This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
File:                     _DWHfMA4v_25e7PW6iFqtSs6BYI.mft (raw, json)
Hash identifier:          5lwHdGOCvitOES7W8WC3QZxDNEDvUc4rXawl35Rk8LQ=
Subject key identifier:   D5:DC:17:4B:AD:35:FC:FD:2C:44:9A:89:4C:2B:1B:22:04:64:F3:29
Authority key identifier: FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82
Certificate issuer:       /CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582
Certificate serial:       019BF3F4C1F166F0D5D834CB9795FDE854C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
Manifest number:          162E
Signing time:             Sun 25 Jan 2026 07:01:02 +0000
Manifest this update:     Sun 25 Jan 2026 07:01:02 +0000
Manifest next update:     Mon 26 Jan 2026 07:01:02 +0000
Files and hashes:         1: 8huTzHW57A5cCLn4DJengqWUHbU.roa (hash: QbaePOyAbanHl8XCDKIaOAWESWKmtviz49Mi0ZJ8gU8=)
                          2: _6DXV1WE0v-oybUplKLLF-qO42Q.roa (hash: Iu/YSu6oOqTfa7ZyhKaNhQqb474GLyUXE1gWIy1f6g4=)
                          3: _DWHfMA4v_25e7PW6iFqtSs6BYI.crl (hash: CY/ySz3DasXnEJ5nVeRkne2PYNr9ekoQ6wlFpUcUXD0=)
                          4: cnRs0nFBKnPSwQ1F-1xOIce5la0.roa (hash: OKJospeoF5ncHQtQYt7c9nFDBBSFOmh/9wk/WbCnrEs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:f4:c1:f1:66:f0:d5:d8:34:cb:97:95:fd:e8:54:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582
        Validity
            Not Before: Jan 25 07:01:02 2026 GMT
            Not After : Jan 26 07:01:02 2026 GMT
        Subject: CN=d5dc174bad35fcfd2c449a894c2b1b220464f329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8b:14:bb:ab:f5:86:53:b6:76:60:5f:d2:e8:
                    a2:37:d6:59:c4:ce:4f:86:f6:f6:e7:dd:bd:f2:fa:
                    8a:3a:41:96:72:36:d7:70:96:99:02:b2:f2:23:d9:
                    63:1b:a1:49:49:16:a0:59:d3:09:75:7f:d0:dd:7f:
                    d4:7d:33:58:7b:f4:c4:84:48:db:42:f2:62:d1:7e:
                    0c:d2:27:72:f6:c4:6b:33:06:23:4e:a4:eb:8d:5c:
                    4e:46:7f:fd:f0:a4:ab:d3:f0:ca:c4:24:29:c8:36:
                    e3:6f:5c:ca:88:51:bc:a6:d6:a6:91:b2:ea:22:c3:
                    5c:5a:9c:73:20:2d:79:33:99:34:6a:6e:9a:fe:c5:
                    9f:4a:cc:fb:cb:41:c4:44:5e:5b:fd:6c:23:4b:e6:
                    af:d6:76:fc:87:c5:02:b4:aa:ca:d9:ea:15:b9:22:
                    39:e0:ad:0d:28:b7:ee:8c:84:b5:c4:ae:3c:b6:81:
                    02:01:f6:40:21:0f:66:d9:eb:a5:ea:3d:b9:a0:63:
                    d4:b0:67:d5:92:18:b1:6b:e8:95:b8:56:56:6a:41:
                    dc:8f:09:e1:25:02:81:23:ab:90:ad:a1:63:34:e2:
                    20:93:7b:60:0c:7e:d4:eb:49:bb:ab:50:6b:dc:5b:
                    ea:b4:be:5e:54:b2:05:42:00:9b:df:c5:8f:bc:25:
