This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.mft
File:                     wHR_vibJzddiit_ttXt4vo3nXik.mft (raw, json)
Hash identifier:          B2UXRYWaz9mC8YSK9nOUBgCK/0l/mxoLXjccIyVyisk=
Subject key identifier:   CE:10:15:E4:6C:81:18:DC:12:9F:D0:E2:AF:5B:76:63:F3:A2:6A:28
Authority key identifier: C0:74:7F:BE:26:C9:CD:D7:62:8A:DF:ED:B5:7B:78:BE:8D:E7:5E:29
Certificate issuer:       /CN=c0747fbe26c9cdd7628adfedb57b78be8de75e29
Certificate serial:       019BF57585F510C31779F462D1E60EBF0E52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.mft
Manifest number:          17EA
Signing time:             Sun 25 Jan 2026 14:01:18 +0000
Manifest this update:     Sun 25 Jan 2026 14:01:18 +0000
Manifest next update:     Mon 26 Jan 2026 14:01:18 +0000
Files and hashes:         1: 0LzCBx0QZRSAfZaRMo_cS4BQtQE.roa (hash: 7o32IoSE1cfCxEZcczuy7FXmMXs2mDb+wYFqA7QXBeM=)
                          2: 1-Hu9W0FmiG82NC7-tjuK0EgepjY.roa (hash: 7s+sH/SAKFRmku03mgi9bj0bc7250BG+Tn/rh7WZuyY=)
                          3: 8BRkastJX7wU0bPIsin3zeWNSuA.roa (hash: 60PaOzCg7fH+6KJwHOstj/lUrw5vKE8AsGhSw9z1YKg=)
                          4: FPC9ddwt1ZBgWoLZwL1mMkIz18k.roa (hash: 9EL+o03COhmEnSRSMen7S+EN9QVh1AUZEemgl/OWiGI=)
                          5: _vvsbXrJo_c1HEgyqYRPDVhypp0.roa (hash: qkx1pHlwpZwYxvxvdZ0ja9GX2r8gdUPL+Cn8v39PX0Q=)
                          6: eQ4EGhSV6uGFEKwIgwY9cmJUUYM.roa (hash: H69c+k9Jj7yLzfrYUCen8bz8XDZeFZd5WtWdrEuCPgc=)
                          7: iU5ejVJ6QfRKNVuhTVBGxsukqUw.roa (hash: mXUy26J3J14czVIo2p0qCZCLF116yGstOAyzjRstGT4=)
                          8: wHR_vibJzddiit_ttXt4vo3nXik.crl (hash: ftq6n5bUnsILQo74ECOkBJHpS0uNn2TIyarzoAcC8Gw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 14:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:75:85:f5:10:c3:17:79:f4:62:d1:e6:0e:bf:0e:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0747fbe26c9cdd7628adfedb57b78be8de75e29
        Validity
            Not Before: Jan 25 14:01:18 2026 GMT
            Not After : Jan 26 14:01:18 2026 GMT
        Subject: CN=ce1015e46c8118dc129fd0e2af5b7663f3a26a28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:79:ec:20:7c:c9:9f:dd:1f:be:c2:83:c8:b2:
                    be:ee:43:8a:87:16:30:ec:69:8b:4c:5e:21:86:bc:
                    f0:72:cf:5b:90:17:09:b3:73:58:cd:05:66:87:58:
                    3d:3e:af:98:4d:18:35:2b:b1:95:ca:6d:08:f1:9a:
                    2c:55:04:a6:5e:dd:64:76:71:b3:c7:d4:0d:be:99:
                    46:ff:8a:8c:89:81:91:54:a7:ed:e8:24:bb:38:08:
                    10:44:ae:c2:2e:74:96:71:21:74:98:85:7b:7b:57:
                    ab:06:d0:d4:02:41:d9:d0:d0:ed:a7:65:11:35:c2:
                    73:0c:ee:45:76:cb:19:8b:30:58:b0:3b:7d:5b:91:
                    b3:27:90:3b:47:10:37:10:9b:14:af:83:4a:f9:00:
                    37:1c:0f:ff:69:93:73:15:d9:ef:80:e2:31:d5:ab:
                    27:f7:e1:50:4f:c5:27:27:11:87:48:d5:9b:80:0a:
                    65:a3:be:c7:f8:d3:94:d1:ec:f7:99:ab:6a:dd:fb:
                    76:12:37:4a:b7:1d:d1:2b:4e:e3:63:81:80:8e:d4:
                    cd:3c:d8:b1:ff:e6:84:6d:12:5f:12:8c:2b:05:0b:
                    95:b4:25:15:26:91:8a:92:b1:92:a7:16:46:d3:2f:
                    b0:96:02:46:cc:2c:4c:25:ae:e1:c6:66:cb:3a:71:
                    e4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:10:15:E4:6C:81:18:DC:12:9F:D0:E2:AF:5B:76:63:F3:A2:6A:28
            X509v3 Authority Key Identifier:
                keyid:C0:74:7F:BE:26:C9:CD:D7:62:8A:DF:ED:B5:7B:78:BE:8D:E7:5E:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:c4:d0:1f:5f:21:f1:df:ee:25:99:40:17:e0:cf:12:bb:25:
         52:4f:08:aa:f4:1b:59:50:51:3e:f9:f6:ff:da:fb:60:cf:59:
         d8:15:55:6b:8e:79:66:76:c9:b8:42:7f:98:15:2c:e6:b9:df:
         47:ee:a1:2e:c8:14:db:43:6e:07:ba:16:2d:f4:ea:64:c4:d0:
         79:2e:09:d8:93:ea:75:49:14:fe:58:d4:81:f9:f5:1e:b2:47:
         17:a7:ae:94:1e:06:20:92:97:36:7d:c0:2e:75:2a:ea:e5:99:
         b6:0b:c4:9d:a2:fb:ba:81:4f:95:6d:bf:07:6b:f1:1c:45:a7:
         a0:10:9b:ec:e7:85:6c:6f:51:68:a2:69:e0:59:ff:78:28:c2:
         14:f5:50:15:5e:77:7c:6b:3c:28:25:a0:40:e4:7b:61:0f:2c:
         ea:2c:67:b1:ad:e8:3d:d2:0d:44:0f:59:91:a2:fe:20:38:79:
         02:76:8f:3a:eb:6f:39:c8:25:1b:bc:91:b2:a2:f2:34:a3:52:
         5c:76:1b:22:87:bc:95:9e:c6:de:9a:00:2e:24:b1:51:68:0f:
         65:1a:4f:54:4f:9b:01:f0:3f:25:3a:98:2b:20:32:67:91:81:
         07:82:d8:48:fe:fe:92:2c:05:d3:10:c3:55:46:c5:15:ed:57:
         c3:3d:f5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:55:13 2026 by rpki-client