This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
File:                     WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft (raw, json)
Hash identifier:          mCB5q+zD5oFUAZSJTxqcksV4Bei+qZnMATUh71G3tNY=
Subject key identifier:   DA:42:14:F0:4C:DE:68:45:46:75:5A:FF:16:8F:40:00:11:41:84:63
Authority key identifier: 58:7D:8B:0E:75:46:35:11:76:CC:0C:6E:51:ED:45:20:AB:E0:4E:F1
Certificate issuer:       /CN=587d8b0e7546351176cc0c6e51ed4520abe04ef1
Certificate serial:       019BFCF7ABC23B99BE91E4B1C95D1A22FD92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
Manifest number:          0983
Signing time:             Tue 27 Jan 2026 01:00:48 +0000
Manifest this update:     Tue 27 Jan 2026 01:00:48 +0000
Manifest next update:     Wed 28 Jan 2026 01:00:48 +0000
Files and hashes:         1: 6cN6nhFqlJSDVgIjOl3TycQtV6k.roa (hash: sgH5lKfufrchfpVAD0K9/jz6mZi6QmMqB/TNXEsdDxk=)
                          2: WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl (hash: Do1OKe3541OcT0NLkVRO1mj4PFBLUPiVANCDNIGdW0Y=)
                          3: axq7mHJm2Hnm-H9JADqzbawUKIA.roa (hash: pXMV2sY+byn88wNA/ocyULAR0qZzmlc5Pn6ZSaCAZWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:f7:ab:c2:3b:99:be:91:e4:b1:c9:5d:1a:22:fd:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=587d8b0e7546351176cc0c6e51ed4520abe04ef1
        Validity
            Not Before: Jan 27 01:00:48 2026 GMT
            Not After : Jan 28 01:00:48 2026 GMT
        Subject: CN=da4214f04cde684546755aff168f400011418463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e3:67:7f:0b:36:cd:72:c3:2e:23:e4:18:42:
                    f7:14:56:5a:9c:a4:4a:ec:20:37:57:c7:b7:a0:9e:
                    2f:13:6e:85:84:35:3e:13:73:4e:01:f2:c6:e8:10:
                    c3:93:a4:6e:9c:cc:98:bb:38:65:6a:17:37:a9:5e:
                    f7:6b:24:18:d9:dd:f8:0d:60:53:1d:f7:20:99:2c:
                    32:af:b3:59:3a:ce:90:67:88:bc:32:7f:e6:19:59:
                    72:b9:11:aa:35:47:6b:e8:36:7f:f8:0b:68:17:55:
                    2d:cc:b8:e1:2d:55:30:d5:68:81:ff:af:fb:fa:b8:
                    1d:5d:11:91:fc:90:01:da:f6:47:3f:58:39:a0:ed:
                    79:04:f1:17:af:8f:19:09:14:c6:5b:50:bb:8f:fa:
                    29:99:b8:80:fc:e2:da:43:df:bd:bc:cf:aa:89:8e:
                    07:35:2d:ad:f1:5b:ff:7a:bb:3a:a8:08:cb:48:01:
                    82:57:43:91:72:94:b5:6a:20:76:81:78:7e:6c:b7:
                    f8:54:fa:e8:25:ec:44:a2:8f:78:19:26:50:b6:9f:
                    96:a8:aa:f1:d4:c4:1f:2d:35:c0:6a:71:66:a7:16:
                    eb:be:95:5a:19:bf:38:2d:73:fc:8b:67:f5:95:5f:
                    ac:be:38:43:87:79:50:57:c5:6c:75:b3:a4:c6:1c:
                    8b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:42:14:F0:4C:DE:68:45:46:75:5A:FF:16:8F:40:00:11:41:84:63
            X509v3 Authority Key Identifier:
                keyid:58:7D:8B:0E:75:46:35:11:76:CC:0C:6E:51:ED:45:20:AB:E0:4E:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:30:b4:be:b4:bd:9f:ab:b5:1d:76:ff:cb:1f:9e:f5:ed:f3:
         f2:cf:bd:a3:6f:9a:8e:a9:67:c3:e1:65:9e:9c:bb:02:02:8c:
         e9:18:32:76:8a:ce:f1:55:a6:93:b7:b1:ee:f8:aa:da:29:ae:
         97:9e:3e:98:f0:07:4b:1d:7b:78:de:89:53:c5:2f:48:17:88:
         41:a2:e6:cc:24:91:f9:ee:96:05:99:f3:cf:f5:13:4c:74:ac:
         b6:32:ff:38:fd:7c:26:f2:88:cc:09:60:e2:8a:07:3d:50:1a:
         b8:6c:a5:bf:ce:04:17:b7:47:88:f8:89:0b:1e:0d:ea:21:82:
         c7:a8:f5:df:16:3f:46:fa:c2:d7:60:9d:ce:79:3e:29:f7:9a:
         33:ea:35:33:66:43:f2:45:bc:4b:29:a0:18:99:a5:cb:cc:ac:
         f5:09:05:5f:7f:a0:f1:b4:15:29:cb:18:26:58:ba:92:a4:21:
         d5:a6:3a:7e:41:6f:24:26:93:cd:1b:a7:44:2e:fe:75:26:30:
         3f:fc:6f:45:a0:52:5c:59:bb:f5:65:ca:41:5b:ad:40:50:a7:
         9a:d0:63:81:37:65:8c:8e:ed:ee:d0:e8:fe:03:41:2c:44:94:
         ae:c0:c9:92:58:45:19:d3:91:0d:31:32:6e:01:2c:27:11:20:
         59:be:64:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 08:03:07 2026 by rpki-client