This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft
File:                     wGLmqllGb-VhqTq81NzfPepNwmc.mft (raw, json)
Hash identifier:          8WFj+EgIFS0ifZdWCvFm0L1TPKUXOBdDBJxcMmqUeBU=
Subject key identifier:   81:97:0D:F8:03:09:50:10:76:F1:51:1A:68:D1:7C:CA:FB:A4:1D:A0
Authority key identifier: C0:62:E6:AA:59:46:6F:E5:61:A9:3A:BC:D4:DC:DF:3D:EA:4D:C2:67
Certificate issuer:       /CN=c062e6aa59466fe561a93abcd4dcdf3dea4dc267
Certificate serial:       019BD9FE3C6415C59894E5C058DC934CFB70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wGLmqllGb-VhqTq81NzfPepNwmc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft
Manifest number:          06BA
Signing time:             Tue 20 Jan 2026 06:01:16 +0000
Manifest this update:     Tue 20 Jan 2026 06:01:16 +0000
Manifest next update:     Wed 21 Jan 2026 06:01:16 +0000
Files and hashes:         1: Mz8qnBphricpE-y1NgDJ85UMBGA.roa (hash: D7iDGlfFeVsE7k0g3r151vYQu3PiucDxigC9xAR74QQ=)
                          2: wGLmqllGb-VhqTq81NzfPepNwmc.crl (hash: fA0p7a/L1iDKrrdx14PcRogXClqy3xHlIcZwmHwUSSA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wGLmqllGb-VhqTq81NzfPepNwmc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 03:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d9:fe:3c:64:15:c5:98:94:e5:c0:58:dc:93:4c:fb:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c062e6aa59466fe561a93abcd4dcdf3dea4dc267
        Validity
            Not Before: Jan 20 06:01:16 2026 GMT
            Not After : Jan 21 06:01:16 2026 GMT
        Subject: CN=81970df80309501076f1511a68d17ccafba41da0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:68:53:11:f7:17:ad:b2:2f:89:fc:9b:42:8f:
                    3d:ff:95:df:2e:74:fe:8c:09:91:b9:dc:c6:7a:a7:
                    c0:56:7a:3f:05:41:16:b3:11:57:d9:3b:43:95:73:
                    1a:49:74:05:ff:b4:af:9a:06:0f:93:e7:24:d0:6d:
                    f5:e2:88:e4:a6:a8:32:65:2f:dc:7b:4c:dd:d0:22:
                    d9:2a:43:5b:cb:43:04:dd:75:17:ff:c0:ef:f1:a0:
                    2a:ca:23:4b:a7:15:0a:c6:1c:8a:03:26:7c:b9:ed:
                    a5:9e:9c:77:40:3b:2b:e5:9c:ee:74:bb:1c:6e:c9:
                    bf:ac:f4:ff:1d:91:a6:ec:6a:2c:5c:10:27:69:4e:
                    6e:31:f5:69:54:f4:2c:3d:b6:bc:50:55:34:f9:cf:
                    83:4a:67:0f:ca:79:d7:4b:2d:42:f4:48:e8:4a:76:
                    3d:ab:66:1b:37:c4:4c:38:58:53:a3:41:45:ac:1a:
                    ba:a7:d5:b1:46:44:2e:a5:f0:ef:c7:7d:04:5f:38:
                    c7:e3:40:1a:81:d5:8e:f0:e9:53:8e:5d:2a:f9:68:
                    e8:21:3c:43:ba:a5:cc:45:95:5b:cb:f4:44:fc:d8:
                    df:7e:af:f0:03:ad:59:af:99:37:fe:d3:13:b3:2a:
                    f9:29:eb:45:f1:22:91:e2:b4:2b:d3:94:9e:9e:72:
                    2e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:97:0D:F8:03:09:50:10:76:F1:51:1A:68:D1:7C:CA:FB:A4:1D:A0
            X509v3 Authority Key Identifier:
                keyid:C0:62:E6:AA:59:46:6F:E5:61:A9:3A:BC:D4:DC:DF:3D:EA:4D:C2:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGLmqllGb-VhqTq81NzfPepNwmc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:f3:9f:aa:79:68:dc:3d:d4:69:e9:9e:bd:b4:e3:dc:26:83:
         86:a9:d6:8d:f1:d6:16:d9:89:dd:f2:2f:eb:d7:5e:82:33:fd:
         9a:50:52:54:1a:85:0b:04:29:99:38:5e:1b:2d:9d:a5:b9:9e:
         83:34:b1:43:08:03:1e:4a:b1:a7:97:e9:17:95:17:fc:8d:e1:
         e4:91:b2:a9:f4:15:5f:b1:1f:6f:d1:3f:b4:4c:f0:a9:bd:3e:
         2c:70:4b:53:55:ae:29:dd:b9:27:c9:43:90:40:d9:81:e2:5c:
         a2:11:d5:ee:f4:85:1f:4b:b8:1b:08:84:75:3b:77:93:1f:86:
         e8:8a:71:ee:65:96:56:1d:8b:bf:17:eb:4f:10:d4:30:58:54:
         04:d3:11:08:7e:3e:5f:3d:c8:d3:e4:a9:33:3f:64:2a:12:57:
         07:8d:47:f5:da:ed:63:f4:e7:6c:23:10:54:56:41:d8:ab:6f:
         a0:1f:d7:0c:7b:b6:c8:8f:f5:3f:0c:11:ab:74:37:8a:11:cd:
         3e:02:a0:05:2c:3f:6a:da:2b:8c:7c:53:cf:31:b7:4b:b8:86:
         87:a7:ba:5c:15:90:5c:a2:69:8d:7c:7e:0e:40:cd:7d:1d:3c:
         eb:92:84:fc:49:0e:0d:5c:cc:56:2f:20:f7:73:50:9b:97:ea:
         11:75:76:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 08:22:06 2026 by rpki-client