This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.mft
File:                     WXtExKeTHGam_56S27MspyPUzPc.mft (raw, json)
Hash identifier:          y0eROSsvgzBfTFhH5iYd+0q9qq8b9kGEaJf68S63rJY=
Subject key identifier:   E2:8C:7A:B1:91:C0:DA:64:5A:1B:79:87:87:26:38:A0:87:54:87:5C
Authority key identifier: 59:7B:44:C4:A7:93:1C:66:A6:FF:9E:92:DB:B3:2C:A7:23:D4:CC:F7
Certificate issuer:       /CN=597b44c4a7931c66a6ff9e92dbb32ca723d4ccf7
Certificate serial:       019BF8AD1246E8B65860D5C48F958CBE8C64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.mft
Manifest number:          17EE
Signing time:             Mon 26 Jan 2026 05:00:50 +0000
Manifest this update:     Mon 26 Jan 2026 05:00:50 +0000
Manifest next update:     Tue 27 Jan 2026 05:00:50 +0000
Files and hashes:         1: NJuXrs7LWzYBlgbPmvihZanLvG8.roa (hash: XZ9GkjuxtgHNCgkY/8noRU2RljLgPaAgwxBroe3z6/I=)
                          2: P3FM9rV7W0taknkodonPY5DGZHs.roa (hash: 9EVLVpsGVeql2F+yrefxgDiR84qHt275s3nguMC8kkk=)
                          3: SLYW5X4FmSXC-eZnth59dct07EA.roa (hash: EO0lM6yDWmgO8JLPZODlHn2ZvtSFCnd+OicqRjcR4/o=)
                          4: WXtExKeTHGam_56S27MspyPUzPc.crl (hash: sZdJeQTlfDxACL0mbY6ij9o8V+W3KHD5biu1dAWesUk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:ad:12:46:e8:b6:58:60:d5:c4:8f:95:8c:be:8c:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=597b44c4a7931c66a6ff9e92dbb32ca723d4ccf7
        Validity
            Not Before: Jan 26 05:00:50 2026 GMT
            Not After : Jan 27 05:00:50 2026 GMT
        Subject: CN=e28c7ab191c0da645a1b7987872638a08754875c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a5:9c:db:60:3d:d5:20:ab:a0:fc:12:ec:ad:
                    cf:cf:f8:cf:6f:a2:3b:ee:1a:61:15:4b:0f:2e:9e:
                    09:51:e8:9b:68:a7:ba:f4:a5:32:01:9e:b6:0c:b0:
                    df:86:6c:01:a1:63:ca:c4:1e:ac:28:3b:9e:63:26:
                    3d:0c:00:0c:7a:1f:94:d2:f7:82:a0:46:8e:83:1c:
                    c1:c3:2c:4d:8a:9c:43:75:b5:17:82:2c:85:1e:14:
                    08:11:84:6e:42:46:23:b7:27:2f:f1:cc:e2:1a:e2:
                    59:e5:1f:52:d7:05:ab:0e:14:d3:ae:80:37:79:ba:
                    47:eb:6c:53:7f:81:bf:ab:52:f5:4b:c9:ea:e4:93:
                    b5:17:f6:3b:de:ee:69:35:3e:93:cd:49:50:bd:6f:
                    f2:3b:ab:84:da:91:6c:c7:b2:87:59:03:30:56:90:
                    d5:3e:a8:a7:9a:3a:63:ee:da:66:b9:05:f9:84:0b:
                    e0:26:2d:06:44:24:54:b3:cf:77:6a:a7:a8:68:4a:
                    51:98:58:e8:f3:ee:f7:47:a6:eb:4e:1c:53:8f:d6:
                    75:97:c4:ff:80:51:fd:38:00:03:96:06:6b:2d:26:
                    ac:e6:fa:fe:a6:ef:05:4e:b0:8f:b9:bd:07:c8:09:
                    52:c6:bc:6f:0b:1e:7d:b6:2c:40:98:36:35:53:0c:
                    68:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:8C:7A:B1:91:C0:DA:64:5A:1B:79:87:87:26:38:A0:87:54:87:5C
            X509v3 Authority Key Identifier:
                keyid:59:7B:44:C4:A7:93:1C:66:A6:FF:9E:92:DB:B3:2C:A7:23:D4:CC:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:4a:97:d7:22:55:99:c9:18:e6:1b:c0:97:9e:f3:e6:91:b5:
         4a:c2:92:76:0a:30:48:c3:ca:94:d3:8d:8e:16:e2:7b:50:53:
         7c:05:3b:de:d1:ea:65:23:a3:7f:02:49:d4:e3:9e:8f:f1:0e:
         d7:01:a7:a6:58:9d:5f:56:ec:0d:e1:a7:22:3f:8a:63:f6:49:
         64:f9:29:26:d0:70:64:70:b3:64:3d:06:3b:0f:c1:9c:f7:2b:
         60:10:87:a1:73:7c:c1:c0:6f:3e:1c:42:21:ca:be:52:12:40:
         89:59:36:e5:00:86:2a:2f:c8:bc:e4:0b:46:0c:74:9f:49:f0:
         92:90:6f:1c:50:6a:7e:7e:e9:0f:8a:ee:01:6a:9a:bc:89:1c:
         7e:61:c7:86:d4:56:25:d8:83:49:8e:7e:6f:ff:4c:9d:0f:20:
         e4:65:db:31:46:b6:f3:7e:d0:07:8d:d3:9b:ee:e0:0f:50:47:
         bc:a0:1e:d4:ab:1c:56:6b:89:d5:51:99:56:da:f1:7e:4c:ab:
         0c:9c:7e:98:2a:c7:14:86:78:18:20:2c:72:12:db:e8:c2:34:
         17:e8:e5:e9:68:9e:77:a1:bd:3d:ae:a1:0e:83:c8:d3:23:90:
         24:70:d9:73:d2:3d:03:58:60:7d:45:0e:9f:37:f8:e8:ab:64:
         3c:e2:c6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:12:49 2026 by rpki-client