This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft
File:                     Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft (raw, json)
Hash identifier:          LlI9JJsyfqYCkN8rLbJyMBZKaiGMjclkI+6EduZLR6U=
Subject key identifier:   C0:4E:0B:45:52:45:A6:59:82:54:E3:A5:83:84:0A:1C:16:16:81:DA
Authority key identifier: 5B:08:7D:1D:C9:8E:26:E4:C9:59:D0:9F:61:46:D7:FD:F8:69:E4:FC
Certificate issuer:       /CN=5b087d1dc98e26e4c959d09f6146d7fdf869e4fc
Certificate serial:       019BD8B4CD0C1CDE001FC8D5F5066DDDE059
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft
Manifest number:          0845
Signing time:             Tue 20 Jan 2026 00:01:26 +0000
Manifest this update:     Tue 20 Jan 2026 00:01:26 +0000
Manifest next update:     Wed 21 Jan 2026 00:01:26 +0000
Files and hashes:         1: EdVO9FKaVINf4-EcfDH2n-UZXgI.roa (hash: dwVT4CPLLp3oBHUxJmbUMjoihn96t4N47NrHTtml6ac=)
                          2: MaHcS05o3WBeZOrNVbnsOPGuJZk.roa (hash: hWXPAtBNsAo9ZPaQbHx34drt2IC8j3ryox2B1+pnB+E=)
                          3: NDTyjuX0d0SqmeDC7nrxRfzybEQ.roa (hash: 0+UTjLVBfjPCy7oBImPLDU8M26qc7pRRuIqY0xDLdrA=)
                          4: Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl (hash: CHBQqURxg7hNuz9Sgy8C0LWa+Z2E+4SUqG1NV2+d550=)
                          5: ybipZwfesbQV__aPxuV5d5A89PY.roa (hash: Y2ObOEWw+FxcDxPbeDirQ1ndGcwUsmZzdYgHyDiU8K8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d8:b4:cd:0c:1c:de:00:1f:c8:d5:f5:06:6d:dd:e0:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b087d1dc98e26e4c959d09f6146d7fdf869e4fc
        Validity
            Not Before: Jan 20 00:01:26 2026 GMT
            Not After : Jan 21 00:01:26 2026 GMT
        Subject: CN=c04e0b455245a6598254e3a583840a1c161681da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d6:8f:ad:b1:1c:b6:80:36:c9:48:91:cf:83:
                    3d:01:8c:91:6e:6e:e3:6b:33:90:f9:2c:c5:44:23:
                    81:6e:28:b9:82:3d:64:ad:55:8b:1d:26:04:2e:06:
                    16:29:6d:dc:3c:4e:3e:2b:91:3e:60:be:f7:a5:88:
                    a0:90:01:91:92:24:c9:fc:9e:e2:ab:e6:a6:6f:fa:
                    e0:eb:7a:04:29:d1:dc:eb:4b:68:29:9e:65:a4:e0:
                    8d:6e:41:8b:45:ce:52:e4:ca:9d:5e:77:5d:4b:c4:
                    21:a0:13:58:cd:7c:80:4d:29:4e:de:74:c4:78:52:
                    6d:4f:28:38:1a:b8:ad:61:4d:57:79:c0:fd:01:28:
                    0e:ce:ce:69:d0:c4:ab:64:ed:e3:27:c2:15:d8:5e:
                    3b:51:d7:3c:cc:39:75:47:8f:af:55:46:4a:c4:b6:
                    dc:bd:70:85:70:9a:e4:17:f2:be:dc:b1:d0:e3:11:
                    29:64:41:a2:ab:d2:75:25:f1:b9:bc:31:b1:1c:88:
                    1e:38:de:39:bd:29:ea:3c:77:36:61:5e:5f:bc:40:
                    34:c1:14:55:a7:3c:bb:49:44:d7:32:46:a6:af:ce:
                    e9:e5:8a:62:58:c5:29:36:3c:3e:9b:01:58:99:25:
                    30:2f:ba:cc:35:61:39:94:2a:d9:d3:5a:cd:c4:c1:
                    43:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:4E:0B:45:52:45:A6:59:82:54:E3:A5:83:84:0A:1C:16:16:81:DA
            X509v3 Authority Key Identifier:
                keyid:5B:08:7D:1D:C9:8E:26:E4:C9:59:D0:9F:61:46:D7:FD:F8:69:E4:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:a1:fe:28:44:81:05:42:9a:a3:6e:4a:21:6d:91:31:3a:f6:
         82:ea:2b:95:e1:49:a6:e3:ba:df:c0:90:c3:29:0b:f4:bb:b7:
         f8:c6:3b:0a:fa:df:ee:4e:3b:65:e7:e1:d5:99:42:4b:74:c5:
         4d:ca:a0:fa:9c:04:57:75:b7:6b:f9:c9:67:3b:03:cf:6f:1d:
         37:15:43:8a:65:96:51:30:b6:fd:79:96:40:82:f6:3a:be:a8:
         1c:46:8c:e3:f6:e9:5a:9e:dc:c3:01:52:bf:a9:1d:74:d5:b4:
         22:0d:c5:02:d2:74:fe:1a:c9:4c:07:97:94:c4:e6:03:aa:a5:
         97:68:31:70:c6:43:63:c4:56:01:45:3f:86:8d:e4:0e:41:b8:
         b4:c0:b5:3e:5e:8f:e5:f9:f5:d8:5d:8f:52:a7:df:51:04:dc:
         0d:63:03:e2:0e:77:e2:81:69:be:7a:06:b9:7a:d1:ae:e0:f9:
         e9:01:43:70:ec:f3:2f:cd:82:52:07:1b:63:87:d6:d7:f3:49:
         e3:1d:b1:87:c5:e6:a9:a1:f2:af:12:84:b2:22:d8:d4:02:77:
         a2:96:aa:42:d1:28:2c:d3:4f:72:0f:f7:3d:e2:4b:94:2c:92:
         d0:0f:c1:dd:03:0c:4a:16:16:53:cb:ce:73:ae:8c:93:33:1a:
         ac:6e:32:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 03:00:40 2026 by rpki-client