This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft
File:                     wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft (raw, json)
Hash identifier:          mMvX21Mfb89Ol4NpTzJlzIVDpIztBXlHY+ZRlel29lA=
Subject key identifier:   38:B4:9D:F7:6A:94:79:93:D2:84:F5:B3:A6:50:9E:9B:ED:4D:49:3D
Authority key identifier: C3:03:7D:2E:7B:09:A0:FB:D1:08:16:8A:44:87:4F:6B:D1:68:9B:60
Certificate issuer:       /CN=c3037d2e7b09a0fbd108168a44874f6bd1689b60
Certificate serial:       019BF6F5521B32F5C13167A4709E08C49B25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wwN9LnsJoPvRCBaKRIdPa9Fom2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft
Manifest number:          1604
Signing time:             Sun 25 Jan 2026 21:00:31 +0000
Manifest this update:     Sun 25 Jan 2026 21:00:31 +0000
Manifest next update:     Mon 26 Jan 2026 21:00:31 +0000
Files and hashes:         1: ZxOMX8jLnOMNJ0h5pILVLwIuapU.roa (hash: 2tuw1jY2OxZRTtvUxqcy7Nsr44VQDPN/Do/SNOdYK/s=)
                          2: wwN9LnsJoPvRCBaKRIdPa9Fom2A.crl (hash: 5AcCp+zyUNqTsP1QmanklNdWy3OVsgB6OxOZVBBMEME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wwN9LnsJoPvRCBaKRIdPa9Fom2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 21:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:f5:52:1b:32:f5:c1:31:67:a4:70:9e:08:c4:9b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3037d2e7b09a0fbd108168a44874f6bd1689b60
        Validity
            Not Before: Jan 25 21:00:31 2026 GMT
            Not After : Jan 26 21:00:31 2026 GMT
        Subject: CN=38b49df76a947993d284f5b3a6509e9bed4d493d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:40:9d:4b:40:99:1a:5f:af:60:d6:4c:fc:ef:
                    4a:d5:a1:a6:c2:1f:6e:6b:3a:42:0e:d4:f4:2d:3c:
                    fc:95:58:94:f9:11:cd:a9:7c:ad:0e:7d:3b:42:db:
                    28:19:91:8c:58:0c:db:d4:c8:19:05:7b:cb:91:b5:
                    85:6d:d5:a4:86:8d:a7:f9:15:42:4d:6c:c1:ed:8b:
                    d1:f2:8a:4c:ad:ba:de:f0:32:cc:31:33:ff:db:84:
                    2d:2c:bb:25:2e:a8:97:9f:01:e2:01:56:ff:9f:c2:
                    8e:d3:23:07:26:76:4e:d6:c3:b7:c7:0c:24:d7:ef:
                    eb:28:11:fa:62:27:22:32:c0:ca:b9:aa:d9:31:75:
                    eb:a8:37:29:7c:8d:9d:55:7b:a2:0e:b9:fd:2a:97:
                    f1:a7:d4:4c:c0:f1:e7:d4:57:63:d5:a4:5a:05:bc:
                    0b:94:2b:32:c4:fa:ff:e4:21:e3:6c:04:ed:9d:52:
                    11:bf:58:ab:a3:75:a7:00:8a:b8:a2:1f:a2:43:66:
                    a2:0d:46:8c:dd:23:1d:91:99:d9:71:f2:92:f4:4e:
                    d1:88:5d:2b:c9:27:96:f5:6b:eb:64:e5:31:58:d3:
                    6f:65:4c:fc:3c:da:9d:eb:9a:11:6c:11:ab:65:0c:
                    50:18:49:64:1e:41:cd:0d:2a:89:58:02:71:c6:7e:
                    d3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B4:9D:F7:6A:94:79:93:D2:84:F5:B3:A6:50:9E:9B:ED:4D:49:3D
            X509v3 Authority Key Identifier:
                keyid:C3:03:7D:2E:7B:09:A0:FB:D1:08:16:8A:44:87:4F:6B:D1:68:9B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwN9LnsJoPvRCBaKRIdPa9Fom2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:7e:d8:fc:ac:0b:73:6f:65:16:0b:86:87:84:94:25:d2:c2:
         e2:55:9e:c6:18:a9:e9:32:a1:f7:33:66:05:4b:ab:c1:78:e5:
         88:71:dd:1b:8d:dc:da:19:9e:ac:8b:ae:6a:44:61:99:11:a0:
         03:7b:cf:e4:c1:41:d8:41:07:91:a5:d0:2a:8a:03:45:4c:1d:
         e0:2c:b9:06:61:5d:a9:8e:17:30:9a:f7:36:e4:9b:65:8b:9e:
         e9:0f:db:06:a6:2f:7b:55:83:17:69:54:84:43:92:0a:1d:5a:
         35:23:46:b5:2e:ef:61:06:df:7f:c9:20:9c:5c:a3:50:6b:84:
         29:2d:aa:94:df:7e:88:e0:aa:4f:77:1d:bc:0b:01:b3:01:32:
         9f:d5:f1:c4:80:61:6f:05:54:84:d2:c4:8e:ef:7c:9c:80:84:
         e4:25:a8:e2:d3:80:07:63:0f:ae:be:f9:c6:ef:74:40:67:8e:
         66:03:84:9c:f8:d9:1d:d2:44:60:6b:7c:ba:d2:7d:53:d3:9a:
         a8:3a:42:f7:ef:9d:fd:9a:3e:f2:81:3a:10:76:a6:29:af:04:
         ce:c1:83:7a:b0:22:1c:22:3d:0d:7f:3b:06:40:5f:16:21:11:
         c5:80:16:f0:fe:38:c9:ff:5f:94:f6:d1:86:28:15:bf:84:61:
         f6:4a:bf:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:11:25 2026 by rpki-client