This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
File:                     wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft (raw, json)
Hash identifier:          jwjd7WN96HmTzb7imknwv5KQ+2sKrzyEkcksO03KqDk=
Subject key identifier:   C2:6A:DC:FD:78:CC:AA:32:5A:91:2F:C8:16:77:C2:3E:75:05:3F:CA
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Certificate issuer:       /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial:       019BF8ACF1E1C3692AB688D4E0E7F8F71E25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
Manifest number:          1267
Signing time:             Mon 26 Jan 2026 05:00:42 +0000
Manifest this update:     Mon 26 Jan 2026 05:00:42 +0000
Manifest next update:     Tue 27 Jan 2026 05:00:42 +0000
Files and hashes:         1: 0Y8N1-0fJLBE_HY8U_P2_6WVc1w.roa (hash: +jTSNuKfxuCvHo1F5dM5RaYN/hFX2mIW99lx2JVtRD0=)
                          2: kV0lhF3sNCXctsdeBYv_Jwm1Yww.roa (hash: oKX1XUar7ntV2+pEAw7ilC7z6D/uvm342LvGsth66is=)
                          3: loJlqq3qXuCu-dkSIlY72SrCnbU.roa (hash: 5OLtUAD6inbOq/tzv2K1YJFeXJFtMDnKAXlws3rJ/lw=)
                          4: ryDpy6cdN2x4PxzZve738-RUKps.roa (hash: 7P6XIPn0h99li8ImXCuSS48Xd7ty7D1xcOSjTfq3Khg=)
                          5: wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl (hash: Tm9iDiRTzOoGxnwHwlnKOfAYePoifgXtWaMMip1V3gA=)
                          6: xF6DSfpWjHY3DSnY4quSmS7ktcA.roa (hash: odbQ9fjuabZiW5G2VLqBK8Bk/nuyTPF9z/+wCBqDPfc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:ac:f1:e1:c3:69:2a:b6:88:d4:e0:e7:f8:f7:1e:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
        Validity
            Not Before: Jan 26 05:00:42 2026 GMT
            Not After : Jan 27 05:00:42 2026 GMT
        Subject: CN=c26adcfd78ccaa325a912fc81677c23e75053fca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:be:29:aa:87:80:15:5b:4c:d7:c3:96:b6:97:
                    0a:a9:c8:c9:c1:70:7e:99:50:a5:a8:71:8e:f1:d8:
                    3b:ac:cc:4b:f4:63:9a:5f:31:22:97:fb:c5:49:dd:
                    d2:55:bc:90:38:0d:00:c9:4f:cf:cf:05:e9:25:8d:
                    31:67:83:c0:a7:21:e9:a3:6f:e8:e5:3c:96:5c:c4:
                    0d:ae:7e:e5:bc:dc:24:fa:f6:ea:8f:66:ef:5f:8f:
                    f1:39:84:f2:3d:4c:1f:21:20:96:ff:33:d5:a1:69:
                    bb:8f:a2:d6:ed:3b:75:09:fb:70:8e:3a:5a:a2:b5:
                    ec:78:26:6c:04:20:ef:44:52:94:6c:a1:e5:4e:e9:
                    f2:95:a4:11:52:36:7c:32:d9:6c:81:ec:43:a2:6b:
                    58:29:66:1a:59:0c:c8:aa:f1:f8:80:f5:98:21:7d:
                    75:94:68:f7:23:a8:71:3e:ca:55:d4:1e:b2:ab:b1:
                    da:be:8b:4c:04:ab:67:af:65:10:14:40:4e:1b:7b:
                    20:27:71:9c:29:21:39:0b:b5:62:a4:d6:5e:06:82:
                    8b:17:b6:54:1a:3a:9a:80:34:9a:8a:57:a4:f9:35:
                    12:15:bc:8c:86:1e:fe:ac:ef:63:cd:f7:79:10:d3:
                    9c:f9:97:e3:42:ad:71:33:68:85:03:b8:4c:d7:ba:
                    e4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:6A:DC:FD:78:CC:AA:32:5A:91:2F:C8:16:77:C2:3E:75:05:3F:CA
            X509v3 Authority Key Identifier:
                keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:35:ac:91:14:f1:22:25:03:6c:e0:99:24:ca:b5:5a:5a:c7:
         8f:13:14:84:ba:38:7b:56:d6:e7:52:ea:c3:70:fd:d8:ad:c8:
         59:a2:f2:00:3f:b5:aa:1d:cd:c1:ca:c4:33:14:3f:0a:4b:db:
         1d:c5:f2:a8:99:42:ae:a3:71:6e:95:92:52:3f:46:0c:03:e6:
         44:59:d4:64:fa:47:d3:44:a5:af:f0:2f:dc:31:d4:63:7d:0b:
         24:0e:78:04:a5:52:c8:b7:69:9c:91:79:1e:8a:5c:b4:3f:a5:
         b9:e3:06:95:51:4a:89:e0:0c:ac:c8:0f:2e:92:67:33:24:04:
         62:13:2f:17:20:7f:27:55:4e:a7:74:8b:84:01:e8:cc:e9:8c:
         d1:9a:a6:69:1e:10:e2:6a:c0:a3:41:c7:b1:54:fc:41:a7:38:
         d0:0e:7f:d2:6a:ff:52:cf:ac:59:50:f0:64:2a:69:78:53:80:
         b4:cf:e2:ac:2a:aa:27:37:19:9d:8f:39:25:9b:58:e2:62:d0:
         67:41:e5:84:45:da:13:6c:07:15:56:5c:d5:f3:69:25:3c:29:
         cc:d7:8c:75:83:87:02:b3:8d:f5:5a:0a:ca:fc:40:d5:55:0b:
         4d:8d:69:9e:a4:6d:38:62:3d:f2:9a:ee:c8:a9:ed:35:a9:0a:
         4e:ae:4e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:42:02 2026 by rpki-client