7:
                    87:b6:79:70:00:b9:c5:bd:c3:27:c9:7d:71:0c:4d:
                    78:c3:cb:71:b6:18:b3:ca:44:fd:f0:41:c3:78:48:
                    f7:da:23:bf:ac:2b:8a:9d:37:03:e1:7d:3a:5c:be:
                    6b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C2:46:30:42:EF:5A:9A:5A:A2:B3:C2:A9:3F:D3:26:EC:0C:7A:3C
            X509v3 Authority Key Identifier:
                keyid:59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:e8:43:56:16:40:31:0e:ba:6c:46:1d:8f:7a:60:74:17:14:
         96:15:3a:82:1f:88:0b:f9:ec:39:c1:f8:79:e0:a0:09:09:c1:
         10:25:1e:a9:19:5b:59:6b:68:bf:d0:7a:a7:aa:2e:6d:4b:df:
         a1:59:49:6d:c2:07:2a:5a:d8:5e:7e:70:75:b7:e4:fb:6b:a5:
         c5:8f:fc:e4:5b:52:d5:e9:44:01:74:45:60:3e:3b:ce:8b:28:
         9b:ae:30:e1:aa:bf:32:a4:13:17:6a:14:f9:2d:02:9d:38:ae:
         fb:b7:0c:f5:4b:ae:40:9f:55:3e:37:80:fc:0c:17:ff:86:a2:
         ab:c7:8c:ad:21:0f:9e:a9:1b:1d:bf:ff:41:52:9d:e8:7b:ef:
         c6:88:bf:4c:d9:7f:df:7b:b6:a6:30:f1:2e:3c:35:5e:73:e9:
         36:93:da:92:f4:81:08:84:0c:59:47:6d:c5:5f:11:de:cc:43:
         f4:79:69:f1:07:12:0a:79:cb:9c:61:b2:f3:57:c8:d2:74:35:
         90:d3:d7:75:af:0c:b7:73:fe:10:92:ad:ba:49:ec:51:d7:17:
         5d:f3:12:59:72:2c:9c:e0:85:b3:ba:a1:82:d2:7d:55:2e:bc:
         30:a2:12:36:bb:e0:14:8c:f1:eb:66:21:45:23:55:63:52:9f:
         62:94:db:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:35:49 2026 by rpki-client