This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
File:                     wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft (raw, json)
Hash identifier:          +IEaXbRU8g8wegBpHhkMQOJY+fbuK9WYdF1LHDuwJXs=
Subject key identifier:   78:96:B3:8E:EF:15:87:63:62:D3:78:D1:66:BC:7E:B8:8F:C3:93:C7
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Certificate issuer:       /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial:       019BF4997050DB4319E217E39D1D69DD300B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
Manifest number:          0A00
Signing time:             Sun 25 Jan 2026 10:00:54 +0000
Manifest this update:     Sun 25 Jan 2026 10:00:54 +0000
Manifest next update:     Mon 26 Jan 2026 10:00:54 +0000
Files and hashes:         1: 1abhrlOuSKnZ708WnL5sdHK1Ie0.roa (hash: /NbpRcPbPMObQ6oF2HglXE8t2NqbPyxSqMDeYEigMy8=)
                          2: 2ersDEYbQtg4l5m9V8r0SieR8Vo.roa (hash: aUuOBsE01fiLcyj9TfP/Qu1NPe+7XiHnxfWsVnOH0VI=)
                          3: 3FZlUz7uoucCzaZmPG0U58fB6SA.roa (hash: LGcv5ZIogTyxDleJRKQb2SPMT566dCH0f2NqyWLWYyA=)
                          4: 3UAZ9rdQ7CQL1hhCNvVOCg9iO4o.roa (hash: 63VmVtm/xbRBRuJte8hk1vPrq7aNoUtneWqvYwJNXks=)
                          5: 4RzlaE4IATIyocr-VUzpEUSO7Mo.roa (hash: zDqUG2mBRxI6CuLzFrAEFvPmBc+dGZskWKeVJphaxsI=)
                          6: 4ae5_6Oq1qgP_qVzyJIPMEZlDls.roa (hash: Pz3KHgE7nt62CyJZQAWq1/cmKNewix+faz+oFpRFRns=)
                          7: H0pm5nRm7rZf-XNfTL4WUT-TmS0.roa (hash: iUjioUBVoEzH96c/q4TBCiakeu8zjGr+CpQ/f6uz5RE=)
                          8: OgghXDjyjDqnxRl611PNnUIg8gc.roa (hash: nx8X3I9R1T0jK3t8FirNFx0YohQgACVLB9CPv39jV04=)
                          9: Ov3GDifgE-i6cGCKg9qwgB5MUqE.roa (hash: 89f0cgjBZ2lHNAyH+JzH9w9hR0/NzmZ9fcdY/7jNHRo=)
                          10: Sk9ag2YHmKJcp4CwUZ7utaM8xmA.roa (hash: qh4mq4MdyV9B/rSa6KdwSUIcjfbHQUKuH4MZ7aEP/nU=)
                          11: UwVIBu2jxBDiFJTytgK8RUzy-Cs.roa (hash: ltWrsmWOaH+qQhwZyDVBUFqGoWpky9At3HwYToazYgw=)
                          12: YPUBKOKTPiEmiP59Xe8MEIRR4Pw.roa (hash: PWQfhcGH7jngcQ70GlQ11H+FIx0EvbMhWzfDH/DhN10=)
                          13: aYMmtg2F_--bVu8hSyKAFciGf7U.roa (hash: CxDcGIhoZfPolf9XmBJFl0rGdo9uyrgJav1ZUiVhwxo=)
                          14: cIV9JudTZTeo9lnx0IX_Ab60GOI.roa (hash: GAzyxWMmilZxJ4YPCp2wTRguWAAeRpdhD/FOnsIN73s=)
                          15: hvdGPqGZACKBGf93rntej67lv54.roa (hash: Zz0VuDlVsJON1ndmUKaTXSvLDIjjSSZLp4ke0HjSjws=)
                          16: iFIpSvQSW1RGvQvGhAG9Or8gNdQ.roa (hash: AKoFVd13S9dMKwOd2Np277Q02eWKDsmmGTyxPX7hYBA=)
                          17: lHY7We2BrbFc-eXXkRgJlJbdX3A.roa (hash: zHm1Mi17ZuiEgkgBNzNI9u7E4SsR3QzuY1xCaT9FLZo=)
                          18: oxu0GmrQ5_piXLI7Mf7_jeVm9eU.roa (hash: GJ6aUk4H8magSU3n7bIt4f5oeneg+QR+DzjJ9j+ifeE=)
                          19: rkni80Or2w2QygXy0RTlNsvlL8E.roa (hash: gMQ3ViXeTKyCOOddnGlJIocGpXYE80FbVoVgkMfQtjU=)
                          20: tw-WBHaNJZuGE7q9LknpcfdIUzA.roa (hash: 4zJGXt4udsl6SmucJzDYHgeK3Njjb1y+erXlqa1Ud6M=)
                          21: vIWIV4oXAuGiXUkF2YHYJ3cotXI.roa (hash: Ru1bWNukTkXSCygvXpMUB0wX3ITs/41hlno7KHqordo=)
