This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft
File:                     WjdsgAjWq9liNBVj3SpNzK8VPLo.mft (raw, json)
Hash identifier:          UXfSvrwJTGNjyZGc0WrIwsFmVvLz8vaMNEOsFbxREnM=
Subject key identifier:   BF:66:0C:54:96:30:26:91:71:34:E0:65:E2:58:9B:96:BC:55:CF:BC
Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA
Certificate issuer:       /CN=5a376c8008d6abd962341563dd2a4dccaf153cba
Certificate serial:       019BFCC0CF2C4E7B2C1247B91B5A6F6A7007
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft
Manifest number:          1757
Signing time:             Tue 27 Jan 2026 00:00:52 +0000
Manifest this update:     Tue 27 Jan 2026 00:00:52 +0000
Manifest next update:     Wed 28 Jan 2026 00:00:52 +0000
Files and hashes:         1: 1-fyw95ne31Svt7iUXr8S4pvC9nw.roa (hash: NUmbYoePU7kQqI3Sa68HIIdVbQG9TdhCGQCHhaTXrGA=)
                          2: 3Fjgb1DclAOHEHkd1ujAyzMU98I.roa (hash: 3vwYNeDQAc78Pa5gcdAqKT6+wjGmOGUKytVaNJTBFTw=)
                          3: DBVt-Kol8GtKXZhzeMem7n5aqyE.roa (hash: hvHwhp8dN1x+LMxwBZwRZDfpwreuESZg0Faol2vvqxE=)
                          4: KKBExKXUfwOl6IRwKc1wQVHh4bM.roa (hash: 92/f9xIH6P+vz8MuNOcGvz2PgbDhKT2PNZfoBm0w3Z0=)
                          5: WjdsgAjWq9liNBVj3SpNzK8VPLo.crl (hash: EYvVKDMISF1DX1r6J3EsNQMQYz1cX35yD29dCLHVjhU=)
                          6: e_oEkxj5wakUjaTOI_wOqCOK5n8.roa (hash: 20kV4OeToxJk7pR58HISzEGgkBDUp39Pn/wqiBDv3Fk=)
                          7: gnrzL3jyRlcBtVcsWS9Y5A_BL44.roa (hash: PhKB03egTh15leaOC+yb5z47cf5akEmY1WAfSKLXVsI=)
                          8: hSges_Ltmi2kLQbfthI0oLK2-Aw.roa (hash: ofUTm9TOC9YCPztyeJkIczU+y1/O6ZlOyL5d83VL7h0=)
                          9: iYKDQoqHTEgJUCkrGhQOU5NqiFY.roa (hash: vF5FuUkbJ3rccCNOsf7dw5WnBUBYWin8sXakVk1ewfU=)
                          10: mHEmY2pinSwaTCphGCHN22bgq8k.roa (hash: 9Vu4Z943d+sudfjz+IrLSW/qi7Go6bC6mcneD6nK7Jc=)
                          11: r-ctfubw9UTIH_idiBrGqwNk0x0.roa (hash: MEv59vY2msaSZKND2KcxPp1lNxW8U5cHMg9rXN2b58I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:c0:cf:2c:4e:7b:2c:12:47:b9:1b:5a:6f:6a:70:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba
        Validity
            Not Before: Jan 27 00:00:52 2026 GMT
            Not After : Jan 28 00:00:52 2026 GMT
        Subject: CN=bf660c54963026917134e065e2589b96bc55cfbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:97:6d:25:03:0c:e6:12:49:76:78:54:28:10:
                    f7:fb:85:3f:7e:0f:89:13:0c:66:b7:1d:77:a5:1a:
                    86:af:fc:6e:3b:4a:a1:42:45:46:38:79:65:98:e3:
                    e7:26:2a:a1:70:ba:40:44:ff:bc:50:6d:c2:79:76:
                    e5:8b:a9:44:ad:c3:50:07:49:65:d3:6f:dc:f6:c8:
                    1e:3d:76:87:53:4c:96:3e:bf:fd:6f:08:27:03:7a:
                    91:22:67:80:ad:86:27:7b:c2:57:7e:b4:35:8c:38:
                    e0:6d:95:8c:94:4e:46:a0:b9:1b:ba:f8:ed:d9:f8:
                    5b:1f:3e:5d:8c:83:a5:c3:d8:c9:26:11:1e:7e:46:
                    59:53:ed:01:66:07:90:76:30:76:59:99:b9:da:fa:
                    72:05:f4:b1:f1:63:48:78:7f:5b:3a:7e:48:1c:25:
                    7c:4a:61:1b:f7:1f:d8:47:30:53:a6:8f:56:0b:83:
                    ec:12:d8:d9:78:eb:22:49:a9:6c:e1:cb:fa:bb:cb:
                    10:92:2d:1b:f7:17:1e:57:c4:87:d1:20:69:9c:c0:
                    28:a8:9e:08:04:59:c0:b7:e7:77:9b:6c:c1:aa:2d:
                    b2:12:36:bc:b6:27:f4:9f:21:22:86:d1:19:82:b4:
                    bf:d0:79:9b:f9:3a:7e:cc:26:01:1e:90:a5:cd:92:
                    81:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:66:0C:54:96:30:26:91:71:34:E0:65:E2:58:9B:96:BC:55:CF:BC
            X509v3 Authority Key Identifier:
                keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:22:ec:44:3e:c4:19:b9:71:02:cc:30:29:d9:87:06:ad:35:
         d5:8d:92:94:d4:54:9a:94:ab:c7:c3:1b:9a:33:98:d1:18:54:
         df:09:3f:cb:f6:fe:e4:6b:ab:ca:eb:ee:8c:c3:37:b9:55:cc:
         e5:09:91:87:c0:af:3c:a5:49:7d:c2:1d:66:5a:3d:1f:e4:97:
         91:e9:92:f2:31:0d:a9:4b:38:e1:9e:3b:63:cd:f2:26:97:a6:
         aa:61:ec:92:c1:1b:51:4a:92:08:4c:0e:a9:44:4c:d1:ac:06:
         ef:bc:30:3f:d2:32:b6:db:d2:59:2d:20:38:2f:55:32:2e:5a:
         48:ec:03:b4:ea:c4:04:26:de:b4:85:db:e4:d9:07:e8:8e:e0:
         2a:74:d6:f6:59:f1:2e:2c:1e:87:a6:b1:90:56:75:2b:c1:99:
         8c:fd:ed:64:d6:06:7d:13:52:61:60:61:d9:af:a7:ac:f0:34:
         73:94:59:94:16:5a:45:5e:84:70:7e:12:54:d7:a5:bf:3d:51:
         e6:91:95:57:fa:46:33:9c:7c:80:a6:83:42:02:af:1f:65:1e:
         57:98:1c:7a:e3:f3:3a:53:87:64:5c:c1:bb:92:f8:5a:a4:56:
         3d:ab:39:7b:45:c8:f2:6c:ca:0c:d9:51:89:2b:8f:06:e7:6c:
         12:e9:8f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 02:17:20 2026 by rpki-client