This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
File:                     wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft (raw, json)
Hash identifier:          piNK5HxLfXnSSJ9utDTBK9KeG1Kco1Q0j41XtqtW3K8=
Subject key identifier:   B4:55:99:BA:95:2B:7D:0D:A9:FB:B0:BF:13:47:8D:84:EC:DE:2B:4F
Authority key identifier: C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
Certificate issuer:       /CN=c1b050211219d18e996e086cb7f6309178804860
Certificate serial:       019BE0A5A4118FF99431133EC53D28DEAE99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
Manifest number:          182E
Signing time:             Wed 21 Jan 2026 13:01:50 +0000
Manifest this update:     Wed 21 Jan 2026 13:01:50 +0000
Manifest next update:     Thu 22 Jan 2026 13:01:50 +0000
Files and hashes:         1: BUkLbJymwTyiP7I3JBXsx3s4NL4.roa (hash: S+u04ktm3wvbogL9zzmkeSkoPC/t6RrVsW1QDJ8a+R8=)
                          2: VKi_eELpmYrDDbDrF0VVkkCBTvA.roa (hash: x+LzLGitMTJHgFBC68KihyTc7sPTjjdr4ISMkWQ+OXA=)
                          3: ZTe4Yc6AXqtHVEH68yVC_sq1IvU.roa (hash: 7Noxt8qVLB+fyFIGQYg4LilEwKTB1zOCXiJLI8oHZSo=)
                          4: gdh12HnOMOEqYVtaca7KAq1urKE.roa (hash: xH1nYkWxaZr276GAcCdV3VvkfxZ8MURBbGI3J9HTllU=)
                          5: k2NOkCSTdVhsNv-yRXDz4IjyaP8.roa (hash: mFXBGS6DaTNeb9V9IYIi7IizihWo5PDlGr82oMDsEnk=)
                          6: kjiD6TFqmxMVqOnqt0_0GLgSRcU.roa (hash: AZdOF+iEUNNu4fK6OeoAbtGKKK0ZCVUm4ff6O264PE4=)
                          7: vuYx__ePQYmBnErIjuxPmyS72UE.roa (hash: RG1Iph+v2YrWVe+WGtDI4g5ptYW+7Uz8lQw8iy5rb4g=)
                          8: wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl (hash: l04AY3wdZk9K9ELWOwiKf9tEUvr4v2iK24s37bRQ3jA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e0:a5:a4:11:8f:f9:94:31:13:3e:c5:3d:28:de:ae:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1b050211219d18e996e086cb7f6309178804860
        Validity
            Not Before: Jan 21 13:01:50 2026 GMT
            Not After : Jan 22 13:01:50 2026 GMT
        Subject: CN=b45599ba952b7d0da9fbb0bf13478d84ecde2b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:aa:b5:3d:fd:71:cb:28:66:fe:52:91:09:ea:
                    b0:c8:83:19:3a:72:eb:f7:b5:0e:54:39:48:c7:6b:
                    d1:e5:05:0b:dc:21:8e:75:9c:d2:df:d9:6b:8c:46:
                    1b:a4:2b:b2:8a:45:69:13:9f:5b:4e:0b:5c:82:ac:
                    18:e9:0e:b0:0b:c7:b6:b4:7d:12:da:78:58:93:86:
                    71:11:17:13:c3:92:35:58:c9:ff:8d:ba:d5:33:32:
                    70:3f:f9:8f:c5:43:d8:bc:ab:e3:4f:03:0f:3b:1b:
                    90:90:4c:59:26:31:ab:8f:aa:c9:50:c8:19:aa:08:
                    d7:f4:be:01:db:29:e8:91:5f:f8:2d:4d:7f:80:f3:
                    66:7d:44:f5:df:d3:aa:2d:47:3e:31:8b:60:e0:ba:
                    f5:fa:8c:b6:c4:88:5d:67:7b:98:31:be:b7:a9:1f:
                    23:2d:a8:ef:c2:1e:d3:f6:b2:b9:69:46:22:2e:7a:
                    c6:14:3a:04:dd:8f:a2:0f:32:dc:04:0a:a7:f9:e2:
                    ed:82:8e:16:61:a6:73:fc:bf:d1:ef:1d:29:07:10:
                    1c:cf:d3:ea:28:da:0c:67:be:b6:80:09:49:7c:12:
                    e7:be:7d:72:79:92:f0:59:8e:09:dd:c9:0a:0b:fa:
                    36:a6:6f:80:ab:80:17:2a:01:16:c4:1d:55:0f:fe:
                    de:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:55:99:BA:95:2B:7D:0D:A9:FB:B0:BF:13:47:8D:84:EC:DE:2B:4F
            X509v3 Authority Key Identifier:
                keyid:C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:f9:7f:9b:ef:01:99:c8:6f:0f:30:0a:41:e4:5f:95:89:58:
         87:4e:fd:84:e8:9c:44:a0:66:5e:f8:c3:08:13:75:4b:bb:47:
         fa:0b:44:55:79:63:31:7d:a8:b4:68:13:98:02:68:7b:77:7b:
         bd:0d:ae:78:37:60:55:69:61:55:f1:ff:2e:25:1c:f2:00:92:
         05:55:6c:a0:52:96:f2:2d:6b:7f:96:29:48:8c:93:65:25:88:
         ed:ff:30:76:49:21:ef:46:c3:8c:03:67:e5:eb:82:59:d8:e3:
         f2:17:c7:75:10:a7:c7:73:2d:4d:f2:28:ba:88:10:3d:fd:ac:
         c3:1c:c2:30:ce:2c:81:98:ff:6c:a3:05:dc:fc:65:b2:dc:67:
         c0:fc:d8:01:e8:b7:85:d9:16:a3:7e:2c:9c:01:df:24:aa:61:
         b7:7d:3f:76:27:e4:8f:e3:76:3c:af:83:d7:88:c8:e4:5e:f6:
         89:45:03:fe:39:da:d1:7b:dc:f6:2d:3d:c3:be:eb:b5:6f:05:
         1a:ec:76:1a:8b:3c:2a:b4:04:b7:c6:ee:a1:fd:5e:70:44:16:
         18:e9:8f:51:d0:22:d9:5a:75:50:41:1e:55:2c:d2:a3:63:6d:
         6b:78:39:9b:76:d8:d5:4b:08:97:fa:2d:33:26:c8:ad:a5:4b:
         01:4a:20:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 15:49:57 2026 by rpki-client