This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft
File:                     wxgakj6aw8AF60xz7ceh6DJaWx4.mft (raw, json)
Hash identifier:          tjsK2/fGlz+VuqZsCJAAPwA27VNFu7bIVxrCKoQ3r5k=
Subject key identifier:   F5:DA:56:3A:26:19:C6:EA:17:EA:AF:B4:64:42:0C:29:DE:32:0B:F6
Authority key identifier: C3:18:1A:92:3E:9A:C3:C0:05:EB:4C:73:ED:C7:A1:E8:32:5A:5B:1E
Certificate issuer:       /CN=c3181a923e9ac3c005eb4c73edc7a1e8325a5b1e
Certificate serial:       019BF5E3B64C16B65B0444E2E1D21ABF8899
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft
Manifest number:          092F
Signing time:             Sun 25 Jan 2026 16:01:39 +0000
Manifest this update:     Sun 25 Jan 2026 16:01:39 +0000
Manifest next update:     Mon 26 Jan 2026 16:01:39 +0000
Files and hashes:         1: 3GavzMAbCuU_7XxsDf7ryjx5mm4.roa (hash: 5lj6u+PVxfRxZzq0tJiNI844Q2BPDCOyHDGilv4wvUo=)
                          2: D79BMk4Sy3Ip91qAwZ0vd8nJl74.roa (hash: h7ovrPWRmdbJ21Y1DD2eFw9675DOds3HxoGhsEEYTPc=)
                          3: JgYNS7DEy60UynMFzMYucXhQFk4.roa (hash: YktVSM9QeFV5rkpseR/p+0DV/UAZK4Qj6jReFpK/x6s=)
                          4: N30OROJ-GP4W9Jh1DhollfBhBIc.roa (hash: 0DZXZuzJNd94W/XmII9UfJ/AeUVNfTn07t17yvOOlh0=)
                          5: wxgakj6aw8AF60xz7ceh6DJaWx4.crl (hash: vvOn1iUHCPx+Jp8nsw8tM14QBptu+PHtywZiGcqCHdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:e3:b6:4c:16:b6:5b:04:44:e2:e1:d2:1a:bf:88:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3181a923e9ac3c005eb4c73edc7a1e8325a5b1e
        Validity
            Not Before: Jan 25 16:01:39 2026 GMT
            Not After : Jan 26 16:01:39 2026 GMT
        Subject: CN=f5da563a2619c6ea17eaafb464420c29de320bf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2d:1d:93:d8:c0:40:b5:4a:3c:29:7f:9b:e6:
                    c4:28:3d:cc:ba:c2:85:6e:84:26:72:68:3c:68:78:
                    8e:ad:8e:1c:7b:02:59:b7:6d:4d:70:70:d0:1a:1f:
                    53:0c:dd:5f:79:31:70:85:20:4c:31:b5:c8:ae:7e:
                    86:9b:80:8b:14:6e:87:02:ef:44:e8:23:d8:58:81:
                    cc:50:28:74:2e:3b:6f:4a:61:27:83:6e:77:07:b5:
                    b7:af:65:33:b8:8c:4f:57:1e:20:85:8e:7d:6e:f1:
                    87:0f:39:ad:2c:dc:45:48:e4:11:77:10:57:b0:40:
                    ff:42:a8:91:2f:c4:6a:57:37:74:1a:95:68:13:97:
                    bb:c8:34:ec:36:63:88:2f:5f:b3:13:a9:e9:72:15:
                    49:7a:a9:85:ff:8c:32:84:9e:c3:6c:fd:35:87:36:
                    88:30:02:f0:6f:02:28:48:f8:0b:3d:7e:a7:52:90:
                    7e:71:28:58:ec:ad:79:b7:e6:2b:10:b8:a5:db:51:
                    fb:1e:6b:c1:58:91:97:b0:64:9d:c1:7e:50:97:97:
                    d1:15:91:e9:2b:9a:ec:54:92:28:a4:18:18:1d:64:
                    eb:3f:42:c5:df:55:21:e4:1c:39:93:2f:05:23:18:
                    47:db:27:b4:cb:f5:a1:cf:d0:6d:5d:f8:e3:e1:7b:
