This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft
File:                     WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft (raw, json)
Hash identifier:          4nYXk13rxN7gvz0dL3ll5iNlN7yxlr3xv31fM8FfPqQ=
Subject key identifier:   09:4D:BA:88:DE:1B:0E:85:73:5B:B5:22:6C:FD:1D:94:36:0E:BE:07
Authority key identifier: 59:4B:79:99:0F:61:6A:83:44:C8:60:14:8F:C9:22:91:0E:15:4D:AD
Certificate issuer:       /CN=594b79990f616a8344c860148fc922910e154dad
Certificate serial:       019BF6BEC544626BB494C959D37375BB8DDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft
Manifest number:          102F
Signing time:             Sun 25 Jan 2026 20:00:56 +0000
Manifest this update:     Sun 25 Jan 2026 20:00:56 +0000
Manifest next update:     Mon 26 Jan 2026 20:00:56 +0000
Files and hashes:         1: Blotrpr7MpBhfTIOMAd4QzI4MTU.roa (hash: 7tg4tSbcWIkD3S9S1Cn28G+hcZYO6KUz7cO5Ike+MUg=)
                          2: WUt5mQ9haoNEyGAUj8kikQ4VTa0.crl (hash: rnXW5ljNHeuUQE/pFp3z0V5JE50iIWcJFABosQMG21Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:be:c5:44:62:6b:b4:94:c9:59:d3:73:75:bb:8d:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=594b79990f616a8344c860148fc922910e154dad
        Validity
            Not Before: Jan 25 20:00:56 2026 GMT
            Not After : Jan 26 20:00:56 2026 GMT
        Subject: CN=094dba88de1b0e85735bb5226cfd1d94360ebe07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:58:a7:9b:af:bc:4f:3b:36:1e:9e:7a:9e:b0:
                    eb:16:95:3c:e3:10:a6:0e:2a:dc:12:91:91:85:01:
                    b8:01:9d:be:a5:3e:41:ad:f0:ee:3c:fc:a3:4b:48:
                    a8:6c:19:9f:61:a9:98:3f:30:24:a8:d5:66:91:f7:
                    98:dd:36:bc:78:5d:b6:3c:42:fb:5a:1c:b3:3e:4c:
                    ba:f2:43:85:ec:33:60:c5:82:1c:7a:6b:ee:74:a9:
                    8c:3a:16:23:b4:9c:ad:e5:83:09:1f:53:a1:7a:95:
                    28:59:19:a3:13:30:98:e8:ff:ce:04:0e:04:22:3c:
                    e1:72:df:6a:e0:09:b1:8e:df:38:7c:7a:14:2f:b8:
                    3f:c9:fd:ec:d1:ad:b4:87:58:77:60:97:05:3c:89:
                    e5:c1:90:51:16:55:dc:da:e7:bd:2a:98:8d:a9:0d:
                    59:ab:93:83:76:c2:49:f1:1b:0c:c4:b1:7c:25:ac:
                    e8:4e:65:78:14:b2:5d:d8:d9:fb:8a:74:cb:72:2f:
                    2a:20:83:cb:ae:36:a6:f9:90:bf:aa:aa:23:02:90:
                    32:29:34:45:c2:99:44:7b:d0:b3:0e:7f:c5:ed:58:
                    75:d1:14:56:4a:8b:f1:54:37:30:1c:39:d3:7f:44:
                    21:1c:69:5a:6b:d3:de:bd:db:4e:43:ee:8c:d9:6f:
                    79:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:4D:BA:88:DE:1B:0E:85:73:5B:B5:22:6C:FD:1D:94:36:0E:BE:07
            X509v3 Authority Key Identifier:
