This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
File:                     WAbaWlklEnXOsYaU4XQVNSrt1qo.mft (raw, json)
Hash identifier:          dQ5zehGhN3/PndK6EEpea5SpSwUspe4OjBuuQ5faZQE=
Subject key identifier:   84:FE:A8:68:5F:CA:83:B7:15:88:53:99:56:51:D3:F0:A8:F9:1A:DA
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Certificate issuer:       /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial:       019BF462B3B918FA91511D898393E8DC7922
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
Manifest number:          151E
Signing time:             Sun 25 Jan 2026 09:01:07 +0000
Manifest this update:     Sun 25 Jan 2026 09:01:07 +0000
Manifest next update:     Mon 26 Jan 2026 09:01:07 +0000
Files and hashes:         1: 3wUGAUyz1DeLwdPPyYEFDfRHGKE.roa (hash: Ps7kDJqtUtMVk+txzusu+REbzqUZZVNNkH7s/aWePGw=)
                          2: BtUA2-QGGIyBXkmFJIe0B4eXMlU.roa (hash: tTSYTotdr59pRvOsLoZT5KBfp7cm9a+uAAcxr/IgYbo=)
                          3: BtURCAmIgtDu64QigBUBa6gylG4.roa (hash: EZlHSwaxDQsHx/M77NPKc6ECDdAHIX3bdhXQYLBYcek=)
                          4: D7D_loV99KzoBrA79hPAtRanPvk.roa (hash: O6QCYb3KNoLWisMlEhgzHwO6cpGleN+OsVoAzaeYAvk=)
                          5: QPAwFxKhLOr2EBOg8RMCPgRX1JI.roa (hash: 4jaZ2Xw/f7AOu8MDDRl82FNESKf2rbMsQNvg3ZzXbGE=)
                          6: QwGBspDsi-qrPiNF2EDb3iI_pek.roa (hash: 6Z3sQwhkjCN46fJrGzzk3Wow4eW2/hmelPF5s8l9o4U=)
                          7: RHLFI0WIkcoxPB1kgL13NUw9Uhg.roa (hash: wG3CzCC6NTqC8LK8AAHM8aeSYhL3RSu1rtkFhvs3qUE=)
                          8: WAbaWlklEnXOsYaU4XQVNSrt1qo.crl (hash: gOT5IBKDF6u58AGoiu/rl4oo3BrugJrk1n7DLXlwD8Q=)
                          9: WrRssx1T7W4FbMdccsG8zhPbvH0.roa (hash: soZuFyq441oI7pIn/lzNh4/678kQBCzmWyVNMg7qyfs=)
                          10: j2N6XHOuJrcF9YKszFUeO9utvU8.roa (hash: CnNuflG+4w3FSr1FwKhAAykLHeCSavmEwXUoJB0QPSY=)
                          11: knbZTkeQonjHgAjkDQ5BiABLPk0.roa (hash: 6z0JXF2+Tz6UX2zmjqr0hILFhd91GxoHq3PFQZKWs5E=)
                          12: t8_eAr8m1XQ9EztDOpyeXpfZBPU.roa (hash: 0uzPzAl2BTt7yUaKYAhuSXCA7BbVVQEBGvtYZp9iO+0=)
                          13: z8IV8jvVZ1vjvDfMDMPriKkCrQY.roa (hash: hWBFg4xHF5lQKrKNCM53lJJPmzmnxClUeWhPU/kjmE0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:62:b3:b9:18:fa:91:51:1d:89:83:93:e8:dc:79:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
        Validity
            Not Before: Jan 25 09:01:07 2026 GMT
            Not After : Jan 26 09:01:07 2026 GMT
        Subject: CN=84fea8685fca83b7158853995651d3f0a8f91ada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8e:f2:a0:63:fa:7f:8e:61:64:8f:09:d5:3a:
                    f6:21:de:10:30:8a:bc:94:78:15:ee:a9:af:2a:5f:
                    40:b6:2a:f1:9e:8b:df:5e:b5:c5:65:95:7d:cd:40:
                    f0:6c:15:aa:a7:4b:96:69:86:9f:30:d0:ee:b6:97:
                    6a:01:46:89:ee:dc:f9:45:a1:e7:1d:71:b2:ba:1a:
                    4b:d1:a5:49:c1:04:32:e4:5a:24:c3:25:b2:c9:d0:
                    7e:6a:b2:71:79:f9:5f:93:2a:1c:47:97:8c:f8:64:
                    85:92:92:9e:89:ca:9c:85:99:9e:98:b0:90:34:82:
                    ad:f2:cb:c8:7d:8c:5d:ec:38:ab:82:f7:7e:02:e9:
                    17:f0:b4:66:fb:e6:9b:54:02:be:ec:6e:78:6c:9e:
                    86:81:c0:15:41:f9:a2:b5:43:75:c6:19:e4:19:5e:
                    9c:64:7c:21:7d:4f:0e:bb:85:ff:e6:16:14:c0:20:
                    d1:77:69:f3:88:83:be:ec:9c:7e:a8:f2:d1:13:99:
                    d0:f5:83:08:bb:ce:f4:78:5a:61:af:40:1a:14:e4:
                    da:e1:81:6b:9c:5a:be:01:44:22:92:0a:ea:28:6c:
                    6c:45:fc:ec:0d:bb:16:37:b1:d4:0b:53:d0:38:e9:
                    2f:dc:c9:7b:2f:b9:81:a1:8e:f0:76:b9:d2:f3:29:
                    ed:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:FE:A8:68:5F:CA:83:B7:15:88:53:99:56:51:D3:F0:A8:F9:1A:DA
            X509v3 Authority Key Identifier:
                keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:66:97:29:4b:c1:3f:e6:f5:61:cb:17:79:bb:ea:8c:6b:aa:
         da:a0:40:31:2e:9a:73:00:a7:fb:f4:3c:61:aa:ba:a2:17:29:
         fc:34:3f:2b:18:4c:81:82:2f:89:68:be:bb:06:f2:6d:22:7b:
         0c:1c:a3:46:ae:15:96:96:a9:b8:9c:13:a8:94:f3:68:27:76:
         00:92:5f:41:6c:30:81:ff:e7:91:1f:aa:4b:ee:87:be:39:5d:
         9e:e5:23:80:aa:69:f1:11:ff:ea:c1:ad:01:3d:e0:f9:48:99:
         11:b7:a1:f4:a9:df:2c:2a:5b:37:ee:76:b5:1f:cd:45:ed:f2:
         b8:61:c4:6a:18:6a:68:28:09:c3:8b:83:6c:0a:d1:96:77:ed:
         6d:20:cd:5a:f8:dd:4c:1d:25:4d:76:fa:5f:23:99:ff:1c:bc:
         14:c3:8c:d1:c1:20:87:d0:02:42:6d:09:48:34:12:e7:ab:ff:
         35:90:4e:90:a3:9a:fb:c0:70:44:0a:20:6d:a3:c5:93:2a:1b:
         5f:fe:65:0a:27:bd:8f:c8:7c:5f:99:81:3a:ae:64:bb:96:e8:
         52:6a:e2:36:e9:06:41:25:40:87:9f:01:cf:fb:f8:81:4a:2e:
         e6:f5:09:0e:00:ef:5e:79:b6:05:22:81:ec:38:b6:ed:44:da:
         7d:c3:63:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:46:36 2026 by rpki-client