This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
File:                     W1JjSi6wP4VlteM9wrn0kEH3z7A.mft (raw, json)
Hash identifier:          zXxOsqkADEmXZiVLKtrgEs1fHp3JpJsvkgXle21EG6Q=
Subject key identifier:   5F:21:00:D1:8C:EC:69:F2:F7:6C:91:F7:BB:09:84:E1:02:7B:5A:23
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Certificate issuer:       /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial:       019BF5359EEEC5DEBCD1026501B59D7F00BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
Manifest number:          1823
Signing time:             Sun 25 Jan 2026 12:51:30 +0000
Manifest this update:     Sun 25 Jan 2026 12:51:30 +0000
Manifest next update:     Mon 26 Jan 2026 12:51:30 +0000
Files and hashes:         1: 1-_hRQxZhaZSgfD2pRQoh9nJtMVI.roa (hash: /H8upwgkCFqbFIOohJPx8dMhV/hnbJnCuEGMSV+zLs0=)
                          2: B9bDnFJ0Z_m4nm9NyQ0zVMEbmmA.roa (hash: SEltG6CcX4YsTGQ9C3CIwloWPPOisv1HL/KHIEv3qMY=)
                          3: Cs2Zd6251zSrXetle0RtfRConbA.roa (hash: KkGAJBf83tGNHk/erAN4nfXgLUS3Li7zOHUT08OSsww=)
                          4: DcPJY2T-iadNWVBVg9TulaMJxgU.roa (hash: Sc0jVXAeKo7uCrOmz/45A6u6jOCVJZAN2NhxbFpBFAs=)
                          5: Gi_wkUk1O19_KmaHsQsDFBOXTIE.roa (hash: 2T32K0VJv8Ggm1hzjm3o1OxWBTjf+TvCCcIN+lwHDQs=)
                          6: PgIPYwyvLlFrlDL1OcN1KHfq_nk.roa (hash: lRQU/FRaygR7Dce1LG6adooBtMcSBRllXgx3nAIvIXA=)
                          7: R9oqRXkDi9NstDQGawy9QSNPBao.roa (hash: K+X7cAVkozGC4gsHVnnMuzT6rGGVtiBQVtV5xTEy+RY=)
                          8: VKXxOgyJHe3appcdWiLeWe8_fUo.roa (hash: h/W9WCGUyJYCh1KYoDWAiD2M4C6vtEkuFV/oHnqf2gY=)
                          9: VeHqLROfdS_jL-AwmtThhDT6_is.roa (hash: bthkP9gtLN/4aiiE6DC2cKIrlkuNIheKgwvQOnnXSN8=)
                          10: W1JjSi6wP4VlteM9wrn0kEH3z7A.crl (hash: XzkKK6Wy9JKK24HHVqVd3iSrqCIWMTaaV4XynRLYEX4=)
                          11: W2jeEkJFTO9bACNffoYk-rjSW8Q.roa (hash: m4jSnkSV7Yo4l9lkgzwkyhUhUusXlTKCtLHnJjH21k0=)
                          12: WmRvkZMy2Hjm5w-_D5nk-YDinqM.roa (hash: Fv3Rkdc6wkfFjBuPF/b3LY9M+HiVMJiwVC83qqA5+wA=)
                          13: XPEjOR9wfMRq3tc6C9A_BMhG_wo.roa (hash: GmkdYdin0NadahEWqjYD5B4MFdZI4+3bV+vumXZ+bRQ=)
                          14: a4QitiFkvHlyADqZPe61hq4QSJo.roa (hash: ZflxZn/wYuAC4bp1wfswm6AML7gKo+CZIuAoV9rW0yQ=)
                          15: rDwGu9ius0Iys44GbQFnwlznBbg.roa (hash: 6W6SljJLEnVIuQM1Wqui/VKmw47Cj6szip/P8PaEH1A=)
                          16: taO64xY4tC0rzgQTKi7mNXkODLo.roa (hash: QcXuD3pXS6J3VZtZ+rKhps2cHVZUWXecszaJ6HFj8OY=)
                          17: xONbiFdv7WgdPOzaSwULCD22ElY.roa (hash: Ekujh3YjMgKH3iZJ1wo4eY8GMUVTfT7Ex6aMEVCo3TE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:35:9e:ee:c5:de:bc:d1:02:65:01:b5:9d:7f:00:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
