This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft
File:                     w0CU4yNtzRyDURN5Gjgk2ilz35s.mft (raw, json)
Hash identifier:          q4ZMgqR5J7SXxR+5x7mfIPe25jWqIF1nGQv0dX0/bWg=
Subject key identifier:   12:00:1E:50:E2:3C:E1:05:97:C3:9F:F2:F3:D2:17:5A:3A:57:F2:DB
Authority key identifier: C3:40:94:E3:23:6D:CD:1C:83:51:13:79:1A:38:24:DA:29:73:DF:9B
Certificate issuer:       /CN=c34094e3236dcd1c835113791a3824da2973df9b
Certificate serial:       019BF5E37C9E2BE33F8419A0DAA267F8D1B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft
Manifest number:          0183
Signing time:             Sun 25 Jan 2026 16:01:25 +0000
Manifest this update:     Sun 25 Jan 2026 16:01:25 +0000
Manifest next update:     Mon 26 Jan 2026 16:01:25 +0000
Files and hashes:         1: 6eKn3uMQuUNTMkTpT0y-3vnuj_s.roa (hash: WZXQFULC/IwGTQvmcWdtzTS7QYlU+Fpmd+6cLbWavvM=)
                          2: iLmwMggqjEBnQ1t5qTCIk0-Ops0.roa (hash: f7hSU9eQL9QO+9vWgF04GRMwKj8b5Zh3CLrT+16gfVU=)
                          3: ualECGFgELK8Ub0WIu1zKOrzdLw.roa (hash: m+NzeDbR9O7unWoYNRmh2DUqdEvHCo2FWMfMNRs15bs=)
                          4: w0CU4yNtzRyDURN5Gjgk2ilz35s.crl (hash: VluSNKuD2KIEQ0FGRoLhEHDpNJmESPgkkzlw2pDTle4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:e3:7c:9e:2b:e3:3f:84:19:a0:da:a2:67:f8:d1:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c34094e3236dcd1c835113791a3824da2973df9b
        Validity
            Not Before: Jan 25 16:01:25 2026 GMT
            Not After : Jan 26 16:01:25 2026 GMT
        Subject: CN=12001e50e23ce10597c39ff2f3d2175a3a57f2db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7b:c7:17:2a:a5:9e:e5:b4:b0:f8:51:b9:a5:
                    3e:3d:0d:f6:e5:ef:48:e5:e2:ea:61:a3:69:66:8a:
                    23:da:76:2a:ed:1e:87:ba:00:d2:c7:6f:47:17:20:
                    64:f7:f0:ea:4b:8f:0c:4d:cb:18:7d:73:3f:85:cf:
                    39:39:c1:2d:e5:71:49:b2:a0:f9:81:53:1c:e1:6b:
                    13:c6:da:64:82:85:95:2b:77:cb:19:a6:37:f3:07:
                    72:b4:9f:95:6a:f3:56:8a:a3:ae:10:37:59:95:36:
                    9a:3e:f7:ba:8e:0e:fa:e8:d8:cb:b2:00:83:2d:c3:
                    c0:42:9c:c6:d3:65:a4:97:7a:92:8e:06:da:ec:94:
                    6a:25:c6:ab:65:5c:90:6f:ef:fb:1d:4e:14:e7:fd:
                    d6:04:fd:e6:8c:59:dc:94:79:eb:f4:1f:51:45:50:
                    79:ca:a7:34:05:2a:68:86:32:bf:ed:05:f4:c5:de:
                    7b:51:cd:30:9b:7e:09:ad:04:4c:09:da:8a:3d:a4:
                    25:4a:03:ea:0f:c2:bc:c1:af:45:a1:05:8a:c2:98:
                    fc:44:4c:68:d2:21:8b:91:05:72:1f:24:be:b3:ab:
                    a0:f8:b5:5d:94:69:e9:78:27:5b:76:b5:46:0d:2f:
                    bc:1d:bc:d9:82:54:12:94:04:f5:6d:d7:db:b2:50:
                    89:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:00:1E:50:E2:3C:E1:05:97:C3:9F:F2:F3:D2:17:5A:3A:57:F2:DB
            X509v3 Authority Key Identifier:
                keyid:C3:40:94:E3:23:6D:CD:1C:83:51:13:79:1A:38:24:DA:29:73:DF:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:4a:01:17:1f:0e:d9:0f:85:1e:97:65:9f:12:66:4f:df:42:
         56:54:de:1d:70:e5:f9:c1:f3:83:71:54:8f:f6:85:b0:68:da:
         95:4e:b2:ba:29:31:0f:1f:58:38:25:65:d6:77:fe:8d:26:f0:
         87:17:77:e6:a2:32:ed:cf:4f:ff:47:2b:36:d2:72:f4:68:ce:
         30:30:77:d2:2b:db:31:c0:35:8f:c4:8b:a7:68:0a:12:02:3d:
         d0:94:ab:8a:63:6a:c0:50:d5:04:c3:07:d5:fb:cc:aa:51:d2:
         2d:45:9f:28:90:05:d0:11:f3:42:59:0c:b9:dd:31:08:ad:16:
         3d:af:34:76:3d:b3:d3:99:1e:d4:ec:cc:8e:a1:6e:12:5e:c4:
         a0:51:3c:0f:1f:15:54:db:9b:8a:85:8d:5b:2b:54:f7:7e:ce:
         66:14:61:53:52:79:b3:5c:41:ff:a8:17:aa:81:70:1a:c7:39:
         35:98:15:d4:b8:f5:8f:68:bc:cb:c5:8f:a5:ac:39:7e:45:de:
         bd:78:ee:b2:b5:df:46:4d:78:ee:fd:2f:0a:f9:61:07:4f:68:
         18:4c:0a:6c:19:ac:fc:3f:6d:6d:be:a9:4b:14:76:6d:70:27:
         1d:d6:37:ca:4e:c7:25:13:93:53:9a:e4:85:80:71:ef:67:32:
         18:30:42:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:11:05 2026 by rpki-client