This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
File:                     w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft (raw, json)
Hash identifier:          uwxer5Lsir5oq/KKHp/Acro+5he6xKf3dV9lqu+aNr4=
Subject key identifier:   DF:F1:2F:4F:94:9C:89:76:E4:2C:F0:EF:A0:F1:42:FD:6C:95:EC:71
Authority key identifier: C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F
Certificate issuer:       /CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
Certificate serial:       019BF3BDE2C0E2B283AA457540BFBD8D6A95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
Manifest number:          17F6
Signing time:             Sun 25 Jan 2026 06:01:06 +0000
Manifest this update:     Sun 25 Jan 2026 06:01:06 +0000
Manifest next update:     Mon 26 Jan 2026 06:01:06 +0000
Files and hashes:         1: 7rlFWVvMWKLAs_-CwEfFx1HBnYY.roa (hash: Pq6qLtXzClwLxML1ozcVt+Ip73JNmGPve9pIBAJv6IA=)
                          2: Fb1LxadIV7oBDqCNnGTm-OSYcpU.roa (hash: Fl5GSOOt62GrdSA1DfCyrlVCI+6NRse3s+pMK1jPEng=)
                          3: jYY_ixTwgJOc5Fm5bCXMoT8UKbs.roa (hash: +muUSZsgKVwKKY94l/X1a1ye28aD1e0NYwivFYV1wxQ=)
                          4: q5DJrkGpFtBRVSTiER6qubZrzwg.roa (hash: d2oZQywAG8/Q2HF8swgC8YVUSDiFpeqcb9GLnII1M0c=)
                          5: rMdXeptRpu0Pt2xvscICCvTvL1w.roa (hash: /3qPf2GIjkHB+ECKNRa9eV5BXy6n4Np+NAUC/iSaKqg=)
                          6: w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl (hash: XNPUv/b1y6M6ZSVSh7OIgykp3ToPXSOhSHD5fh2BFc4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:bd:e2:c0:e2:b2:83:aa:45:75:40:bf:bd:8d:6a:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
        Validity
            Not Before: Jan 25 06:01:06 2026 GMT
            Not After : Jan 26 06:01:06 2026 GMT
        Subject: CN=dff12f4f949c8976e42cf0efa0f142fd6c95ec71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c0:89:b9:6f:0d:a6:08:1c:cc:14:d4:29:94:
                    76:d0:22:db:34:bc:aa:8d:f1:43:d2:0e:23:5b:03:
                    7e:ad:f4:dc:2f:56:60:0b:37:c7:a5:e6:5b:5a:fe:
                    70:3b:6a:0f:ad:7e:d1:32:51:73:f4:31:67:1d:6c:
                    b5:25:87:d4:94:bd:77:67:07:40:06:ab:3f:ee:86:
                    68:56:7f:e5:0f:6f:81:2a:4b:90:94:a0:98:c3:73:
                    23:e8:e7:0f:49:07:1c:d5:1b:2c:22:3a:e2:cc:71:
                    b0:2c:7e:2c:43:bf:a7:48:01:62:8b:64:ea:53:76:
                    16:18:d5:fe:05:ac:05:d0:c1:50:51:ea:ae:41:7a:
                    4b:3d:68:26:4a:08:8c:9c:c9:e7:5b:f3:62:b5:8f:
                    0d:2b:1d:bb:18:f0:c3:4b:ce:40:c5:ae:80:00:dc:
                    ea:ea:9f:a9:ee:89:66:44:28:7f:84:0a:6d:97:c2:
                    9a:93:17:39:ec:40:39:51:a7:78:25:71:15:97:f6:
                    5d:db:59:58:c1:3f:0f:e1:db:21:a9:66:6e:8a:ff:
                    16:ec:70:f6:aa:3f:6a:65:a3:47:c1:65:81:0f:c9:
                    51:f2:ca:8a:2f:90:37:fb:b7:13:64:fb:1d:39:a6:
