This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft
File:                     WWXGLxDCXnp-8YNWgzqk-bmELGo.mft (raw, json)
Hash identifier:          Ofn70AgMLGOTpq7P1/9JM3+l2IkjkcqKvPbl1P7nDwI=
Subject key identifier:   30:14:8F:AB:78:70:A2:3D:0D:6D:33:F0:60:8D:CD:3E:DB:2E:93:83
Authority key identifier: 59:65:C6:2F:10:C2:5E:7A:7E:F1:83:56:83:3A:A4:F9:B9:84:2C:6A
Certificate issuer:       /CN=5965c62f10c25e7a7ef18356833aa4f9b9842c6a
Certificate serial:       019C2706C739231C05355E3812D454332856
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft
Manifest number:          11C4
Signing time:             Wed 04 Feb 2026 05:01:21 +0000
Manifest this update:     Wed 04 Feb 2026 05:01:21 +0000
Manifest next update:     Thu 05 Feb 2026 05:01:21 +0000
Files and hashes:         1: WWXGLxDCXnp-8YNWgzqk-bmELGo.crl (hash: VTKNtKfQmLHuGHi5hFKvdYlbakyMucnnsSsBDBw8DSs=)
                          2: uSTOG5hPdGAJ8tKDlqGT_j-Wz90.roa (hash: K1kjwbswlvDhq+X0b+wPq3xckmUou+CcfH9LmHS/rpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 05:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:27:06:c7:39:23:1c:05:35:5e:38:12:d4:54:33:28:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5965c62f10c25e7a7ef18356833aa4f9b9842c6a
        Validity
            Not Before: Feb  4 05:01:21 2026 GMT
            Not After : Feb  5 05:01:21 2026 GMT
        Subject: CN=30148fab7870a23d0d6d33f0608dcd3edb2e9383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b1:ee:ad:dc:31:76:bd:e1:a4:69:f6:67:5a:
                    ea:e4:2f:4e:6a:0d:cc:14:1e:d3:73:9a:c2:cc:c3:
                    47:03:20:8f:eb:28:b1:5d:65:fd:93:83:db:3f:87:
                    9a:1b:1d:0d:03:11:70:3d:e4:ca:c6:8e:32:b1:06:
                    45:e8:f1:ee:9b:e1:dc:e5:60:db:71:d7:8f:82:04:
                    0c:65:63:d8:84:73:ab:98:37:ac:e9:2e:fb:46:91:
                    7d:20:bb:cf:a2:fb:48:f5:1f:0e:bc:58:ee:e8:50:
                    e7:11:8b:ec:01:1b:0b:da:c7:e1:db:ae:40:52:1b:
                    69:a5:6e:7b:06:9a:b2:36:a3:12:be:1e:e5:07:39:
                    83:85:17:77:39:d5:68:d8:42:3f:76:70:07:57:4c:
                    57:07:95:72:e7:89:ce:aa:f1:b8:ae:65:ab:6e:33:
                    4a:78:2a:fc:ad:79:03:73:64:e1:a0:16:2e:5d:71:
                    9e:9a:d5:e5:18:c6:de:8b:06:2b:14:db:99:a1:7b:
                    ca:1d:09:05:3a:9d:1e:fa:70:31:47:22:b8:d9:7e:
                    36:4d:63:93:c9:56:eb:12:08:d4:00:50:96:59:6c:
                    5b:c8:9c:0e:91:21:2e:ee:06:d2:5d:10:33:2f:5e:
                    5f:aa:d5:75:00:41:02:57:79:88:43:47:c5:8d:ce:
                    97:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:14:8F:AB:78:70:A2:3D:0D:6D:33:F0:60:8D:CD:3E:DB:2E:93:83
            X509v3 Authority Key Identifier:
                keyid:59:65:C6:2F:10:C2:5E:7A:7E:F1:83:56:83:3A:A4:F9:B9:84:2C:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:39:83:fe:41:21:5d:4f:0e:5f:c3:2a:fd:d5:94:ae:0f:56:
         35:b1:e4:9b:74:fc:c7:b6:91:b3:27:5c:19:de:b9:72:09:9e:
         8b:97:49:23:7c:8d:6f:c4:95:29:61:90:f5:97:a8:9a:58:ea:
         5a:7f:5f:e0:ec:f2:b3:e4:02:c9:11:f5:b1:eb:d6:3b:13:8e:
         2d:07:a4:2d:79:93:e2:6d:21:b7:ca:03:d7:63:c7:8b:77:61:
         c9:d4:25:5e:00:05:07:a8:e5:ca:20:85:f2:1e:e4:67:58:30:
         be:b4:0f:96:e1:54:96:46:2b:6f:f4:95:16:f6:4e:78:41:33:
         17:72:f1:38:fa:3f:39:0d:92:78:fa:2d:f1:d8:11:5c:5e:4a:
         2b:83:15:f8:01:cd:a4:3b:0c:93:94:0d:a9:0e:79:ca:82:46:
         be:18:93:82:36:38:08:54:2c:94:fb:b9:5c:23:a8:4d:52:ad:
         35:38:9e:c9:1c:6c:33:68:b2:55:bb:0e:b0:1e:10:1f:6c:cd:
         30:e9:e4:87:70:62:44:89:37:e5:88:74:32:7c:6d:29:eb:23:
         0b:a4:e6:45:d0:f6:93:f7:86:09:7a:08:24:c8:74:51:f4:84:
         b0:73:be:9e:48:ea:04:fe:9a:d7:86:e9:1f:5a:e0:7f:21:0f:
         f9:32:eb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 15:09:47 2026 by rpki-client