This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.mft
File:                     WrGZZRWIRDS4eIK1uXKm5Sn_sAs.mft (raw, json)
Hash identifier:          3iodZZad1m9V181QTgLkILgqv31d3MYtHc6VieKTBqM=
Subject key identifier:   A3:9F:35:3B:EC:A3:E2:34:52:D1:91:33:01:51:FF:AD:DA:86:59:A0
Authority key identifier: 5A:B1:99:65:15:88:44:34:B8:78:82:B5:B9:72:A6:E5:29:FF:B0:0B
Certificate issuer:       /CN=5ab1996515884434b87882b5b972a6e529ffb00b
Certificate serial:       019BF651B8290915A7B2EA8220EE48458FCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.mft
Manifest number:          1536
Signing time:             Sun 25 Jan 2026 18:01:49 +0000
Manifest this update:     Sun 25 Jan 2026 18:01:49 +0000
Manifest next update:     Mon 26 Jan 2026 18:01:49 +0000
Files and hashes:         1: WrGZZRWIRDS4eIK1uXKm5Sn_sAs.crl (hash: MQv7+8GeF/bSz56F31iBnUcRmMwIZzWlbvcN/UWWHFg=)
                          2: gsMc5yTQ5yB7hNQuR1OBuIkGkVE.roa (hash: fl4OaMl7eU6Alv7KmsWSIeUrTO2NMP6tD6HDIBxbcMQ=)
                          3: n6aTPqlGJJGfkw2ndfd9kElHIUE.roa (hash: eTwfqmOJCDHZnlmX4vz/z/iYHX8NIjRLHjRN1ZBjk40=)
                          4: sB0mmb0YWSbMF3E1k6_T_zsN2sM.roa (hash: YB4mz8FheQ84EqAJDNB1pXt2M2JuLI6viCvso+bTBuc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 18:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:51:b8:29:09:15:a7:b2:ea:82:20:ee:48:45:8f:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ab1996515884434b87882b5b972a6e529ffb00b
        Validity
            Not Before: Jan 25 18:01:49 2026 GMT
            Not After : Jan 26 18:01:49 2026 GMT
        Subject: CN=a39f353beca3e23452d191330151ffadda8659a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fb:e8:1f:d0:b9:39:9e:98:25:86:b8:99:db:
                    c6:2d:60:6e:8a:e1:d7:20:39:13:30:bd:2e:3e:1d:
                    26:c3:9d:cd:9c:85:49:65:70:4f:59:32:6b:cb:00:
                    14:ed:67:38:dc:32:2a:a8:7f:b2:b2:20:9e:ab:61:
                    07:e0:b7:64:97:87:6b:ab:36:fd:d2:71:76:89:17:
                    85:17:b0:bd:d0:bb:aa:47:6f:11:5a:4b:3f:33:a0:
                    5a:bd:e6:5b:83:63:c3:cd:7a:f8:6d:7d:93:e5:33:
                    44:a1:ee:4f:3d:80:5c:2e:72:82:34:3e:6a:e4:0f:
                    2c:a0:46:06:b0:56:d2:14:d4:78:fd:c7:61:ec:ba:
                    bb:be:a8:9a:88:43:b4:51:5b:b4:8f:15:6d:b5:54:
                    09:1a:b4:e9:75:cd:b8:95:54:ed:2b:5d:0e:8d:f7:
                    d3:12:7d:9a:61:ca:a4:0c:a9:0f:a8:1c:4d:87:9f:
                    f0:9d:98:70:b4:10:62:b6:95:36:6e:00:02:15:4f:
                    3b:85:48:89:e0:d2:c8:f6:8a:65:16:fd:44:6e:e6:
                    5f:80:38:83:c9:ca:98:5e:09:24:ed:9c:18:bd:3c:
                    a2:e5:f5:39:d0:42:b2:13:41:b9:6c:f0:ac:e9:70:
                    7e:bb:9e:f2:72:c3:a3:57:cb:39:2c:f8:94:13:8c:
                    0a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:9F:35:3B:EC:A3:E2:34:52:D1:91:33:01:51:FF:AD:DA:86:59:A0
            X509v3 Authority Key Identifier:
                keyid:5A:B1:99:65:15:88:44:34:B8:78:82:B5:B9:72:A6:E5:29:FF:B0:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:a9:c1:35:10:5e:62:c6:b4:b7:22:7b:1a:fd:f9:1c:19:ac:
         a6:5a:e2:b4:16:87:0c:94:3d:1c:fb:94:84:de:14:90:72:69:
         5d:37:1f:00:df:43:ef:2c:2e:26:11:89:1a:4c:a1:63:21:a7:
         81:41:64:af:c0:c3:b2:65:9e:5b:be:e1:8c:0a:34:15:db:de:
         50:69:b9:1c:c5:c5:3d:98:b7:b2:70:17:80:fa:dd:62:62:fe:
         d1:f3:d9:5c:b3:7e:15:12:1d:67:59:a9:b3:25:30:e5:00:ad:
         41:69:3c:83:a0:17:c1:e8:f5:2e:48:cb:74:6d:08:03:36:07:
         d8:f6:19:5b:01:11:04:39:17:ef:d5:2e:81:2e:d7:df:0b:e9:
         44:2f:41:d9:a3:67:cc:5b:de:60:d2:38:66:bd:d2:6c:63:bb:
         12:08:c4:e6:d3:55:58:18:54:8b:b0:ea:95:37:89:94:ce:36:
         bc:44:ff:35:1f:c6:e5:8f:1c:63:c9:08:e6:cb:59:8d:b7:be:
         71:a2:e6:ec:89:d3:6f:48:b6:ed:12:3f:82:23:29:4f:44:5e:
         13:2a:2a:1f:be:81:f8:dc:0a:bb:b4:d1:71:f2:ac:7c:00:23:
         31:d8:d6:9a:b8:e5:58:18:10:98:78:25:c4:b1:7b:43:95:66:
         b0:f9:04:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:47:11 2026 by rpki-client