This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.mft
File:                     wly3EywZ99UfAC7UrYEa7PWyD1c.mft (raw, json)
Hash identifier:          k7j/CZobXib4SjnAWLmewoe6+3wtlhA5uqQfdjisGfA=
Subject key identifier:   81:79:3D:43:A6:83:F6:CE:D3:95:A8:26:40:22:40:7D:93:8C:94:B3
Authority key identifier: C2:5C:B7:13:2C:19:F7:D5:1F:00:2E:D4:AD:81:1A:EC:F5:B2:0F:57
Certificate issuer:       /CN=c25cb7132c19f7d51f002ed4ad811aecf5b20f57
Certificate serial:       019BF619E7B274048B5D6DBE091A9B5B828E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.mft
Manifest number:          09E5
Signing time:             Sun 25 Jan 2026 17:00:51 +0000
Manifest this update:     Sun 25 Jan 2026 17:00:51 +0000
Manifest next update:     Mon 26 Jan 2026 17:00:51 +0000
Files and hashes:         1: A-DED3zrKOna1FUGWpyHJNkhEZ0.roa (hash: afJwMBYmR0D76Co10f5BGjdSHXBv59oxmtmfyQsHpHM=)
                          2: PI_Yf2pOZ_Dd8ZyFOzabezRtBnQ.roa (hash: TMsqfJL/2//7NtMJYDBGQdLpDpaQu8Y3xvAd+fP2XDM=)
                          3: ZfuIJyg5k_rC_JXuCFjK5lHQ6NY.roa (hash: pI03BBxCldhBPz/GTk6F4ZuWtSBUeKLjh/Pr3vyIh58=)
                          4: p9f_X7KlQCEgnmpPoE_OE8QQuVU.roa (hash: KMrfBaDuiVlgIJxjTRZbFSjXN71OjEcEy1EPYLJGuh4=)
                          5: pBSEGBT8tXaU0NeoPRwW40s9iBc.roa (hash: Qu7iPlmy4hOGYYOFKdh3y29vuJGBwj/CI4K+uxEBhOE=)
                          6: wly3EywZ99UfAC7UrYEa7PWyD1c.crl (hash: wzp70PIrPxTyFKQFQRsx2zbYEdhqODbfmPw/cAOu3C4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:19:e7:b2:74:04:8b:5d:6d:be:09:1a:9b:5b:82:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c25cb7132c19f7d51f002ed4ad811aecf5b20f57
        Validity
            Not Before: Jan 25 17:00:51 2026 GMT
            Not After : Jan 26 17:00:51 2026 GMT
        Subject: CN=81793d43a683f6ced395a8264022407d938c94b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:c3:59:8f:b1:a0:ac:9d:ba:49:b6:b9:63:38:
                    bb:df:8a:85:57:df:25:56:03:14:b7:4d:83:38:ec:
                    2a:00:75:95:af:f6:75:c2:3a:98:dd:ed:c2:96:b6:
                    93:19:85:82:6e:17:76:62:b5:f1:b3:10:68:5f:09:
                    eb:6b:7b:cf:8f:31:2a:ca:d0:0f:29:7a:ba:bc:b0:
                    4c:a9:1f:3a:0b:e8:c3:c0:60:23:55:68:33:56:af:
                    66:90:61:32:81:18:1d:a7:05:b6:af:f3:0c:13:d4:
                    ef:80:06:8d:f0:2f:0c:7e:98:7e:00:fc:33:71:0b:
                    33:ee:e9:7c:d9:e3:2c:f9:38:f9:7e:f1:ff:79:16:
                    43:27:b4:f4:7b:2c:49:d2:1c:36:f4:c2:dc:3f:0a:
                    15:bf:a5:b2:c5:b1:33:81:3a:86:67:11:3e:02:27:
                    02:4f:45:23:dc:07:ed:10:77:2a:00:4a:f8:4a:6a:
                    8b:35:ce:69:68:31:fc:1b:76:62:55:f5:2a:22:61:
                    cf:b2:ca:46:3c:3b:6f:72:d4:6f:6c:1b:4c:2f:3a:
                    b6:9b:ac:da:60:b3:5d:63:e3:ef:3e:42:92:37:ee:
                    ef:c2:c0:1e:1f:63:82:d0:d3:63:a3:eb:fa:f8:33:
                    7b:22:59:87:79:b0:da:29:10:11:f2:66:9d:9a:4f:
                    1b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:79:3D:43:A6:83:F6:CE:D3:95:A8:26:40:22:40:7D:93:8C:94:B3
            X509v3 Authority Key Identifier:
                keyid:C2:5C:B7:13:2C:19:F7:D5:1F:00:2E:D4:AD:81:1A:EC:F5:B2:0F:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:35:e5:3d:14:78:9f:74:a6:be:c7:c7:3f:b3:f9:4f:07:8a:
         d6:6f:84:75:f3:31:1c:2a:ab:25:5e:da:b8:4b:89:ba:9e:80:
         5f:e4:07:0b:50:e1:2c:80:cd:f3:5d:7b:22:74:85:19:29:f0:
         ba:25:f0:d6:a4:96:21:d6:1e:03:e2:a1:36:cd:61:5a:dd:9f:
         aa:fb:86:9c:8c:ff:73:89:03:d1:1d:e1:44:e2:f4:f9:26:b2:
         89:bd:c4:ab:c3:2e:35:3e:05:63:01:8c:cc:b5:fe:f7:62:df:
         14:ab:e4:c2:f8:44:27:cb:02:c2:77:88:34:4c:9a:13:55:e9:
         5b:ba:99:35:e2:cd:8b:7d:f6:3e:3e:07:b3:59:fd:c9:f2:b4:
         10:63:fc:19:42:2b:0b:f7:db:0c:58:87:58:ed:fd:72:7f:db:
         35:78:b5:28:6c:e0:7f:ed:d3:91:69:3f:bc:ac:89:03:2e:3f:
         99:d7:15:0e:15:0a:57:f3:65:4e:10:ef:ce:f1:a1:65:a2:c7:
         0a:b3:20:b5:e4:af:28:11:22:2c:d9:f9:04:15:6d:94:c3:f2:
         57:22:69:a2:4c:aa:d0:88:bc:3a:42:93:93:91:b6:d7:62:1b:
         a5:bf:e0:5e:8c:31:39:b7:12:47:a5:a5:2c:1a:f7:c4:82:ef:
         31:cd:ab:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:10:28 2026 by rpki-client