This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
File:                     WKaBxxvrRk4B1baOGcpWbamTDiM.mft (raw, json)
Hash identifier:          I/k0STc6KNdd0xMmZUIqE5Oax4AKsKrzX4h8+ItNr54=
Subject key identifier:   0C:12:48:CD:0F:C0:3F:5F:9D:C4:4E:5C:C0:5F:F5:37:FC:A9:B7:B2
Authority key identifier: 58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23
Certificate issuer:       /CN=58a681c71beb464e01d5b68e19ca566da9930e23
Certificate serial:       019BF5ABFDFACED87CE21C7C30E87D52E321
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
Manifest number:          EC
Signing time:             Sun 25 Jan 2026 15:00:47 +0000
Manifest this update:     Sun 25 Jan 2026 15:00:47 +0000
Manifest next update:     Mon 26 Jan 2026 15:00:47 +0000
Files and hashes:         1: WKaBxxvrRk4B1baOGcpWbamTDiM.crl (hash: svJrtfWeEIsbwQh06JqGTM37A8uQpCTOfzVvINtrwRA=)
                          2: pSXCDiBSJhGXaOXef7Y4YTCUUZ4.roa (hash: Q877kwTSoXnFjxRbDVpx+FXDEeiawiNVCD8IEmWvnEU=)
                          3: wI-ypASrJ7m0N79u1RJq_k57AIc.roa (hash: U4IOvrmrguD6t/ZtF0LoNyn+uQVk4Bj7HsVFQCe+6FI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:ab:fd:fa:ce:d8:7c:e2:1c:7c:30:e8:7d:52:e3:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58a681c71beb464e01d5b68e19ca566da9930e23
        Validity
            Not Before: Jan 25 15:00:47 2026 GMT
            Not After : Jan 26 15:00:47 2026 GMT
        Subject: CN=0c1248cd0fc03f5f9dc44e5cc05ff537fca9b7b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:86:d5:34:4b:2d:38:f3:3a:c4:5c:98:98:a7:
                    53:34:8c:11:b9:cb:dd:d3:06:c4:60:d2:7f:85:90:
                    9c:0c:b4:aa:6e:67:33:b4:67:f1:e6:47:4f:d3:f5:
                    de:37:5a:12:a4:1e:63:f8:39:51:8a:6e:81:01:10:
                    5e:1c:26:ef:47:49:44:d8:cf:e0:d6:fb:6a:53:56:
                    01:7d:8d:59:e1:e2:56:d3:1e:4f:4d:b4:43:d4:42:
                    70:4c:c1:c0:72:2c:14:d8:f3:1f:28:c4:7f:31:e8:
                    ae:56:d2:3c:db:38:b7:49:10:82:7b:70:d2:bc:f1:
                    7a:99:ee:e9:87:f6:b7:32:ab:8b:60:6e:d8:1a:25:
                    d1:e7:76:4b:42:29:56:b0:9b:28:c0:1a:18:2f:91:
                    22:a5:1e:1a:98:de:de:06:30:3a:64:2d:b1:23:ed:
                    70:e6:69:5b:2e:2c:8b:36:d0:68:83:23:71:84:2f:
                    1c:23:9e:02:26:cf:f1:0b:54:74:85:c3:c0:68:dc:
                    0e:67:0c:8a:58:e7:91:1c:1c:df:65:86:65:87:e6:
                    05:be:d8:71:b9:40:a6:ea:fb:38:a0:91:ef:aa:6b:
                    bb:96:a6:19:c9:36:e7:16:40:20:8c:c0:6b:08:78:
                    6a:c8:88:c5:48:18:0a:d5:57:3a:53:1a:db:4b:e1:
                    40:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:12:48:CD:0F:C0:3F:5F:9D:C4:4E:5C:C0:5F:F5:37:FC:A9:B7:B2
            X509v3 Authority Key Identifier:
                keyid:58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:c5:2c:c3:78:a8:6c:a6:f3:60:87:c4:71:94:d6:a6:ee:92:
         6d:62:8d:03:23:c0:bb:ff:54:31:d9:4a:0d:42:3e:06:93:46:
         07:8e:e8:c9:e3:f7:fc:59:3c:cd:3b:07:e4:35:59:6d:6b:2f:
         d9:73:30:2e:5d:2f:d9:87:fb:3e:30:54:d8:59:80:dd:2c:1a:
         f2:03:6d:9a:d5:68:c6:0c:17:8c:3b:b9:00:2c:30:7b:2c:b2:
         0d:aa:b8:0d:73:2f:40:90:6e:10:a9:2f:9c:07:77:c1:e9:dd:
         7e:1b:80:07:08:05:45:76:8c:cc:8f:06:8b:32:6a:6a:a1:21:
         6b:bd:d9:f5:b8:1b:c4:57:a5:22:82:89:28:18:9e:3d:af:04:
         d8:62:0d:73:e8:b7:f1:21:97:c3:b9:c0:ea:6c:9b:c4:04:1a:
         9b:f9:a9:45:97:05:c3:e4:42:7f:8d:6c:9b:69:10:da:00:2c:
         13:31:ce:d8:23:d9:46:b9:4d:e6:c7:fc:ea:c3:71:66:db:0e:
         c1:28:c9:2c:e8:c1:50:4e:12:9d:28:47:e5:db:a5:05:af:b8:
         8d:96:2b:a6:d4:f7:52:b8:f9:89:2a:ed:59:4c:16:81:00:69:
         1a:97:ef:1e:0c:78:3b:e0:5a:c4:e2:a6:45:d7:31:dc:b6:46:
         14:c1:1f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:22:44 2026 by rpki-client