This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.mft
File:                     woBwgdb8Ir3_gNK9fsqP7A_F_vY.mft (raw, json)
Hash identifier:          pnXvyBhQg6VDYK4Gx1RqjnUqYqAVj4kJ/u0QeH9UkJY=
Subject key identifier:   54:53:38:DC:52:9F:D5:4E:4E:3D:B3:E6:8B:7B:29:94:8F:4A:FE:80
Authority key identifier: C2:80:70:81:D6:FC:22:BD:FF:80:D2:BD:7E:CA:8F:EC:0F:C5:FE:F6
Certificate issuer:       /CN=c2807081d6fc22bdff80d2bd7eca8fec0fc5fef6
Certificate serial:       019BF4D0E6AF2C8D7F2D2D24E655FF6D1CED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/woBwgdb8Ir3_gNK9fsqP7A_F_vY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.mft
Manifest number:          177B
Signing time:             Sun 25 Jan 2026 11:01:29 +0000
Manifest this update:     Sun 25 Jan 2026 11:01:29 +0000
Manifest next update:     Mon 26 Jan 2026 11:01:29 +0000
Files and hashes:         1: 6HtClbDs0yHwDOHcYx_az373ZBc.roa (hash: v7GeriidONvp7KGIWH57fB+RB6T8vvsb68fAxQuODao=)
                          2: woBwgdb8Ir3_gNK9fsqP7A_F_vY.crl (hash: 4LWp4fmQpyQ/6w+hsiEtH3AubUjgbrapxLKOk7NixvU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/woBwgdb8Ir3_gNK9fsqP7A_F_vY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:e6:af:2c:8d:7f:2d:2d:24:e6:55:ff:6d:1c:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2807081d6fc22bdff80d2bd7eca8fec0fc5fef6
        Validity
            Not Before: Jan 25 11:01:29 2026 GMT
            Not After : Jan 26 11:01:29 2026 GMT
        Subject: CN=545338dc529fd54e4e3db3e68b7b29948f4afe80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e6:36:36:65:85:af:01:9e:ad:4f:6d:74:cd:
                    3e:7a:80:dd:60:44:bf:2d:1e:68:20:a5:31:de:6f:
                    4d:05:02:3f:1d:f5:ea:7a:0a:36:45:7f:1e:32:04:
                    81:a7:d6:be:04:88:de:92:e7:34:83:da:bc:c7:20:
                    75:d1:c7:4f:ee:e4:fd:2f:5e:55:4e:d9:94:91:03:
                    bc:12:bd:fe:c3:c9:64:93:a4:e9:4e:fc:3c:09:00:
                    48:b6:d8:5f:77:14:5e:57:d6:a4:6a:f8:a0:5d:d2:
                    c7:67:45:4c:0f:82:2b:0c:18:d4:63:ef:15:a0:34:
                    a2:64:07:c1:7b:c0:00:e5:74:ce:0b:e6:eb:6b:81:
                    ce:ff:6e:3b:fb:23:42:c1:19:df:d7:8b:72:07:1f:
                    89:b5:08:21:80:2a:79:d3:35:6c:02:c0:33:fc:70:
                    36:3c:3a:db:c9:99:0d:01:52:b7:07:e5:7b:fc:72:
                    48:2c:d5:e7:3e:ab:d0:b7:59:a3:82:bc:88:d6:35:
                    22:f7:2d:4e:66:1d:65:80:73:6d:4b:da:1c:15:21:
                    db:0f:a5:0d:d9:37:10:4b:09:52:75:08:77:46:41:
                    d6:fe:7e:19:45:f5:ea:a3:cb:59:cb:02:4e:84:00:
                    da:ba:e3:ac:2c:1f:7a:a1:53:58:1f:4c:ac:bf:3f:
                    4e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:53:38:DC:52:9F:D5:4E:4E:3D:B3:E6:8B:7B:29:94:8F:4A:FE:80
            X509v3 Authority Key Identifier:
                keyid:C2:80:70:81:D6:FC:22:BD:FF:80:D2:BD:7E:CA:8F:EC:0F:C5:FE:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/woBwgdb8Ir3_gNK9fsqP7A_F_vY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:b3:79:90:07:94:0a:e2:f5:1b:b5:2d:0b:a6:3b:38:41:93:
         72:bc:b9:54:aa:86:67:31:29:b8:d3:8e:57:7a:32:ef:f8:1d:
         50:91:dd:1e:16:38:36:5d:20:59:7e:ce:0e:25:7a:67:0f:a5:
         28:b1:17:84:7d:86:43:96:02:45:e9:e6:02:fc:51:24:46:c0:
         e4:fb:ab:c3:7d:4c:c5:eb:5b:5e:7f:32:57:db:fa:73:e6:47:
         bb:61:db:ca:d4:52:23:ad:0a:e0:62:b4:34:d8:4d:70:f1:2a:
         3e:f2:15:72:9f:eb:3d:4a:45:47:ad:73:3d:8e:4f:2a:a9:ad:
         89:ec:24:f3:11:b2:03:2b:85:91:23:a4:2d:5e:91:77:14:6c:
         40:3f:05:5f:6d:e3:c1:20:65:e4:d8:40:99:c6:98:98:05:da:
         83:d4:ba:c2:ab:21:0f:de:fd:4b:6c:61:40:77:bc:6f:83:af:
         50:5e:c7:fd:dd:41:0f:97:ab:17:78:d2:c6:e6:c3:01:72:09:
         9a:4c:e2:1f:56:16:c8:ce:64:3a:7d:07:7f:ba:ca:61:70:08:
         62:00:b0:ba:ec:7e:23:27:99:93:15:41:0a:85:4e:94:96:a3:
         91:5c:4a:12:2c:ae:0a:2f:cb:c9:37:4f:b8:d7:88:be:e2:fc:
         aa:e9:80:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:45:09 2026 by rpki-client