This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft
File:                     WdCj-cNDB7Cls20ubRiZrv57vrQ.mft (raw, json)
Hash identifier:          QOcn+ffXyNKvp4fPHFn7jWZP6OtqY57fOXPCqCSDKVE=
Subject key identifier:   08:F1:80:DA:F2:20:DE:CF:5F:CB:A6:BE:67:E5:E5:03:47:83:77:2E
Authority key identifier: 59:D0:A3:F9:C3:43:07:B0:A5:B3:6D:2E:6D:18:99:AE:FE:7B:BE:B4
Certificate issuer:       /CN=59d0a3f9c34307b0a5b36d2e6d1899aefe7bbeb4
Certificate serial:       019BF8088672E5D877CF1EA2060E455C52A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft
Manifest number:          17EB
Signing time:             Mon 26 Jan 2026 02:01:06 +0000
Manifest this update:     Mon 26 Jan 2026 02:01:06 +0000
Manifest next update:     Tue 27 Jan 2026 02:01:06 +0000
Files and hashes:         1: WdCj-cNDB7Cls20ubRiZrv57vrQ.crl (hash: M2SEAwzeEzGoWRn8jXr25pimmnKEOlvY/Sd1HqVtK2A=)
                          2: r9Mcr5UDzWdIgeL8kqJ0bGMMVmw.roa (hash: 6WGd0CgD9hacqiqe9ZbfPd53REDLfBpVe+xRlENuS3E=)
                          3: wye8DmlYkdaQC1jq2FD5iM2DhEY.roa (hash: mjAPnFxN50juugPjJtBivCThtWn3b1yEogIYi0ZrGDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:08:86:72:e5:d8:77:cf:1e:a2:06:0e:45:5c:52:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59d0a3f9c34307b0a5b36d2e6d1899aefe7bbeb4
        Validity
            Not Before: Jan 26 02:01:06 2026 GMT
            Not After : Jan 27 02:01:06 2026 GMT
        Subject: CN=08f180daf220decf5fcba6be67e5e5034783772e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:11:b3:90:6e:f3:6b:29:d2:be:5c:c4:c3:bc:
                    8d:4c:64:4b:c0:55:8d:49:1e:da:f4:7d:5d:bd:e0:
                    5d:7d:d4:27:ee:30:66:45:31:b2:1e:bb:69:a3:19:
                    e3:d2:c8:11:0b:65:aa:79:dd:02:59:44:19:0e:ba:
                    2d:56:48:5e:c8:a4:9f:5f:a1:8e:6b:c1:26:c8:41:
                    a4:d5:55:69:aa:8c:21:eb:f0:93:f5:e9:27:06:85:
                    ca:b3:e7:b6:2e:7c:c4:2e:c7:58:b8:c9:d2:4e:7d:
                    7b:a6:d8:ce:40:ae:6d:de:db:13:63:94:9c:31:e5:
                    16:82:f2:86:90:3a:73:5c:aa:bb:a9:ae:99:e8:6c:
                    ac:99:45:8c:76:8d:51:6e:66:67:38:d0:d8:dd:27:
                    e5:d6:0c:69:3d:74:7f:a5:67:84:b4:26:c2:7f:ea:
                    78:f7:95:d0:a7:66:17:45:1a:ef:55:1f:15:3a:8d:
                    0b:4b:38:d7:19:fa:bd:79:fb:92:68:8b:ea:91:64:
                    35:64:22:3b:b6:a5:b5:77:69:8b:1c:a1:1d:e8:ec:
                    ac:8c:de:d8:a2:98:e4:f9:58:07:ff:31:6e:8c:75:
                    94:ad:36:73:8c:91:c0:3a:10:7c:96:2f:16:0f:d6:
                    0a:74:5b:37:c1:c4:02:50:65:f8:54:2b:25:79:e3:
                    7f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F1:80:DA:F2:20:DE:CF:5F:CB:A6:BE:67:E5:E5:03:47:83:77:2E
            X509v3 Authority Key Identifier:
                keyid:59:D0:A3:F9:C3:43:07:B0:A5:B3:6D:2E:6D:18:99:AE:FE:7B:BE:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:c0:4a:9f:05:f2:ce:91:f5:27:b8:0c:7c:c3:6a:89:c5:d8:
         9c:01:fd:9b:20:b2:34:d8:90:26:c4:db:dc:a4:c6:c3:c3:20:
         92:56:36:21:f3:d6:ef:0e:16:20:91:87:e4:50:c4:30:5f:4c:
         e3:48:fa:73:44:f8:4e:71:28:48:b2:58:09:fc:61:0f:c1:e2:
         72:f2:e4:69:cc:9d:d1:7f:67:39:14:49:f4:e0:8e:89:d7:97:
         80:70:4b:8e:5c:c6:2a:83:b2:70:41:be:fa:10:92:62:f4:e2:
         27:0d:5a:5e:dd:e6:f4:84:35:c8:5a:73:61:a3:a6:e7:3b:93:
         67:92:4f:35:6d:7a:ce:97:cd:4e:f6:1b:13:97:fe:79:c3:fb:
         df:25:d9:f0:a6:5b:7e:d8:4a:73:3f:41:e0:1e:53:8f:09:35:
         20:b6:3f:9f:b2:45:45:d5:41:e0:7d:3e:0f:f8:fe:67:39:9c:
         a3:5d:0a:8a:9b:45:37:f7:0c:8b:1a:54:a7:0d:d2:2c:d4:f6:
         61:61:bb:20:3e:d0:19:f7:2c:83:03:98:a2:40:8f:0b:54:f1:
         f4:1c:ce:d5:49:c8:42:29:c2:0a:84:02:3c:a5:2b:3b:d4:d4:
         0b:02:e7:1e:35:a7:85:3c:94:fe:4f:a3:7c:4a:d1:01:e0:05:
         f5:83:dc:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:24:39 2026 by rpki-client