                    38:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:DC:17:4B:AD:35:FC:FD:2C:44:9A:89:4C:2B:1B:22:04:64:F3:29
            X509v3 Authority Key Identifier:
                keyid:FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:d8:88:7b:71:ed:97:0e:1d:53:1b:db:db:7e:57:85:1a:fd:
         eb:77:b0:7d:b0:fb:a6:58:7c:d0:ac:4c:68:df:85:71:ae:08:
         47:e4:38:6f:22:f4:97:0d:7a:93:f5:96:67:e3:94:84:e6:ba:
         db:f3:ac:fa:f0:a2:d7:06:de:45:e1:9b:bf:ee:7d:d5:78:24:
         c0:40:22:ec:11:97:25:28:3c:7d:18:4f:c8:98:95:51:e5:e9:
         44:70:ac:1d:4f:3e:4b:98:0f:09:05:35:82:6f:63:47:16:5b:
         17:f1:f3:81:91:cc:26:34:f2:ca:3f:f7:40:bd:e8:aa:24:83:
         73:16:59:e1:77:7c:e5:ea:65:00:16:42:de:41:af:28:07:7e:
         f4:57:f1:d2:e5:8c:70:47:b6:4e:6b:ee:ca:fb:00:f4:20:37:
         c9:81:1c:53:b2:87:34:be:a2:f2:26:e7:6f:25:69:16:44:72:
         59:d9:95:9b:18:c1:af:02:69:8d:37:ef:9e:01:94:70:a2:f2:
         80:35:35:1c:48:58:69:55:79:9a:ec:02:ce:d3:b2:cf:a3:d1:
         ac:34:10:6a:19:8f:da:8b:da:b2:0d:1f:21:ad:19:bf:00:1c:
         a6:11:95:a1:48:03:d6:9a:b8:2b:c5:16:96:1d:e7:a9:9a:b9:
         83:2a:78:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvz9MHxZvDV2DTLl5X96FTBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMzU4NzdjYzAzOGJmZmRiOTdiYjNkNmVhMjE2YWI1MmIz
YTA1ODIwHhcNMjYwMTI1MDcwMTAyWhcNMjYwMTI2MDcwMTAyWjAzMTEwLwYDVQQD
EyhkNWRjMTc0YmFkMzVmY2ZkMmM0NDlhODk0YzJiMWIyMjA0NjRmMzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYsUu6v1hlO2dmBf0uiiN9ZZxM5P
hvb259298vqKOkGWcjbXcJaZArLyI9ljG6FJSRagWdMJdX/Q3X/UfTNYe/TEhEjb
QvJi0X4M0idy9sRrMwYjTqTrjVxORn/98KSr0/DKxCQpyDbjb1zKiFG8ptamkbLq
IsNcWpxzIC15M5k0am6a/sWfSsz7y0HERF5b/WwjS+av1nb8h8UCtKrK2eoVuSI5
4K0NKLfujIS1xK48toECAfZAIQ9m2eul6j25oGPUsGfVkhixa+iVuFZWakHcjwnh
JQKBI6uQraFjNOIgk3tgDH7U60m7q1Br3FvqtL5eVLIFQgCb38WPvCU4CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXcF0utNfz9LESaiUwrGyIEZPMpMB8GA1UdIwQY
MBaAFPw1h3zAOL/9uXuz1uoharUrOgWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0RXSGZNQTR2XzI1ZTdQVzZpRnF0U3M2QllJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lODA3MmEtNjAxNy00ZWQ1LWJlZTMt
OGU2NWIzNDdmMjE4LzEvX0RXSGZNQTR2XzI1ZTdQVzZpRnF0U3M2QllJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9lODA3MmEtNjAxNy00ZWQ1LWJlZTMtOGU2NWIzNDdmMjE4
LzEvX0RXSGZNQTR2XzI1ZTdQVzZpRnF0U3M2QllJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG9iIe3Ht
lw4dUxvb235XhRr963ewfbD7plh80KxMaN+Fca4IR+Q4byL0lw16k/WWZ+OUhOa6
2/Os+vCi1wbeReGbv+591XgkwEAi7BGXJSg8fRhPyJiVUeXpRHCsHU8+S5gPCQU1
gm9jRxZbF/HzgZHMJjTyyj/3QL3oqiSDcxZZ4Xd85eplABZC3kGvKAd+9Ffx0uWM
cEe2TmvuyvsA9CA3yYEcU7KHNL6i8ibnbyVpFkRyWdmVmxjBrwJpjTfvngGUcKLy
gDU1HEhYaVV5muwCztOyz6PRrDQQahmP2ovasg0fIa0ZvwAcphGVoUgD1pq4K8UW
lh3nqZq5gyp4CQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:44:56 2026 by rpki-client