This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
File:                     WBPibXGsW2pgEVbZDODczsWYYkM.mft (raw, json)
Hash identifier:          nxizhhXK//l00X8zcniRcLKg6NKdejewoRtOqq3hFLc=
Subject key identifier:   52:49:D3:E9:F9:21:DA:64:DA:89:30:FA:1E:89:D4:A9:FA:50:74:51
Authority key identifier: 58:13:E2:6D:71:AC:5B:6A:60:11:56:D9:0C:E0:DC:CE:C5:98:62:43
Certificate issuer:       /CN=5813e26d71ac5b6a601156d90ce0dccec5986243
Certificate serial:       019BF83F36F3BDD23199C9B0F966830C6DFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
Manifest number:          0703
Signing time:             Mon 26 Jan 2026 03:00:50 +0000
Manifest this update:     Mon 26 Jan 2026 03:00:50 +0000
Manifest next update:     Tue 27 Jan 2026 03:00:50 +0000
Files and hashes:         1: ME3_RRsJTE0yygMx8pWx1CRfu4g.roa (hash: NXcFWTl4I5CN86WhLodDSbukJ6PN73DMqFCemMucwz8=)
                          2: WBPibXGsW2pgEVbZDODczsWYYkM.crl (hash: TGvVfzO5z8+NFFdXy8MB48H1+Uf8w6tELW4SGl0m5BI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:3f:36:f3:bd:d2:31:99:c9:b0:f9:66:83:0c:6d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5813e26d71ac5b6a601156d90ce0dccec5986243
        Validity
            Not Before: Jan 26 03:00:50 2026 GMT
            Not After : Jan 27 03:00:50 2026 GMT
        Subject: CN=5249d3e9f921da64da8930fa1e89d4a9fa507451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a7:56:d8:39:fc:ce:d7:16:07:df:8d:82:97:
                    e1:91:60:87:41:c2:d8:34:95:06:9c:53:42:68:eb:
                    db:ec:3f:b0:89:cc:f0:50:3d:ae:4c:4a:bb:75:15:
                    e6:0c:6d:77:1e:40:ef:7d:f7:a5:4a:45:8b:de:60:
                    81:10:4b:7c:ab:d5:bd:26:3f:ac:44:18:f4:73:f8:
                    f1:61:e4:d9:74:fd:20:22:a1:4b:09:7e:36:b9:fe:
                    64:7f:06:ce:16:ba:3d:de:a2:5d:ee:0e:f4:cc:f0:
                    55:a3:68:ae:6d:20:2c:2d:ef:92:fc:40:1f:7a:0d:
                    0d:4e:d2:6c:2e:b5:cd:ce:20:4b:ba:aa:f1:ea:9f:
                    eb:b1:65:14:45:5b:a8:1f:26:1e:7f:8a:64:fc:b3:
                    4e:d4:0e:bc:5d:60:0f:37:12:cd:d7:ab:bb:97:b9:
                    06:cf:1e:81:51:76:e4:d2:de:c9:95:c2:41:89:b8:
                    97:54:c9:85:33:5f:d7:ad:09:ec:7b:5c:fb:a9:59:
                    7b:36:11:17:24:fe:4d:95:6c:9e:00:d6:f8:93:cc:
                    33:d2:d6:e1:c5:8a:ad:6f:9c:09:cd:6d:4f:13:ed:
                    ef:e5:fe:94:64:5d:8e:af:f0:69:ed:c2:70:13:cd:
                    2b:77:c3:03:64:d4:fd:64:2e:d5:5d:d4:55:1c:a9:
                    24:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:49:D3:E9:F9:21:DA:64:DA:89:30:FA:1E:89:D4:A9:FA:50:74:51
            X509v3 Authority Key Identifier:
                keyid:58:13:E2:6D:71:AC:5B:6A:60:11:56:D9:0C:E0:DC:CE:C5:98:62:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:9d:80:31:05:1b:87:a0:c3:8a:1a:91:07:7b:db:33:f8:88:
         af:28:dd:fd:24:7b:0f:b5:66:ff:66:41:a6:1e:42:7d:a6:22:
         c4:d8:df:1d:75:a7:20:75:8f:c7:88:16:c3:68:0b:66:d0:eb:
         8b:94:97:27:b4:c8:40:8e:b1:0f:2f:9a:6d:d0:28:17:21:39:
         f0:f9:e2:fd:d0:6f:58:12:2a:88:ee:89:9e:cf:fa:6e:86:3f:
         e4:74:c6:a8:17:ed:64:f3:5c:24:f7:83:1b:31:d1:2b:5a:22:
         77:fb:f3:c8:22:8d:5b:cb:0d:8d:f9:a2:c6:16:5c:8b:e4:4b:
         33:0c:e1:ba:8d:1e:84:1d:5b:3d:03:bf:61:c6:0b:6f:3d:8f:
         ac:ab:62:de:b0:27:da:a8:ae:5b:4e:a7:0f:2a:ee:10:ac:06:
         ae:22:dc:0b:09:62:83:7f:aa:aa:a4:b1:67:3d:20:51:c1:44:
         4c:33:e9:d4:49:97:78:54:ed:47:9f:5f:5c:30:1c:14:79:f5:
         09:91:97:19:27:10:5b:e6:33:bb:42:ad:42:4d:96:d6:d7:b6:
         01:01:f0:3b:69:b9:a2:05:29:d2:d3:48:4e:b9:5a:67:05:2e:
         c0:6e:c7:d6:bc:43:a7:81:e1:2f:33:20:9f:ca:ec:ca:4a:dd:
         9e:7c:0d:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv4PzbzvdIxmcmw+WaDDG37MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MTNlMjZkNzFhYzViNmE2MDExNTZkOTBjZTBkY2NlYzU5
ODYyNDMwHhcNMjYwMTI2MDMwMDUwWhcNMjYwMTI3MDMwMDUwWjAzMTEwLwYDVQQD
Eyg1MjQ5ZDNlOWY5MjFkYTY0ZGE4OTMwZmExZTg5ZDRhOWZhNTA3NDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4adW2Dn8ztcWB9+NgpfhkWCHQcLY
NJUGnFNCaOvb7D+wiczwUD2uTEq7dRXmDG13HkDvffelSkWL3mCBEEt8q9W9Jj+s
RBj0c/jxYeTZdP0gIqFLCX42uf5kfwbOFro93qJd7g70zPBVo2iubSAsLe+S/EAf
eg0NTtJsLrXNziBLuqrx6p/rsWUURVuoHyYef4pk/LNO1A68XWAPNxLN16u7l7kG
zx6BUXbk0t7JlcJBibiXVMmFM1/XrQnse1z7qVl7NhEXJP5NlWyeANb4k8wz0tbh
xYqtb5wJzW1PE+3v5f6UZF2Or/Bp7cJwE80rd8MDZNT9ZC7VXdRVHKkkdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJJ0+n5Idpk2okw+h6J1Kn6UHRRMB8GA1UdIwQY
MBaAFFgT4m1xrFtqYBFW2Qzg3M7FmGJDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0JQaWJYR3NXMnBnRVZiWkRPRGN6c1dZWWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82NGFlMzEtZDFjOC00MDA0LWE3Nzgt
MDZkZjFkYzAzMzY3LzEvV0JQaWJYR3NXMnBnRVZiWkRPRGN6c1dZWWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi82NGFlMzEtZDFjOC00MDA0LWE3NzgtMDZkZjFkYzAzMzY3
LzEvV0JQaWJYR3NXMnBnRVZiWkRPRGN6c1dZWWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASp2AMQUb
h6DDihqRB3vbM/iIryjd/SR7D7Vm/2ZBph5CfaYixNjfHXWnIHWPx4gWw2gLZtDr
i5SXJ7TIQI6xDy+abdAoFyE58Pni/dBvWBIqiO6Jns/6boY/5HTGqBftZPNcJPeD
GzHRK1oid/vzyCKNW8sNjfmixhZci+RLMwzhuo0ehB1bPQO/YcYLbz2PrKti3rAn
2qiuW06nDyruEKwGriLcCwlig3+qqqSxZz0gUcFETDPp1EmXeFTtR59fXDAcFHn1
CZGXGScQW+Yzu0KtQk2W1te2AQHwO2m5ogUp0tNITrlaZwUuwG7H1rxDp4HhLzMg
n8rsykrdnnwNgA==
-----END CERTIFICATE-----
Generated at Mon Jan 26 06:23:42 2026 by rpki-client