This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.mft
File:                     WNLScV9D90e-p2Lc4Wa8pLjpZes.mft (raw, json)
Hash identifier:          UvHgPzfp1FOYlVKk0PcszoM7zH0CNjKBYJ+QspSaHII=
Subject key identifier:   A5:46:1A:D9:2B:23:01:EA:29:C5:ED:39:84:72:17:6B:27:B5:C0:AE
Authority key identifier: 58:D2:D2:71:5F:43:F7:47:BE:A7:62:DC:E1:66:BC:A4:B8:E9:65:EB
Certificate issuer:       /CN=58d2d2715f43f747bea762dce166bca4b8e965eb
Certificate serial:       019BF79A5F99AB737A717D536F20B9FBC008
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WNLScV9D90e-p2Lc4Wa8pLjpZes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.mft
Manifest number:          17F9
Signing time:             Mon 26 Jan 2026 00:00:47 +0000
Manifest this update:     Mon 26 Jan 2026 00:00:47 +0000
Manifest next update:     Tue 27 Jan 2026 00:00:47 +0000
Files and hashes:         1: B0GjFFho4L3mRU1i2gZen9fWf8o.roa (hash: 0wLIwQSadFn+t/oVNRPg5fGLqnyacncDio6VpgbB62M=)
                          2: WNLScV9D90e-p2Lc4Wa8pLjpZes.crl (hash: r7HeZZ6MFYydpDmhsYEVl+fYif+fTsIWXF7YVjygnXw=)
                          3: jDqKUZBODUjBnVNebvS0O1uTYVg.roa (hash: +/llkkAW3JdOUYZ8UHsLUQJmNLSLCBnzHv87Ol04gZU=)
                          4: vjjNirlV9YoXstARjswGH3SkSGs.roa (hash: chn0/YJ36zUfQlB64u8vlgqzqY6hyVXARJHun9FywnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WNLScV9D90e-p2Lc4Wa8pLjpZes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:9a:5f:99:ab:73:7a:71:7d:53:6f:20:b9:fb:c0:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58d2d2715f43f747bea762dce166bca4b8e965eb
        Validity
            Not Before: Jan 26 00:00:47 2026 GMT
            Not After : Jan 27 00:00:47 2026 GMT
        Subject: CN=a5461ad92b2301ea29c5ed398472176b27b5c0ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1b:a2:4b:41:ee:2d:20:ec:44:11:84:2f:1e:
                    f1:df:80:5b:17:36:24:7f:98:e5:11:1b:6f:27:11:
                    f2:77:19:77:1c:64:e0:99:e6:5e:47:d3:f0:d1:17:
                    ac:c4:a1:74:e2:14:6f:e9:7f:7d:69:3c:b5:36:d6:
                    99:5f:84:b4:3f:34:a5:f5:9d:54:7a:10:60:a2:09:
                    15:d3:35:5b:a3:94:f0:8b:ce:6f:5a:ed:bb:8f:49:
                    72:23:d0:61:e6:2d:fa:87:cf:cc:75:b8:40:f2:00:
                    72:da:39:68:1a:81:8e:e5:51:67:80:40:6f:25:22:
                    fc:3d:08:23:07:be:b1:30:08:2c:30:14:1d:81:a3:
                    c9:3a:93:72:a6:88:6d:96:45:02:df:0f:eb:04:38:
                    95:d4:da:51:3f:ed:1d:8c:e8:68:aa:61:de:e4:c3:
                    06:d1:da:2b:ae:3e:17:dc:2e:62:fc:eb:45:6e:b0:
                    bc:16:e1:c3:ea:95:b9:c6:6d:54:6a:f2:cc:c3:8a:
                    68:cd:87:68:9b:2e:83:a7:53:f2:64:b9:78:92:95:
                    58:24:64:44:2f:4b:92:88:67:fc:7f:9b:f3:33:43:
                    c8:b2:91:20:fc:b7:b1:0e:13:37:84:2a:9e:01:33:
                    94:f2:1a:7f:12:d2:60:1f:06:4b:9f:f0:bd:f1:d1:
                    ea:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:46:1A:D9:2B:23:01:EA:29:C5:ED:39:84:72:17:6B:27:B5:C0:AE
            X509v3 Authority Key Identifier:
                keyid:58:D2:D2:71:5F:43:F7:47:BE:A7:62:DC:E1:66:BC:A4:B8:E9:65:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNLScV9D90e-p2Lc4Wa8pLjpZes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:a5:8b:56:a4:ad:26:f2:d6:a6:6b:01:d7:32:00:2c:cf:86:
         18:4e:4a:af:f0:2c:d6:a9:ab:4c:8c:44:83:cc:28:1a:39:9b:
         db:0e:5c:0e:2e:fc:e8:fd:29:e8:4a:01:bb:6c:d8:46:8f:d2:
         26:35:86:a8:83:68:62:39:3d:8c:11:ae:65:6f:70:20:24:f7:
         0f:e9:c4:a1:e4:c6:76:bf:bd:5a:74:ae:76:22:da:21:1b:f0:
         de:13:d7:4e:8e:da:eb:ae:1f:5e:ce:82:a2:95:0c:e3:cf:b7:
         8c:34:20:2b:69:dc:e2:4d:59:91:74:62:d2:a1:76:58:cf:6b:
         0f:aa:56:44:12:86:c5:15:64:6b:61:18:5a:89:52:a9:a6:5f:
         f9:0d:9e:46:4d:01:d0:4f:9b:28:e8:bc:fb:4e:16:44:61:52:
         96:60:47:a0:e2:2e:ac:25:6b:eb:6a:ba:a6:c1:d2:29:8e:65:
         f8:0c:5d:c5:2f:06:07:1a:ed:7c:9d:ef:2c:78:86:71:1b:5b:
         63:4c:66:b5:0b:ce:55:21:e1:72:9b:52:f2:d5:28:15:ff:f4:
         09:0a:4e:3b:9c:58:3b:66:9f:ca:6d:43:f2:e5:74:20:a1:0e:
         f7:ed:41:8c:68:a4:1a:48:fc:3b:8f:b0:74:a6:33:b4:93:ff:
         9b:fb:d3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:11:13 2026 by rpki-client