                keyid:59:4B:79:99:0F:61:6A:83:44:C8:60:14:8F:C9:22:91:0E:15:4D:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:b7:eb:6b:9d:40:52:d7:d0:34:4e:e1:03:b6:65:3f:db:48:
         20:d2:bc:c6:41:fa:9a:ee:65:d5:9e:f8:52:16:6e:81:b3:5d:
         0a:3c:10:9c:f8:2e:98:21:76:53:b6:92:4e:cc:d1:66:70:16:
         74:21:fe:9f:f9:b8:2a:99:14:3a:2c:c0:4c:8e:0c:92:a4:1d:
         c7:63:7c:56:ea:af:a7:20:a1:fa:12:6c:dc:55:82:22:66:05:
         c4:b5:a9:72:31:b9:c3:c6:17:ae:d8:62:95:57:00:46:d8:c2:
         6e:26:46:ae:f3:8a:81:e0:51:b4:10:95:96:9b:91:2f:a8:f5:
         2d:74:a6:62:78:0c:a8:af:df:b9:02:6d:4e:84:85:f1:70:e6:
         db:3f:cc:5f:65:0b:04:e4:1f:77:7d:76:5c:31:9e:cb:00:93:
         01:b8:e8:50:cc:45:42:f0:70:51:b0:a2:62:75:c0:21:3b:87:
         ea:be:56:88:d2:44:d5:d3:fe:a7:fc:ae:32:23:bf:7f:a3:fc:
         74:2a:20:14:2a:21:48:1d:1f:d5:e2:3b:1e:a7:19:e8:03:54:
         61:36:30:f4:99:7f:3b:c1:1c:5f:ba:c9:69:d4:b9:8f:a9:2b:
         38:db:55:19:31:99:93:58:54:e9:40:92:f8:ef:1f:af:65:c5:
         02:37:4b:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv2vsVEYmu0lMlZ03N1u43aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NGI3OTk5MGY2MTZhODM0NGM4NjAxNDhmYzkyMjkxMGUx
NTRkYWQwHhcNMjYwMTI1MjAwMDU2WhcNMjYwMTI2MjAwMDU2WjAzMTEwLwYDVQQD
EygwOTRkYmE4OGRlMWIwZTg1NzM1YmI1MjI2Y2ZkMWQ5NDM2MGViZTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFinm6+8Tzs2Hp56nrDrFpU84xCm
DircEpGRhQG4AZ2+pT5BrfDuPPyjS0iobBmfYamYPzAkqNVmkfeY3Ta8eF22PEL7
WhyzPky68kOF7DNgxYIcemvudKmMOhYjtJyt5YMJH1OhepUoWRmjEzCY6P/OBA4E
Ijzhct9q4Amxjt84fHoUL7g/yf3s0a20h1h3YJcFPInlwZBRFlXc2ue9KpiNqQ1Z
q5ODdsJJ8RsMxLF8JazoTmV4FLJd2Nn7inTLci8qIIPLrjam+ZC/qqojApAyKTRF
wplEe9CzDn/F7Vh10RRWSovxVDcwHDnTf0QhHGlaa9PevdtOQ+6M2W95BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAlNuojeGw6Fc1u1Imz9HZQ2Dr4HMB8GA1UdIwQY
MBaAFFlLeZkPYWqDRMhgFI/JIpEOFU2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1V0NW1ROWhhb05FeUdBVWo4a2lrUTRWVGEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8yNjY0MWEtYjRmOS00ZmJhLTg2N2Qt
ZjdmMzY0NTc4NzRlLzEvV1V0NW1ROWhhb05FeUdBVWo4a2lrUTRWVGEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8yNjY0MWEtYjRmOS00ZmJhLTg2N2QtZjdmMzY0NTc4NzRl
LzEvV1V0NW1ROWhhb05FeUdBVWo4a2lrUTRWVGEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdLfra51A
UtfQNE7hA7ZlP9tIINK8xkH6mu5l1Z74UhZugbNdCjwQnPgumCF2U7aSTszRZnAW
dCH+n/m4KpkUOizATI4MkqQdx2N8VuqvpyCh+hJs3FWCImYFxLWpcjG5w8YXrthi
lVcARtjCbiZGrvOKgeBRtBCVlpuRL6j1LXSmYngMqK/fuQJtToSF8XDm2z/MX2UL
BOQfd312XDGeywCTAbjoUMxFQvBwUbCiYnXAITuH6r5WiNJE1dP+p/yuMiO/f6P8
dCogFCohSB0f1eI7HqcZ6ANUYTYw9Jl/O8EcX7rJadS5j6krONtVGTGZk1hU6UCS
+O8fr2XFAjdLLQ==
-----END CERTIFICATE-----
Generated at Mon Jan 26 00:20:24 2026 by rpki-client