This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
File:                     WQB0CLv4rZBE3mgEZYfHWJty6-8.mft (raw, json)
Hash identifier:          PyI4+CgJDga6MC7HityceEAakkBL1iIIdV4s0+LwxOQ=
Subject key identifier:   E9:3E:E5:64:E9:E9:A2:9E:63:70:56:8A:B6:EF:F1:42:56:03:8A:B7
Authority key identifier: 59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF
Certificate issuer:       /CN=59007408bbf8ad9044de68046587c7589b72ebef
Certificate serial:       019BF6BED8C5D2154E75859E53F356A4712F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
Manifest number:          1167
Signing time:             Sun 25 Jan 2026 20:01:00 +0000
Manifest this update:     Sun 25 Jan 2026 20:01:00 +0000
Manifest next update:     Mon 26 Jan 2026 20:01:00 +0000
Files and hashes:         1: WQB0CLv4rZBE3mgEZYfHWJty6-8.crl (hash: Qj1gewyquNSr9iSHs429df4M3u5nLMAwMJRcSjHAP+Y=)
                          2: ka19YE-lwJpjJjrTaa8oR-zm8cQ.roa (hash: FzSdZ/YpygqnfWYncmTrr2N4Qhos4PCaZytfKDth4O0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 20:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:be:d8:c5:d2:15:4e:75:85:9e:53:f3:56:a4:71:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59007408bbf8ad9044de68046587c7589b72ebef
        Validity
            Not Before: Jan 25 20:01:00 2026 GMT
            Not After : Jan 26 20:01:00 2026 GMT
        Subject: CN=e93ee564e9e9a29e6370568ab6eff14256038ab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:de:2b:4d:04:08:0f:1f:64:52:39:8a:8c:8a:
                    b2:4e:65:a9:0b:84:29:97:d2:4a:6b:d1:4e:69:f3:
                    48:4c:58:55:48:b8:c6:ce:d6:12:ae:a7:83:19:69:
                    60:42:d0:96:ae:62:c1:2d:f0:db:a1:86:7e:3a:2f:
                    44:77:d5:99:8b:16:fb:8b:84:ad:12:44:21:65:5f:
                    29:02:53:61:4b:a4:48:f3:f3:0d:56:a3:1c:f2:c5:
                    d3:30:49:ba:ad:4f:cb:20:c8:7f:b8:6b:8a:e2:5f:
                    4f:7e:88:58:0d:f4:0c:91:22:89:32:af:b5:16:ec:
                    c9:13:1f:29:c0:b1:2f:17:23:0b:c3:9f:d2:c5:8d:
                    d8:a5:0a:e9:24:b6:4c:bc:e8:e0:3c:64:54:3a:ef:
                    cb:52:62:db:b2:51:8b:4c:a3:f1:dc:c0:73:13:a9:
                    ff:14:b7:0d:79:7a:6d:4b:ab:d2:5b:f9:dd:56:4c:
                    00:cd:39:3d:35:50:02:a1:93:0e:ec:ec:f4:60:6f:
                    fc:7d:5a:75:d3:7f:80:0d:e3:04:5b:3d:e4:34:b2:
                    5e:fc:6c:4e:7b:ba:e2:8e:35:9d:c3:c6:c9:b0:21:
                    ed:91:3b:33:28:2c:a8:07:af:c7:36:2e:8d:06:81:
                    92:b3:70:c3:7f:86:c3:dd:f8:a3:9a:7a:a5:18:97:
                    1c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:3E:E5:64:E9:E9:A2:9E:63:70:56:8A:B6:EF:F1:42:56:03:8A:B7
            X509v3 Authority Key Identifier:
                keyid:59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:07:16:f4:58:a6:ca:55:10:34:b5:17:f2:84:98:28:1e:27:
         a8:f9:8d:6e:c4:55:2e:6d:bc:bb:e9:e1:c1:2f:64:cc:e8:dc:
         01:97:9f:33:8f:aa:fb:e4:92:f8:4d:76:dc:26:e7:3f:22:69:
         e6:06:7a:0a:45:f1:e9:b3:d8:9e:db:73:f2:1b:bf:1f:dc:af:
         c0:58:cc:bd:c1:da:06:81:2f:f0:01:b1:67:72:cb:f2:78:8b:
         e3:7a:44:70:c3:bd:2b:d7:79:c0:47:90:be:14:19:dd:47:28:
         49:b7:5a:a7:24:9b:31:2d:53:0a:0c:e8:9a:18:f0:d9:1c:8f:
         4e:02:46:4b:9a:82:f2:ba:aa:40:8c:e2:7e:b8:86:c2:ff:1f:
         7b:0c:58:9c:ac:9e:fe:65:6e:98:89:97:78:53:5b:b9:81:31:
         b9:04:f1:b7:0c:21:b3:0b:72:25:12:71:77:54:9e:5e:37:27:
         95:54:3e:f0:01:56:67:b4:b4:2e:0e:40:6d:ba:10:3d:f1:6f:
         0d:83:7a:00:d8:93:53:36:28:11:bf:9b:d3:ff:46:9d:7a:07:
         86:3b:98:80:e8:4c:96:10:65:a2:b0:9b:f8:14:8d:c0:42:f6:
         4f:ba:78:c4:cf:5d:b7:ac:8c:48:d1:17:43:5e:05:bd:0e:01:
         c9:68:cf:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:07:11 2026 by rpki-client