This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
File:                     KWi04O-BBvDhKrjlAdKqTja3g8I.mft (raw, json)
Hash identifier:          nReXK4JWqUbjFfKXtXve1Z4ELQhh1xkEIl53UGIchjU=
Subject key identifier:   24:D2:FE:0D:4A:FA:A8:E5:E3:65:D7:E3:6A:50:32:09:BA:E3:E1:CA
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Certificate issuer:       /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial:       019BF3504C92EFA69EDBC85B790A207D7A7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
Manifest number:          059D
Signing time:             Sun 25 Jan 2026 04:01:24 +0000
Manifest this update:     Sun 25 Jan 2026 04:01:24 +0000
Manifest next update:     Mon 26 Jan 2026 04:01:24 +0000
Files and hashes:         1: 0hpieyXYpLMjxyT6mWgC5hB6md0.roa (hash: kAt+7z9pm070nauT+nqQ0kqKEN21nUOuAvbTxD+QIxY=)
                          2: 1-BeXqPwf4wGqQf8BMkvATSMUSvg.roa (hash: sHCQTjP4DGWRR+9EwPFQEYOJ1YUo6fNUrBWZXp0K9lU=)
                          3: 1npgJu3da2DJY-gYNC0mp_D7cA8.roa (hash: hTdQzo7dggejXQGIdEULc8F5CFOgeJzoVvTDCzsb0Pw=)
                          4: 1nu_yHaz4a9cC9ZPSse62hEV7z4.roa (hash: JbDziZ7Tgxvff3ssi+tWGZ4dDDxpjWqXNx9DdzoeJIs=)
                          5: 6FnJdPGW5pvMSXpTXx-nurrcFJ0.roa (hash: Neuse6+sPgHinhaJ6KBCDHKqQY1zJXc/3mtpYtYxBEE=)
                          6: 7urWinFGpaQwu4q2NACNc33Uqc0.roa (hash: /0y45l7uncJz+6g4k7MjIHbXj2ToXe8FU4Al2yYxxrk=)
                          7: AGIcyv6akkuecB-WP_iweJslK-o.roa (hash: kZrndDnlcrxedsLlgmQqLvVG/016dDI5arID3t6+DWA=)
                          8: B8H6VmxfJXD2bVcz9lqwmFV8ya0.roa (hash: NunX4yChBXH4mlq5nGv56BR4PCufDfN3zLv9ymhyXpc=)
                          9: KWi04O-BBvDhKrjlAdKqTja3g8I.crl (hash: /SzZTbtzvaZIxrVxHXyE6WzzLF2da5J5qeUV4ltC9Zc=)
                          10: OqFJQmWIWlUgwt4wauu6KZcowmw.roa (hash: 5cgutzLvwloFkAKb42SaluRwnKatUxb+LuqQKWj5zbk=)
                          11: PJdBUbgKBhgSdoiiMeIPTyM59kM.roa (hash: +cAcRGvopCgB6nUW8hVTRtRILfXgI80D1d6TR///UD8=)
                          12: S-PfT7x9rr1Key3l24FiMn_GM3M.roa (hash: 69f7peYT5HVTCqDrHMvYQn0aPJJ6z/N2GfKv65UX+FI=)
                          13: S0f4eJQFFpAJU7gBmRif1cCdYzE.roa (hash: dMXse4/XYRfPD3fvc6eTVZmcZ4FGksUwnohMDVBgvc0=)
                          14: X9PkKl2cefOx63qVtTaYdrkzxd0.roa (hash: giM5kvZJx533XVrawIuRkLj+sL+9hAPHNii8Ak6qshk=)
                          15: YUks2Od0XGVs_0qy4zM64qK2ilc.roa (hash: fOJKj898k6XkbbvQ0FoOeL9v44eRzqi39qmYuSLOEko=)
                          16: YniwsZL5TG-8hK_NQ7s5X6mPnCk.roa (hash: Iv7Gmx0VHfrE6iky54nM0ziiomd4dwV/1IBxo9ylLaM=)
                          17: dJLZ82woz9osVRfBLK_-niCyNj8.roa (hash: gbJMkN3Qke1KrYB5jhYzib+ht/WJlZL8orB4ISUMuEE=)
                          18: eU8i6nPKMWqCsVdPFp89hHhQ_hs.roa (hash: rNMI3gPO9pm+cF0NT/diCkjrM2NOj9L9A6LND/aPFyw=)
                          19: fnpBuXApf2KSN0_I10e4uBBef4I.roa (hash: mg7y4ym55PhF1uqywLWBK6bXIQO52AVjtO1tHb0Miig=)
                          20: mHSeWUrjc6YX-rsHgTi0XW2FRBg.roa (hash: t5nE21qjW3DJQIzH2j04n4MZU2wBAB1tTQYoPBXsr7U=)
                          21: mscT-yjpefQxwhiAkQBK5LU9YNI.roa (hash: AFKqRZpefBn2UqJLZfz5iAvOxe4M4XZCr9/bNjwQOC4=)
                          22: oq1t9a6_NvskvBAPm9-FRhVY4b8.roa (hash: Qrnl/t8muiKf2rVgb3xH0a4B7FWa64wS6nhiWVd6iLY=)
                          23: pc6siy3_DxYAwddcJOSIg7X07Yc.roa (hash: 2HJWbABktGThGQHpV8qMPjcUrVEey5pJp9pmV+aft3c=)
                          24: q5OHsMnoclPtZxTfFFLO8V7xM_A.roa (hash: kRnxJnfbBG687+x3M5t+/g6fKT4I4zdzsfRk/nUF+bo=)