                    84:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:DA:56:3A:26:19:C6:EA:17:EA:AF:B4:64:42:0C:29:DE:32:0B:F6
            X509v3 Authority Key Identifier:
                keyid:C3:18:1A:92:3E:9A:C3:C0:05:EB:4C:73:ED:C7:A1:E8:32:5A:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:85:46:72:75:bd:97:88:61:bd:31:5b:a4:55:a4:be:21:2c:
         05:ec:2f:89:4f:d5:c3:9e:f7:25:e5:53:af:ed:1e:87:1f:f2:
         78:95:33:01:d2:2f:7c:bd:0d:09:fc:94:7a:bf:be:35:33:dc:
         01:d8:93:0b:25:4f:0d:f4:cc:6e:54:1f:b0:6e:4e:b8:37:a8:
         f4:ca:43:c7:53:58:24:8a:e7:a4:a1:f6:eb:16:1d:70:17:82:
         b6:ff:b3:25:ab:d7:ff:d8:61:57:aa:d8:a9:7a:69:24:41:2d:
         1d:ae:0c:08:f3:35:f5:e9:e2:0e:82:2e:e5:7f:81:5a:ac:ba:
         7f:37:4d:c5:f9:9f:83:37:79:82:b6:8a:64:61:1b:bb:72:97:
         65:cc:a7:ae:ca:71:c0:7b:66:7e:1e:10:41:eb:4b:3e:e0:69:
         b9:01:05:35:89:c5:9b:38:45:91:1f:24:f6:7f:25:02:6b:3a:
         e5:6c:92:b2:f2:71:e5:df:af:ec:17:af:01:db:63:7b:eb:9e:
         4a:98:12:a2:cf:5e:d3:ee:1a:9b:a3:01:bc:00:e9:24:04:5d:
         12:50:e1:a7:9b:24:61:16:55:d1:e0:03:52:63:33:c0:42:c7:
         9e:22:4b:d7:ae:7b:b4:41:6d:f7:d4:ce:ed:6a:e8:08:3d:1e:
         8a:d1:54:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv147ZMFrZbBETi4dIav4iZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMTgxYTkyM2U5YWMzYzAwNWViNGM3M2VkYzdhMWU4MzI1
YTViMWUwHhcNMjYwMTI1MTYwMTM5WhcNMjYwMTI2MTYwMTM5WjAzMTEwLwYDVQQD
EyhmNWRhNTYzYTI2MTljNmVhMTdlYWFmYjQ2NDQyMGMyOWRlMzIwYmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5C0dk9jAQLVKPCl/m+bEKD3MusKF
boQmcmg8aHiOrY4cewJZt21NcHDQGh9TDN1feTFwhSBMMbXIrn6Gm4CLFG6HAu9E
6CPYWIHMUCh0LjtvSmEng253B7W3r2UzuIxPVx4ghY59bvGHDzmtLNxFSOQRdxBX
sED/QqiRL8RqVzd0GpVoE5e7yDTsNmOIL1+zE6npchVJeqmF/4wyhJ7DbP01hzaI
MALwbwIoSPgLPX6nUpB+cShY7K15t+YrELil21H7HmvBWJGXsGSdwX5Ql5fRFZHp
K5rsVJIopBgYHWTrP0LF31Uh5Bw5ky8FIxhH2ye0y/Whz9BtXfjj4XuEZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPXaVjomGcbqF+qvtGRCDCneMgv2MB8GA1UdIwQY
MBaAFMMYGpI+msPABetMc+3HoegyWlseMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3hnYWtqNmF3OEFGNjB4ejdjZWg2REphV3g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS85YmNhZGEtZDk1NS00ZjJhLTkyNTQt
ZjllYzU2NjY4NmI5LzEvd3hnYWtqNmF3OEFGNjB4ejdjZWg2REphV3g0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS85YmNhZGEtZDk1NS00ZjJhLTkyNTQtZjllYzU2NjY4NmI5
LzEvd3hnYWtqNmF3OEFGNjB4ejdjZWg2REphV3g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADoVGcnW9
l4hhvTFbpFWkviEsBewviU/Vw573JeVTr+0ehx/yeJUzAdIvfL0NCfyUer++NTPc
AdiTCyVPDfTMblQfsG5OuDeo9MpDx1NYJIrnpKH26xYdcBeCtv+zJavX/9hhV6rY
qXppJEEtHa4MCPM19eniDoIu5X+BWqy6fzdNxfmfgzd5graKZGEbu3KXZcynrspx
wHtmfh4QQetLPuBpuQEFNYnFmzhFkR8k9n8lAms65WySsvJx5d+v7BevAdtje+ue
SpgSos9e0+4am6MBvADpJARdElDhp5skYRZV0eADUmMzwELHniJL1657tEFt99TO
7WroCD0eitFUSQ==
-----END CERTIFICATE-----
Generated at Mon Jan 26 00:21:00 2026 by rpki-client