This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
File:                     wg5lyt2-zUjS-HeHmTEThCvfzl0.mft (raw, json)
Hash identifier:          TI1x8X9RJ5wP2JAqa7FRm8XlABaC2eUUpGlPUreoblE=
Subject key identifier:   AC:F7:53:EA:84:6A:E7:04:C6:99:0C:4E:77:57:1A:DD:42:A8:D7:4B
Authority key identifier: C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D
Certificate issuer:       /CN=c20e65caddbecd48d2f87787993113842bdfce5d
Certificate serial:       019BF80856A0590E5D22B49890358D5B1331
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
Manifest number:          1271
Signing time:             Mon 26 Jan 2026 02:00:54 +0000
Manifest this update:     Mon 26 Jan 2026 02:00:54 +0000
Manifest next update:     Tue 27 Jan 2026 02:00:54 +0000
Files and hashes:         1: TjeA0h__0K75m-Lz_8rsQK-1bSA.roa (hash: L2lPrSJTEdmpDG2xtyfaKRlJ8hxi9q1HTQ4jAfyHzCs=)
                          2: i_5uaEC74F4fkQ9w0VTjAAVZ7ek.roa (hash: EmaFrrCeMCRKCrjyOiqjJjxN5S8IqzhYZkELnG6BX0g=)
                          3: wg5lyt2-zUjS-HeHmTEThCvfzl0.crl (hash: UH8h0vF6h7FkZJQUN+1PyHxCCjr0ijYKj74Z8d7L9m4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:08:56:a0:59:0e:5d:22:b4:98:90:35:8d:5b:13:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c20e65caddbecd48d2f87787993113842bdfce5d
        Validity
            Not Before: Jan 26 02:00:54 2026 GMT
            Not After : Jan 27 02:00:54 2026 GMT
        Subject: CN=acf753ea846ae704c6990c4e77571add42a8d74b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8f:ce:04:71:13:64:37:0b:1b:a6:ed:bf:a2:
                    44:3a:30:88:97:d9:00:02:d5:1e:43:a1:41:9d:2b:
                    5b:23:4f:61:97:d2:6c:4f:a3:9e:32:1e:38:4a:39:
                    53:ab:c0:78:73:a8:d9:95:d6:9a:b7:63:65:dd:9b:
                    c3:99:21:24:c7:76:e1:03:8d:78:a8:2b:28:97:19:
                    4c:54:de:bd:38:cd:71:a8:32:09:a2:e5:7e:28:1f:
                    da:8d:76:f3:76:ff:a0:d9:07:87:51:2a:94:c0:48:
                    b7:d1:d0:77:a6:1f:af:7d:5c:45:f6:bd:e5:32:70:
                    d7:e2:31:78:be:99:b9:48:b4:56:3d:b3:41:5c:b2:
                    66:05:d4:20:90:7d:cc:e7:01:f2:ed:e4:48:f6:9d:
                    3d:f3:bd:d6:c1:db:0f:23:30:f3:6e:11:93:a2:a5:
                    0a:a4:7a:37:ff:64:3a:37:9a:79:10:3f:0d:d9:04:
                    80:4e:1a:b6:96:78:d4:4a:48:d5:e9:ef:45:92:4e:
                    64:2c:1a:80:de:e7:db:a1:9a:35:a0:f7:30:00:86:
                    66:d7:9a:c1:25:6e:0e:71:0e:b8:5f:70:8d:39:f8:
                    5a:5d:ff:c4:f2:54:70:37:34:69:c5:cb:3f:69:70:
                    ea:ac:48:c4:b6:99:27:21:54:a6:90:e8:4c:2d:7b:
                    a7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F7:53:EA:84:6A:E7:04:C6:99:0C:4E:77:57:1A:DD:42:A8:D7:4B
