This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft
File:                     wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft (raw, json)
Hash identifier:          pSGDJfbKC3Wf8y7Vbuv8b98sv0dFoC9JobSM0gr3zAw=
Subject key identifier:   14:73:78:39:EF:46:DD:A0:D0:BF:A1:55:37:07:CC:29:CD:D8:E6:33
Authority key identifier: C1:15:B3:27:E8:47:61:68:50:22:F4:73:28:D6:F4:CB:D6:D3:04:1E
Certificate issuer:       /CN=c115b327e84761685022f47328d6f4cbd6d3041e
Certificate serial:       019BF50712DDF3AFF7A425CE6C96E71159C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft
Manifest number:          15A4
Signing time:             Sun 25 Jan 2026 12:00:40 +0000
Manifest this update:     Sun 25 Jan 2026 12:00:40 +0000
Manifest next update:     Mon 26 Jan 2026 12:00:40 +0000
Files and hashes:         1: 1upib3w4dNwpLOBhgbemzuWJEnk.roa (hash: GhXcTauSsjZxaizJzGN0VZhjaJZ3SZLeg6vkoxXN+YY=)
                          2: 5dCmEdDrjOnlZMp81Q2uR_wbzFI.roa (hash: lxe58PQH7VpXxHz7k/J8LJcmNsZLy0kcv52Otk3eQ+U=)
                          3: wRWzJ-hHYWhQIvRzKNb0y9bTBB4.crl (hash: OlWQK0DIT9MKMa3KLtqyCAAi4pVLmlaHZ5M7eGnDXoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:07:12:dd:f3:af:f7:a4:25:ce:6c:96:e7:11:59:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c115b327e84761685022f47328d6f4cbd6d3041e
        Validity
            Not Before: Jan 25 12:00:40 2026 GMT
            Not After : Jan 26 12:00:40 2026 GMT
        Subject: CN=14737839ef46dda0d0bfa1553707cc29cdd8e633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e2:a2:4c:7b:8f:e9:74:a4:08:6b:7e:b3:b4:
                    9e:6e:63:65:be:de:6a:4e:ee:98:2a:c8:96:51:79:
                    e7:71:a0:5c:e0:f8:41:90:77:a5:73:a3:0a:73:c2:
                    cd:24:2c:eb:d4:0b:07:80:d6:b3:56:dd:4e:d3:23:
                    0c:9a:65:3f:59:c5:ce:2b:c1:0c:0d:37:0a:fb:fe:
                    ff:81:a9:8a:40:db:33:c9:80:4a:1c:9c:5e:18:84:
                    83:a1:ee:8a:dd:3b:66:ab:01:fa:29:d7:d5:53:23:
                    3f:45:8a:9f:c8:c6:2f:71:9a:35:96:a4:af:45:9c:
                    d9:c1:93:d5:66:a1:21:38:61:a2:c9:ee:9f:70:94:
                    09:ba:11:bf:53:c8:4b:b6:0c:50:d1:33:00:74:89:
                    c1:32:5c:c4:ad:da:23:d3:16:26:4e:4d:c5:a0:a6:
                    c8:58:f4:2c:d1:c6:f7:06:77:58:1c:7e:d5:22:05:
                    d5:04:fc:c4:4e:ce:93:a7:41:71:28:21:6a:44:4e:
                    5f:a8:d9:3d:a1:a4:2c:9d:6f:78:b7:22:6b:23:35:
                    cd:5d:8d:47:da:2d:b4:94:b7:dc:ce:9d:ec:b9:8d:
                    55:03:60:fa:8b:3c:2d:35:1d:2d:eb:75:c4:37:a0:
                    78:ed:c0:61:cc:06:54:3c:94:97:9a:fc:25:f4:45:
                    2c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:73:78:39:EF:46:DD:A0:D0:BF:A1:55:37:07:CC:29:CD:D8:E6:33
