This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
File:                     WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft (raw, json)
Hash identifier:          lDKBFkZ2NtzMTCXx7WzC4h2vAzTbYEi1Mic1CBm7x7o=
Subject key identifier:   61:51:69:82:2E:86:D0:90:D7:14:62:BE:F7:BD:8E:2C:AC:31:7F:3F
Authority key identifier: 58:CD:56:3A:2A:E6:52:9C:9F:43:FE:4B:5C:67:DB:70:E7:79:A0:9B
Certificate issuer:       /CN=58cd563a2ae6529c9f43fe4b5c67db70e779a09b
Certificate serial:       019BA1FD60AD1320A49AE16F8F0EE96F7F43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
Manifest number:          0316
Signing time:             Fri 09 Jan 2026 09:01:35 +0000
Manifest this update:     Fri 09 Jan 2026 09:01:35 +0000
Manifest next update:     Sat 10 Jan 2026 09:01:35 +0000
Files and hashes:         1: 3LKBFi7qK9-mH9zvi-Ys8DrPyCc.roa (hash: 3n/tlWwRztOB/Yu2+sFP0seUelZYfaMtfMJ5VRgA2p0=)
                          2: 3lscwPyVq0HwpYOhe1qOH376GbY.roa (hash: ABURxSq0W7iaabEt0YGRwE5xtvDmIVi3eCKYaDM6tzo=)
                          3: AnOV32OnLS7vzP0Ic_vNsSbH3VU.roa (hash: 2+tbTXLyonVPPU5Qc4ONeo44MFYnrVJPmBUJMwxiq4M=)
                          4: WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl (hash: 5Q0Y1IBthYcicmkZEJrEX0MRtHLC7VUv5EyH7guW25w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 09:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:a1:fd:60:ad:13:20:a4:9a:e1:6f:8f:0e:e9:6f:7f:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58cd563a2ae6529c9f43fe4b5c67db70e779a09b
        Validity
            Not Before: Jan  9 09:01:35 2026 GMT
            Not After : Jan 10 09:01:35 2026 GMT
        Subject: CN=615169822e86d090d71462bef7bd8e2cac317f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a8:02:8e:30:8d:21:ef:a1:ae:19:26:67:bb:
                    de:54:c6:4b:bc:19:29:2c:43:6e:7a:08:c3:ad:57:
                    b4:5b:40:5e:62:7c:9b:14:ca:c1:49:53:72:d7:d0:
                    83:42:d9:84:c4:bd:1d:9a:d4:74:c9:09:15:17:2a:
                    19:de:d0:ca:44:c4:4e:f5:08:b9:82:70:80:64:f7:
                    12:1c:3b:b8:d2:72:9c:e3:b1:9a:93:95:f5:4d:e0:
                    cf:8a:1a:01:fe:01:b7:fd:92:16:50:eb:37:a7:78:
                    54:99:2c:e5:d6:82:34:57:d3:07:a3:8a:f6:c7:31:
                    e1:b6:e2:95:84:8b:a3:b2:f2:33:cd:5e:59:b9:95:
                    fe:18:4f:5c:cd:44:a1:79:da:f3:61:3d:46:91:f8:
                    f0:7e:dc:b9:b2:aa:f8:03:6e:1f:be:15:4f:12:90:
                    56:6a:b4:ef:b3:c3:1c:0a:f1:03:d6:4e:af:45:44:
                    9e:72:f4:2a:41:e9:a6:26:5e:eb:04:39:a4:c5:02:
                    5f:3e:a8:9d:c5:72:2e:d6:53:2b:b9:f9:dc:eb:54:
                    fe:e9:38:69:ad:e4:b7:d6:fc:25:b7:e3:74:b6:b6:
                    7f:b5:e3:6d:05:6e:6e:90:9e:67:7c:d4:1b:5b:b4:
                    1d:ab:fb:ad:da:cf:2a:c9:78:f6:6e:d6:a2:76:15:
                    14:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:51:69:82:2E:86:D0:90:D7:14:62:BE:F7:BD:8E:2C:AC:31:7F:3F
            X509v3 Authority Key Identifier:
                keyid:58:CD:56:3A:2A:E6:52:9C:9F:43:FE:4B:5C:67:DB:70:E7:79:A0:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:3b:67:b1:74:27:e6:53:05:1c:99:08:93:f9:f6:27:0a:2f:
         a0:7a:af:2c:d3:59:ad:93:56:11:9e:22:6d:31:d4:61:9f:29:
         28:11:eb:8f:ea:cf:05:7c:6d:83:9e:f0:15:5d:62:c7:88:90:
         59:79:3a:77:a2:f0:6e:1a:07:09:66:78:8f:ce:d3:2e:32:85:
         93:b8:39:a7:8b:18:24:b9:fb:4b:16:1e:81:37:00:6e:3a:3d:
         d3:92:d2:6c:63:55:29:42:aa:f1:cc:2a:82:15:4b:1d:98:72:
         97:0b:ef:a9:8d:9a:39:27:a5:a3:bb:50:81:99:9e:e2:7e:56:
         6e:5c:05:ac:63:ed:57:8a:f5:fa:5e:e3:76:08:c1:ba:a7:16:
         28:4f:96:46:9a:a8:b2:d5:d9:cf:19:a3:7c:20:4c:84:37:c0:
         f3:2b:db:5d:71:7c:e9:93:76:e0:a6:21:ba:00:19:36:67:0c:
         e3:3b:69:63:75:68:2c:42:7a:e5:d6:52:d2:49:19:42:c1:42:
         bf:e3:ba:2f:ce:35:8d:ce:6f:27:94:4e:89:96:2c:b4:6a:29:
         43:08:6f:81:81:2c:e5:2d:ce:5c:16:e3:19:f7:2c:c6:43:bb:
         46:c9:c6:ed:c5:a6:9b:bd:cd:a3:af:07:f5:ac:4b:e8:54:b7:
         a9:6f:bd:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 18:08:11 2026 by rpki-client