This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
File:                     WtlDpBzifnt7z9_2monD4zfqY7U.mft (raw, json)
Hash identifier:          bA/aSg7u7Exjil9EJNVYIspfzhgspipqnwtSF+nZFSY=
Subject key identifier:   92:7C:31:7B:07:08:B1:AE:56:C9:43:D4:39:EA:52:8E:7F:D5:59:5D
Authority key identifier: 5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5
Certificate issuer:       /CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
Certificate serial:       019BFCC14347B63F550D2904FDA0C25998A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
Manifest number:          09FA
Signing time:             Tue 27 Jan 2026 00:01:22 +0000
Manifest this update:     Tue 27 Jan 2026 00:01:22 +0000
Manifest next update:     Wed 28 Jan 2026 00:01:22 +0000
Files and hashes:         1: J7qC6W5WJRbsUsA7Nr2zb6t63j8.roa (hash: jjyUi8oIJbqLLegunqtnt7RNSdcYKaaZ3m2h96zldCM=)
                          2: U8_EsLnGErxSglgJN5gLyzSxN5s.roa (hash: 4aouOfBS+DRof7EvLr9RT9ZxlxZrIs6KqMFoVC5IqpE=)
                          3: WtlDpBzifnt7z9_2monD4zfqY7U.crl (hash: TKluvuteSc5bfPVtFfoThXgTReAElwVvWXcj1R3TIeo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:c1:43:47:b6:3f:55:0d:29:04:fd:a0:c2:59:98:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
        Validity
            Not Before: Jan 27 00:01:22 2026 GMT
            Not After : Jan 28 00:01:22 2026 GMT
        Subject: CN=927c317b0708b1ae56c943d439ea528e7fd5595d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e5:6f:ec:06:c1:c9:a7:53:ba:8e:4c:bd:c6:
                    77:b2:83:13:f1:61:af:04:2d:b6:14:96:4a:b2:c0:
                    ac:10:03:2b:7e:20:7c:8e:11:bb:f4:68:13:85:87:
                    c6:46:ed:c2:3a:89:72:05:1b:d7:85:3b:da:e8:79:
                    0b:78:2c:46:74:01:0a:fa:e0:15:60:e1:df:b7:bc:
                    21:3c:91:f5:00:07:0a:9f:7d:93:e9:b7:46:51:f9:
                    f5:00:92:5c:da:d2:b4:bf:27:2d:d5:8f:8f:55:41:
                    5b:a5:32:9f:8b:09:22:ac:d1:04:85:23:6e:3f:93:
                    85:71:7e:31:ec:b3:ec:8b:9a:13:a2:38:fd:c9:17:
                    9f:eb:c6:9d:5b:a2:92:b2:cc:2f:10:c2:af:22:8c:
                    fb:21:20:e8:ec:df:ad:d8:a6:7a:f8:08:5a:9f:1e:
                    93:d2:25:5d:e8:4b:ad:a8:19:74:b6:98:2e:83:89:
                    5b:0b:cd:fd:25:f3:ed:78:f1:22:85:90:20:2b:d6:
                    17:65:1f:0f:6a:6b:7e:0f:f2:16:11:73:a2:38:a4:
                    f8:8a:cf:76:ae:27:12:0e:fc:38:02:1b:97:f3:39:
                    59:6d:29:ea:ee:b8:bf:4c:e4:27:90:ce:f2:e4:da:
                    be:19:ba:56:f7:89:46:09:d4:25:cd:7c:96:99:d2:
                    55:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:7C:31:7B:07:08:B1:AE:56:C9:43:D4:39:EA:52:8E:7F:D5:59:5D
            X509v3 Authority Key Identifier:
                keyid:5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:c5:7b:26:65:d8:33:69:41:1d:f4:3a:6e:cb:7c:ff:1d:49:
         31:50:32:ab:8c:79:5a:51:5c:bd:e5:92:d8:ac:b9:2a:96:35:
         22:f5:91:c9:c9:79:95:68:8b:64:8f:de:9f:31:50:3a:5f:b9:
         b8:c4:f4:3f:74:66:58:f1:27:ae:e2:16:18:be:4d:6d:1f:04:
         83:b4:6a:77:db:ba:2f:ae:7c:27:25:5c:4a:34:69:b7:e8:ae:
         81:3a:51:de:13:37:96:c6:76:4b:55:e6:13:99:56:fa:0d:d9:
         50:25:d3:b1:48:05:8a:8d:bc:45:29:36:ce:f1:c8:a1:eb:9d:
         bd:a4:53:a7:5f:74:42:ae:c7:40:26:24:f6:d4:da:7d:17:26:
         0e:85:cb:23:32:cc:ae:34:78:3c:89:0c:2e:0e:de:01:81:d1:
         fd:51:96:85:66:96:42:45:c9:97:8e:8f:11:3f:be:e1:e3:0b:
         84:83:88:5e:da:ff:f2:d1:fa:18:b7:f0:3e:27:a5:eb:f5:99:
         b6:2d:7f:85:d8:ac:a8:c1:64:99:ab:5f:02:0f:93:73:c6:82:
         11:3c:dc:50:1e:a7:a0:e7:3e:e3:c5:1e:22:af:f4:07:72:36:
         e2:10:72:96:56:30:54:b4:19:7b:d9:75:1a:43:43:b6:c1:00:
         9b:bd:62:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 07:17:25 2026 by rpki-client