This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
File:                     w3URP9S_vTixBDhDwwkmoRDMD1E.mft (raw, json)
Hash identifier:          taLvPqmU4IQRoomHsG3GDF3orkWrcuFGCPJuNcLurm0=
Subject key identifier:   74:53:D1:88:B3:10:39:43:89:49:E3:F2:6A:9E:F9:F5:41:78:44:5B
Authority key identifier: C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51
Certificate issuer:       /CN=c375113fd4bfbd38b1043843c30926a110cc0f51
Certificate serial:       019BF6BE66E53592CDD9648083DC8060D1D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
Manifest number:          17EB
Signing time:             Sun 25 Jan 2026 20:00:31 +0000
Manifest this update:     Sun 25 Jan 2026 20:00:31 +0000
Manifest next update:     Mon 26 Jan 2026 20:00:31 +0000
Files and hashes:         1: TYwN3t32Z7xKSSbdeezcjvxtZPw.roa (hash: vACqWvZBDZtntkC9z+JDWdjz/Gh+6JNnrhSbEy009gw=)
                          2: ZJWhX_sHEjs97qyEWeCy7JLXnqw.roa (hash: bAXAo9VS32osXOlNSknnXOi501Vm+Z7vmbwaL73CoDc=)
                          3: w3URP9S_vTixBDhDwwkmoRDMD1E.crl (hash: yGpHFdQWUKOk1+WO0TzBvoN40HibyAKm4sSDJBgnHJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 20:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:be:66:e5:35:92:cd:d9:64:80:83:dc:80:60:d1:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c375113fd4bfbd38b1043843c30926a110cc0f51
        Validity
            Not Before: Jan 25 20:00:31 2026 GMT
            Not After : Jan 26 20:00:31 2026 GMT
        Subject: CN=7453d188b31039438949e3f26a9ef9f54178445b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4c:b3:0a:bd:b1:50:64:c5:6b:82:d6:1e:73:
                    6a:ca:3a:69:6d:f7:f5:d0:fb:6d:3c:98:5f:20:0a:
                    99:3c:9c:ce:a4:5c:e5:39:08:fc:f1:17:20:7c:17:
                    2c:ad:b9:22:92:17:82:c2:fa:1f:ef:fc:dc:ba:fb:
                    e0:16:64:8b:60:c7:ee:37:14:3d:6e:b9:5e:8e:99:
                    5f:76:85:4f:83:8b:09:26:44:87:67:bf:78:be:6e:
                    2b:55:c3:ec:e2:3b:69:83:87:db:c2:a6:22:08:87:
                    6c:58:6f:b7:e5:09:3c:52:e3:13:f3:97:d7:b3:45:
                    3e:9c:b9:64:e3:d0:c9:dd:00:c3:3a:f9:f5:e8:57:
                    83:8a:88:b2:fb:9f:45:f4:63:af:a4:94:75:7b:76:
                    85:68:08:85:aa:7f:e6:44:92:a6:a2:bb:cb:a0:8a:
                    ce:e7:25:bd:e2:7a:ae:d5:ab:82:c6:b7:3f:46:b8:
                    a1:bc:3e:e0:d2:01:db:6f:f2:73:d2:f0:2d:03:21:
                    ea:54:63:1e:4a:89:75:e7:06:05:09:1b:0f:c3:92:
                    df:0a:3d:9a:3e:74:96:b9:88:98:29:76:8d:a7:d8:
                    8c:d9:cf:63:f5:57:57:2a:83:02:48:14:28:44:7e:
                    bf:31:b6:f6:17:f2:05:b0:4f:62:1a:08:44:af:63:
                    2d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:53:D1:88:B3:10:39:43:89:49:E3:F2:6A:9E:F9:F5:41:78:44:5B
            X509v3 Authority Key Identifier:
                keyid:C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:cf:37:a6:40:4b:23:8e:04:44:ca:ae:ec:9d:dc:8b:fb:28:
         93:ad:e7:dc:5f:fb:3e:32:59:f2:3c:44:52:7e:54:89:2e:74:
         81:80:81:fd:d6:fe:82:c0:f6:58:0d:fb:c7:2a:07:d7:78:13:
         31:a2:41:99:26:bf:c3:39:02:48:e2:cc:09:ad:7d:5a:25:48:
         e8:49:07:85:57:82:3c:04:77:e9:e2:7d:88:17:4a:a5:04:99:
         71:f5:9d:96:f7:f2:ed:f5:27:77:f2:1c:15:18:da:2e:2b:f5:
         5b:a0:d9:59:5b:8d:ad:00:09:8d:e2:9a:58:3d:b4:71:2e:a4:
         a4:ca:dd:94:b0:f2:f2:ff:13:b5:c5:26:a9:85:61:9b:e1:4a:
         49:26:96:ed:b1:ce:67:7f:32:ed:e2:7b:bb:15:ad:9b:ba:f2:
         43:66:7e:97:7c:27:9b:50:be:fa:57:60:9a:aa:21:ab:4d:09:
         0e:8c:2e:ad:98:f5:2f:a4:77:4e:35:cb:44:0e:4c:f1:80:79:
         04:f2:19:a4:c8:f5:ce:7c:ac:7b:64:f6:93:cf:ed:50:9e:37:
         21:97:8a:24:30:e0:44:1a:fe:8e:96:c1:5e:e0:7d:04:f2:16:
         50:1b:65:b0:3a:a3:4e:81:b0:34:59:24:44:c2:77:69:42:46:
         45:e1:39:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:11:48 2026 by rpki-client