This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft
File:                     W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft (raw, json)
Hash identifier:          m54nOhKkdqtsx/JhxBI+GR/U1MSLL8glSjv8qZQL/cI=
Subject key identifier:   BC:F8:C7:7E:26:18:C6:9B:7F:73:EF:5F:04:5D:B2:60:4C:DC:3B:7F
Authority key identifier: 5B:F8:14:35:ED:13:78:98:95:F3:75:DC:34:D0:4C:E9:1A:CA:47:44
Certificate issuer:       /CN=5bf81435ed13789895f375dc34d04ce91aca4744
Certificate serial:       019BF6F58089B2CCA6728E3421AC15E65EE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft
Manifest number:          10E3
Signing time:             Sun 25 Jan 2026 21:00:42 +0000
Manifest this update:     Sun 25 Jan 2026 21:00:42 +0000
Manifest next update:     Mon 26 Jan 2026 21:00:42 +0000
Files and hashes:         1: 1-Q0gxmjETZ8-EbAsvBzHxZ3IWYc.roa (hash: 1z/Td/mz4lnv4DMzZS2Hbks9/dVY2grsNq8hablzQfE=)
                          2: W_gUNe0TeJiV83XcNNBM6RrKR0Q.crl (hash: D9mdTRE8hJdWhMGwz5cgQxMywhwi5Onn2s0W0C5timY=)
                          3: gPxz3AsvpazPSscQmOwXd8XHipo.roa (hash: IOFul4cQGXwnFtQ64s8onrLCe2V7iS99e1JtKsceQBo=)
                          4: h9nPAlU3s6KxTj5jBnBj5xZRCPU.roa (hash: 1Mi5lnnLXBxwQz2RK1kt7WBVIV9EaESr88qtKCm96w8=)
                          5: yINd0n3gP0x6qa8FJxhYKeddvro.roa (hash: Qs7Q1ePx1UCEL9KBD2PgxRBJH5bavRQ5dNwg0R51V6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:f5:80:89:b2:cc:a6:72:8e:34:21:ac:15:e6:5e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bf81435ed13789895f375dc34d04ce91aca4744
        Validity
            Not Before: Jan 25 21:00:42 2026 GMT
            Not After : Jan 26 21:00:42 2026 GMT
        Subject: CN=bcf8c77e2618c69b7f73ef5f045db2604cdc3b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:91:eb:42:54:66:33:de:e4:8d:bf:d3:c8:d5:
                    0d:b4:c3:7b:32:53:84:5d:c2:4e:ee:cc:aa:17:46:
                    8d:88:b4:88:37:fb:24:a9:b3:c8:85:9a:8c:82:77:
                    f7:c1:90:a6:00:7b:6a:db:ea:c7:42:d9:8f:a8:52:
                    4c:76:37:c7:c8:f8:99:04:cd:fd:f0:64:1e:1e:10:
                    8a:de:66:5e:81:52:54:8c:95:6e:81:17:b4:88:f8:
                    dc:02:ee:0e:ba:56:e8:aa:d9:58:f0:05:dc:72:89:
                    c0:bf:d5:01:65:35:0e:c2:b3:84:72:75:77:66:84:
                    ab:4b:07:9c:8b:01:07:3e:ee:17:af:2e:5a:bd:66:
                    6c:ea:03:fd:aa:13:67:e8:02:f0:3e:eb:50:36:c5:
                    88:5d:fd:20:06:ef:69:c4:ea:54:2d:47:08:8c:04:
                    e2:08:81:90:3f:bf:56:ca:e1:dd:57:92:42:23:81:
                    b0:a4:14:46:a8:a8:e6:c1:2a:43:b3:d5:8f:25:6d:
                    4e:80:6c:30:5c:ae:94:c0:6e:66:79:9a:84:af:a5:
                    f0:50:14:a0:82:c4:6a:bc:9e:b8:44:c7:0b:4c:b0:
                    1d:55:f0:b5:4e:a3:3a:49:e2:8e:df:4c:a1:93:d2:
                    d7:34:50:d2:69:b7:d7:a0:bc:f9:3f:ff:89:83:a6:
                    f2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F8:C7:7E:26:18:C6:9B:7F:73:EF:5F:04:5D:B2:60:4C:DC:3B:7F
            X509v3 Authority Key Identifier:
                keyid:5B:F8:14:35:ED:13:78:98:95:F3:75:DC:34:D0:4C:E9:1A:CA:47:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:32:81:2b:a5:d1:ed:89:50:70:c1:e9:20:61:37:10:eb:25:
         44:d7:03:77:02:37:a7:60:0b:18:ff:89:7e:fb:23:d7:cd:66:
         eb:fe:9c:dc:0f:8c:ef:0d:ce:bc:ec:0f:02:bf:8f:39:d5:88:
         43:f5:68:ec:15:57:48:bd:5e:48:86:fd:64:c8:2d:5b:00:57:
         99:65:97:ef:b7:8e:31:90:f9:9b:a8:d5:19:e8:fa:cc:00:84:
         dc:86:8c:f7:7d:b7:de:42:8e:ad:ee:36:a9:cf:4e:66:d4:43:
         bc:c7:1b:12:67:1b:60:22:19:2c:f6:61:0a:80:74:b2:35:3d:
         9b:f0:0f:6c:f9:d1:76:4b:04:94:29:80:75:5f:4a:8d:a6:44:
         2c:85:68:44:c8:41:cb:89:e3:73:45:f1:6d:54:44:dc:b6:1c:
         51:57:30:8b:3f:31:c0:e0:9c:94:0f:78:05:84:2b:84:0f:0f:
         ed:4d:0d:95:15:02:09:c6:e3:77:c5:dc:30:9c:06:4c:60:fd:
         99:48:cd:5f:b5:0d:b9:aa:93:c7:04:70:54:88:fd:fa:78:07:
         ec:f1:7e:ca:b3:0c:d8:d0:e5:6c:0a:8a:67:04:9f:7c:a8:fe:
         e1:a6:ed:3e:d3:86:e2:f4:8a:f7:38:ce:60:c1:41:d2:47:2a:
         7b:6b:b7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:47:31 2026 by rpki-client