This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft
File:                     w8zhZV8_ceTv_qTec6GuyCKCnWE.mft (raw, json)
Hash identifier:          YesiqITI/lffwCbmdTw/ymB9VYZjjJbdUu6p8yWS6dw=
Subject key identifier:   68:27:96:B5:80:66:EC:57:F0:04:F8:82:70:57:C3:16:07:42:B9:AE
Authority key identifier: C3:CC:E1:65:5F:3F:71:E4:EF:FE:A4:DE:73:A1:AE:C8:22:82:9D:61
Certificate issuer:       /CN=c3cce1655f3f71e4effea4de73a1aec822829d61
Certificate serial:       019BF6BF7721DECBCBDF460982C4C228FF71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8zhZV8_ceTv_qTec6GuyCKCnWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft
Manifest number:          0391
Signing time:             Sun 25 Jan 2026 20:01:41 +0000
Manifest this update:     Sun 25 Jan 2026 20:01:41 +0000
Manifest next update:     Mon 26 Jan 2026 20:01:41 +0000
Files and hashes:         1: vXs00wABeOvYVd4PEbCkjMYfErk.roa (hash: S0XBmvPUfYyzedsDU+r8dBCYywLbP6svOqwi8N2av8g=)
                          2: w8zhZV8_ceTv_qTec6GuyCKCnWE.crl (hash: iy/L7+XPreV7F3UWfujVXfqB5RMQDJEjNpgxcS4oIOI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w8zhZV8_ceTv_qTec6GuyCKCnWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 20:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:bf:77:21:de:cb:cb:df:46:09:82:c4:c2:28:ff:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3cce1655f3f71e4effea4de73a1aec822829d61
        Validity
            Not Before: Jan 25 20:01:41 2026 GMT
            Not After : Jan 26 20:01:41 2026 GMT
        Subject: CN=682796b58066ec57f004f8827057c3160742b9ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f8:47:83:fd:8f:ce:8b:ac:35:7c:23:44:ce:
                    ff:60:34:71:f2:f7:63:e1:ba:8c:d4:32:b8:2e:ab:
                    86:27:0e:37:1a:7f:61:3b:ca:3b:b7:ea:75:c3:d6:
                    dd:bf:ad:54:f7:fb:8b:8d:23:d5:c6:2a:1f:98:73:
                    72:eb:b0:7e:60:5a:5f:c9:14:f6:4e:a6:a2:4d:b8:
                    23:a1:7c:d8:67:b8:22:22:63:04:a4:f8:44:56:56:
                    43:59:1c:b5:f9:18:40:e9:a3:5b:6f:eb:ae:72:62:
                    43:92:e3:05:ec:4e:c9:c7:10:35:ea:3a:4c:13:e2:
                    65:91:8d:da:3b:02:bd:36:f6:66:c2:26:b8:63:89:
                    2a:07:ac:ab:4e:b0:0a:44:bb:7e:71:f3:c3:ea:10:
                    5b:b1:3b:42:77:a3:4a:08:82:e4:d4:b0:7d:ee:c2:
                    ce:d5:21:e3:ce:a2:07:42:c3:56:44:ed:20:ba:63:
                    96:32:0e:16:ca:20:7a:c7:6a:0c:ce:94:ad:88:f8:
                    3e:55:18:58:2b:26:6f:62:3d:b4:82:4a:bf:1a:44:
                    7c:25:7d:4a:c9:6e:fa:b8:2a:de:c8:23:45:5f:88:
                    d7:ce:7a:87:51:30:21:45:0a:4a:b4:7c:44:c7:c5:
                    1c:97:f0:08:4f:44:cf:32:9c:7e:7f:c6:03:17:7a:
                    14:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:27:96:B5:80:66:EC:57:F0:04:F8:82:70:57:C3:16:07:42:B9:AE
