This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
File:                     WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft (raw, json)
Hash identifier:          xf5ccGWbFlKeTTv9qbDUJpDxqVz4wcmc2eWND03BfjA=
Subject key identifier:   0D:96:70:5F:79:DE:0E:2E:FF:49:51:DE:F1:C0:89:B2:14:7F:C0:52
Authority key identifier: 58:2C:74:FC:59:B7:AB:09:6A:25:7D:3B:62:99:D2:F6:FD:A4:6A:80
Certificate issuer:       /CN=582c74fc59b7ab096a257d3b6299d2f6fda46a80
Certificate serial:       019BF5E362162E181D122B60590ECE5B4D09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
Manifest number:          074D
Signing time:             Sun 25 Jan 2026 16:01:18 +0000
Manifest this update:     Sun 25 Jan 2026 16:01:18 +0000
Manifest next update:     Mon 26 Jan 2026 16:01:18 +0000
Files and hashes:         1: WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl (hash: u26uZnVgg6SPDHVTuZmsvkW0Tq57fr2fZGM69aPH5Ys=)
                          2: pCg_IO1cPrzNc2xa1m7otiwxh4Y.roa (hash: xhDhbtSEarX85N5AGFHu5oduKKvgeHiQNe7PQ5nfYFQ=)
                          3: zuaIfcfFIX5EeM-omKdGGgGs_mY.roa (hash: CvfuaqVfIoNAv4R8GIVYc0kHxO/XnZ6ljRU5mOaCsoE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:e3:62:16:2e:18:1d:12:2b:60:59:0e:ce:5b:4d:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=582c74fc59b7ab096a257d3b6299d2f6fda46a80
        Validity
            Not Before: Jan 25 16:01:18 2026 GMT
            Not After : Jan 26 16:01:18 2026 GMT
        Subject: CN=0d96705f79de0e2eff4951def1c089b2147fc052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8d:64:4a:cc:a5:a8:50:95:86:5a:4c:87:3f:
                    f0:72:8e:8a:b8:b1:b6:ec:88:32:15:78:c8:a1:98:
                    2b:51:50:68:cb:f3:1a:15:cf:52:27:75:1b:57:a9:
                    21:84:b0:9e:25:8d:03:03:ed:29:7d:dd:53:09:e5:
                    c8:72:7b:b7:96:de:16:72:44:8f:08:0f:c0:47:9a:
                    f1:3c:52:d5:f7:e2:9c:d9:9b:f4:5d:bf:4c:f9:b2:
                    27:ec:07:6c:14:c3:4e:d5:04:3f:e6:c4:17:d7:29:
                    79:d8:7f:b5:8d:54:e8:b1:e7:dd:1f:32:64:d7:28:
                    a0:f4:f4:7b:34:5d:5c:2b:02:9a:c0:d7:21:2f:22:
                    1f:1e:d1:1b:67:cd:29:9c:0d:70:4b:3d:46:88:f6:
                    e7:4e:85:20:bd:b4:65:89:97:6a:0f:03:c9:ac:27:
                    c1:d1:f9:91:67:a8:37:b8:79:d5:e6:5b:22:dd:54:
                    3c:a3:c1:ad:5c:48:d1:77:ef:9f:85:e4:e1:cf:ab:
                    c8:d6:18:89:de:cc:e7:c0:3b:36:cc:a4:30:c1:9e:
                    32:11:1f:b4:53:d1:e0:54:7f:eb:ff:e6:c0:23:82:
                    d0:46:1e:e4:c2:ca:9e:48:bb:67:6a:a0:2d:54:2f:
                    c5:eb:d8:f0:8d:ca:fe:b3:6f:80:77:5a:65:bd:29:
                    8d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:96:70:5F:79:DE:0E:2E:FF:49:51:DE:F1:C0:89:B2:14:7F:C0:52
            X509v3 Authority Key Identifier:
                keyid:58:2C:74:FC:59:B7:AB:09:6A:25:7D:3B:62:99:D2:F6:FD:A4:6A:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:ca:fa:02:32:72:3b:04:c6:45:dd:af:f1:5e:f1:51:e3:2f:
         e8:a8:c5:f3:c0:6d:5f:9f:ea:6d:9b:67:2c:80:60:d2:80:42:
         20:10:d3:2f:7f:90:6e:e6:ad:29:91:58:f6:75:c3:cc:58:a1:
         c5:74:e1:a5:f7:94:69:c0:61:a4:ce:20:de:6f:a5:97:3f:87:
         27:ea:a6:44:20:5d:63:09:00:f2:f2:9f:c8:23:66:c4:7c:73:
         49:7d:c8:e9:0e:b9:28:03:c4:bf:df:26:7b:70:57:0e:45:71:
         f1:ca:d6:ec:6b:54:f6:c9:2a:39:be:49:25:9f:3a:7d:76:d1:
         a8:fc:ba:74:12:a3:cc:08:c1:12:b7:b2:98:4c:89:79:4a:18:
         f9:ce:63:df:58:dd:92:53:f0:18:f5:51:9e:ee:26:53:4f:b6:
         b4:02:d0:80:bb:54:22:8b:d2:5d:d9:34:6a:ef:a2:dd:6b:ed:
         17:a7:87:0e:b2:10:0e:31:78:00:b0:c7:85:a2:b1:64:65:f7:
         b7:d4:b6:eb:e5:1b:89:06:9f:f1:cc:e4:31:ec:46:af:bf:c3:
         1a:8b:8e:3f:07:01:2c:3f:8e:02:3a:8b:a5:74:a4:07:24:0e:
         46:2f:54:fc:45:37:c1:1f:96:03:15:ec:c4:43:7b:9a:62:50:
         cb:74:15:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:22:15 2026 by rpki-client