                    51:4d:65:52:fc:4d:07:b1:2c:12:2e:81:02:b4:06:
                    74:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F1:2F:4F:94:9C:89:76:E4:2C:F0:EF:A0:F1:42:FD:6C:95:EC:71
            X509v3 Authority Key Identifier:
                keyid:C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:5f:2d:a7:72:bf:f6:a7:3d:82:34:35:97:a1:fc:de:85:09:
         c6:88:b8:d6:91:84:1f:10:a9:3f:b3:06:2c:47:5b:0e:4c:16:
         6a:ef:ba:09:06:4c:16:ae:f2:6a:70:ab:8e:dd:81:47:c1:d3:
         ce:f6:79:e2:1f:54:a9:95:c7:c2:fe:51:c7:06:c5:0c:7b:e9:
         b3:38:23:c8:85:35:9e:cc:a9:3e:bc:1b:58:b8:6d:b1:a7:0c:
         7d:ff:b3:0a:ad:a6:62:15:5e:08:c6:b8:d5:b9:d3:aa:1f:ee:
         50:39:6c:05:11:99:5e:44:20:0d:46:6f:d4:ea:90:e9:9d:b2:
         b6:bd:f6:a4:1f:52:c3:dc:f1:fd:76:60:01:fc:9b:3d:17:ed:
         c4:5a:fc:53:45:dd:21:ab:9f:3b:bc:4a:bc:97:a1:34:25:3c:
         83:68:e4:ed:28:1e:d7:ce:d2:85:5c:e3:63:3e:69:75:93:4d:
         3e:cf:79:c3:94:d4:35:c5:12:63:dd:86:89:00:c2:5b:c9:50:
         25:5f:b9:9f:42:4a:2c:31:05:46:39:d8:50:95:8c:c9:55:9f:
         fb:1b:1d:96:c8:f5:73:c3:fc:88:48:6b:ba:dd:e3:2c:d0:4c:
         5a:6b:bc:d8:96:41:79:f2:45:74:e8:78:ce:78:6c:40:63:12:
         c0:b9:92:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvzveLA4rKDqkV1QL+9jWqVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzA1OTFlMmViNDlkMDU1OWU2ZmNlN2VlMmFhODFmMGY1
OWJhNmYwHhcNMjYwMTI1MDYwMTA2WhcNMjYwMTI2MDYwMTA2WjAzMTEwLwYDVQQD
EyhkZmYxMmY0Zjk0OWM4OTc2ZTQyY2YwZWZhMGYxNDJmZDZjOTVlYzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcCJuW8NpggczBTUKZR20CLbNLyq
jfFD0g4jWwN+rfTcL1ZgCzfHpeZbWv5wO2oPrX7RMlFz9DFnHWy1JYfUlL13ZwdA
Bqs/7oZoVn/lD2+BKkuQlKCYw3Mj6OcPSQcc1RssIjrizHGwLH4sQ7+nSAFii2Tq
U3YWGNX+BawF0MFQUequQXpLPWgmSgiMnMnnW/NitY8NKx27GPDDS85Axa6AANzq
6p+p7olmRCh/hAptl8Kakxc57EA5Uad4JXEVl/Zd21lYwT8P4dshqWZuiv8W7HD2
qj9qZaNHwWWBD8lR8sqKL5A3+7cTZPsdOaZRTWVS/E0HsSwSLoECtAZ0uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/xL0+UnIl25Czw76DxQv1slexxMB8GA1UdIwQY
MBaAFMPAWR4utJ0FWeb85+4qqB8PWbpvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhCWkhpNjBuUVZaNXZ6bjdpcW9IdzladW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80YjhhYWItMjA5OS00M2FmLWI0MWQt
ZTM0MDcxNzQ2NjNiLzEvdzhCWkhpNjBuUVZaNXZ6bjdpcW9IdzladW04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy80YjhhYWItMjA5OS00M2FmLWI0MWQtZTM0MDcxNzQ2NjNi
LzEvdzhCWkhpNjBuUVZaNXZ6bjdpcW9IdzladW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAV8tp3K/
9qc9gjQ1l6H83oUJxoi41pGEHxCpP7MGLEdbDkwWau+6CQZMFq7yanCrjt2BR8HT
zvZ54h9UqZXHwv5RxwbFDHvpszgjyIU1nsypPrwbWLhtsacMff+zCq2mYhVeCMa4
1bnTqh/uUDlsBRGZXkQgDUZv1OqQ6Z2ytr32pB9Sw9zx/XZgAfybPRftxFr8U0Xd
IaufO7xKvJehNCU8g2jk7Sge187ShVzjYz5pdZNNPs95w5TUNcUSY92GiQDCW8lQ
JV+5n0JKLDEFRjnYUJWMyVWf+xsdlsj1c8P8iEhrut3jLNBMWmu82JZBefJFdOh4
znhsQGMSwLmS0w==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:28:47 2026 by rpki-client