This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
File:                     wnz1VgIH7OhILDL8tplfd9f3MMs.mft (raw, json)
Hash identifier:          17OWp77I1/3dw0jESF8FpGWXmm51FD2VTnblRifyh/s=
Subject key identifier:   0B:2E:24:5E:F0:56:04:04:5D:B2:DB:93:A2:07:FD:9D:98:E8:77:96
Authority key identifier: C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB
Certificate issuer:       /CN=c27cf5560207ece8482c32fcb6995f77d7f730cb
Certificate serial:       019BF6F5DA47F9713915F719ED61CD82096A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
Manifest number:          04CF
Signing time:             Sun 25 Jan 2026 21:01:05 +0000
Manifest this update:     Sun 25 Jan 2026 21:01:05 +0000
Manifest next update:     Mon 26 Jan 2026 21:01:05 +0000
Files and hashes:         1: 5RryIGVI4D8yV9FJRN0qOChCYEE.roa (hash: ZXZohq24aG1ejohkX4O2iDPWcy5mbU13m+Vqo0/udR8=)
                          2: wnz1VgIH7OhILDL8tplfd9f3MMs.crl (hash: jTdklAUIN2wKM5hS6pS4nWy2Fkjnj0WzUOVI+FvYFi0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 21:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:f5:da:47:f9:71:39:15:f7:19:ed:61:cd:82:09:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c27cf5560207ece8482c32fcb6995f77d7f730cb
        Validity
            Not Before: Jan 25 21:01:05 2026 GMT
            Not After : Jan 26 21:01:05 2026 GMT
        Subject: CN=0b2e245ef05604045db2db93a207fd9d98e87796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3a:ed:c2:90:23:65:c1:13:ca:7e:88:80:13:
                    b2:6e:4c:67:8d:7e:8d:f9:9c:5c:6d:01:bb:41:d5:
                    c5:c8:ba:ab:a1:7c:93:96:fd:20:53:69:eb:f6:d5:
                    e3:e7:8a:e0:e6:62:3a:a0:24:9e:70:6c:5d:bb:36:
                    34:f7:34:8d:4b:7d:27:59:d0:4d:08:06:1f:2e:1b:
                    9f:c7:9a:46:06:af:1e:25:d5:d3:c5:3b:77:38:17:
                    b8:51:7f:30:37:a1:da:2d:71:69:a3:40:ac:d5:fa:
                    57:55:c5:77:3b:5e:67:5f:4e:2e:99:98:c4:f7:76:
                    75:0b:b1:5c:9b:2c:71:cd:72:3e:ef:a1:39:11:25:
                    6c:39:f6:62:7d:f5:a4:74:36:97:f6:5b:a3:ac:67:
                    f4:f2:6b:89:fe:ca:46:ce:52:ed:f8:7f:0c:08:e6:
                    d2:b8:07:5a:15:a8:ee:7b:f5:84:c8:f6:7c:44:90:
                    9e:de:e4:21:24:e8:bd:97:75:9e:ec:88:4e:a4:5a:
                    23:91:1c:a3:be:b8:67:39:a1:82:e9:74:e8:ed:1e:
                    9a:e8:16:a9:af:a4:93:2f:9b:08:df:9e:7d:9d:50:
                    b3:bd:9b:2a:24:eb:1c:f5:8f:c5:61:4d:cb:58:e5:
                    c4:3f:39:eb:6e:5c:f3:46:d4:d3:91:b3:3d:45:3f:
                    a3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2E:24:5E:F0:56:04:04:5D:B2:DB:93:A2:07:FD:9D:98:E8:77:96
            X509v3 Authority Key Identifier:
                keyid:C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:44:ba:4b:51:8a:14:35:52:cd:8e:0e:42:9a:2f:a3:84:0c:
         57:ec:db:de:e6:1c:e7:0d:c7:9f:37:ba:15:9d:91:c4:e5:b9:
         00:b4:9c:bf:8a:ac:e3:cf:1d:de:02:d7:e4:c3:38:a2:30:41:
         79:41:b2:d7:29:e5:31:90:02:9e:d0:b0:26:75:68:6f:e4:f2:
         28:03:cb:b0:26:7f:ba:bc:db:ba:8a:53:25:f3:8d:fd:6f:d1:
         06:25:52:48:ec:24:bb:b6:c6:42:20:ef:83:d6:6a:66:4d:1e:
         48:3d:5d:0d:45:c2:92:04:85:cf:aa:ea:f3:89:d5:43:52:f6:
         48:c4:c6:2e:d7:57:f5:92:b6:81:b7:df:53:08:8a:e9:58:47:
         80:33:77:56:3d:d2:7b:12:ec:1e:33:22:b0:ed:04:6b:e0:30:
         70:0b:1a:f1:07:e4:80:93:72:b0:87:02:48:f3:80:51:a2:ac:
         56:79:38:bf:b7:24:55:4c:56:fc:9b:d1:ba:5e:fb:31:94:70:
         62:51:7c:11:1f:9d:01:c4:19:fd:7c:4c:d3:6b:70:b2:1d:0e:
         df:87:d1:aa:bc:63:be:88:f5:aa:98:67:26:45:f7:f0:82:f5:
         65:9a:8c:7a:0b:4c:4e:a7:eb:05:c8:04:9d:e0:64:14:3a:d9:
         4a:27:a4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:24:38 2026 by rpki-client