                          22: vt0ElRQTTQDbtawurQTq5naKklI.roa (hash: sTZaSlh1WeFZN4xDhr5tgce7SkNVNhyZN7/S1+Uq2OY=)
                          23: wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl (hash: i05xL8TbfQ8r+kkWixQPU/dm0jZz6wxZCxXBfJQ7pkU=)
                          24: xWBdF-suhv_AQ_y3QjjvHjJhVNY.roa (hash: 8ersIxCy3Vp1+jKmiBqzidC6ha48xZVgqBacD5foNJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:99:70:50:db:43:19:e2:17:e3:9d:1d:69:dd:30:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
        Validity
            Not Before: Jan 25 10:00:54 2026 GMT
            Not After : Jan 26 10:00:54 2026 GMT
        Subject: CN=7896b38eef15876362d378d166bc7eb88fc393c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:49:70:6e:71:06:8b:71:2a:36:97:68:7d:b6:
                    1c:29:00:ec:f8:a2:01:61:47:21:9e:5b:91:e5:fc:
                    68:d6:7e:ee:b0:03:49:26:9b:b6:31:8b:c6:63:52:
                    21:86:90:03:80:f8:db:b5:50:2d:46:e3:50:da:7e:
                    0b:01:2d:7d:3d:dd:c1:ed:93:42:b6:40:7a:8d:b3:
                    2e:aa:02:d7:fb:71:cc:2b:70:9b:bf:c4:fc:6f:4d:
                    61:87:65:a5:1d:75:e4:e6:b7:0d:e5:1b:2b:78:71:
                    fc:35:d2:1a:1b:fc:e5:1f:b4:b5:72:47:27:03:5a:
                    21:82:94:9e:0b:01:ff:b3:a3:3c:93:cc:58:a2:41:
                    9f:aa:c6:1f:5d:37:e1:97:88:16:56:e5:87:fc:67:
                    85:c8:5b:29:e5:37:13:1d:55:75:15:f5:a4:88:d6:
                    bc:73:ed:ca:d2:43:bc:ed:f4:84:9a:8a:d0:a0:70:
                    9d:6e:04:c1:45:ee:8d:58:97:5f:85:35:b5:e3:de:
                    06:0e:40:13:3c:64:93:a7:83:53:9a:fc:f4:38:73:
                    fa:3b:cd:24:f8:4d:29:48:0e:61:92:50:a3:c1:44:
                    6b:f1:46:71:de:ce:bf:68:d9:17:60:51:37:73:55:
                    b5:e0:fc:39:2f:07:a4:45:e8:0b:20:00:73:73:22:
                    d1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:96:B3:8E:EF:15:87:63:62:D3:78:D1:66:BC:7E:B8:8F:C3:93:C7
            X509v3 Authority Key Identifier:
                keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:48:7c:ea:c7:11:93:c9:18:06:53:bd:be:03:cc:2d:c0:e3:
         b4:ff:25:e4:89:d3:d8:e2:60:31:e1:a5:41:a8:39:4e:f6:3d:
         4b:20:0f:5d:05:1e:97:01:1d:9b:1b:15:c9:71:2b:dd:2f:16:
         c2:73:33:f3:39:7e:c1:e4:d8:b4:ea:b5:8b:9b:38:8a:f8:34:
         0f:db:72:e5:2e:be:8d:39:3a:f2:37:03:da:72:44:e9:96:b1:
         4d:fe:ed:fd:5c:35:1f:08:fd:03:39:a6:52:b6:de:78:8f:e7:
         19:34:aa:8e:53:7f:1b:84:3c:62:eb:c5:44:65:6b:e7:ee:34:
         85:6b:d1:d6:11:82:e5:98:d1:b8:fa:60:17:aa:62:c5:72:65:
         fb:03:05:87:59:f5:5c:98:f1:f1:c3:b1:01:c6:c1:78:74:bd:
         c4:48:f0:4c:8f:fb:d2:30:1e:57:7f:03:87:d4:e5:cd:84:03:
         43:ae:34:23:1f:ec:6f:89:7c:94:70:80:84:0b:1c:75:6d:43:
         13:85:85:37:ad:08:f2:c6:14:5a:8b:24:10:cc:64:17:c9:c9:
         7a:d4:4b:18:a3:71:70:e5:7f:e9:a2:9b:fc:9b:c9:1d:5b:c9:
         bb:6f:5e:d2:14:29:a9:60:dc:52:ab:8a:9e:77:69:7d:84:df:
         b6:24:d2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:45:00 2026 by rpki-client