This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft
File:                     W0lMbhb0nQi-dhyowOqnEihy-oI.mft (raw, json)
Hash identifier:          AujhpLMn/cXuxzMvHHp3ixngQ+TggdzhZvSmH9hM0n8=
Subject key identifier:   30:F1:84:7F:F3:38:F2:9F:C9:46:30:5A:1F:14:E5:C2:7A:D3:3B:3C
Authority key identifier: 5B:49:4C:6E:16:F4:9D:08:BE:76:1C:A8:C0:EA:A7:12:28:72:FA:82
Certificate issuer:       /CN=5b494c6e16f49d08be761ca8c0eaa7122872fa82
Certificate serial:       019BF5E3E8177FA83D581C1BF97B7B9F9A0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft
Manifest number:          17E9
Signing time:             Sun 25 Jan 2026 16:01:52 +0000
Manifest this update:     Sun 25 Jan 2026 16:01:52 +0000
Manifest next update:     Mon 26 Jan 2026 16:01:52 +0000
Files and hashes:         1: W0lMbhb0nQi-dhyowOqnEihy-oI.crl (hash: 179keSg0Ed8qWXPLzZ/OkHpgR9LjGDS7LgxUzR/WrrE=)
                          2: y5dSGThy3CbU6qNsZJXz6GjosIQ.roa (hash: 1sAH2jAfu08ukseLTG+XyL0AYKo9iWcn/0uV+h9Djr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:e3:e8:17:7f:a8:3d:58:1c:1b:f9:7b:7b:9f:9a:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b494c6e16f49d08be761ca8c0eaa7122872fa82
        Validity
            Not Before: Jan 25 16:01:52 2026 GMT
            Not After : Jan 26 16:01:52 2026 GMT
        Subject: CN=30f1847ff338f29fc946305a1f14e5c27ad33b3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:63:e4:42:b0:ec:26:e5:8f:43:1d:f1:30:dc:
                    2e:83:cf:45:cd:e2:60:00:da:d9:d3:3e:f5:70:9d:
                    f4:85:5c:c2:66:9e:11:4c:1e:37:3c:2d:b2:df:79:
                    db:0a:7d:8f:fc:73:42:46:a6:70:3c:e3:eb:ee:71:
                    dd:c1:c8:b4:63:6f:8b:f0:d5:07:49:42:4e:3f:4a:
                    eb:e1:b3:b1:fc:13:07:ae:13:f2:0f:15:bb:4b:a7:
                    9d:e0:37:38:4c:40:c9:72:99:e1:99:cf:a5:a7:5d:
                    cc:5c:26:7c:bc:17:78:23:73:16:87:76:a1:64:56:
                    c4:9f:c1:8c:cc:7e:34:0c:71:96:55:9e:6d:8b:2a:
                    0f:df:ee:90:04:69:17:3e:14:7a:49:f3:11:4b:ce:
                    55:dc:56:f9:02:82:5f:fa:2d:bb:ba:42:1b:45:55:
                    4f:ef:da:a6:e6:03:e7:a5:92:fb:2e:6d:ca:d8:88:
                    f2:18:fe:bc:ec:4e:eb:65:bd:47:52:64:f8:9c:e9:
                    7d:a6:06:8f:48:ca:26:8b:9c:04:bd:d5:78:6c:f3:
                    88:80:6b:16:19:65:a3:a4:1d:35:04:f1:9e:ff:81:
                    ee:4e:44:1d:07:6a:75:0d:0a:14:96:1c:52:81:53:
                    a4:80:19:e3:e2:da:d3:9f:db:6f:69:a2:33:a9:ce:
                    f8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F1:84:7F:F3:38:F2:9F:C9:46:30:5A:1F:14:E5:C2:7A:D3:3B:3C
            X509v3 Authority Key Identifier:
                keyid:5B:49:4C:6E:16:F4:9D:08:BE:76:1C:A8:C0:EA:A7:12:28:72:FA:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:6c:7a:03:0c:38:f8:93:22:3f:d2:66:78:ed:13:aa:33:da:
         6b:44:2f:00:83:c1:df:fb:96:51:a6:0e:19:3c:43:97:60:35:
         b9:2f:36:d2:bd:67:5e:a7:47:cc:02:e3:22:cc:2c:8c:9f:9b:
         00:0b:43:80:8d:30:a0:16:0e:88:f5:e1:2e:72:59:64:27:2f:
         f9:64:ce:52:38:dc:36:03:f9:de:5a:c9:9d:2a:dd:5b:9a:5d:
         f1:6d:1b:18:c7:e6:c3:6b:ea:e9:67:d7:dd:55:4f:85:27:09:
         87:ed:3b:6b:ec:19:aa:df:1e:fa:7a:88:d6:65:9a:b8:e9:69:
         45:c0:d4:5c:ff:43:be:36:fa:03:e9:b0:18:19:d6:a0:ae:67:
         9f:9c:b7:8f:8d:c8:9a:b5:55:b6:92:60:83:53:91:b3:ce:89:
         f1:3a:4c:b2:0d:8d:9d:75:b0:91:0a:f0:1e:07:34:7f:9a:8b:
         8c:fe:76:c4:4d:4f:38:29:b7:de:cb:cf:b1:36:fd:60:41:4f:
         76:0e:54:4c:96:b3:43:da:54:58:e9:d3:68:5c:db:90:a6:d3:
         cc:c8:6d:56:42:bd:fd:3b:be:f3:c5:7f:d9:52:32:9b:99:58:
         e4:90:32:86:d9:53:f3:b1:26:dd:b3:8f:53:cf:73:8f:0c:3c:
         e3:c2:78:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:19:28 2026 by rpki-client