This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft
File:                     WyUo3AddUec-4NCQ4dKh9c-uj_s.mft (raw, json)
Hash identifier:          +5ceoUXK8LCm3C1x8bnZeTTDIv0Wbw/3Uz5GRkIn+2o=
Subject key identifier:   F4:54:DB:AE:C3:3C:AD:51:84:BB:8C:A2:BB:61:74:C3:40:24:44:3F
Authority key identifier: 5B:25:28:DC:07:5D:51:E7:3E:E0:D0:90:E1:D2:A1:F5:CF:AE:8F:FB
Certificate issuer:       /CN=5b2528dc075d51e73ee0d090e1d2a1f5cfae8ffb
Certificate serial:       019BF763B4733C9718B8BA04E90CFA33C48D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft
Manifest number:          02EF
Signing time:             Sun 25 Jan 2026 23:01:05 +0000
Manifest this update:     Sun 25 Jan 2026 23:01:05 +0000
Manifest next update:     Mon 26 Jan 2026 23:01:05 +0000
Files and hashes:         1: UUMyTjiCqTOJ9RxzyslUJ28NkGE.roa (hash: LT6KzYJU9uNZJmsZb9G6zfqBp9thSTQ3sJt1lTbYuNo=)
                          2: WyUo3AddUec-4NCQ4dKh9c-uj_s.crl (hash: KEwKKiDypGpPJTLMSL7UpjG3TMtSTJj0zx+xf6J476M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:63:b4:73:3c:97:18:b8:ba:04:e9:0c:fa:33:c4:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b2528dc075d51e73ee0d090e1d2a1f5cfae8ffb
        Validity
            Not Before: Jan 25 23:01:05 2026 GMT
            Not After : Jan 26 23:01:05 2026 GMT
        Subject: CN=f454dbaec33cad5184bb8ca2bb6174c34024443f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:47:a6:2c:c6:4b:73:4b:f1:05:91:d3:04:92:
                    08:ab:49:74:2a:22:03:f6:2b:06:48:e4:7d:5d:05:
                    24:3b:13:69:ce:fe:d8:db:de:a9:ed:bf:c9:8b:01:
                    1a:7d:47:62:db:56:17:4e:27:4e:39:e8:49:6c:c8:
                    00:55:49:cb:4d:8f:41:0b:78:39:0f:e1:b0:fc:09:
                    8c:27:1d:cf:98:5f:c9:57:f0:23:80:ec:ad:19:6e:
                    90:1e:33:49:3c:ec:60:12:28:8f:e3:3b:e9:44:b3:
                    a1:6d:e9:94:c6:0d:2e:9a:74:d5:eb:42:89:98:f5:
                    ff:e8:c9:fd:bf:bc:09:df:20:0b:bc:b5:3b:d4:f0:
                    70:37:a6:f4:af:8b:a2:7b:17:be:1b:65:70:a7:ca:
                    79:65:4b:d6:9a:be:46:9e:f2:54:42:40:4d:3f:7e:
                    89:4c:57:20:29:f7:18:65:45:5a:d0:d4:96:74:0d:
                    61:69:29:1e:ab:84:4d:cb:8a:9a:25:47:88:8d:fa:
                    f0:83:b3:ab:3e:dc:1c:ab:6b:c1:1b:bf:fe:32:d3:
                    3a:58:37:24:3e:65:3e:97:29:83:39:a5:59:fe:c4:
                    ec:1b:56:3f:17:0a:fc:c2:b0:60:9d:ef:63:c8:1a:
                    db:8a:a6:b1:eb:41:8a:13:bb:31:0c:b0:1a:b2:b6:
                    27:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:54:DB:AE:C3:3C:AD:51:84:BB:8C:A2:BB:61:74:C3:40:24:44:3F
            X509v3 Authority Key Identifier:
                keyid:5B:25:28:DC:07:5D:51:E7:3E:E0:D0:90:E1:D2:A1:F5:CF:AE:8F:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:c7:8e:54:90:45:21:44:6e:b3:73:17:a2:0d:80:81:1a:b1:
         5c:5e:9d:43:be:d0:01:a9:6f:5e:26:a7:88:a0:f0:d2:e9:5a:
         4f:59:bf:68:e8:83:69:98:78:2e:b5:64:f5:41:ef:85:7c:20:
         6e:25:dc:7c:91:b7:e4:40:35:e4:b4:20:e8:a6:ba:97:4a:bc:
         cf:ce:0b:4d:b1:19:30:95:f1:a1:54:1d:72:fb:0e:f9:93:2f:
         c5:c8:95:33:f5:0b:7d:37:f7:ff:55:13:f2:f8:46:69:45:3a:
         7e:69:88:f0:e7:74:54:2b:ea:72:2e:49:d3:44:1b:14:65:5d:
         98:2e:80:5b:d5:c1:ff:3d:8c:2b:13:9c:a8:f8:5d:6a:6d:d5:
         e3:aa:71:55:28:99:0c:2a:fd:78:34:44:6b:d7:e1:cf:87:64:
         80:c5:9e:18:8b:c0:7a:e7:cb:a5:be:ef:3d:5f:2a:02:f6:02:
         51:d9:cc:31:03:a9:91:df:c1:48:da:aa:79:31:81:14:97:8c:
         37:ea:4c:2c:26:f8:61:3c:44:8e:1b:ff:58:35:5b:bb:5e:99:
         7b:84:98:30:06:c1:03:a9:40:ec:c9:c1:7e:07:b8:64:9a:16:
         50:ff:ce:35:88:f7:1b:7f:97:73:88:14:11:bf:08:e7:06:15:
         c7:28:ab:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:00:07 2026 by rpki-client