This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
File:                     WGsBghBbsnsMi88oQr08GoUWS9E.mft (raw, json)
Hash identifier:          eJ7uxtNPi7L5TgL7kvtiS12FlA5HG0lcQgrse82VUME=
Subject key identifier:   68:28:2E:55:ED:95:87:FD:09:A4:84:23:04:7B:05:AE:06:56:60:15
Authority key identifier: 58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
Certificate issuer:       /CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Certificate serial:       019BF23D26577CF30CC2158FEC23D7FB9C80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
Manifest number:          17FE
Signing time:             Sat 24 Jan 2026 23:00:52 +0000
Manifest this update:     Sat 24 Jan 2026 23:00:52 +0000
Manifest next update:     Sun 25 Jan 2026 23:00:52 +0000
Files and hashes:         1: OeUkA-MxuBY0MCQq2lEXcd7LDp0.roa (hash: UNu3aGNU9iKX9W+pdSbXjn6MIdvAzU/dQ2Ruk579C2c=)
                          2: WGsBghBbsnsMi88oQr08GoUWS9E.crl (hash: pIU3x7cDkrHsfHwHhOJsWSoG2bi7OO/Fz2XTOep4Iws=)
                          3: _LKma__zHFDMDJXCFflTJpsJLLo.roa (hash: d16O3qOwG02xNq1nLgFHuKeCvYDVgJiMUkRZsNPQaBE=)
                          4: klXMh69HPg_6eKMxQVgx6zhe1QE.roa (hash: vG86oygd0IFm9Rxuz3bX4pixPzbUrSLnke23ygFfpi4=)
                          5: p8t0PIwIf-OZP0tJQpmINvt3qpQ.roa (hash: r27HfBWDMYwyRF//qyu0OtsF9qIPudC+kjCHFI00zPo=)
                          6: pgoXDP1h0nWBwbv9FG2W5mHI85k.roa (hash: OZdZQ/KCgv22adlJuUYrt3hL7fGkm6hBd3n3kVRfbgM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:3d:26:57:7c:f3:0c:c2:15:8f:ec:23:d7:fb:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
        Validity
            Not Before: Jan 24 23:00:52 2026 GMT
            Not After : Jan 25 23:00:52 2026 GMT
        Subject: CN=68282e55ed9587fd09a48423047b05ae06566015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:20:23:5a:a7:da:58:d7:ef:dd:98:bc:3d:d1:
                    f6:d7:09:28:10:4c:c2:ef:9f:2e:6b:5d:47:89:4c:
                    58:d7:b0:79:38:0d:3f:9a:52:79:aa:ca:38:e9:da:
                    7b:d5:d1:07:71:7a:32:6a:28:d3:57:69:3d:2f:6d:
                    05:d3:82:8a:61:42:e3:7f:54:4d:42:63:54:d7:97:
                    dc:4a:95:62:90:ce:0a:f9:21:8a:e9:d1:d0:4a:b5:
                    54:82:6e:b3:ff:11:19:ff:73:b5:1f:0a:87:8e:cb:
                    9e:38:f3:d5:02:fc:f8:2c:7d:f3:d4:89:e7:f5:c8:
                    e9:6e:e3:b9:d0:7a:d0:63:fa:06:e3:86:65:69:29:
                    77:d1:ad:28:ca:c8:54:13:69:c0:ee:c1:52:11:2b:
                    4b:bf:78:ca:4a:ce:66:9d:74:c0:30:53:71:74:c6:
                    e3:40:a1:04:10:72:69:cd:3d:70:36:bf:c1:b4:e8:
                    fa:cb:9a:4f:1b:6b:ec:69:e9:d6:0e:23:30:1a:01:
                    51:65:21:44:b9:f9:fe:09:7e:10:c3:45:91:3e:bc:
                    0b:97:e0:9a:21:9c:c8:bd:ca:a3:29:db:81:8d:2f:
                    98:30:b8:28:25:15:33:87:1a:16:f9:e6:b4:90:39:
                    e2:bc:31:4e:7a:85:06:02:5b:17:70:6e:05:5a:d4:
                    d6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:28:2E:55:ED:95:87:FD:09:A4:84:23:04:7B:05:AE:06:56:60:15
            X509v3 Authority Key Identifier:
                keyid:58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:d9:da:8f:24:57:de:ad:15:50:f0:d8:ee:90:ca:eb:f6:0f:
         bb:a9:cc:5d:d1:ad:5f:a5:b5:69:82:e5:8f:70:d0:c9:59:2e:
         97:98:08:dc:35:83:5d:c2:59:cd:fc:57:7c:75:51:22:c1:ce:
         8d:28:92:0e:80:dd:5b:8a:49:6b:11:b7:41:e1:22:2f:06:45:
         58:cf:f1:36:c2:f2:ad:d0:1b:e8:04:65:82:0c:3b:3e:ab:2e:
         84:16:26:51:77:7a:3c:cb:9c:c7:03:74:40:55:91:2d:f7:97:
         ad:82:6a:51:88:47:fc:c6:66:2b:0a:6a:0d:48:c6:40:37:59:
         2d:3b:ab:c3:4f:87:2b:f6:fb:d3:c7:b2:02:db:2d:40:e5:96:
         ac:04:e4:13:8b:ed:0a:23:b1:3a:f1:a3:66:ab:3c:ef:f9:e6:
         8e:2b:9a:c5:4f:99:cf:42:7d:a7:45:5e:ab:d4:8f:6a:b8:36:
         5d:d2:50:94:71:cf:92:6e:8b:94:69:d5:01:82:1b:12:8e:e3:
         ce:01:6b:87:c4:16:d0:31:48:e4:ab:7f:fe:52:7f:ef:e3:e1:
         fa:97:07:cd:2b:6e:be:43:70:90:48:8a:1e:b3:84:a7:c7:36:
         d8:e8:08:24:a0:c4:30:58:f5:9b:83:a9:79:48:fa:8c:41:0f:
         2b:fa:64:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:41:48 2026 by rpki-client