This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
File:                     WK1g2lJnHpCDzzmGTsoqojJBvp4.mft (raw, json)
Hash identifier:          pW8dD5+NDKahOlDfuLFNx4++UXmFE49bfIzrj7mlKwY=
Subject key identifier:   56:28:55:6B:0F:98:14:7D:C2:0E:18:13:2F:A0:DB:15:A6:E3:AD:F4
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Certificate issuer:       /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial:       019BF3BD5B08FA7F57F9FA2ADA372EAFBE5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
Manifest number:          09D0
Signing time:             Sun 25 Jan 2026 06:00:31 +0000
Manifest this update:     Sun 25 Jan 2026 06:00:31 +0000
Manifest next update:     Mon 26 Jan 2026 06:00:31 +0000
Files and hashes:         1: 8gD4Yehfx3KQKAgzNtRDdrpxTOE.roa (hash: GdLqnXXuc74TK0f1OfY8VEAVhHit7ftS+gMGAs+ZxL8=)
                          2: 8kKGHHFNawB4dRM2-SmTp26Z850.roa (hash: DtU+tMPVUSJrUgMssFbpzi8i/xL96ylYzBa5s1qKCCE=)
                          3: Byn6OSWWsLdWzXRnQIjdqfvNBzQ.roa (hash: RlGj782fpYNYniyqNH2FaqPK+IsY/g2PSUKbR69pmh4=)
                          4: CcI5yTI_dMEGVlqYsI16XhOMmpE.roa (hash: /IA2iecWNx3ne5Gi3nuqxex1BMuFaK37QZN1zjIT96E=)
                          5: E4fqwQgygB5jeBrUBUav7SoAD_0.roa (hash: GfGnCldzviVm1ei4u1oKbkQDjzke8wRck58TsD7DFsA=)
                          6: FysDKPC-wZQOa869m-5wi9IwYao.roa (hash: y1tXX9hX55Ne44LmOYPZ6N2LhWpKhLJJJ0cf+Tumuf8=)
                          7: L55PmI1ZwuVHZV5rEFCMSx-UH0I.roa (hash: ei+lXL7zHDyqioDmtKobrd7etumhhT8ybyaaw4DRriM=)
                          8: LklkcbKeeRjgnYl8QMUsh6eC6H8.roa (hash: Rj4JA3Ed9Y18Ixhx1D++r0UgnehlTyOLkB3CSGJr78g=)
                          9: P5MlC7ef7YqWLyZB4P63xXWWczA.roa (hash: YwSxUzfIzLnQRQ1NogyLoxfPkli1iH7MjtsmBNTgc98=)
                          10: So3FOdy3cbnSF1z2AtX9fXb3td0.roa (hash: g+qyeZK3+h679wAEDeuXb8IaxcqohHNX+e/kSP0wnSQ=)
                          11: UEMbnQSg-CqPCCOUzMzNhJH12lA.roa (hash: Zoo54h/jLJxtqfZ2SMs//OnOjukQq18e+WiJr5qy/5U=)
                          12: WK1g2lJnHpCDzzmGTsoqojJBvp4.crl (hash: LxYQfPhnMwnqqo3XC1UH+ZzcJsVEtYRKdNKuZdMrsWc=)
                          13: Yw4-PtKyeDh-ymIr_sDr7zP5g6A.roa (hash: JGM16ISa/46csgGvHClDjZZZszeySN0POEu+d9nm5EA=)
                          14: e8ZDJ1fax4t9UjI64PmmPhyJeK8.roa (hash: 1eap+O4XCZ32AEnqgQo1B+jjs4fX0OXWHddxUvN/r+4=)
                          15: jRBO3dP6kjdGEjvIueUWE3Kxrao.roa (hash: YEsBiZfHK0/Af6mEc8Xvxso1vKN+auBD28oICzOdIyk=)
                          16: jZAyOp4p2x1_hIZ-aojjByMUepA.roa (hash: Fql5ZKPISHsS9zt2EiXQ3bC49O7thvtmkZ/k5Y01q+0=)
                          17: kNJxXBNWZCsGGr2n--zdldpXgt8.roa (hash: UO0nCqFCkSGk2+PoNEi2oakJxAwljiwxkwlJ6FkJGMk=)
                          18: kpSiPpji_XM2PozIBQUWPh5cY4o.roa (hash: WnXefqGoi4GyRsRnd+q+/KXg1B0VOhqlPfpXLydjnDY=)
                          19: mHxiPQqYSd3YgtMiY7ZJnFapo4c.roa (hash: oW19pS7k2lDKE0UhQi3S2JkcEpqW7TXCa+ItAXdJrqU=)
