This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
File:                     Wu6ShG_jj96OD2KUjKmIPBopt1U.mft (raw, json)
Hash identifier:          tY764/hrI5DH0RBjzxM5yhTGLvSGwK9B2kAhd2QYl5o=
Subject key identifier:   E8:87:15:EF:D8:55:BB:E7:3E:52:90:CC:9A:9F:42:3B:34:95:96:63
Authority key identifier: 5A:EE:92:84:6F:E3:8F:DE:8E:0F:62:94:8C:A9:88:3C:1A:29:B7:55
Certificate issuer:       /CN=5aee92846fe38fde8e0f62948ca9883c1a29b755
Certificate serial:       019BFC89E4D544D0B81263BADC473EA5EEE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
Manifest number:          0C2D
Signing time:             Mon 26 Jan 2026 23:00:53 +0000
Manifest this update:     Mon 26 Jan 2026 23:00:53 +0000
Manifest next update:     Tue 27 Jan 2026 23:00:53 +0000
Files and hashes:         1: Wu6ShG_jj96OD2KUjKmIPBopt1U.crl (hash: Fp9NhxASzEUecVPSAnXdeFZmQ8OC7ZnkoCN7/aZV3fQ=)
                          2: rP5nHNYdqEAJLssTyCJ5gOdDH2I.roa (hash: yOB632STL0Rw5rEnDDsr56AUQMoN3jjS+xa8opoFvzA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:89:e4:d5:44:d0:b8:12:63:ba:dc:47:3e:a5:ee:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5aee92846fe38fde8e0f62948ca9883c1a29b755
        Validity
            Not Before: Jan 26 23:00:53 2026 GMT
            Not After : Jan 27 23:00:53 2026 GMT
        Subject: CN=e88715efd855bbe73e5290cc9a9f423b34959663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0b:e3:6a:98:ac:fb:ef:5b:bc:07:70:51:b9:
                    6c:30:c5:7a:d7:3a:23:78:f7:bb:41:57:57:e4:77:
                    86:bc:85:5b:30:0b:ab:91:51:2d:45:aa:57:68:94:
                    09:b2:04:9a:6f:83:4a:dd:68:08:25:55:f5:e5:2a:
                    cc:dc:46:c9:09:6c:ca:7b:b3:fb:1e:32:fb:c9:28:
                    b6:d7:f2:ca:97:1f:2d:31:ae:13:6b:75:c5:dc:90:
                    46:09:2f:0f:6a:dd:37:8f:65:23:eb:7d:88:b2:fa:
                    0e:ee:1d:06:bb:5a:9a:92:42:d3:ad:cb:9c:2c:8e:
                    cc:40:66:e7:32:52:10:69:c6:48:9a:42:2b:62:d4:
                    74:fb:8b:49:d9:e8:d3:fd:6e:66:f4:7e:e7:2d:9e:
                    a6:56:51:2d:07:5d:9f:33:55:72:76:d5:de:61:12:
                    d8:a9:eb:c9:98:09:e5:46:50:59:a9:64:c0:6c:65:
                    34:56:9b:12:8f:03:93:42:fb:9d:1a:33:fc:28:85:
                    d2:7e:09:78:59:37:0c:e4:90:b6:b7:3f:24:ac:5d:
                    b9:59:18:a9:30:dc:52:18:36:a5:ca:6e:63:1e:85:
                    ce:fc:31:8e:e7:db:a4:bb:dc:5e:55:80:c3:8d:10:
                    44:f8:d8:2c:98:96:e5:87:b9:0c:56:50:24:52:1b:
                    bd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:87:15:EF:D8:55:BB:E7:3E:52:90:CC:9A:9F:42:3B:34:95:96:63
            X509v3 Authority Key Identifier:
                keyid:5A:EE:92:84:6F:E3:8F:DE:8E:0F:62:94:8C:A9:88:3C:1A:29:B7:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:3c:8d:7e:70:ef:55:ef:21:36:d3:86:7c:8e:5e:ad:74:51:
         98:28:ee:bf:8a:53:60:ec:67:fe:44:60:20:24:f0:97:8d:88:
         a3:0a:d6:02:c0:47:3f:d2:15:a9:de:e6:a5:cd:ba:80:94:a0:
         cb:c3:4f:b9:b4:ca:2e:bc:88:ed:8d:e9:f0:27:91:0d:30:8b:
         e1:e2:51:bd:df:f1:4f:45:b0:10:0e:54:b9:f8:5b:6d:63:e8:
         b1:ba:60:69:00:dd:99:48:87:e7:b2:12:d3:3b:a8:89:48:9b:
         ef:59:e3:3b:50:0a:fc:e8:9a:6c:f7:2a:2d:e3:e5:34:2f:a1:
         e7:f6:00:78:74:ef:10:91:88:7c:00:8b:04:4d:e1:dc:7c:77:
         2f:59:56:b6:f4:4a:18:87:9c:ee:71:f2:f0:01:50:13:08:ff:
         1b:c5:f0:65:1c:95:98:9c:d7:99:38:10:eb:fe:d3:54:1a:91:
         cf:04:d3:43:92:8f:b2:dc:27:e6:d6:2d:ca:4d:bf:04:c7:96:
         5b:3b:0a:e5:b7:77:a6:7c:bf:07:07:44:31:e7:4a:05:2d:dc:
         9f:25:b9:d5:72:0a:01:10:fd:06:3a:f3:91:e0:e6:11:10:4a:
         94:65:33:fb:fe:d7:2d:40:f5:1d:8c:2c:d4:a9:57:03:e7:f9:
         01:f8:cf:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 03:10:52 2026 by rpki-client