This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft
File:                     wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft (raw, json)
Hash identifier:          CAlC7+wKJd5WEYnibrGGfTkb625FiTo8vm9H0Rw5M5c=
Subject key identifier:   D5:9E:D7:31:F1:04:00:74:7B:76:45:93:B7:91:D4:A7:22:47:15:41
Authority key identifier: C3:34:84:59:0C:CF:F0:9A:3D:D5:DD:80:85:BE:ED:B4:2F:C4:AD:84
Certificate issuer:       /CN=c33484590ccff09a3dd5dd8085beedb42fc4ad84
Certificate serial:       019BF8ADD6AB1401A398280129515BA2D4CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft
Manifest number:          0FE2
Signing time:             Mon 26 Jan 2026 05:01:40 +0000
Manifest this update:     Mon 26 Jan 2026 05:01:40 +0000
Manifest next update:     Tue 27 Jan 2026 05:01:40 +0000
Files and hashes:         1: 6VbI7oUC0dBbZg3i9SodlSg7Kw0.roa (hash: 3VLaWZwv4PotoR2QVZDo8zSpOLpGfe3D0W6k8+xvkJ4=)
                          2: wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl (hash: jRz56l0HW3p1cIcbH401tCItqPxrDeGEHw7w0H6+/rk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:ad:d6:ab:14:01:a3:98:28:01:29:51:5b:a2:d4:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c33484590ccff09a3dd5dd8085beedb42fc4ad84
        Validity
            Not Before: Jan 26 05:01:40 2026 GMT
            Not After : Jan 27 05:01:40 2026 GMT
        Subject: CN=d59ed731f10400747b764593b791d4a722471541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:dd:25:48:4c:a0:ca:5a:30:7e:f5:44:b1:3e:
                    0c:d5:a8:3a:61:fb:6f:2c:fa:12:4b:00:b5:94:42:
                    a5:34:1c:af:71:aa:0f:53:2a:31:bd:4f:47:61:40:
                    f3:9d:9d:6b:89:e3:8a:cb:15:b2:63:db:77:34:e4:
                    97:c7:d0:85:55:20:1c:db:86:a1:1a:64:0c:38:36:
                    e7:20:f3:f8:b9:3a:d8:9e:f4:39:65:d3:e5:f7:4f:
                    60:fc:15:38:eb:3d:57:36:ae:2a:3e:3c:d6:5d:d9:
                    99:dd:b8:dc:0b:d8:f7:f1:d6:43:83:1d:35:81:08:
                    5d:53:96:47:d7:bf:63:07:30:90:e0:88:d9:27:99:
                    bc:9b:9a:6b:eb:5a:fa:f1:20:ab:2c:78:f2:cf:de:
                    98:26:3b:53:a2:8c:29:0e:b1:f5:a3:52:07:cb:59:
                    56:2e:f2:32:13:a4:33:21:85:61:70:a5:6b:39:0b:
                    12:70:b6:3e:37:d1:66:45:52:fa:5e:ce:60:eb:d4:
                    89:6a:80:55:72:41:9c:62:68:21:03:e1:43:00:55:
                    5b:bc:d7:56:30:48:4a:60:e2:72:fa:0a:d2:ed:e5:
                    b1:05:d3:10:29:10:dc:b2:54:3e:31:92:04:fc:72:
                    72:ff:24:f8:5f:88:6c:a7:a6:e7:08:02:5f:15:79:
                    97:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:9E:D7:31:F1:04:00:74:7B:76:45:93:B7:91:D4:A7:22:47:15:41
            X509v3 Authority Key Identifier:
                keyid:C3:34:84:59:0C:CF:F0:9A:3D:D5:DD:80:85:BE:ED:B4:2F:C4:AD:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:77:e7:30:3e:7e:81:d1:84:86:c2:94:15:f1:8e:1f:a9:b4:
         d7:21:a1:ee:ca:a7:bb:a1:c0:4f:8d:c7:13:5f:05:92:95:66:
         62:20:91:a4:7e:f9:9a:f0:0f:50:4d:17:6e:3b:da:9f:d2:79:
         13:2a:41:9b:8f:16:da:97:e3:42:c6:a7:06:8a:c1:34:27:78:
         15:cc:1a:86:70:ca:7d:cf:04:ef:7d:85:65:43:a0:54:d9:12:
         2b:a4:1f:99:42:15:2a:fa:a5:2f:11:9d:c0:cb:6c:dc:19:e9:
         a0:c9:1b:c7:2a:66:32:e1:25:fb:8a:45:cf:ab:7b:3f:99:1a:
         f3:79:35:10:d7:7e:f5:71:2e:cc:71:30:99:50:fd:ae:3b:b4:
         e0:5c:86:e6:8f:be:73:93:12:7f:47:a2:11:f9:85:e5:bb:41:
         f9:ba:2c:7d:84:3f:9e:91:a3:93:27:cd:27:94:1d:90:d1:3c:
         54:dc:16:aa:05:bb:ad:9e:99:51:b2:54:19:0e:a9:f8:f2:fe:
         95:b5:67:fd:74:01:f9:71:90:45:ae:fa:32:4a:1e:60:fe:24:
         d5:8f:81:49:54:8d:ee:f6:52:b4:c5:48:ad:35:a3:ca:ee:5c:
         b8:f1:e3:ca:fb:e0:59:16:f2:6b:2a:af:86:a3:01:24:8d:8f:
         d6:aa:62:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:42:29 2026 by rpki-client