This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
File:                     WGesaYXMCz_qIWlFyS6y6TIYlAM.mft (raw, json)
Hash identifier:          R9IAfWw5fEaHkGvglRMc7YTTQMATK5lUn72Dvfoz2Xs=
Subject key identifier:   62:53:AE:AB:13:8E:C7:BA:A2:19:03:13:A5:D2:23:92:2A:A4:33:C6
Authority key identifier: 58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03
Certificate issuer:       /CN=5867ac6985cc0b3fea216945c92eb2e932189403
Certificate serial:       019BF42C1A2C8CDE8FD36E1A629F09DC17A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
Manifest number:          09C6
Signing time:             Sun 25 Jan 2026 08:01:29 +0000
Manifest this update:     Sun 25 Jan 2026 08:01:29 +0000
Manifest next update:     Mon 26 Jan 2026 08:01:29 +0000
Files and hashes:         1: 3cTL_iAyUdWn1rl2_8NBBfXDXvA.roa (hash: Auq6dYW1IbUZ8oYiw7xCvq9559uK3oeBaCd765WHPJA=)
                          2: WGesaYXMCz_qIWlFyS6y6TIYlAM.crl (hash: mn+U/qjlwpE0bj7Mfth2H0ycnteZseJyKdsDx/I7u3M=)
                          3: yuN29w4l_cl-IkkGgslbzfGqDe4.roa (hash: sMZJIkJQSxOhfVvEO/9QeKqeZ75CwlugDT+33MJ4iW4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:2c:1a:2c:8c:de:8f:d3:6e:1a:62:9f:09:dc:17:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5867ac6985cc0b3fea216945c92eb2e932189403
        Validity
            Not Before: Jan 25 08:01:29 2026 GMT
            Not After : Jan 26 08:01:29 2026 GMT
        Subject: CN=6253aeab138ec7baa2190313a5d223922aa433c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:56:be:5a:37:2d:97:a1:8a:51:d7:b3:71:2c:
                    53:eb:fe:5d:a0:b9:f4:e4:22:ce:16:c5:c7:ac:dc:
                    85:20:3b:f2:1f:c1:db:15:d1:0c:f2:cd:50:f8:43:
                    75:3c:51:91:a7:89:84:a4:5d:d7:92:26:5f:ac:e1:
                    e0:a1:bd:bb:af:c8:26:3f:9e:3f:e5:5f:9c:45:33:
                    1e:0f:d5:03:b2:48:f4:a7:31:ae:76:e6:c1:23:a4:
                    0e:e0:bf:51:74:3e:60:08:e9:31:21:6d:97:90:5c:
                    da:9f:57:e1:c5:2b:ad:1a:da:9a:03:f2:99:10:81:
                    52:fd:cf:f4:30:b8:11:19:53:e3:46:13:ed:be:49:
                    9c:86:4e:0d:a9:5f:8b:66:28:f7:c8:3a:5e:5c:ff:
                    ae:c5:1c:5f:9c:90:95:31:60:c0:19:16:7a:9a:c5:
                    d4:d1:2d:8d:ad:03:98:b2:7c:fb:5a:37:35:2b:68:
                    45:ef:7b:cd:4e:06:73:12:ef:19:23:2c:3d:03:49:
                    40:60:a7:f7:e9:30:7a:05:11:48:61:a4:b0:00:96:
                    73:b0:f8:79:51:53:23:16:0d:4f:46:ce:cb:e0:56:
                    0f:0f:da:01:fd:7f:33:e0:67:02:ed:b8:80:9b:69:
                    20:bc:3c:69:f3:0f:dd:b2:35:9f:a3:16:10:2e:a2:
                    8f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:53:AE:AB:13:8E:C7:BA:A2:19:03:13:A5:D2:23:92:2A:A4:33:C6
            X509v3 Authority Key Identifier:
                keyid:58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:14:22:f6:34:a4:ba:ac:ed:45:4a:31:52:89:25:e1:70:7d:
         ff:8b:62:a8:3a:e5:fe:a7:a2:18:89:da:ab:dc:24:86:66:e7:
         20:a2:65:9d:d3:b3:27:01:48:68:10:b7:82:ee:40:86:da:e7:
         9b:34:eb:1f:cc:1c:21:95:cb:4e:b3:89:e0:8a:60:c8:a3:0a:
         79:ca:ae:2c:eb:71:a8:d1:17:f6:98:88:3b:8b:fd:d8:7f:84:
         f6:c5:05:6b:56:e2:f1:19:13:e1:71:e5:1b:14:9f:70:3c:f0:
         5f:a0:c6:e3:49:df:38:d2:e3:7a:fc:80:06:d7:4f:4c:3a:56:
         60:1c:a2:eb:6a:fb:44:94:71:ac:3b:6f:7f:96:01:83:be:b8:
         b8:94:39:16:93:5e:a5:6d:24:ca:c0:1b:ae:14:88:40:71:ed:
         62:7b:91:43:ec:ed:23:8a:34:e0:bf:99:5e:f3:83:fa:73:eb:
         d2:8c:a5:31:49:ae:ac:75:a5:d7:ac:8d:6a:f2:a2:1c:4c:e3:
         ea:f4:ea:7a:00:80:dc:84:74:89:b4:c4:89:8f:ec:14:e4:4f:
         e5:5c:60:e2:7f:9a:3b:c4:10:f5:e4:63:fd:ed:43:da:91:5e:
         1a:60:e7:77:89:fd:62:b0:1f:39:74:27:29:b4:6d:2a:9e:37:
         9a:99:f0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:43:48 2026 by rpki-client