        Validity
            Not Before: Jan 25 12:51:30 2026 GMT
            Not After : Jan 26 12:51:30 2026 GMT
        Subject: CN=5f2100d18cec69f2f76c91f7bb0984e1027b5a23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ef:1d:e3:2b:ea:64:86:01:19:e6:ad:a0:5b:
                    33:cf:a1:b2:f9:a7:91:02:3d:f2:05:48:6c:1c:a1:
                    c1:90:76:9b:0b:88:a0:96:27:38:54:48:29:c4:4d:
                    a8:0d:86:4c:a9:cd:0f:92:db:b8:ea:b3:d7:51:9c:
                    fc:98:3e:f9:96:69:da:30:ca:43:f4:77:5a:59:29:
                    dc:30:8d:e6:e4:47:a9:c0:f7:e8:d9:38:d0:5f:bb:
                    0a:bd:c9:0c:2c:17:13:a6:7d:4c:02:e5:53:e5:43:
                    5e:86:36:f1:0e:99:78:7f:7e:06:25:4e:d4:f9:ad:
                    15:d4:20:81:98:1a:b3:f7:42:ab:8b:cc:b8:83:1f:
                    91:70:7a:b0:43:8a:01:d0:44:da:5b:a2:d4:56:ec:
                    20:5f:7e:73:3d:b2:3b:4b:6f:e4:3d:71:32:e8:5f:
                    00:64:65:ad:37:bc:00:ef:86:10:d8:fd:a0:69:c2:
                    77:43:5d:72:38:dd:fc:89:70:2f:e5:3c:79:1f:79:
                    5e:bf:d3:19:89:8d:73:e4:36:f1:11:c8:53:50:a2:
                    57:f8:35:6b:ab:03:3f:7f:95:bf:1e:7d:7f:d8:09:
                    78:ec:28:26:48:3b:e8:3e:ba:ee:67:6e:45:a7:46:
                    78:9b:ac:da:d6:4b:f5:14:f4:d3:0e:0a:d1:59:bf:
                    ba:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:21:00:D1:8C:EC:69:F2:F7:6C:91:F7:BB:09:84:E1:02:7B:5A:23
            X509v3 Authority Key Identifier:
                keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:eb:4d:1f:1d:03:25:a9:80:12:43:92:cd:5b:e5:0d:23:65:
         8a:9a:f5:7c:f5:49:cc:be:46:96:13:27:5d:f6:de:ee:43:90:
         7d:76:e9:c4:61:7e:ae:24:9d:7e:8b:38:c4:d1:78:94:2e:27:
         b9:27:0d:e2:f0:8d:30:d9:fa:9f:ee:c7:8d:30:e8:a3:ff:14:
         46:a3:82:f3:b6:3d:98:51:d9:82:01:96:6c:3f:e6:7c:34:af:
         8a:f6:3d:95:6f:b5:cf:da:19:b3:a1:68:2d:5e:5d:15:26:6e:
         a3:d3:b6:59:3f:08:44:4a:53:33:ac:b8:07:17:e1:e5:8d:7e:
         c2:7f:9d:23:07:5c:be:ec:56:83:c4:2a:4a:ef:c9:6f:d6:2b:
         e9:49:ab:89:61:b7:97:c4:b2:48:49:3b:cc:fa:d0:e0:2a:66:
         17:af:a4:d3:31:da:49:17:ba:d9:09:bf:c3:82:a0:10:b2:14:
         f5:9c:9d:1e:77:1d:5f:5d:0a:37:ec:7f:df:e2:8c:94:fb:c7:
         95:95:2f:4a:c1:c1:1e:e9:6f:f7:a0:47:46:82:d7:24:2c:d0:
         a1:fc:26:2f:0c:af:94:e4:23:5e:8e:c6:65:c2:56:46:5e:96:
         ad:13:59:00:14:b9:fe:dd:ea:e9:2c:aa:f8:fc:6d:eb:5a:07:
         3d:4e:24:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:19:08 2026 by rpki-client