This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
File:                     RWF9LghjWN2nvbDcRmyhyG7U_so.mft (raw, json)
Hash identifier:          tQE/rG4E0GBESAF6IS6gqmk9p1OuhHWpXkBNnuSW1L0=
Subject key identifier:   77:A3:46:41:75:AD:D5:1E:42:37:28:F5:32:EE:03:A1:24:DD:34:4E
Authority key identifier: 45:61:7D:2E:08:63:58:DD:A7:BD:B0:DC:46:6C:A1:C8:6E:D4:FE:CA
Certificate issuer:       /CN=45617d2e086358dda7bdb0dc466ca1c86ed4feca
Certificate serial:       019BF5750F480CC0CBA600B735E824BC3B62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
Manifest number:          177C
Signing time:             Sun 25 Jan 2026 14:00:48 +0000
Manifest this update:     Sun 25 Jan 2026 14:00:48 +0000
Manifest next update:     Mon 26 Jan 2026 14:00:48 +0000
Files and hashes:         1: 7WMHMRqYOCVJJOdVZn2toCGJ2Gg.roa (hash: u4kYKOpJoWTw0MlXSHwcNaxRXss2R6FxZn1Z49E09Go=)
                          2: RWF9LghjWN2nvbDcRmyhyG7U_so.crl (hash: frUnK/toL3UDOweXCYLcgnQdHkzch11K2BjAqI2XIxU=)
                          3: Y9TiWW63huz2Y3RHyUrV0t01KvA.roa (hash: rNdERlf12PuGe5Ze8mFCZtIt+e3TVhdioA/m3kjwSCA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:75:0f:48:0c:c0:cb:a6:00:b7:35:e8:24:bc:3b:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45617d2e086358dda7bdb0dc466ca1c86ed4feca
        Validity
            Not Before: Jan 25 14:00:48 2026 GMT
            Not After : Jan 26 14:00:48 2026 GMT
        Subject: CN=77a3464175add51e423728f532ee03a124dd344e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e1:72:f9:1a:59:5c:de:94:a5:9c:5b:70:9a:
                    e6:bf:c2:6f:a4:16:9e:7b:46:cf:b1:bf:0e:2c:fa:
                    c2:be:97:69:f5:e8:20:ec:90:ee:d0:de:a5:37:e8:
                    83:8c:8c:6d:f9:9a:f0:0b:c6:ac:0b:64:32:e6:23:
                    44:4c:3d:35:5c:a4:b3:0a:7b:97:bb:71:75:70:cb:
                    17:6a:6b:f8:f5:49:8d:d6:1f:d9:05:b5:1e:d6:ed:
                    a8:d9:9b:25:f0:cd:02:5a:95:af:7b:75:88:9f:38:
                    94:94:39:6e:c7:71:74:b3:b2:b3:9d:59:54:a4:ab:
                    d2:42:f7:38:7c:9e:08:25:54:ef:8b:ec:64:ec:66:
                    01:fc:54:fe:c6:26:7e:48:4b:4a:da:40:af:4c:93:
                    d6:cd:c0:2e:5a:46:4d:86:28:bd:ea:8a:42:7f:16:
                    9d:b7:3a:57:08:99:b9:39:fd:69:7a:43:21:93:2b:
                    9e:75:50:8c:5d:26:d4:12:42:b5:9f:d1:42:13:5e:
                    82:1c:f2:94:1a:6b:8c:57:aa:4d:da:c9:44:02:c6:
                    34:4b:58:c3:f7:33:5d:58:f0:da:cc:74:70:06:72:
                    87:b6:96:7d:b2:6d:b0:25:fd:3a:85:fe:b0:3b:52:
                    03:9f:4b:a8:74:cb:a9:88:e4:9f:47:3e:d3:c7:40:
                    69:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A3:46:41:75:AD:D5:1E:42:37:28:F5:32:EE:03:A1:24:DD:34:4E
            X509v3 Authority Key Identifier:
                keyid:45:61:7D:2E:08:63:58:DD:A7:BD:B0:DC:46:6C:A1:C8:6E:D4:FE:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:1c:2b:03:c7:22:2b:8d:ca:e9:a0:e4:eb:ee:63:0e:1e:dc:
         50:3d:f9:c8:86:b3:68:33:4e:39:d9:6a:63:96:3e:77:61:aa:
         95:3c:ff:07:fe:d6:de:54:27:3a:6c:6e:11:04:09:e3:59:a6:
         c8:78:20:42:24:46:e7:7c:fa:b8:b6:6e:eb:d1:7e:b6:4e:bc:
         c4:13:0b:64:1b:a2:ea:90:89:ba:ba:94:da:d8:cc:98:62:8c:
         dc:6d:48:69:19:9b:fb:ff:ce:96:64:83:1d:3f:a6:28:4b:a7:
         14:87:d0:34:e9:3f:6a:56:b8:f2:1f:70:7a:68:fb:d2:21:62:
         5c:ea:ed:bd:9e:bd:23:4e:2f:0a:b7:05:a9:04:c6:e8:59:85:
         98:9a:bc:ae:04:65:88:87:5e:ae:6d:59:d6:1f:3b:b2:db:5e:
         9e:7f:b0:47:60:d3:15:e9:76:32:c1:a2:45:61:89:f2:da:e9:
         fa:44:bf:b9:56:c5:35:25:49:00:22:45:ba:f5:8d:a2:54:8e:
         d5:ae:9b:25:e9:25:41:a2:75:e1:89:84:80:39:33:3b:21:b4:
         bc:8d:e7:4e:0c:9a:d0:1c:29:12:d9:21:ae:8c:cd:cd:e5:a1:
         63:4a:8f:ad:6b:de:d6:aa:b6:2b:ea:5d:73:be:1f:76:12:76:
         f9:3d:c4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:24:21 2026 by rpki-client