This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft
File:                     nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft (raw, json)
Hash identifier:          ADtxiqONOQyJQXGKibZjsy7w1Erpeje300QKOMxbDkQ=
Subject key identifier:   FE:FD:BB:4F:F0:B6:FF:44:AF:56:8F:C8:50:03:91:D0:6C:E5:43:BD
Authority key identifier: 9D:66:A5:CF:A3:9C:FA:91:E3:13:44:3F:61:3E:73:CC:E7:3F:21:40
Certificate issuer:       /CN=9d66a5cfa39cfa91e313443f613e73cce73f2140
Certificate serial:       019BF7634EAAAE186D24B03C1980BB244E88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft
Manifest number:          1115
Signing time:             Sun 25 Jan 2026 23:00:39 +0000
Manifest this update:     Sun 25 Jan 2026 23:00:39 +0000
Manifest next update:     Mon 26 Jan 2026 23:00:39 +0000
Files and hashes:         1: K6ii7zwpTXAnLxoEd2L2cebqqYg.roa (hash: +Kg9QdSSLwTZgzwhWg2rJmNh8L6tzXz3oQ9EW3sf1KY=)
                          2: nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl (hash: 98fb/X+cFRf6mBxuIDs5Im1Hr9iRGoBfKK5gWiPzcuY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:63:4e:aa:ae:18:6d:24:b0:3c:19:80:bb:24:4e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d66a5cfa39cfa91e313443f613e73cce73f2140
        Validity
            Not Before: Jan 25 23:00:39 2026 GMT
            Not After : Jan 26 23:00:39 2026 GMT
        Subject: CN=fefdbb4ff0b6ff44af568fc8500391d06ce543bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ef:aa:5c:4a:6f:f5:cc:82:e7:e8:cf:c8:83:
                    37:72:fd:a1:f8:ac:b5:08:23:73:69:b7:c6:1a:28:
                    cf:9b:54:2e:3f:a0:b4:b0:c1:68:30:9c:83:65:45:
                    e8:ae:17:0d:a8:74:a3:22:4c:4d:a3:d4:2f:f8:ae:
                    2a:4f:d2:0b:8c:33:3c:99:65:7b:9d:46:21:f7:d4:
                    04:df:24:a1:63:c1:76:1a:86:66:ba:8e:84:a4:07:
                    54:fc:ca:30:77:8d:50:72:b2:5d:fc:9e:37:3f:fa:
                    be:77:d9:8f:90:28:5d:88:ab:36:1d:20:24:54:bc:
                    13:0c:92:fe:b9:b2:8a:38:84:33:d0:74:48:a6:7a:
                    0d:53:ca:99:ed:62:53:49:53:a6:97:ee:e4:39:db:
                    89:69:6a:d4:66:9d:f9:7b:f3:1d:e8:26:60:9b:2e:
                    ba:fb:0f:96:11:ff:c4:79:49:e1:df:81:5b:07:12:
                    dd:b1:36:06:85:c2:2f:fb:a7:24:cd:c5:27:a6:f4:
                    46:78:28:14:fb:6d:96:9f:bf:f3:8b:95:3f:e5:56:
                    c7:01:41:f9:e7:90:62:c6:7a:3e:e5:71:b9:56:e2:
                    00:cd:da:60:38:42:cb:f8:e2:1b:d7:e3:cd:b6:38:
                    e4:c6:6f:96:56:fe:b2:2c:4a:c2:d8:59:31:97:d7:
                    84:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FD:BB:4F:F0:B6:FF:44:AF:56:8F:C8:50:03:91:D0:6C:E5:43:BD
            X509v3 Authority Key Identifier:
                keyid:9D:66:A5:CF:A3:9C:FA:91:E3:13:44:3F:61:3E:73:CC:E7:3F:21:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:9b:c3:0a:ad:58:5c:ae:a5:60:c8:90:79:e3:2e:c6:d6:56:
         05:c4:db:15:49:05:1e:91:c9:07:ab:92:05:38:fa:8f:c5:c5:
         a7:41:ec:ed:ac:92:3f:7d:e3:f5:3f:66:d3:aa:31:f5:f5:c1:
         68:4c:35:7e:78:eb:22:60:ea:30:1c:64:6c:a4:b4:2a:6b:31:
         75:ec:b0:4f:2d:a3:20:d8:f7:43:15:aa:5a:c0:1d:c4:68:a3:
         95:95:18:af:33:46:1e:18:bc:43:f4:6a:29:54:ee:b3:a7:ba:
         dc:a2:32:6f:1e:9b:92:05:b4:b7:b0:8b:5b:d5:e0:5f:c2:0d:
         1b:3d:a1:12:e4:74:d4:fe:8b:17:cb:99:b9:09:4e:d6:34:65:
         2d:29:78:37:f7:5a:76:b2:12:7a:2e:e5:fb:3d:76:57:15:65:
         83:ad:dd:69:b7:7d:89:e0:17:48:a8:24:95:d3:e5:35:b1:78:
         78:34:54:c9:50:81:e4:df:bb:d0:8b:af:8c:0a:6c:38:3e:14:
         e2:d6:f4:33:af:21:6e:56:00:a3:1a:3a:da:da:73:ba:4a:c2:
         1d:d3:21:35:c0:3c:38:c5:8e:b2:63:f1:c6:ed:60:a2:a0:5f:
         da:30:55:60:70:84:56:8b:c4:a2:b4:56:98:68:09:b5:0e:ab:
         89:93:ca:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv3Y06qrhhtJLA8GYC7JE6IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNjZhNWNmYTM5Y2ZhOTFlMzEzNDQzZjYxM2U3M2NjZTcz
ZjIxNDAwHhcNMjYwMTI1MjMwMDM5WhcNMjYwMTI2MjMwMDM5WjAzMTEwLwYDVQQD
EyhmZWZkYmI0ZmYwYjZmZjQ0YWY1NjhmYzg1MDAzOTFkMDZjZTU0M2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1++qXEpv9cyC5+jPyIM3cv2h+Ky1
CCNzabfGGijPm1QuP6C0sMFoMJyDZUXorhcNqHSjIkxNo9Qv+K4qT9ILjDM8mWV7
nUYh99QE3yShY8F2GoZmuo6EpAdU/Mowd41QcrJd/J43P/q+d9mPkChdiKs2HSAk
VLwTDJL+ubKKOIQz0HRIpnoNU8qZ7WJTSVOml+7kOduJaWrUZp35e/Md6CZgmy66
+w+WEf/EeUnh34FbBxLdsTYGhcIv+6ckzcUnpvRGeCgU+22Wn7/zi5U/5VbHAUH5
55Bixno+5XG5VuIAzdpgOELL+OIb1+PNtjjkxm+WVv6yLErC2Fkxl9eERQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP79u0/wtv9Er1aPyFADkdBs5UO9MB8GA1UdIwQY
MBaAFJ1mpc+jnPqR4xNEP2E+c8znPyFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbldhbHo2T2MtcEhqRTBRX1lUNXp6T2NfSVVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83NjI3NDMtNzE2NC00MzNlLThiYjYt
YTE5NTA3ZGU3NWI0LzEvbldhbHo2T2MtcEhqRTBRX1lUNXp6T2NfSVVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi83NjI3NDMtNzE2NC00MzNlLThiYjYtYTE5NTA3ZGU3NWI0
LzEvbldhbHo2T2MtcEhqRTBRX1lUNXp6T2NfSVVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmJvDCq1Y
XK6lYMiQeeMuxtZWBcTbFUkFHpHJB6uSBTj6j8XFp0Hs7aySP33j9T9m06ox9fXB
aEw1fnjrImDqMBxkbKS0KmsxdeywTy2jINj3QxWqWsAdxGijlZUYrzNGHhi8Q/Rq
KVTus6e63KIybx6bkgW0t7CLW9XgX8INGz2hEuR01P6LF8uZuQlO1jRlLSl4N/da
drISei7l+z12VxVlg63dabd9ieAXSKgkldPlNbF4eDRUyVCB5N+70IuvjApsOD4U
4tb0M68hblYAoxo62tpzukrCHdMhNcA8OMWOsmPxxu1goqBf2jBVYHCEVovEorRW
mGgJtQ6riZPKjw==
-----END CERTIFICATE-----
Generated at Mon Jan 26 02:32:52 2026 by rpki-client