This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
File:                     WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft (raw, json)
Hash identifier:          l60yCr596jwPuZjTXeh14GB9B8BOhBikyRb1QIaCPGM=
Subject key identifier:   47:B1:7E:1B:F9:C9:1C:82:DB:4D:2D:FA:10:A2:6D:31:BB:FF:D7:D2
Authority key identifier: 59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73
Certificate issuer:       /CN=5960e6cd1b1b0063b1890f780745c245606dcf73
Certificate serial:       019BF4996C559CAD7B02110347CEE8F7F366
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
Manifest number:          17E8
Signing time:             Sun 25 Jan 2026 10:00:53 +0000
Manifest this update:     Sun 25 Jan 2026 10:00:53 +0000
Manifest next update:     Mon 26 Jan 2026 10:00:53 +0000
Files and hashes:         1: EAHkC7o9VL-S2-gmEhIR8E0Rx9o.roa (hash: OdYtd2ANkkqc8l4EyXlFU9oU1QIesxnnDbHz973YpsU=)
                          2: WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl (hash: MMsbIyjciA7YVCFddAy/E5oLwWGLBOV2Yq4MCWaJplQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 10:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:99:6c:55:9c:ad:7b:02:11:03:47:ce:e8:f7:f3:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5960e6cd1b1b0063b1890f780745c245606dcf73
        Validity
            Not Before: Jan 25 10:00:53 2026 GMT
            Not After : Jan 26 10:00:53 2026 GMT
        Subject: CN=47b17e1bf9c91c82db4d2dfa10a26d31bbffd7d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:59:4d:1e:52:e5:e1:53:a4:f7:ec:15:f5:18:
                    99:61:05:0b:36:8b:db:7a:f8:92:08:de:16:c9:aa:
                    f2:99:e2:2f:c7:16:33:53:ab:a3:3a:2a:c4:58:af:
                    47:1a:d0:89:91:0e:6b:d1:6e:c1:af:a0:39:4c:db:
                    3e:74:08:6a:40:38:0c:4e:e0:79:4a:fa:20:05:13:
                    bd:63:3b:80:ca:1e:81:9e:19:eb:ad:c2:40:c5:5b:
                    d2:3c:f8:9f:4c:ed:51:ef:16:c8:b3:28:a4:dc:1c:
                    83:8a:78:9f:63:41:e9:e9:bd:ff:a6:f1:fb:7c:0c:
                    f1:8b:41:3f:1c:a5:77:e2:fd:7d:2a:84:f9:cc:1c:
                    46:e7:6c:35:3e:30:f4:1d:2b:e5:cb:12:5e:91:18:
                    19:95:07:ff:1f:db:82:c5:80:16:cf:ad:c2:34:9a:
                    9e:52:79:7d:ab:ea:a6:57:ba:af:e4:fb:87:09:1f:
                    b9:16:92:31:70:f5:6f:0f:3f:79:09:12:93:c2:ea:
                    d2:5b:43:e1:96:04:cd:aa:fb:cb:a2:34:08:08:be:
                    24:88:d8:bb:d9:80:12:a6:b0:e9:74:31:04:2b:99:
                    00:de:84:72:ad:8a:3e:3f:7f:a1:24:02:57:fc:b7:
                    f6:07:7f:e0:ee:bf:0e:7d:16:ff:b7:5e:19:30:9b:
                    07:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B1:7E:1B:F9:C9:1C:82:DB:4D:2D:FA:10:A2:6D:31:BB:FF:D7:D2
