This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft
File:                     Wxos8vE3Re4bv38KdL6tPOUHSFU.mft (raw, json)
Hash identifier:          EZ01mK1lTP4WJjXpJJkCW64Gxq6G3mt+VMx9UnWDEAg=
Subject key identifier:   66:7D:F2:F5:31:72:F1:D5:23:02:2F:08:7B:27:9D:9C:63:4E:B7:55
Authority key identifier: 5B:1A:2C:F2:F1:37:45:EE:1B:BF:7F:0A:74:BE:AD:3C:E5:07:48:55
Certificate issuer:       /CN=5b1a2cf2f13745ee1bbf7f0a74bead3ce5074855
Certificate serial:       019BF6F60E0E8B9A286E9B9D34CA6C054FFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wxos8vE3Re4bv38KdL6tPOUHSFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft
Manifest number:          17EA
Signing time:             Sun 25 Jan 2026 21:01:19 +0000
Manifest this update:     Sun 25 Jan 2026 21:01:19 +0000
Manifest next update:     Mon 26 Jan 2026 21:01:19 +0000
Files and hashes:         1: MC5PSzUtzRQLOMEVXjL8dSomLZ8.roa (hash: zde/7UrTAADTl5AjksUxuIY8cO6qAQg0t4ksuzJo5dU=)
                          2: Wxos8vE3Re4bv38KdL6tPOUHSFU.crl (hash: 30e0iA9wc7JrHkjE4ermCRI5F0BGQxESQtGjdbBmGKE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wxos8vE3Re4bv38KdL6tPOUHSFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:f6:0e:0e:8b:9a:28:6e:9b:9d:34:ca:6c:05:4f:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b1a2cf2f13745ee1bbf7f0a74bead3ce5074855
        Validity
            Not Before: Jan 25 21:01:19 2026 GMT
            Not After : Jan 26 21:01:19 2026 GMT
        Subject: CN=667df2f53172f1d523022f087b279d9c634eb755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:14:73:69:44:86:2f:48:d5:0a:c0:17:1d:3d:
                    b8:e3:fd:f0:c8:49:66:d4:a0:85:cd:25:e0:d5:2d:
                    a2:ed:20:5e:23:0e:84:c0:ac:cb:c1:c0:cc:6d:0d:
                    02:ad:cd:27:05:e8:c6:67:01:8f:e7:db:8a:be:1b:
                    32:32:71:6b:4b:e3:8c:91:7b:02:80:e8:5c:d2:ac:
                    05:e1:19:e1:44:b8:fd:83:84:57:2d:60:d1:03:21:
                    2e:a0:ef:20:b8:9d:8f:5e:b9:29:4f:21:53:af:b1:
                    a6:1c:df:7b:92:87:11:0e:7e:3d:0f:bc:98:2f:52:
                    6d:dd:44:dd:b5:cb:77:bf:97:f9:f3:a9:05:d5:47:
                    79:5b:d7:91:34:8b:db:c8:ee:b5:bd:49:b2:00:4f:
                    f5:fb:02:65:08:f1:dd:af:64:3f:c3:4e:50:6c:2d:
                    88:84:81:b8:69:8d:9d:dd:17:5d:51:91:c4:32:84:
                    66:d0:5b:4b:8b:2c:0e:af:9a:58:c2:a7:90:b6:f0:
                    06:c7:77:84:3a:e1:99:14:11:76:ba:ba:f9:81:19:
                    33:fa:84:78:d4:e0:e1:3a:23:bd:ca:1d:de:cc:07:
                    61:a9:d9:59:60:6e:34:2f:15:83:f4:26:f5:a1:43:
                    29:c6:52:09:93:f1:2d:11:4a:96:9f:75:16:b1:5a:
                    2e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:7D:F2:F5:31:72:F1:D5:23:02:2F:08:7B:27:9D:9C:63:4E:B7:55
            X509v3 Authority Key Identifier:
                keyid:5B:1A:2C:F2:F1:37:45:EE:1B:BF:7F:0A:74:BE:AD:3C:E5:07:48:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wxos8vE3Re4bv38KdL6tPOUHSFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:c9:33:76:2b:2a:0f:7a:f6:49:50:63:de:eb:4a:23:c9:07:
         40:94:4c:b6:1a:8f:36:93:d2:c5:62:14:54:b3:bd:8a:bf:e3:
         b9:15:cb:1d:c8:85:9d:3d:04:21:73:0d:46:04:f7:b4:2b:b7:
         fa:a3:bc:86:f9:d8:ef:f5:09:54:c2:2f:d8:61:85:fc:61:d5:
         61:17:6f:d7:d8:96:db:8a:04:3a:4b:01:e7:a7:9d:42:ca:97:
         40:89:a7:04:46:1c:c9:50:8b:f6:f8:21:56:ee:82:6b:50:0e:
         1c:80:e1:15:c3:e7:cc:4f:67:63:90:be:9b:e3:dc:48:c6:f7:
         f7:0f:9a:bf:19:7e:51:9d:bf:de:c5:f0:0a:68:fc:59:27:22:
         52:ec:01:2a:2b:f2:f6:c7:35:72:13:1f:02:aa:67:e3:2f:ac:
         72:b7:7a:b2:14:cb:e6:84:bb:88:8a:7d:5b:c2:7c:65:e9:27:
         0e:7c:de:74:47:85:c4:a8:84:57:15:de:48:01:22:fd:35:e8:
         91:81:05:2f:c9:e8:d8:67:9c:a0:2a:d2:87:38:38:e3:ef:9f:
         60:f2:df:bb:04:2c:bc:c3:8a:0f:ba:80:48:4e:c3:14:17:5e:
         16:bf:07:a0:f7:dd:cf:09:88:57:0a:f1:c1:a2:2e:b5:3c:52:
         79:5c:b6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:28:07 2026 by rpki-client