            X509v3 Authority Key Identifier:
                keyid:C3:CC:E1:65:5F:3F:71:E4:EF:FE:A4:DE:73:A1:AE:C8:22:82:9D:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8zhZV8_ceTv_qTec6GuyCKCnWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:56:08:d8:60:fc:ae:15:c6:57:3a:b4:64:37:e3:60:2f:e9:
         35:45:7b:2b:4e:47:6d:f3:65:7e:7c:97:76:6d:26:81:76:28:
         f3:c3:d3:c5:75:2f:1d:c7:d2:92:3a:b7:1b:83:52:76:78:7d:
         f1:3a:9c:23:18:f1:26:1a:1a:1a:f8:d4:c6:a8:93:73:b5:4a:
         0f:23:9d:c6:54:10:a3:4b:54:c9:4c:7a:55:96:a0:7e:11:08:
         d0:03:a6:e5:8a:a4:83:04:4e:db:01:ff:ae:43:98:46:8e:1e:
         6e:d7:d7:66:ae:22:6f:98:98:76:8d:23:0a:21:fc:24:7b:49:
         be:27:ce:ab:08:08:f1:20:6f:80:6b:9e:9f:7b:64:f0:c4:df:
         23:dc:f6:2e:74:95:ab:50:0d:c7:34:72:d2:24:4b:1b:ee:53:
         52:44:ee:6d:55:b1:e9:47:34:f3:33:f3:c9:df:da:b0:83:e0:
         11:7c:03:9e:2f:84:81:10:07:8e:d9:26:64:fb:bc:97:74:8d:
         55:ea:72:fc:44:e6:a4:28:ce:3a:a4:41:50:47:b7:68:da:2f:
         b4:3d:fa:0a:55:87:36:0a:39:f4:da:e7:44:70:c6:4c:52:e0:
         94:46:7a:01:4b:4f:1d:36:0a:c8:cb:6a:96:d2:83:ff:ee:2a:
         4a:b9:26:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv2v3ch3svL30YJgsTCKP9xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzY2NlMTY1NWYzZjcxZTRlZmZlYTRkZTczYTFhZWM4MjI4
MjlkNjEwHhcNMjYwMTI1MjAwMTQxWhcNMjYwMTI2MjAwMTQxWjAzMTEwLwYDVQQD
Eyg2ODI3OTZiNTgwNjZlYzU3ZjAwNGY4ODI3MDU3YzMxNjA3NDJiOWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfhHg/2PzousNXwjRM7/YDRx8vdj
4bqM1DK4LquGJw43Gn9hO8o7t+p1w9bdv61U9/uLjSPVxiofmHNy67B+YFpfyRT2
TqaiTbgjoXzYZ7giImMEpPhEVlZDWRy1+RhA6aNbb+uucmJDkuMF7E7JxxA16jpM
E+JlkY3aOwK9NvZmwia4Y4kqB6yrTrAKRLt+cfPD6hBbsTtCd6NKCILk1LB97sLO
1SHjzqIHQsNWRO0gumOWMg4WyiB6x2oMzpStiPg+VRhYKyZvYj20gkq/GkR8JX1K
yW76uCreyCNFX4jXznqHUTAhRQpKtHxEx8Ucl/AIT0TPMpx+f8YDF3oUBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgnlrWAZuxX8AT4gnBXwxYHQrmuMB8GA1UdIwQY
MBaAFMPM4WVfP3Hk7/6k3nOhrsgigp1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzh6aFpWOF9jZVR2X3FUZWM2R3V5Q0tDbldFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9jNTgwZjYtZjBhNi00Yzg1LWI3ZDMt
ZDEwYmViZWEzN2QwLzEvdzh6aFpWOF9jZVR2X3FUZWM2R3V5Q0tDbldFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9jNTgwZjYtZjBhNi00Yzg1LWI3ZDMtZDEwYmViZWEzN2Qw
LzEvdzh6aFpWOF9jZVR2X3FUZWM2R3V5Q0tDbldFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdFYI2GD8
rhXGVzq0ZDfjYC/pNUV7K05HbfNlfnyXdm0mgXYo88PTxXUvHcfSkjq3G4NSdnh9
8TqcIxjxJhoaGvjUxqiTc7VKDyOdxlQQo0tUyUx6VZagfhEI0AOm5YqkgwRO2wH/
rkOYRo4ebtfXZq4ib5iYdo0jCiH8JHtJvifOqwgI8SBvgGuen3tk8MTfI9z2LnSV
q1ANxzRy0iRLG+5TUkTubVWx6Uc08zPzyd/asIPgEXwDni+EgRAHjtkmZPu8l3SN
Vepy/ETmpCjOOqRBUEe3aNovtD36ClWHNgo59NrnRHDGTFLglEZ6AUtPHTYKyMtq
ltKD/+4qSrkmOw==
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:32:49 2026 by rpki-client