                          25: rq7JejW5a3_irbw_aBIqgmSBTqc.roa (hash: wxuzzzOzEBqdMOCvC7XteOmfCNZ5CNJjs+MU2tOaWDY=)
                          26: vZNbnCQJNucOJmHvAwRz35uFqM4.roa (hash: qlxRyQlm7/P4XD2LyXkJPHShRipWPQgw8VPLfmMcrGE=)
                          27: wnxy5V-1cEegaxJtKVAMut3benM.roa (hash: sUdU5a1rnsEdOVKYhJDEO/xTx4mzMBYqk5k2KepP1tw=)
                          28: wwaY0WuQZFQx_lqyW2jSnUb7Uno.roa (hash: hC+e2pC0Y+hwrr9gw3/mXUJ159/dSRXVbIamUE8ySl8=)
                          29: xdd7SEG9mLRxhUdaoUG1DLRpkPI.roa (hash: GW2iR1Svx+wKk5VPTDs/4jldiJuhITkDvE5OyBpw0WA=)
                          30: y_hFsBFw5TnwZzUPUVeY_JDobJw.roa (hash: Yw4KTjxopDUyK/440NIIBj8AANnYLxlC6/L3kGPhoos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:50:4c:92:ef:a6:9e:db:c8:5b:79:0a:20:7d:7a:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
        Validity
            Not Before: Jan 25 04:01:24 2026 GMT
            Not After : Jan 26 04:01:24 2026 GMT
        Subject: CN=24d2fe0d4afaa8e5e365d7e36a503209bae3e1ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fd:57:65:c1:20:67:73:b1:17:c0:25:80:16:
                    a5:37:ac:ad:e6:ce:dd:d1:74:8b:41:b0:fb:cb:3c:
                    f7:22:a1:1d:6e:53:fb:3f:bb:d0:16:eb:f3:50:7a:
                    af:d4:ad:84:d4:47:08:20:76:bf:16:01:84:1a:c6:
                    63:bc:b6:d9:72:6d:31:d4:15:eb:0f:0c:f6:77:46:
                    79:49:34:68:e0:92:91:a3:2e:e0:cf:fb:74:ae:5e:
                    50:bb:da:f9:89:6e:8b:0c:a4:0c:ef:85:84:ad:ff:
                    ed:c3:00:fa:d9:6e:35:b2:dc:73:a8:9b:2e:e6:6b:
                    a8:56:42:35:80:0d:8e:4e:8f:5e:f7:a4:8e:67:e7:
                    2c:02:e7:c1:22:28:e5:52:4a:5a:e1:71:45:41:af:
                    62:24:57:14:1d:03:31:41:25:a0:6b:e2:ab:57:f8:
                    d1:b6:9c:cd:8d:f4:ab:49:56:da:22:1f:ae:8d:1d:
                    37:61:be:35:ef:91:76:f4:5e:c5:67:06:ed:6e:8b:
                    48:69:65:46:b3:9e:a6:0e:27:02:e5:42:f3:31:eb:
                    46:a1:8c:1b:24:8a:00:87:2c:50:c4:0a:a2:17:35:
                    83:a9:02:14:99:ca:65:a3:64:fa:51:08:52:e3:6f:
                    a3:48:5b:d0:98:0f:4b:15:42:a9:6b:d4:32:df:dc:
                    74:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D2:FE:0D:4A:FA:A8:E5:E3:65:D7:E3:6A:50:32:09:BA:E3:E1:CA
            X509v3 Authority Key Identifier:
                keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:fe:9d:68:30:a4:10:cf:79:cf:ac:66:61:23:eb:91:cc:42:
         3b:93:4f:3c:5d:93:43:0e:ca:ea:4a:1a:c8:39:63:97:a3:c2:
         28:f8:39:40:cd:b6:41:42:06:30:05:8d:5e:4c:8f:09:ba:2c:
         de:a9:82:7d:5e:eb:e7:5d:87:92:03:db:86:80:a4:89:5c:37:
         d1:38:93:b6:a6:64:d8:ff:66:ab:39:20:52:33:de:b1:66:66:
         75:4f:20:81:4e:e1:fc:24:a0:f9:5e:68:12:4f:ac:d9:99:82:
         2c:ef:e7:6d:09:76:7c:6a:e2:6d:1b:ef:07:89:d5:9b:04:16:
         63:fb:e2:bd:15:9f:56:b3:38:86:64:ac:3e:6e:01:c4:3c:5c:
         8f:26:2d:aa:0c:57:26:3e:f6:25:c9:32:c0:9e:32:ea:75:07:
         62:d7:92:6d:01:29:83:5c:34:2c:f6:57:ec:91:ca:97:b9:40:
         9f:cc:6e:f3:37:35:fb:d3:16:01:03:06:c4:44:6f:d9:44:84:
         54:36:5f:c8:73:77:97:c2:ef:45:4a:58:b7:83:a3:e5:a0:ee:
         d7:3b:ea:3c:dd:b2:88:af:b1:9e:fa:1a:59:b0:92:d9:03:2b:
         45:6e:8c:91:10:fb:c5:c8:2c:72:f5:e9:2f:35:20:34:c0:b0:
         64:3f:ae:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:45:02 2026 by rpki-client