This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
File:                     wNBDfN98up85Z-syighobQbkfVY.mft (raw, json)
Hash identifier:          V0o7gU9mQSrf+ITRvlrUX+RRYADK/j9xzqj3fBxysh8=
Subject key identifier:   49:6E:EB:B3:5D:79:72:B6:5D:66:49:59:DE:76:C2:70:45:50:34:04
Authority key identifier: C0:D0:43:7C:DF:7C:BA:9F:39:67:EB:32:8A:08:68:6D:06:E4:7D:56
Certificate issuer:       /CN=c0d0437cdf7cba9f3967eb328a08686d06e47d56
Certificate serial:       019BF6511289F7E785D25750DC629F52BB09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
Manifest number:          058B
Signing time:             Sun 25 Jan 2026 18:01:06 +0000
Manifest this update:     Sun 25 Jan 2026 18:01:06 +0000
Manifest next update:     Mon 26 Jan 2026 18:01:06 +0000
Files and hashes:         1: bfKp4He-qKJs_enDIJl7XQ9lPPU.roa (hash: uFXbmdwQGYD/iE9Y1EfqaH0e9iyi0snRJrn455EqNPc=)
                          2: wNBDfN98up85Z-syighobQbkfVY.crl (hash: 2iFeJYr0gZhuaazIsH1/GhFFyRp1yUvOao8nmdDXIkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:51:12:89:f7:e7:85:d2:57:50:dc:62:9f:52:bb:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0d0437cdf7cba9f3967eb328a08686d06e47d56
        Validity
            Not Before: Jan 25 18:01:06 2026 GMT
            Not After : Jan 26 18:01:06 2026 GMT
        Subject: CN=496eebb35d7972b65d664959de76c27045503404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c2:52:7c:13:ec:d9:c5:6d:1b:82:ca:49:f7:
                    ab:ae:05:1a:a3:5c:90:a1:62:14:5c:6b:58:83:70:
                    94:e1:84:92:fd:45:7e:1f:f7:1d:fe:7f:e9:47:c4:
                    97:75:ec:e7:dd:eb:b6:c7:3d:61:4f:17:ca:5f:c1:
                    37:4f:80:fb:0c:71:96:61:ee:3f:63:9b:28:1f:af:
                    81:c4:10:c4:60:16:5f:ab:8a:39:31:55:b2:cc:4f:
                    b2:b9:46:5d:0e:89:9a:1c:ae:81:65:71:91:0b:b2:
                    54:21:0f:ea:fe:20:75:76:50:67:a9:a4:de:6a:5f:
                    9a:d1:8d:96:a9:d1:ec:2f:d5:83:28:89:4a:59:16:
                    fa:09:45:3f:49:22:27:40:23:e0:b3:1a:a8:cc:9f:
                    e0:2c:60:23:85:e5:d3:45:8b:cf:5c:1d:bc:1d:be:
                    05:21:73:25:0d:21:5d:e2:ab:a9:17:3d:2d:8c:62:
                    91:4d:a8:ea:23:fd:72:c7:fb:f4:f7:a4:45:73:5d:
                    49:c2:b4:91:bb:61:72:52:32:5a:18:5a:43:10:7d:
                    8c:80:fd:0f:34:d7:ab:81:19:4f:30:5e:80:9f:4c:
                    ab:bb:e1:3e:cf:c9:a0:8b:e8:9b:56:4c:a5:ec:1a:
                    e5:b2:66:82:97:fa:b1:05:96:c6:06:29:0a:dd:fa:
                    3a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:6E:EB:B3:5D:79:72:B6:5D:66:49:59:DE:76:C2:70:45:50:34:04
            X509v3 Authority Key Identifier:
                keyid:C0:D0:43:7C:DF:7C:BA:9F:39:67:EB:32:8A:08:68:6D:06:E4:7D:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:41:9e:27:b0:5b:79:be:e6:95:e0:69:7a:c4:b9:ab:2f:de:
         52:23:36:c0:9d:9e:53:ad:39:73:7c:12:03:50:5b:0b:5b:07:
         64:0f:fc:df:7b:6e:f1:4f:38:12:a8:44:43:d3:2b:94:1a:47:
         01:a1:cb:81:aa:68:d4:ca:e9:37:fd:4e:56:52:b8:65:87:44:
         66:ee:2b:1b:3c:f3:c5:50:0a:af:47:50:ab:c5:9e:c7:75:4a:
         54:da:6a:98:88:c0:b7:c5:65:43:82:0f:54:d3:16:37:75:ae:
         71:29:b3:e3:6c:64:05:79:d4:74:0f:67:f8:2c:02:19:81:a5:
         06:64:d3:00:2b:61:cf:d3:ba:ca:c6:2e:ac:c8:dd:34:7a:f0:
         ff:a3:af:e2:58:52:d9:5c:a7:4c:4a:02:1d:5d:11:12:8f:a8:
         9f:09:ef:f0:f1:2e:dc:fb:16:26:20:d8:39:04:0c:a7:ed:7d:
         35:a6:e1:82:1a:a7:92:53:41:42:44:01:c4:04:1d:93:51:11:
         55:38:5a:d7:0e:f3:52:39:ef:aa:b2:5f:d6:47:3b:bc:17:05:
         08:d3:da:2d:0a:1e:04:ca:cb:17:32:88:ad:e4:79:0c:f1:d9:
         cf:02:4d:11:08:2d:cd:84:ba:1f:a0:7d:68:3f:a5:57:aa:20:
         52:54:0f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:39:03 2026 by rpki-client