This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
File:                     Wu6ShG_jj96OD2KUjKmIPBopt1U.mft (raw, json)
Hash identifier:          ej+dMXcsPpRR4iEJ1IAdCSQqnlnUqAn7mZiQLiEmRPw=
Subject key identifier:   F4:38:F0:D3:0C:CF:BD:64:A7:33:12:2A:0A:B7:D2:C0:D4:2A:54:FB
Authority key identifier: 5A:EE:92:84:6F:E3:8F:DE:8E:0F:62:94:8C:A9:88:3C:1A:29:B7:55
Certificate issuer:       /CN=5aee92846fe38fde8e0f62948ca9883c1a29b755
Certificate serial:       019BF2E1EB58B2E9BCB2AC62884071A83FF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
Manifest number:          0C28
Signing time:             Sun 25 Jan 2026 02:00:50 +0000
Manifest this update:     Sun 25 Jan 2026 02:00:50 +0000
Manifest next update:     Mon 26 Jan 2026 02:00:50 +0000
Files and hashes:         1: Wu6ShG_jj96OD2KUjKmIPBopt1U.crl (hash: MYMIWUYakKIbnMfovd6txAeAXdjCrictdn6adm5ipnQ=)
                          2: rP5nHNYdqEAJLssTyCJ5gOdDH2I.roa (hash: yOB632STL0Rw5rEnDDsr56AUQMoN3jjS+xa8opoFvzA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 02:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:e1:eb:58:b2:e9:bc:b2:ac:62:88:40:71:a8:3f:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5aee92846fe38fde8e0f62948ca9883c1a29b755
        Validity
            Not Before: Jan 25 02:00:50 2026 GMT
            Not After : Jan 26 02:00:50 2026 GMT
        Subject: CN=f438f0d30ccfbd64a733122a0ab7d2c0d42a54fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:84:c8:64:57:65:92:54:22:ba:5e:d1:7f:b3:
                    4f:0e:9e:c6:50:3e:0d:16:47:34:27:d1:15:82:2c:
                    43:d4:a8:20:b8:33:85:f1:c2:9a:8d:0e:88:db:2f:
                    80:cd:2a:07:83:92:32:0b:18:cd:57:3f:a0:08:9f:
                    ec:cc:e6:b6:a1:67:79:6c:ae:83:80:ec:28:78:b2:
                    04:2f:05:16:25:e1:19:ab:52:8f:07:c4:91:f1:01:
                    bb:6c:64:55:78:21:7d:05:73:25:89:8f:29:22:bf:
                    48:d4:52:08:ab:a1:79:50:36:d3:b9:0f:79:86:f6:
                    90:be:80:ff:ad:5e:db:6e:df:aa:c2:3a:c1:a7:9f:
                    ca:a7:88:98:43:d2:36:68:dd:5c:27:92:ca:0e:b0:
                    1c:55:a2:35:68:5e:10:06:43:6a:c8:b2:e5:2e:a4:
                    0d:51:ba:17:c9:6f:ee:25:c8:83:a8:6c:2f:ba:d9:
                    d4:87:6a:1a:b7:e6:d6:7f:29:a1:29:61:79:ef:07:
                    e8:c3:42:d9:ad:3d:90:72:f7:8c:cf:49:7e:82:91:
                    34:00:1f:a2:fe:53:5a:c3:1a:4d:df:45:10:52:2d:
                    bd:dd:d2:72:36:3e:54:f5:30:bc:24:9b:fd:4b:0c:
                    37:1e:05:2c:99:a4:93:a8:58:53:20:6a:87:63:b6:
                    e6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:38:F0:D3:0C:CF:BD:64:A7:33:12:2A:0A:B7:D2:C0:D4:2A:54:FB
            X509v3 Authority Key Identifier:
                keyid:5A:EE:92:84:6F:E3:8F:DE:8E:0F:62:94:8C:A9:88:3C:1A:29:B7:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:22:6a:5f:77:f4:b3:4f:2f:0f:98:aa:a3:2f:9c:0e:f7:01:
         bd:2e:45:ef:32:9e:0f:d6:1c:19:6b:7e:31:3d:33:1f:ac:61:
         09:7c:41:c1:0f:dc:0c:23:77:8a:29:78:24:bc:50:52:e3:a7:
         d6:c3:54:4e:44:ba:ef:e0:a5:8a:3d:5c:0b:04:9b:35:3d:66:
         42:dd:91:4d:fd:8c:4f:2e:16:a4:a3:6c:98:ce:46:61:be:bf:
         f0:3d:05:35:16:db:c9:ec:bb:a2:61:90:3d:54:c2:c6:85:fb:
         05:62:a1:95:82:a1:85:99:8e:79:a7:b4:93:62:78:34:4c:3e:
         9c:f9:f4:7a:28:27:7c:c1:ee:34:0e:ab:35:f4:9a:a6:68:01:
         36:4f:66:dd:e6:d6:8f:f5:f8:14:ad:fd:57:26:94:0e:50:51:
         b8:df:7c:01:48:8d:52:c8:7f:ac:5f:c1:bc:8a:a9:f7:5a:80:
         6f:6e:33:fa:9d:0e:c8:44:5d:67:00:db:0a:5e:ea:58:16:db:
         72:80:5c:c6:d7:04:3c:3d:c8:ed:37:b8:37:67:a4:f2:f9:2b:
         6c:ea:6d:15:87:b9:1a:68:cb:35:87:b4:23:52:9e:23:16:ef:
         a7:51:c9:fc:8e:22:bf:4b:35:03:e2:63:15:1d:4c:de:4f:b9:
         57:4a:00:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvy4etYsum8sqxiiEBxqD/2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZWU5Mjg0NmZlMzhmZGU4ZTBmNjI5NDhjYTk4ODNjMWEy
OWI3NTUwHhcNMjYwMTI1MDIwMDUwWhcNMjYwMTI2MDIwMDUwWjAzMTEwLwYDVQQD
EyhmNDM4ZjBkMzBjY2ZiZDY0YTczMzEyMmEwYWI3ZDJjMGQ0MmE1NGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYTIZFdlklQiul7Rf7NPDp7GUD4N
Fkc0J9EVgixD1KgguDOF8cKajQ6I2y+AzSoHg5IyCxjNVz+gCJ/szOa2oWd5bK6D
gOwoeLIELwUWJeEZq1KPB8SR8QG7bGRVeCF9BXMliY8pIr9I1FIIq6F5UDbTuQ95
hvaQvoD/rV7bbt+qwjrBp5/Kp4iYQ9I2aN1cJ5LKDrAcVaI1aF4QBkNqyLLlLqQN
UboXyW/uJciDqGwvutnUh2oat+bWfymhKWF57wfow0LZrT2QcveMz0l+gpE0AB+i
/lNawxpN30UQUi293dJyNj5U9TC8JJv9Sww3HgUsmaSTqFhTIGqHY7bmuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQ48NMMz71kpzMSKgq30sDUKlT7MB8GA1UdIwQY
MBaAFFrukoRv44/ejg9ilIypiDwaKbdVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3U2U2hHX2pqOTZPRDJLVWpLbUlQQm9wdDFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8xZGIwY2ItNzlmZC00ZDY5LTk1MTUt
NDJmY2ZiNzU1NzQ0LzEvV3U2U2hHX2pqOTZPRDJLVWpLbUlQQm9wdDFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8xZGIwY2ItNzlmZC00ZDY5LTk1MTUtNDJmY2ZiNzU1NzQ0
LzEvV3U2U2hHX2pqOTZPRDJLVWpLbUlQQm9wdDFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFiJqX3f0
s08vD5iqoy+cDvcBvS5F7zKeD9YcGWt+MT0zH6xhCXxBwQ/cDCN3iil4JLxQUuOn
1sNUTkS67+Clij1cCwSbNT1mQt2RTf2MTy4WpKNsmM5GYb6/8D0FNRbbyey7omGQ
PVTCxoX7BWKhlYKhhZmOeae0k2J4NEw+nPn0eignfMHuNA6rNfSapmgBNk9m3ebW
j/X4FK39VyaUDlBRuN98AUiNUsh/rF/BvIqp91qAb24z+p0OyERdZwDbCl7qWBbb
coBcxtcEPD3I7Te4N2ek8vkrbOptFYe5GmjLNYe0I1KeIxbvp1HJ/I4iv0s1A+Jj
FR1M3k+5V0oAhQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:46:00 2026 by rpki-client