            X509v3 Authority Key Identifier:
                keyid:C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:f4:54:84:57:e6:74:34:52:a5:95:fa:d8:c3:c0:26:a9:e3:
         3f:57:50:ed:e3:36:36:f5:4f:b7:44:b8:65:cd:e7:79:9b:a1:
         e1:4f:65:bf:73:cf:7f:ba:6a:2e:8e:f6:0b:56:a6:42:62:70:
         f7:cc:5a:11:54:85:4d:7c:18:23:fd:b7:39:3b:f1:f0:56:bb:
         3e:a9:55:75:cb:d2:cc:da:55:d3:bc:57:2d:68:82:2d:d0:32:
         7d:7a:81:4c:53:6e:e7:da:21:f5:03:37:62:cf:67:58:45:9c:
         74:61:75:f5:d1:ed:9e:0a:02:9c:86:17:02:9d:28:1b:59:68:
         38:c1:a8:c6:c9:fd:c8:de:cb:c0:cf:be:e3:cd:07:31:2c:bc:
         82:38:01:21:b6:2f:18:1e:0f:1a:38:98:f9:51:fb:f4:5a:22:
         a6:33:0b:d0:9b:ba:7a:8b:03:3f:24:7c:24:10:b9:ea:83:af:
         2e:6b:0e:3d:12:fb:12:5e:8c:4c:ff:f1:31:cd:52:f0:c5:67:
         8b:6a:38:7f:2e:d5:4c:99:1f:b1:28:52:98:90:ef:d1:f0:f8:
         dd:c7:a8:80:d8:e1:a8:6f:13:8a:49:f2:b1:01:81:8e:59:03:
         a0:c6:59:2d:9b:0f:db:79:34:12:c6:97:a1:bf:33:07:bf:ef:
         39:06:0a:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv4CFagWQ5dIrSYkDWNWxMxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMGU2NWNhZGRiZWNkNDhkMmY4Nzc4Nzk5MzExMzg0MmJk
ZmNlNWQwHhcNMjYwMTI2MDIwMDU0WhcNMjYwMTI3MDIwMDU0WjAzMTEwLwYDVQQD
EyhhY2Y3NTNlYTg0NmFlNzA0YzY5OTBjNGU3NzU3MWFkZDQyYThkNzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwI/OBHETZDcLG6btv6JEOjCIl9kA
AtUeQ6FBnStbI09hl9JsT6OeMh44SjlTq8B4c6jZldaat2Nl3ZvDmSEkx3bhA414
qCsolxlMVN69OM1xqDIJouV+KB/ajXbzdv+g2QeHUSqUwEi30dB3ph+vfVxF9r3l
MnDX4jF4vpm5SLRWPbNBXLJmBdQgkH3M5wHy7eRI9p09873WwdsPIzDzbhGToqUK
pHo3/2Q6N5p5ED8N2QSAThq2lnjUSkjV6e9Fkk5kLBqA3ufboZo1oPcwAIZm15rB
JW4OcQ64X3CNOfhaXf/E8lRwNzRpxcs/aXDqrEjEtpknIVSmkOhMLXuneQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKz3U+qEaucExpkMTndXGt1CqNdLMB8GA1UdIwQY
MBaAFMIOZcrdvs1I0vh3h5kxE4Qr385dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2c1bHl0Mi16VWpTLUhlSG1URVRoQ3ZmemwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8zNWVhZDItNGFhNC00ZmYwLWI1Y2It
N2VmYWE0YTc0Zjk3LzEvd2c1bHl0Mi16VWpTLUhlSG1URVRoQ3ZmemwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8zNWVhZDItNGFhNC00ZmYwLWI1Y2ItN2VmYWE0YTc0Zjk3
LzEvd2c1bHl0Mi16VWpTLUhlSG1URVRoQ3ZmemwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW/RUhFfm
dDRSpZX62MPAJqnjP1dQ7eM2NvVPt0S4Zc3neZuh4U9lv3PPf7pqLo72C1amQmJw
98xaEVSFTXwYI/23OTvx8Fa7PqlVdcvSzNpV07xXLWiCLdAyfXqBTFNu59oh9QM3
Ys9nWEWcdGF19dHtngoCnIYXAp0oG1loOMGoxsn9yN7LwM++480HMSy8gjgBIbYv
GB4PGjiY+VH79FoipjML0Ju6eosDPyR8JBC56oOvLmsOPRL7El6MTP/xMc1S8MVn
i2o4fy7VTJkfsShSmJDv0fD43ceogNjhqG8TiknysQGBjlkDoMZZLZsP23k0EsaX
ob8zB7/vOQYKsA==
-----END CERTIFICATE-----
Generated at Mon Jan 26 08:41:57 2026 by rpki-client