This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
File:                     WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft (raw, json)
Hash identifier:          uf9iSrMqfXFMpi9pGi8M9GxoFSUymeNjwxC7dYIhdLM=
Subject key identifier:   E7:A1:0C:31:1C:E1:73:02:D4:7C:31:BC:CC:E2:E5:FF:C1:80:C5:2B
Authority key identifier: 59:90:C1:55:37:62:AC:9A:F5:7D:F9:B5:8D:9D:C5:0A:F4:09:C5:66
Certificate issuer:       /CN=5990c1553762ac9af57df9b58d9dc50af409c566
Certificate serial:       019BF9F6CA2F248470A6ECCE0CFD9F3253C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
Manifest number:          1567
Signing time:             Mon 26 Jan 2026 11:00:58 +0000
Manifest this update:     Mon 26 Jan 2026 11:00:58 +0000
Manifest next update:     Tue 27 Jan 2026 11:00:58 +0000
Files and hashes:         1: La1bk9hiAsFAmxgmoYU8D36An4I.roa (hash: prW1lY9yf0rsG8vbap4UWXcYjyAnNaggPXP/OIdFgHM=)
                          2: S7RcXMyiVxlze6GVvWUy2ASQtA4.roa (hash: 9nQ7JQOoqPESGeYG/+m0xunoEX7zzRQueykeebjY92Q=)
                          3: WZDBVTdirJr1ffm1jZ3FCvQJxWY.crl (hash: 4OYyr5WIpSlyMTJ0gweYLbvPk/d9g2eDOgKYERV3gCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:f6:ca:2f:24:84:70:a6:ec:ce:0c:fd:9f:32:53:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5990c1553762ac9af57df9b58d9dc50af409c566
        Validity
            Not Before: Jan 26 11:00:58 2026 GMT
            Not After : Jan 27 11:00:58 2026 GMT
        Subject: CN=e7a10c311ce17302d47c31bccce2e5ffc180c52b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ff:86:68:01:40:10:81:2f:f0:96:0d:a4:6a:
                    86:56:7d:35:af:1c:4d:72:62:e3:49:04:aa:9d:54:
                    bb:2d:fd:df:ee:49:41:6c:ce:77:6a:2a:99:ef:ea:
                    20:db:2b:72:3d:88:8e:d0:6b:4f:60:bf:c5:3e:82:
                    29:88:f4:43:b6:8b:31:72:3c:4d:0a:23:98:32:af:
                    8f:15:fe:54:53:56:17:40:31:d8:01:cb:6f:fb:c2:
                    42:a3:c0:7b:e4:b0:9d:b5:1e:0a:b1:f1:02:96:0a:
                    66:f0:c1:70:a6:d5:3e:8b:ee:a1:cb:62:33:1a:e8:
                    d5:33:b5:b4:8e:d0:2c:82:18:01:b0:55:97:49:d4:
                    3e:46:84:2b:41:02:b5:8b:14:15:55:87:60:0b:fd:
                    76:12:ad:0a:9f:77:4a:b6:b4:26:37:35:59:87:34:
                    14:8c:e5:42:e2:66:66:5d:c0:c5:6a:20:16:0b:a1:
                    d0:e6:3b:cf:03:78:e9:89:86:ed:3e:2e:8c:4a:6c:
                    51:60:28:bf:5e:62:dc:37:03:9b:6b:08:89:8e:72:
                    1f:4f:ee:97:91:21:d7:62:66:36:6f:3e:e6:df:ac:
                    73:35:ec:60:79:b3:91:77:15:72:f4:7e:30:4c:0c:
                    9c:ad:7f:40:08:73:a9:79:0b:4f:d3:02:e8:08:6d:
                    66:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A1:0C:31:1C:E1:73:02:D4:7C:31:BC:CC:E2:E5:FF:C1:80:C5:2B
            X509v3 Authority Key Identifier:
                keyid:59:90:C1:55:37:62:AC:9A:F5:7D:F9:B5:8D:9D:C5:0A:F4:09:C5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:4f:2e:2d:7f:97:e1:19:9c:55:c2:d1:84:49:bf:d1:9c:73:
         bb:0a:65:54:dd:bb:2b:17:08:62:1f:e1:03:d9:cf:ee:32:78:
         b0:db:39:e4:69:4a:0b:01:0b:bb:2f:de:0f:b7:e0:74:d7:05:
         5f:73:69:78:ed:cb:28:08:42:13:82:74:8a:27:18:41:08:27:
         cf:7f:94:9e:16:b1:51:4b:1a:5a:0c:a6:84:65:ab:fc:21:24:
         eb:51:e9:71:22:f9:75:81:fd:3d:55:1a:b6:55:dc:e0:72:4e:
         1e:4f:fb:7a:c3:59:ea:2d:b4:f2:bf:04:2a:02:69:44:65:ea:
         1d:be:31:9e:54:c3:c9:10:03:93:e8:d0:ac:e0:70:cd:44:1a:
         f6:e5:5e:f1:92:3d:0e:d7:ff:49:9d:b0:46:ec:d5:da:e5:e2:
         99:21:65:7a:ec:eb:e8:4c:b4:b0:55:fe:b6:3a:bd:6e:ef:9f:
         8a:59:6d:f1:8e:3e:9f:1d:ac:44:47:b0:8c:a0:8c:5c:84:4e:
         97:7c:82:ba:d7:26:6b:72:b0:51:23:23:78:68:00:28:90:78:
         5b:8e:1a:b9:94:5f:1e:ce:4d:1c:4e:c0:af:6c:85:26:8f:36:
         5b:6b:af:e3:e4:4a:16:34:31:9e:d4:dd:7f:9d:cb:88:b3:df:
         61:79:da:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 14:24:10 2026 by rpki-client