            X509v3 Authority Key Identifier:
                keyid:C1:15:B3:27:E8:47:61:68:50:22:F4:73:28:D6:F4:CB:D6:D3:04:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:38:fe:7f:6a:b4:52:0f:d3:5d:9e:8b:5f:79:52:73:c6:87:
         cd:b9:4d:6a:64:79:7b:20:f5:69:b4:d4:f5:5e:21:b9:cb:b7:
         30:0d:29:de:ac:3b:c4:58:53:87:b8:77:ac:b4:46:39:9b:11:
         97:f7:61:1b:26:0b:b8:22:a4:ff:c0:22:27:5b:6a:52:fb:cd:
         22:51:16:47:7e:56:4d:dd:5b:e7:ab:d7:f0:60:0f:20:da:c2:
         03:04:88:78:a5:56:b6:d3:96:1d:11:88:ba:b2:48:e2:5f:c6:
         59:ac:2a:23:15:f0:30:76:d5:cc:b2:ee:51:e0:56:bd:ba:7c:
         db:39:5f:0d:8d:85:3c:8b:e8:5c:59:3c:7b:62:28:ec:eb:ba:
         6b:1e:51:1b:1e:cf:d9:f1:f5:95:f2:6f:aa:0e:49:9e:7c:9f:
         94:71:61:77:3b:e8:21:ed:d2:44:c1:88:f9:e4:7a:d5:11:c6:
         92:d5:be:e7:91:27:9e:47:75:f9:08:59:50:26:2c:c4:49:2b:
         06:d3:b8:e1:64:1b:83:8b:1e:d5:78:db:83:e6:f3:92:8e:a4:
         d2:2c:fd:21:8c:29:54:ac:db:b7:46:d6:1b:00:5c:cb:52:90:
         a1:f1:16:37:14:3f:86:6c:cc:10:fc:44:f7:91:7a:e8:f5:e4:
         7f:17:b9:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1BxLd86/3pCXObJbnEVnAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMTViMzI3ZTg0NzYxNjg1MDIyZjQ3MzI4ZDZmNGNiZDZk
MzA0MWUwHhcNMjYwMTI1MTIwMDQwWhcNMjYwMTI2MTIwMDQwWjAzMTEwLwYDVQQD
EygxNDczNzgzOWVmNDZkZGEwZDBiZmExNTUzNzA3Y2MyOWNkZDhlNjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOKiTHuP6XSkCGt+s7SebmNlvt5q
Tu6YKsiWUXnncaBc4PhBkHelc6MKc8LNJCzr1AsHgNazVt1O0yMMmmU/WcXOK8EM
DTcK+/7/gamKQNszyYBKHJxeGISDoe6K3TtmqwH6KdfVUyM/RYqfyMYvcZo1lqSv
RZzZwZPVZqEhOGGiye6fcJQJuhG/U8hLtgxQ0TMAdInBMlzErdoj0xYmTk3FoKbI
WPQs0cb3BndYHH7VIgXVBPzETs6Tp0FxKCFqRE5fqNk9oaQsnW94tyJrIzXNXY1H
2i20lLfczp3suY1VA2D6izwtNR0t63XEN6B47cBhzAZUPJSXmvwl9EUsdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRzeDnvRt2g0L+hVTcHzCnN2OYzMB8GA1UdIwQY
MBaAFMEVsyfoR2FoUCL0cyjW9MvW0wQeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1JXekotaEhZV2hRSXZSektOYjB5OWJUQkI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9hNGJkZjctMjU3OS00YmQwLThhOTMt
MjI0ZmQ3OGVmODI3LzEvd1JXekotaEhZV2hRSXZSektOYjB5OWJUQkI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9hNGJkZjctMjU3OS00YmQwLThhOTMtMjI0ZmQ3OGVmODI3
LzEvd1JXekotaEhZV2hRSXZSektOYjB5OWJUQkI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANjj+f2q0
Ug/TXZ6LX3lSc8aHzblNamR5eyD1abTU9V4hucu3MA0p3qw7xFhTh7h3rLRGOZsR
l/dhGyYLuCKk/8AiJ1tqUvvNIlEWR35WTd1b56vX8GAPINrCAwSIeKVWttOWHRGI
urJI4l/GWawqIxXwMHbVzLLuUeBWvbp82zlfDY2FPIvoXFk8e2Io7Ou6ax5RGx7P
2fH1lfJvqg5JnnyflHFhdzvoIe3SRMGI+eR61RHGktW+55Ennkd1+QhZUCYsxEkr
BtO44WQbg4se1Xjbg+bzko6k0iz9IYwpVKzbt0bWGwBcy1KQofEWNxQ/hmzMEPxE
95F66PXkfxe5/g==
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:32:47 2026 by rpki-client