This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.mft
File:                     WXtExKeTHGam_56S27MspyPUzPc.mft (raw, json)
Hash identifier:          hnTUteWyZS/LOsoxQwaFxtcSXJnBeLSI/cQsBAGomas=
Subject key identifier:   20:BE:D3:3C:6D:96:33:78:49:3B:97:DB:8A:0C:32:43:2D:27:97:37
Authority key identifier: 59:7B:44:C4:A7:93:1C:66:A6:FF:9E:92:DB:B3:2C:A7:23:D4:CC:F7
Certificate issuer:       /CN=597b44c4a7931c66a6ff9e92dbb32ca723d4ccf7
Certificate serial:       019BF6BEA2E785C80A07B96C92C6380579D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.mft
Manifest number:          17ED
Signing time:             Sun 25 Jan 2026 20:00:47 +0000
Manifest this update:     Sun 25 Jan 2026 20:00:47 +0000
Manifest next update:     Mon 26 Jan 2026 20:00:47 +0000
Files and hashes:         1: NJuXrs7LWzYBlgbPmvihZanLvG8.roa (hash: XZ9GkjuxtgHNCgkY/8noRU2RljLgPaAgwxBroe3z6/I=)
                          2: P3FM9rV7W0taknkodonPY5DGZHs.roa (hash: 9EVLVpsGVeql2F+yrefxgDiR84qHt275s3nguMC8kkk=)
                          3: SLYW5X4FmSXC-eZnth59dct07EA.roa (hash: EO0lM6yDWmgO8JLPZODlHn2ZvtSFCnd+OicqRjcR4/o=)
                          4: WXtExKeTHGam_56S27MspyPUzPc.crl (hash: qeKk1Iv9+v0NHXKgEgfxCycD13NOXQUY53X0UlsIJ4I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:be:a2:e7:85:c8:0a:07:b9:6c:92:c6:38:05:79:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=597b44c4a7931c66a6ff9e92dbb32ca723d4ccf7
        Validity
            Not Before: Jan 25 20:00:47 2026 GMT
            Not After : Jan 26 20:00:47 2026 GMT
        Subject: CN=20bed33c6d963378493b97db8a0c32432d279737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1f:c3:f8:c7:0f:56:05:b2:f8:cc:e4:6a:9f:
                    31:83:61:57:ba:73:13:d2:b6:89:9d:d6:13:14:18:
                    36:63:ce:0f:51:ee:84:3c:c8:22:2a:15:d0:68:9b:
                    bc:64:ff:fa:d1:72:b6:b1:68:8c:a6:6c:5a:28:88:
                    0a:61:24:b6:a9:c1:a5:f4:a4:55:70:7c:29:43:48:
                    80:8d:32:b5:42:34:a7:be:7d:f0:9f:82:73:f8:ea:
                    f5:14:18:03:1a:e8:e2:be:89:ef:f1:4a:fd:99:f8:
                    b9:27:28:72:a4:0d:ca:4e:5d:b2:52:bb:21:47:ee:
                    73:e0:a4:2f:cd:0d:11:08:be:bb:00:54:14:d1:b7:
                    0a:e2:67:f6:77:93:64:a4:db:a2:2f:32:72:f0:5e:
                    4d:66:8a:f5:91:4e:25:bf:37:98:ed:f4:6c:c2:8d:
                    df:5d:e1:78:b7:c2:21:1e:1b:fd:ad:47:2b:14:31:
                    b5:e0:30:6d:b4:b8:32:54:5b:2e:71:1a:97:e0:03:
                    e0:58:64:cf:f9:a0:6f:97:3d:d6:74:03:26:03:1e:
                    b1:e4:b1:e7:35:ae:30:6f:2e:72:3c:ee:4e:54:43:
                    46:b3:2f:bc:34:3a:4f:3b:31:7d:72:4e:96:ec:a7:
                    73:96:a6:eb:8e:df:54:0a:54:f7:0e:67:2c:bf:ae:
                    d5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:BE:D3:3C:6D:96:33:78:49:3B:97:DB:8A:0C:32:43:2D:27:97:37
            X509v3 Authority Key Identifier:
                keyid:59:7B:44:C4:A7:93:1C:66:A6:FF:9E:92:DB:B3:2C:A7:23:D4:CC:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:6d:6a:0b:6d:2e:18:69:5d:28:ff:1a:ca:88:fc:6b:d2:5e:
         c3:2c:ac:03:a4:af:fd:ed:99:ca:4e:c5:20:9b:81:7d:51:1d:
         4c:a3:de:05:b4:ba:32:3b:e0:c6:d6:0a:66:e2:6d:32:db:ff:
         0a:1c:50:aa:92:df:32:7c:13:4c:b4:bf:8e:04:03:b5:3d:dc:
         e3:c4:14:cd:bb:9b:d4:f8:f4:61:de:11:87:a9:6e:11:d0:56:
         82:9e:4d:00:ab:a5:a9:6c:3d:21:08:8d:63:f7:e0:0b:d4:8c:
         a6:41:12:e0:fa:49:2c:22:5d:54:bf:20:4c:a4:08:f8:f0:f6:
         ef:9b:7f:e4:26:e2:85:df:e1:b7:a1:0b:d5:a9:a3:82:f0:8e:
         c6:91:c5:c7:57:93:58:ee:e4:c5:60:86:87:1c:a4:e0:83:c1:
         89:1b:d6:2d:88:da:0a:fe:19:1d:7e:b9:bb:2b:10:42:d2:f4:
         aa:8e:31:4e:a6:92:35:71:f8:55:56:c4:71:13:38:19:55:45:
         af:92:82:7d:67:4e:a0:df:31:fc:e4:9f:b9:35:f3:e8:a5:13:
         9d:d3:9e:75:32:bd:c3:31:fd:65:f6:0c:96:21:05:81:47:34:
         64:25:07:d5:68:b9:93:63:dd:19:fb:5a:3c:f5:4b:49:72:53:
         4a:dd:47:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:14:00 2026 by rpki-client