This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
File:                     WgqpaCxoOpwblc6WdtUbINOf0q4.mft (raw, json)
Hash identifier:          621zYW4Qr1AJuLPe6hFGDYyqmFrDZt9c8BCht/9rpmk=
Subject key identifier:   4A:7E:1A:46:E5:E2:0F:66:20:11:E8:20:57:CA:46:CB:85:D2:EE:DD
Authority key identifier: 5A:0A:A9:68:2C:68:3A:9C:1B:95:CE:96:76:D5:1B:20:D3:9F:D2:AE
Certificate issuer:       /CN=5a0aa9682c683a9c1b95ce9676d51b20d39fd2ae
Certificate serial:       019BF807F9D4928195AC9F9C18C6D8190D61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
Manifest number:          1058
Signing time:             Mon 26 Jan 2026 02:00:30 +0000
Manifest this update:     Mon 26 Jan 2026 02:00:30 +0000
Manifest next update:     Tue 27 Jan 2026 02:00:30 +0000
Files and hashes:         1: U838CZ3tP-SqpmS_2UEPBZ3tGac.roa (hash: 0MbyurR/tw2t4cWUzKHipnxJH0cpvpDBnD2yvgzDDAc=)
                          2: WgqpaCxoOpwblc6WdtUbINOf0q4.crl (hash: rkvZtvJ6oqSvPEg7p0kN+8o465L9ZuMY65SA040tYb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:07:f9:d4:92:81:95:ac:9f:9c:18:c6:d8:19:0d:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a0aa9682c683a9c1b95ce9676d51b20d39fd2ae
        Validity
            Not Before: Jan 26 02:00:30 2026 GMT
            Not After : Jan 27 02:00:30 2026 GMT
        Subject: CN=4a7e1a46e5e20f662011e82057ca46cb85d2eedd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6a:72:5b:0f:78:e9:51:38:50:9a:4c:48:67:
                    19:66:41:28:13:b8:29:14:b3:25:6f:c8:d4:3f:4e:
                    e5:4c:ff:4e:13:69:71:a3:47:66:fc:71:4d:85:30:
                    77:70:9b:14:85:07:21:d5:76:b8:87:68:7a:2c:71:
                    3c:d8:ce:99:31:f9:d5:6e:8c:98:e0:27:94:f8:63:
                    c0:7c:30:bb:17:53:20:5d:6f:3c:1a:9d:43:2a:be:
                    3e:49:a0:3c:a8:62:fe:02:9f:25:dd:f1:d5:27:45:
                    fe:9e:89:0f:5d:77:9d:95:14:60:e0:fd:45:f5:d8:
                    65:e9:41:5d:04:ba:5e:2c:b1:82:19:a2:ef:67:42:
                    b8:eb:8f:d4:af:a3:43:dc:51:01:ba:c9:e6:c7:d5:
                    03:51:f2:5e:6a:80:68:e1:3b:a3:09:a8:4f:1e:fc:
                    e9:d3:1f:b0:27:16:21:be:df:f5:b7:90:ac:b3:65:
                    45:f1:69:7a:f8:d7:be:66:55:33:6b:2b:b5:c6:80:
                    3e:dc:f3:38:98:96:4b:4b:82:db:92:0a:53:3f:08:
                    80:3a:96:e4:53:43:94:a1:f4:c5:20:15:31:e4:8f:
                    c9:d3:a1:51:61:27:b8:a8:04:03:50:89:72:9b:97:
                    5e:f8:df:7f:42:be:ca:f8:bd:69:f3:91:77:b7:80:
                    1c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7E:1A:46:E5:E2:0F:66:20:11:E8:20:57:CA:46:CB:85:D2:EE:DD
            X509v3 Authority Key Identifier:
                keyid:5A:0A:A9:68:2C:68:3A:9C:1B:95:CE:96:76:D5:1B:20:D3:9F:D2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:24:a5:22:bd:ea:c2:30:50:b5:41:ef:65:c6:2f:ab:5a:16:
         7b:64:f0:a9:47:e8:18:1d:84:0e:7f:28:e3:b2:88:0d:34:73:
         8f:65:5f:d3:26:db:b5:73:22:88:38:5a:a4:ec:7c:af:ba:66:
         fb:79:ad:00:55:3c:83:e3:3e:8a:0e:ef:ef:9d:26:24:00:3e:
         23:b7:08:7e:75:63:7e:d1:db:be:54:0e:48:f8:e8:87:3a:94:
         d2:20:1c:19:bd:05:cb:cc:24:a3:3e:89:50:9c:38:ed:66:96:
         2f:44:a7:23:67:be:26:ab:54:9a:f3:5a:c4:c6:ff:9a:d9:72:
         3b:be:bf:61:81:a6:f5:57:71:3e:33:77:ac:fa:98:80:26:0b:
         4b:0f:e4:02:56:74:45:c7:21:e4:c7:4a:4a:eb:11:68:7b:d8:
         da:de:40:ed:de:f3:4d:15:b8:a4:1c:16:14:e5:8a:a1:54:e2:
         ba:61:02:9e:dc:c9:24:07:59:8d:3d:8d:9f:58:27:b4:4b:fa:
         29:25:eb:96:1d:93:10:34:9e:82:43:43:ab:f6:51:40:18:30:
         87:20:1e:a5:e9:5e:3a:4c:07:46:bd:aa:4f:55:8c:bf:38:a4:
         27:9a:bd:ab:d7:ea:a9:a3:50:73:7c:bb:23:e9:34:13:b8:5f:
         01:b6:49:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv4B/nUkoGVrJ+cGMbYGQ1hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMGFhOTY4MmM2ODNhOWMxYjk1Y2U5Njc2ZDUxYjIwZDM5
ZmQyYWUwHhcNMjYwMTI2MDIwMDMwWhcNMjYwMTI3MDIwMDMwWjAzMTEwLwYDVQQD
Eyg0YTdlMWE0NmU1ZTIwZjY2MjAxMWU4MjA1N2NhNDZjYjg1ZDJlZWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGpyWw946VE4UJpMSGcZZkEoE7gp
FLMlb8jUP07lTP9OE2lxo0dm/HFNhTB3cJsUhQch1Xa4h2h6LHE82M6ZMfnVboyY
4CeU+GPAfDC7F1MgXW88Gp1DKr4+SaA8qGL+Ap8l3fHVJ0X+nokPXXedlRRg4P1F
9dhl6UFdBLpeLLGCGaLvZ0K464/Ur6ND3FEBusnmx9UDUfJeaoBo4TujCahPHvzp
0x+wJxYhvt/1t5Css2VF8Wl6+Ne+ZlUzayu1xoA+3PM4mJZLS4LbkgpTPwiAOpbk
U0OUofTFIBUx5I/J06FRYSe4qAQDUIlym5de+N9/Qr7K+L1p85F3t4AcCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEp+Gkbl4g9mIBHoIFfKRsuF0u7dMB8GA1UdIwQY
MBaAFFoKqWgsaDqcG5XOlnbVGyDTn9KuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2dxcGFDeG9PcHdibGM2V2R0VWJJTk9mMHE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mNDkxYTAtYjY2Ni00ZTlmLWIwZjkt
NmVlZDUyOTY4YjFjLzEvV2dxcGFDeG9PcHdibGM2V2R0VWJJTk9mMHE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9mNDkxYTAtYjY2Ni00ZTlmLWIwZjktNmVlZDUyOTY4YjFj
LzEvV2dxcGFDeG9PcHdibGM2V2R0VWJJTk9mMHE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACCSlIr3q
wjBQtUHvZcYvq1oWe2TwqUfoGB2EDn8o47KIDTRzj2Vf0ybbtXMiiDhapOx8r7pm
+3mtAFU8g+M+ig7v750mJAA+I7cIfnVjftHbvlQOSPjohzqU0iAcGb0Fy8wkoz6J
UJw47WaWL0SnI2e+JqtUmvNaxMb/mtlyO76/YYGm9VdxPjN3rPqYgCYLSw/kAlZ0
Rcch5MdKSusRaHvY2t5A7d7zTRW4pBwWFOWKoVTiumECntzJJAdZjT2Nn1gntEv6
KSXrlh2TEDSegkNDq/ZRQBgwhyAepeleOkwHRr2qT1WMvzikJ5q9q9fqqaNQc3y7
I+k0E7hfAbZJyw==
-----END CERTIFICATE-----
Generated at Mon Jan 26 09:02:04 2026 by rpki-client