                          20: o_cRQiJ3E3badh4n57mdFmTgOSI.roa (hash: Dmv2qqcyseH0g1R1WzOI5iGgnfkcnNawQwle4nojSsk=)
                          21: zjtWKp4QSsuMA2qXcFJ_tDFcwMQ.roa (hash: sw1zjdsmrJIpjnwBSZaC74oL0tezRwjeC04OXwIHglo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:bd:5b:08:fa:7f:57:f9:fa:2a:da:37:2e:af:be:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
        Validity
            Not Before: Jan 25 06:00:31 2026 GMT
            Not After : Jan 26 06:00:31 2026 GMT
        Subject: CN=5628556b0f98147dc20e18132fa0db15a6e3adf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f5:96:2e:7b:85:98:02:a7:79:b6:b5:4f:41:
                    70:fd:1f:c8:3c:67:c4:71:2a:80:81:93:9c:73:70:
                    85:8e:94:b7:fe:f6:83:5c:fb:58:8f:6f:cb:f3:fb:
                    09:4a:03:da:ce:23:3b:45:80:26:2f:22:c8:fb:a5:
                    d0:06:e7:cb:47:88:e9:d8:c2:5b:90:2f:07:ed:76:
                    01:94:86:bc:1c:8c:23:51:8d:98:66:3e:65:38:90:
                    f9:bf:d1:26:ea:ff:23:a0:0f:0f:bd:08:43:fa:97:
                    ba:bd:2f:b7:0c:45:82:9b:c0:e8:41:38:1a:1a:80:
                    5c:32:cb:f2:19:9a:6b:9b:34:92:9f:72:a9:be:94:
                    f0:0f:db:2c:cb:02:f6:27:6d:41:00:cc:58:da:ae:
                    a7:5e:14:62:b0:b1:44:de:9d:78:53:65:63:df:53:
                    ec:c4:87:9a:65:a7:50:bb:ab:57:9e:df:d3:5a:20:
                    f3:7a:51:e4:61:46:8d:fd:8b:46:f7:c0:88:f4:81:
                    5b:e4:aa:38:1f:52:98:fa:8a:eb:d0:fb:87:c7:d1:
                    8c:92:06:cf:9e:4b:11:c3:57:30:e7:19:b4:98:e0:
                    49:f3:87:fb:40:8b:06:d3:36:9d:53:99:d6:a5:56:
                    ea:5d:be:a0:77:2a:95:ad:cf:f0:ea:fe:79:a9:16:
                    cd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:28:55:6B:0F:98:14:7D:C2:0E:18:13:2F:A0:DB:15:A6:E3:AD:F4
            X509v3 Authority Key Identifier:
                keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:ee:76:2f:4e:87:d5:b4:ea:7d:9c:16:81:5d:5f:83:11:e6:
         22:3c:39:87:8b:ee:4f:21:b8:f5:8e:2d:d9:54:a2:e2:5e:25:
         77:ff:5c:18:45:ec:42:43:69:36:f3:63:67:f8:68:d1:d1:64:
         fe:14:52:81:bb:31:11:d5:b9:90:36:c2:60:b7:78:70:c9:2e:
         61:96:e3:ca:6b:81:30:c9:33:0c:2b:17:08:1f:ec:e7:1d:5a:
         66:54:3e:8e:3d:51:5b:62:7c:9d:e9:05:ec:c0:c5:f1:bb:c5:
         29:e7:00:9f:d8:9f:ac:c8:a3:1f:fc:dc:e7:8f:18:19:8e:37:
         88:dd:69:fb:0e:df:ce:0f:2c:41:b8:5b:ce:2e:33:41:00:d5:
         f0:cd:c5:0c:32:cc:fd:16:4e:66:82:45:c8:da:e8:4d:19:b5:
         1a:a5:5d:13:2f:0e:68:b5:07:e8:99:e4:e7:ee:bd:c6:53:b4:
         91:56:b3:cd:57:28:80:36:8d:75:14:1f:e1:93:13:57:7b:94:
         c6:fd:5d:4f:f1:93:11:b8:90:bd:51:fb:9a:76:3d:08:d2:e3:
         37:6b:cb:6e:f3:46:0d:fd:25:67:68:2c:58:d3:5d:b5:c5:c4:
         b5:58:e9:66:9d:9b:66:8d:42:e3:a8:35:13:fa:65:e3:0f:4e:
         20:37:d5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:46:41 2026 by rpki-client