This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft
File:                     WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft (raw, json)
Hash identifier:          dtGib/BmRrd2CpwPNErExUGx7z/k/q7ZmMI0fdVZPRA=
Subject key identifier:   6F:89:71:BE:1E:AB:2F:E6:A0:D0:42:42:CA:BA:75:6E:F6:9C:D3:5F
Authority key identifier: 5A:68:D6:99:D1:A9:45:7C:78:AC:FB:EC:00:4F:98:67:7A:A4:CC:16
Certificate issuer:       /CN=5a68d699d1a9457c78acfbec004f98677aa4cc16
Certificate serial:       019BFB09B6900FDEA13C20B1B5F5BFD29E81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft
Manifest number:          17F2
Signing time:             Mon 26 Jan 2026 16:01:16 +0000
Manifest this update:     Mon 26 Jan 2026 16:01:16 +0000
Manifest next update:     Tue 27 Jan 2026 16:01:16 +0000
Files and hashes:         1: FpD_qWuFRs5yB76Ev3wufv6K2z4.roa (hash: FSwRAONOIK4j/XMQ9hE0Wzcc2X2TjJV/e/vz44br/E4=)
                          2: Ms5QQ8hSMqQ1fJTgyVbM1SW-D0E.roa (hash: x2s25Fjh6v9DZuMShLb6qRa3XLGsukQHsqtZn9Lxoeo=)
                          3: WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl (hash: 6W9ZAb/CW6fJEBCFyhwT0CSjeMWU7Ggs8EN89SVI81k=)
                          4: YhBolksDWVHTN-zJ1ieDr6rh-7k.roa (hash: UYCr/ovYg1esT8fa7GfmnilQ+Y+AIHt8oDNr7PNZe1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:09:b6:90:0f:de:a1:3c:20:b1:b5:f5:bf:d2:9e:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a68d699d1a9457c78acfbec004f98677aa4cc16
        Validity
            Not Before: Jan 26 16:01:16 2026 GMT
            Not After : Jan 27 16:01:16 2026 GMT
        Subject: CN=6f8971be1eab2fe6a0d04242caba756ef69cd35f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4e:32:b6:41:5a:60:13:30:3a:81:40:eb:1f:
                    ea:81:1e:aa:c0:35:11:a9:81:f6:65:c9:85:ef:7e:
                    fd:0f:6f:25:bf:ad:65:ad:1c:76:db:c0:88:78:2a:
                    24:0b:15:03:b1:a9:b6:1d:ca:7d:e2:df:8f:97:a7:
                    48:73:e4:46:91:88:0d:df:d9:11:4d:e4:29:17:7c:
                    34:df:92:93:87:81:e0:6b:bb:bb:ff:75:6a:6c:48:
                    72:74:11:de:b6:97:c1:c3:78:96:e7:69:b2:61:82:
                    51:39:40:b5:04:88:22:3b:37:72:a5:5d:9f:d7:6e:
                    fb:8f:dc:bb:23:7a:c5:70:fa:3b:32:71:d7:28:8c:
                    6a:fa:71:5b:08:83:c5:5d:41:31:b2:d5:19:b4:ec:
                    33:3a:62:ab:56:30:09:4d:62:7a:68:15:5a:4a:6b:
                    86:fa:a5:26:e7:4c:d0:e4:27:c1:e8:40:82:bd:f5:
                    c2:4b:bf:be:c6:02:dc:16:31:c6:e5:27:b2:a3:f7:
                    9d:3a:d6:3d:80:ff:94:78:70:8a:66:d9:7d:bb:5b:
                    a6:8c:09:d6:58:ab:83:34:42:eb:f5:24:4c:5c:9d:
                    f4:42:a9:78:17:28:94:ba:2e:56:8a:c1:5e:f9:fa:
                    6b:3c:cd:f4:f1:b3:18:82:fe:78:aa:50:1c:30:38:
                    2c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:89:71:BE:1E:AB:2F:E6:A0:D0:42:42:CA:BA:75:6E:F6:9C:D3:5F
            X509v3 Authority Key Identifier:
                keyid:5A:68:D6:99:D1:A9:45:7C:78:AC:FB:EC:00:4F:98:67:7A:A4:CC:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:75:e1:98:ec:2a:c3:52:89:76:25:4f:3c:12:25:39:c1:ba:
         e1:55:c3:de:a7:d9:1b:2b:a0:e2:b6:2c:1b:ef:7f:75:6c:23:
         99:fd:d7:ae:a0:5e:5b:b9:59:e7:15:dd:5e:d9:11:4d:17:a4:
         ef:7e:a2:08:f6:f7:17:8a:68:52:e0:4f:e2:83:29:50:df:b3:
         54:ba:f1:95:79:49:4e:98:20:58:d5:f0:4d:34:1e:96:5c:35:
         ae:3a:e9:ad:ce:b7:be:3a:bf:d2:b2:58:c0:a0:e8:62:4b:99:
         e0:c1:6e:da:fe:79:3e:2a:92:76:a8:b6:05:42:df:e4:70:4d:
         bf:2d:65:cd:ee:66:1b:67:af:b3:e4:f6:85:19:82:c1:27:d5:
         71:8c:15:39:b1:06:22:8a:0e:eb:ff:31:54:da:1f:36:ae:ea:
         8a:72:b0:f7:b6:63:c3:6c:de:73:cf:bc:4a:f0:1b:71:b7:87:
         bf:10:b6:57:98:71:d6:5c:33:4d:5c:3f:c8:a6:47:3f:1a:c6:
         37:a2:21:f4:d7:07:fc:2b:4f:f3:13:36:ab:6b:ff:d9:23:95:
         a9:7d:a8:7d:4c:9f:c6:db:d4:a3:ed:20:36:8a:66:fa:ba:68:
         14:2c:49:60:d0:43:e7:d5:0c:75:2d:ca:9b:76:96:74:ad:fa:
         54:f5:60:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 18:23:28 2026 by rpki-client