This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft
File:                     WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft (raw, json)
Hash identifier:          bzv/QgbNVTHnGIXCppqD1NRLh9gm6xFuEt5sp6zaDOw=
Subject key identifier:   8E:74:CA:97:B9:E2:32:8F:75:C6:16:13:ED:21:66:01:CC:A2:F2:4C
Authority key identifier: 5A:68:D6:99:D1:A9:45:7C:78:AC:FB:EC:00:4F:98:67:7A:A4:CC:16
Certificate issuer:       /CN=5a68d699d1a9457c78acfbec004f98677aa4cc16
Certificate serial:       019BF72D3DD52FE4AE9E6110F3B3259E98DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft
Manifest number:          17F0
Signing time:             Sun 25 Jan 2026 22:01:35 +0000
Manifest this update:     Sun 25 Jan 2026 22:01:35 +0000
Manifest next update:     Mon 26 Jan 2026 22:01:35 +0000
Files and hashes:         1: FpD_qWuFRs5yB76Ev3wufv6K2z4.roa (hash: FSwRAONOIK4j/XMQ9hE0Wzcc2X2TjJV/e/vz44br/E4=)
                          2: Ms5QQ8hSMqQ1fJTgyVbM1SW-D0E.roa (hash: x2s25Fjh6v9DZuMShLb6qRa3XLGsukQHsqtZn9Lxoeo=)
                          3: WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl (hash: g+wHVUIS4YtKc++iLK7GDCoJWzPlxb3+hFv2TBD9vZk=)
                          4: YhBolksDWVHTN-zJ1ieDr6rh-7k.roa (hash: UYCr/ovYg1esT8fa7GfmnilQ+Y+AIHt8oDNr7PNZe1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:2d:3d:d5:2f:e4:ae:9e:61:10:f3:b3:25:9e:98:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a68d699d1a9457c78acfbec004f98677aa4cc16
        Validity
            Not Before: Jan 25 22:01:35 2026 GMT
            Not After : Jan 26 22:01:35 2026 GMT
        Subject: CN=8e74ca97b9e2328f75c61613ed216601cca2f24c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5f:79:45:68:e6:7e:2b:d3:cf:cf:29:92:1c:
                    a7:7d:8a:46:18:24:49:91:10:4a:01:d5:62:d6:fe:
                    af:d0:61:96:0a:97:58:c7:ae:83:b8:0a:5f:00:af:
                    1b:c1:f4:73:cd:22:4c:16:ae:fb:de:de:20:14:05:
                    e6:3e:03:69:f8:d8:63:b6:c2:32:8a:fb:c9:22:6b:
                    68:4c:07:1e:e2:b9:2a:6b:ce:12:22:3d:97:dc:0e:
                    14:7b:39:d2:a7:f6:44:ef:8d:10:dd:ac:ba:28:c5:
                    5c:e9:d2:7d:f2:41:7b:e1:68:ce:d6:fa:82:99:b5:
                    f4:62:e2:44:d1:a1:09:c1:35:18:f6:bf:bf:4b:cf:
                    63:d5:cd:31:81:ad:70:04:17:f8:23:ec:f3:ed:cd:
                    6a:77:40:ad:50:10:b7:93:5b:d1:f2:d1:f8:33:11:
                    e0:85:44:e9:4e:b6:26:69:a2:8b:2d:58:03:2f:bb:
                    d6:12:38:d1:27:6b:40:17:34:4d:34:70:a9:b1:7e:
                    8d:38:f1:b2:7d:de:d8:5b:10:dc:63:16:2f:3f:1a:
                    98:f3:6b:3e:76:b1:75:a4:dc:14:ce:e6:33:c5:35:
                    2f:02:fa:db:7c:55:91:3c:03:43:6f:11:ad:8c:04:
                    9d:73:fe:38:46:f2:b4:ac:e5:75:57:a4:82:ef:98:
                    e1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:74:CA:97:B9:E2:32:8F:75:C6:16:13:ED:21:66:01:CC:A2:F2:4C
            X509v3 Authority Key Identifier:
                keyid:5A:68:D6:99:D1:A9:45:7C:78:AC:FB:EC:00:4F:98:67:7A:A4:CC:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:8b:89:b9:4d:99:5c:16:62:50:7f:31:9e:2d:b0:d7:2b:28:
         e9:1f:b7:9e:28:90:b9:e5:28:53:eb:6d:e9:d4:ec:4d:c4:d8:
         74:77:76:7b:a0:75:7d:7f:31:64:e6:4c:c8:32:4e:61:fd:06:
         27:d6:2b:73:c0:07:29:1a:5e:20:03:16:73:f1:a0:e5:56:3c:
         39:a5:6f:17:bb:1e:4f:d7:05:e0:74:f3:ff:fd:70:9c:77:fe:
         0a:42:bd:28:b4:ab:2c:5d:d5:08:7d:a1:c0:ea:61:75:1b:a7:
         56:51:a2:31:6a:b0:b3:33:fd:b7:be:96:da:a0:01:7c:51:1b:
         f6:5c:ba:41:ad:0f:38:04:ae:65:5e:0f:6d:df:b7:b5:19:52:
         64:75:76:5c:e9:2f:8d:74:d7:f4:ab:4e:fa:a8:0d:a1:9e:2d:
         6e:69:b2:a2:31:3f:24:da:ff:95:5c:d6:28:4a:9d:c4:b7:ab:
         c1:ed:3f:ae:e3:3e:97:95:19:5d:95:0e:d0:e2:2c:97:d3:77:
         31:f0:c3:3c:1e:4a:71:83:79:ac:c8:51:dd:c1:d9:b6:10:7a:
         6b:fe:26:29:9a:21:8c:3c:8f:96:39:87:94:40:26:28:35:09:
         d1:da:68:48:1b:79:e6:6c:d3:63:5c:ea:d3:8c:cd:47:0a:84:
         71:8f:f1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:36:39 2026 by rpki-client