This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft
File:                     WsRmzIn5204xxUANKueiv_2yJUc.mft (raw, json)
Hash identifier:          JLHIBqunLUrhnZaKf/NF/pfNju1+ehanTo51OHmh5N8=
Subject key identifier:   87:58:52:AC:F6:B6:9A:F8:55:5E:41:D4:19:BE:59:D7:28:B9:42:A3
Authority key identifier: 5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47
Certificate issuer:       /CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
Certificate serial:       019BF506F60EAA7FE39F0CBDEE9BECD37ECA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft
Manifest number:          17EA
Signing time:             Sun 25 Jan 2026 12:00:32 +0000
Manifest this update:     Sun 25 Jan 2026 12:00:32 +0000
Manifest next update:     Mon 26 Jan 2026 12:00:32 +0000
Files and hashes:         1: F8BqFfZoIsv5x2t_rO_S_NuJemg.roa (hash: PB4J+IoKo4T7Q6QAGzoR44UFBrvbvOiTrydpAGnj8mc=)
                          2: GLHvXz2R1lOAHX7TzyDNoCB2iBY.roa (hash: OBjA+NNWsAq34/o+6Q0m7vwkANLJOuwcO5B1z9txcvU=)
                          3: Mhx6o1fkBIaHppe4Wr-KMaDvEQQ.roa (hash: QSZtykOf++sIkuecLt/sSggguVhjdeR5YjW9l7cEQV8=)
                          4: OiPpCjAu5jHi_GLkLs3C7MkVLWI.roa (hash: HQ35g8yBDULlIp8ua3XKzN1vR0rEMHW47KubxInNm2g=)
                          5: QYAIVSd2tgwed65DPiU0ds85aB0.roa (hash: g9cZELqfkNNkZkS/ZARd962rG7NHC+bpHrVh18iN6TI=)
                          6: WsRmzIn5204xxUANKueiv_2yJUc.crl (hash: WKQsYsKcFxuKB5xelKOHJL2VMhFze+pynZg7coGR594=)
                          7: jtMzBFE51Hs7CGAjXcUUEIsH5mQ.roa (hash: fp8xX6qHENJp/r7Mh6H1TsYEX2pKIdlfsNezIS3fbdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:06:f6:0e:aa:7f:e3:9f:0c:bd:ee:9b:ec:d3:7e:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
        Validity
            Not Before: Jan 25 12:00:32 2026 GMT
            Not After : Jan 26 12:00:32 2026 GMT
        Subject: CN=875852acf6b69af8555e41d419be59d728b942a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e1:cd:e1:67:30:4b:28:75:f5:44:5d:c1:e7:
                    84:09:fa:f8:e3:1e:55:37:6c:ed:81:df:c5:ea:b5:
                    d0:51:84:8f:cc:ec:1c:07:81:16:c1:b4:a9:55:33:
                    24:39:55:77:bb:bb:2d:d6:83:2e:a0:6b:5c:a6:20:
                    e4:7e:54:be:d1:11:09:4c:3e:29:ca:69:fc:d4:ed:
                    a2:7a:ed:8d:7c:b7:aa:3a:c6:d9:f3:15:7c:28:76:
                    57:76:18:3d:ec:e3:05:ef:4a:8b:3f:11:ec:ff:4f:
                    8a:af:80:de:6c:8d:09:86:e1:52:0d:c5:76:4c:b5:
                    6d:d7:4a:e1:66:af:54:60:2f:bd:1d:17:27:ee:46:
                    80:ef:5f:4e:17:2e:c3:a6:f8:6a:d4:9f:4d:d0:0d:
                    09:ee:93:4c:69:7f:6e:4a:38:05:37:9d:51:6d:a1:
                    7e:c0:d0:3b:8a:b2:98:e0:37:86:55:75:b2:d5:35:
                    14:16:9b:4c:31:f8:c9:2b:c3:c9:55:7c:cf:ed:4b:
                    7b:8f:23:14:38:c1:b9:dd:e1:0a:5f:da:92:35:4f:
                    18:7b:8e:90:7f:3a:d3:04:35:1d:d3:40:2b:fb:87:
                    57:b6:19:d1:3d:6c:49:b6:ef:d3:ca:f4:af:df:a7:
                    7d:ae:d3:b4:2b:b9:63:b4:fc:d7:64:12:0f:93:f0:
                    c4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:58:52:AC:F6:B6:9A:F8:55:5E:41:D4:19:BE:59:D7:28:B9:42:A3
            X509v3 Authority Key Identifier:
                keyid:5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:20:03:b4:d3:f1:3c:bd:a2:7f:24:7a:14:1e:16:c0:5c:aa:
         8e:d5:36:68:0e:31:d1:b1:fe:ec:29:ab:11:96:8b:8a:74:8e:
         a1:27:36:14:70:69:34:2e:16:71:07:ac:5f:28:f0:45:33:73:
         de:8e:90:1b:a5:76:1d:c4:a3:ed:b2:dc:b8:69:ae:5e:69:f7:
         d0:05:3d:5a:78:dd:87:ca:7a:14:6c:3f:ea:fa:a1:97:b2:ad:
         ee:23:f3:d2:41:38:ab:0a:e3:b0:bd:53:ab:38:77:0d:e1:82:
         c5:4d:75:b0:64:59:41:70:46:bd:2c:a4:85:7b:5b:6b:33:e5:
         0a:fa:62:30:e4:a9:0a:93:aa:2c:bd:43:75:a9:e3:fb:45:ba:
         b0:ab:df:f4:16:0b:94:55:dc:38:eb:2d:6f:af:90:57:ab:6c:
         cf:9b:2c:ec:16:6f:26:d6:2e:b1:48:90:75:50:69:bc:00:fc:
         92:4d:66:b5:3a:23:36:bc:54:60:51:8b:6c:80:ca:88:fe:75:
         63:34:ff:92:ee:9a:22:c4:7c:ae:75:f9:85:46:9d:fd:0f:8a:
         5a:8e:24:d7:01:bc:24:21:e9:39:4e:ee:27:4f:ee:39:35:20:
         cd:b1:23:ca:1c:c4:53:6c:cf:7b:b0:90:3b:23:50:48:cc:4a:
         79:ab:b7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:45:19 2026 by rpki-client