This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.mft
File:                     WQYyXjRBilfOVm78DD6LOKDvpds.mft (raw, json)
Hash identifier:          j0un1uECwHMMLUCuYB4XegaHrk2lkg9NXpvLxBvfHU0=
Subject key identifier:   2B:53:05:41:70:1E:FB:90:8A:54:96:A7:4A:A4:38:4E:7B:E4:E1:6D
Authority key identifier: 59:06:32:5E:34:41:8A:57:CE:56:6E:FC:0C:3E:8B:38:A0:EF:A5:DB
Certificate issuer:       /CN=5906325e34418a57ce566efc0c3e8b38a0efa5db
Certificate serial:       019BF4D073EC559E0A6E0B4AEB7F3DE0855A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.mft
Manifest number:          07C9
Signing time:             Sun 25 Jan 2026 11:01:00 +0000
Manifest this update:     Sun 25 Jan 2026 11:01:00 +0000
Manifest next update:     Mon 26 Jan 2026 11:01:00 +0000
Files and hashes:         1: 0a1J_e0o53xfPHzxcGmQ-bhZ0e8.roa (hash: mHa/5N0geEIVG3Bi7Mu8qzxi2dbQvVIdogUEER3551I=)
                          2: WQYyXjRBilfOVm78DD6LOKDvpds.crl (hash: NN9ECXxGbG8CBLZfqTHGhhGQWP7+rcQ1Xt7lCt4r+Z0=)
                          3: Wc1p-DpPzNdXtLyd3sx2az35Zww.roa (hash: v3gxQPsBigcTifxf0QwdjAT04GF+RnrhxMrjTFKL3EU=)
                          4: z-ch1vMdQIr7uyyhM6RzLPCAEf4.roa (hash: b4/otDI2s6zAcOPIgbmVSNUQ37PSQCEjogRy9G6SBZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:73:ec:55:9e:0a:6e:0b:4a:eb:7f:3d:e0:85:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5906325e34418a57ce566efc0c3e8b38a0efa5db
        Validity
            Not Before: Jan 25 11:01:00 2026 GMT
            Not After : Jan 26 11:01:00 2026 GMT
        Subject: CN=2b530541701efb908a5496a74aa4384e7be4e16d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e5:7e:bc:ff:eb:76:75:d2:a7:ef:b3:3c:d2:
                    06:73:71:e6:95:a8:dc:0c:73:41:f3:af:15:c4:90:
                    d7:4e:dc:76:0d:a9:e1:15:7b:37:02:f7:7e:d6:2f:
                    e8:b0:4e:f9:1e:fb:ed:d9:27:51:e1:e0:b8:d4:ee:
                    86:cb:18:6e:01:c2:4a:22:13:30:46:1f:ed:75:51:
                    01:56:56:44:44:07:70:d0:5c:6f:0b:38:e1:bb:85:
                    06:51:6a:ba:50:c8:cb:8b:8a:12:a9:3f:05:f2:22:
                    2b:1c:bc:77:81:ff:19:41:f4:19:d4:e1:21:39:38:
                    ae:be:23:0d:88:b3:2a:f8:1d:ba:32:43:11:d3:76:
                    29:8f:65:ab:d8:30:a9:df:54:5f:40:22:09:c6:36:
                    73:0f:d4:7e:d5:9d:5c:5b:98:54:fe:3f:d4:d4:05:
                    a0:cd:ff:5e:a1:c1:db:a1:13:c7:fb:a6:a6:b5:9d:
                    7d:66:de:56:05:45:d7:21:60:52:6a:f0:bc:0a:5d:
                    1c:68:5f:ff:6e:a5:e0:c9:4a:66:4b:cb:e6:8d:f7:
                    3b:16:63:47:7e:77:c5:50:da:cd:22:75:f8:8a:b8:
                    28:5d:f2:28:47:64:20:60:ec:01:0a:eb:c5:17:db:
                    9d:3a:e4:02:8e:f0:56:ad:15:04:ed:4a:46:03:6e:
                    13:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:53:05:41:70:1E:FB:90:8A:54:96:A7:4A:A4:38:4E:7B:E4:E1:6D
            X509v3 Authority Key Identifier:
                keyid:59:06:32:5E:34:41:8A:57:CE:56:6E:FC:0C:3E:8B:38:A0:EF:A5:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:5d:a4:a2:1e:e0:90:0d:af:98:59:b0:1a:f8:1a:11:16:11:
         8e:1f:c8:42:c3:ff:69:2d:e5:d8:6d:94:d4:ef:36:4d:fd:92:
         3c:97:9d:e5:a8:a6:cb:53:5d:6f:f3:d6:6e:56:e2:eb:72:09:
         c9:cf:b4:29:ba:c2:93:c8:52:6c:2a:26:1d:6e:89:63:00:22:
         eb:4b:11:dd:03:79:1f:0e:30:28:4c:66:74:98:cf:f3:59:25:
         98:28:e7:6f:db:30:76:6e:fe:95:b9:a4:bc:9b:4e:da:db:62:
         4d:1d:4d:ad:14:81:f7:f2:0d:28:90:be:01:0f:53:d0:3f:2c:
         56:0e:62:29:96:dd:05:6e:13:0b:d8:a6:af:ab:d0:87:aa:cd:
         4c:dd:9c:23:8b:9a:b6:ac:ea:fe:a0:b0:5d:62:1d:ef:29:90:
         66:8c:07:48:9f:b8:73:f6:02:0d:a4:55:74:3e:ee:76:31:89:
         e1:d8:3e:f9:99:97:51:56:7d:74:8d:a4:b3:9f:4a:95:3f:b4:
         85:78:90:27:bc:9b:f9:74:40:a9:1a:6e:1b:2a:9e:91:c6:f0:
         32:2f:b9:99:8d:5d:90:04:3b:d0:14:ad:bf:a5:74:3b:f2:f4:
         bc:54:dd:31:01:53:a6:e9:83:6f:17:1a:e8:7d:95:07:f1:2a:
         7b:62:0c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:23:15 2026 by rpki-client