            X509v3 Authority Key Identifier:
                keyid:59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:8f:40:55:91:3c:00:45:a0:61:05:4a:63:36:16:44:ff:23:
         df:4e:ed:1a:55:28:d3:b9:6c:09:9a:cb:18:0a:d9:63:b4:2e:
         15:02:29:32:4f:5c:4d:03:0d:5f:87:9a:2f:62:2a:00:3d:25:
         f4:6e:c0:8a:1e:5c:5f:9c:f9:03:50:59:99:27:1e:69:c4:ae:
         dc:31:da:75:d0:72:7a:45:95:b9:46:b6:53:68:fc:4b:0c:1f:
         56:2d:80:a6:6b:fa:e3:af:a5:cb:a8:c2:e6:14:15:1a:89:c2:
         0f:52:48:47:ca:3d:05:b8:37:95:41:75:98:1f:ad:96:91:28:
         62:49:f3:09:13:3f:dd:11:cc:f2:f8:ba:b9:e6:e0:cb:df:ab:
         57:3f:54:1f:14:c4:e8:2f:7c:cc:07:69:78:e7:46:42:6a:a0:
         fc:76:58:ca:f7:c4:ad:22:dc:09:55:14:38:18:c1:13:c8:6f:
         c5:39:64:ff:f6:61:82:de:a9:14:9b:38:b8:45:c0:4c:6b:ed:
         48:56:f9:d2:ca:0a:0c:4f:3b:cb:aa:ac:ed:99:b0:51:08:5e:
         d2:fe:13:9d:3f:9c:c0:c1:0a:5d:b1:fd:ef:01:97:d8:14:2b:
         43:12:b3:7f:a5:4f:83:d9:cc:a2:6a:8b:62:8a:dd:11:fc:03:
         15:39:e3:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv0mWxVnK17AhEDR87o9/NmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NjBlNmNkMWIxYjAwNjNiMTg5MGY3ODA3NDVjMjQ1NjA2
ZGNmNzMwHhcNMjYwMTI1MTAwMDUzWhcNMjYwMTI2MTAwMDUzWjAzMTEwLwYDVQQD
Eyg0N2IxN2UxYmY5YzkxYzgyZGI0ZDJkZmExMGEyNmQzMWJiZmZkN2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6FlNHlLl4VOk9+wV9RiZYQULNovb
eviSCN4WyarymeIvxxYzU6ujOirEWK9HGtCJkQ5r0W7Br6A5TNs+dAhqQDgMTuB5
SvogBRO9YzuAyh6BnhnrrcJAxVvSPPifTO1R7xbIsyik3ByDinifY0Hp6b3/pvH7
fAzxi0E/HKV34v19KoT5zBxG52w1PjD0HSvlyxJekRgZlQf/H9uCxYAWz63CNJqe
Unl9q+qmV7qv5PuHCR+5FpIxcPVvDz95CRKTwurSW0PhlgTNqvvLojQICL4kiNi7
2YASprDpdDEEK5kA3oRyrYo+P3+hJAJX/Lf2B3/g7r8OfRb/t14ZMJsH8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEexfhv5yRyC200t+hCibTG7/9fSMB8GA1UdIwQY
MBaAFFlg5s0bGwBjsYkPeAdFwkVgbc9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1dEbXpSc2JBR094aVE5NEIwWENSV0J0ejNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9kNmQxYmUtMTBkOS00YTNhLWJkMTQt
MGE4MzBkMDFhZmQxLzEvV1dEbXpSc2JBR094aVE5NEIwWENSV0J0ejNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9kNmQxYmUtMTBkOS00YTNhLWJkMTQtMGE4MzBkMDFhZmQx
LzEvV1dEbXpSc2JBR094aVE5NEIwWENSV0J0ejNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfI9AVZE8
AEWgYQVKYzYWRP8j307tGlUo07lsCZrLGArZY7QuFQIpMk9cTQMNX4eaL2IqAD0l
9G7Aih5cX5z5A1BZmSceacSu3DHaddByekWVuUa2U2j8SwwfVi2Apmv646+ly6jC
5hQVGonCD1JIR8o9Bbg3lUF1mB+tlpEoYknzCRM/3RHM8vi6uebgy9+rVz9UHxTE
6C98zAdpeOdGQmqg/HZYyvfErSLcCVUUOBjBE8hvxTlk//Zhgt6pFJs4uEXATGvt
SFb50soKDE87y6qs7ZmwUQhe0v4TnT+cwMEKXbH97wGX2BQrQxKzf6VPg9nMomqL
YordEfwDFTnjIw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:06:19 2026 by rpki-client