This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
File:                     WAFcyNofG780PiarII34uyb9U64.mft (raw, json)
Hash identifier:          KasPkibwrke6+H8SNjavLhHSjoTTrB79m56L7Gra+ng=
Subject key identifier:   FD:68:56:DD:36:14:6F:88:D7:56:04:BF:5E:45:12:59:50:FF:A6:D3
Authority key identifier: 58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
Certificate issuer:       /CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Certificate serial:       019BFA645131486A9DD0B88F4202075513DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
Manifest number:          17FD
Signing time:             Mon 26 Jan 2026 13:00:36 +0000
Manifest this update:     Mon 26 Jan 2026 13:00:36 +0000
Manifest next update:     Tue 27 Jan 2026 13:00:36 +0000
Files and hashes:         1: BY0duX9kQwVXjgquhsR-munhjnQ.asa (hash: NvBZnkapjPSPy1tNHiYvTA3NcGg5KXOBAdMekZQ3UrA=)
                          2: NrgQ_5wI2_4HvegQwjwM_Zc8xdM.roa (hash: OvI93tgCnxoNbRAqaNHTlYSufUon+ySjKVV/RPhyqkQ=)
                          3: WAFcyNofG780PiarII34uyb9U64.crl (hash: XmRuCqdyXAlkiFayMj9B4r8y/cfbrgPr+YMbBtwEc8g=)
                          4: Wr5va4tlLM7OArIc13NwZVzUZSM.asa (hash: ZnrWop8OkpeoCvz/MYLeKchWVnb3K25hWmby4HEumAM=)
                          5: pqktpCxLGm0ef4jw2Ni2l6y-LvY.roa (hash: qzKRc0VCQWppc/oSUuGJGwq+ZahDXUJUBntxA72SvqY=)
                          6: sWwYUGN-qX4W4KsEuJ-NzSM85K4.roa (hash: 7Ca2j50Ko1N7zY6m8PRjHntwoi86jOPRDQ4B+sSksSw=)
                          7: z0dUAUAYs2FDj8KE93GCEX_1moY.asa (hash: jkyk8H05lxWxlsGkVRiKoTC3QiMwT13kS4SkDxeCCDY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 13:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:64:51:31:48:6a:9d:d0:b8:8f:42:02:07:55:13:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
        Validity
            Not Before: Jan 26 13:00:36 2026 GMT
            Not After : Jan 27 13:00:36 2026 GMT
        Subject: CN=fd6856dd36146f88d75604bf5e45125950ffa6d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:64:e9:fd:17:d3:06:7b:91:64:6d:65:26:54:
                    70:be:e2:b2:8d:ca:61:d8:0e:f9:9a:b7:83:ad:f5:
                    c3:af:c3:a3:bf:db:f9:70:a3:84:c8:53:2a:46:5b:
                    57:34:1f:1a:67:a1:f2:4e:d5:96:68:7d:38:00:e8:
                    00:3b:7e:cc:71:79:b7:00:9b:f9:ea:88:1e:8b:78:
                    88:3d:d7:7f:0e:4b:69:9c:d4:6d:f7:dd:f0:89:82:
                    f4:b8:36:43:b5:e5:2c:18:2f:fa:bb:37:75:39:87:
                    c7:2c:12:eb:fd:59:21:c3:09:eb:32:63:49:6b:18:
                    03:33:35:9b:97:38:79:89:35:08:af:c3:50:28:42:
                    77:ad:a9:d2:35:76:5d:45:25:ea:5a:6d:db:f1:4d:
                    5d:54:3b:c9:cd:dd:fd:7f:0d:f9:fe:71:1d:91:4f:
                    47:d5:75:3c:a9:a5:13:d1:28:40:95:57:fb:55:cf:
                    6d:65:ce:2f:1c:4b:8c:77:9c:7c:5a:9a:18:1c:35:
                    5b:39:32:25:7d:76:44:02:dd:c7:36:0d:3a:6f:4e:
                    a7:c5:89:6b:5c:9d:3d:cc:19:a8:bc:1d:95:59:66:
                    13:eb:b0:47:d9:f1:ac:90:da:d7:e6:e2:44:58:35:
                    74:90:d7:93:6d:8c:4f:28:8a:e1:06:2f:30:6d:b4:
                    6e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:68:56:DD:36:14:6F:88:D7:56:04:BF:5E:45:12:59:50:FF:A6:D3
            X509v3 Authority Key Identifier:
                keyid:58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:67:95:0f:5e:cb:0a:58:d0:c6:19:f1:da:bb:de:da:8d:82:
         c9:b4:cc:4a:3c:ef:c0:15:aa:0f:29:00:3e:07:7b:27:6c:a7:
         fd:88:f1:bf:da:86:f2:b7:f0:5c:04:73:0d:09:68:8e:2d:b9:
         fd:42:21:8a:73:76:82:e0:24:74:bd:f5:f1:e6:7c:cd:0b:2f:
         9b:f6:b7:77:d2:49:ad:18:12:42:8e:7b:68:af:f8:39:38:49:
         ff:cb:ed:b1:b4:fb:07:99:14:ef:f6:9f:33:66:d5:4c:74:c7:
         57:09:5c:27:8b:14:eb:2b:27:4d:d4:e7:58:fa:d1:8f:36:b4:
         11:60:32:48:f1:94:81:75:81:52:fa:ba:5c:60:86:94:51:88:
         2c:c1:f4:94:3f:03:8d:ae:a2:5d:c5:b9:d4:7d:51:2c:33:24:
         13:fd:8f:27:06:ed:79:d2:3f:74:16:8e:c3:0c:40:c4:80:e2:
         f2:72:98:26:d9:4a:10:10:93:6a:d1:8f:6d:3f:9f:b3:80:2a:
         ae:6a:e1:22:38:c8:3d:96:6a:70:cd:c2:be:8c:8b:99:53:f9:
         a2:81:66:d2:9f:ad:2e:0f:a6:85:7e:ab:e8:81:d1:ad:5d:c3:
         c9:fa:0d:75:2d:d2:4e:82:11:06:c5:91:ff:92:39:91:f3:7d:
         33:64:6b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 20:54:40 2026 by rpki-client