This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft
File:                     wv6ZPR8xDoFzwXzpJ48en44i48I.mft (raw, json)
Hash identifier:          diiklQ2S199sAoHAQdY/RTu9o9cZ2tWdnVkZ50Miaq4=
Subject key identifier:   50:61:EC:04:E4:D6:7B:93:4E:DD:86:B5:2D:FD:8E:4D:F7:28:E4:BE
Authority key identifier: C2:FE:99:3D:1F:31:0E:81:73:C1:7C:E9:27:8F:1E:9F:8E:22:E3:C2
Certificate issuer:       /CN=c2fe993d1f310e8173c17ce9278f1e9f8e22e3c2
Certificate serial:       019BF61A3F38F11BF1147C54E7AD6479F1EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft
Manifest number:          17E8
Signing time:             Sun 25 Jan 2026 17:01:13 +0000
Manifest this update:     Sun 25 Jan 2026 17:01:13 +0000
Manifest next update:     Mon 26 Jan 2026 17:01:13 +0000
Files and hashes:         1: fkjKY1GubqopgVMFItI3Dks0F0s.roa (hash: XHHriZ3RedEv637kMieJw9uopGlbC5EMU7/X4VulIbY=)
                          2: wv6ZPR8xDoFzwXzpJ48en44i48I.crl (hash: 0zqD4aGsZ9DBFwsO6bSzoioD7ESbwyvRt0+EBcF0uNo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:1a:3f:38:f1:1b:f1:14:7c:54:e7:ad:64:79:f1:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2fe993d1f310e8173c17ce9278f1e9f8e22e3c2
        Validity
            Not Before: Jan 25 17:01:13 2026 GMT
            Not After : Jan 26 17:01:13 2026 GMT
        Subject: CN=5061ec04e4d67b934edd86b52dfd8e4df728e4be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5f:21:06:46:59:70:18:33:c6:d3:5d:2b:38:
                    46:75:51:e8:86:37:f5:4f:7a:c4:83:0d:6e:61:23:
                    2d:87:e5:33:7c:46:f0:56:e9:42:79:57:cc:e1:66:
                    2f:28:08:e9:cf:f2:0a:8c:0c:d0:a7:0d:dd:9a:55:
                    7c:aa:3b:61:af:2e:fe:b0:a2:31:e7:27:a5:f1:ed:
                    e9:38:e8:40:15:19:46:ee:2f:4b:36:be:27:c7:d5:
                    04:28:1e:e5:d0:92:d2:27:0b:29:a6:48:73:f4:8b:
                    ab:97:fb:ea:48:df:b5:6f:dc:1a:67:05:bf:87:c4:
                    3b:e0:5f:98:01:c9:16:04:27:48:98:24:42:d9:c4:
                    ea:5c:82:74:30:2e:8b:f7:05:44:62:97:63:b9:fa:
                    8e:37:a5:18:96:bf:26:99:1d:69:c5:54:3b:af:ba:
                    92:33:1b:5c:23:72:0d:c1:a2:59:d9:31:e3:c8:d0:
                    16:98:66:4d:eb:77:de:f4:e9:c7:5d:01:de:8f:53:
                    89:43:4e:de:72:59:47:a5:a7:ec:4f:56:9f:78:f8:
                    6e:32:b6:79:0b:7e:b5:83:27:60:ef:85:70:b9:63:
                    c1:ee:04:bd:b6:68:be:93:61:55:27:bc:7f:d9:8f:
                    d8:fc:3e:06:25:25:f7:8a:db:ea:28:84:0e:53:6f:
                    1b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:61:EC:04:E4:D6:7B:93:4E:DD:86:B5:2D:FD:8E:4D:F7:28:E4:BE
            X509v3 Authority Key Identifier:
                keyid:C2:FE:99:3D:1F:31:0E:81:73:C1:7C:E9:27:8F:1E:9F:8E:22:E3:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:15:d6:c4:3e:bf:a5:22:b2:b2:60:85:41:b4:7e:84:f8:78:
         fb:02:0a:58:03:ec:e5:a1:e6:5c:54:b9:b3:5a:36:a8:db:22:
         a2:4c:d5:25:34:1f:7d:3d:d4:6f:8b:f6:cf:d9:cd:4f:98:a1:
         7e:a7:61:be:95:24:0c:c1:e4:33:35:2f:40:5e:0c:45:f6:7a:
         cb:dc:c9:23:80:e7:7f:7a:20:d1:94:a7:62:f8:00:d3:6c:90:
         a2:2b:b5:da:75:70:ca:b4:73:d9:a5:de:2c:d8:3d:11:14:91:
         37:31:47:54:c5:91:43:fc:9e:89:75:5b:fb:d5:77:c0:9e:47:
         ba:45:9f:0e:80:d5:51:e9:0e:74:de:cd:cd:9d:6e:df:7b:b9:
         e9:f2:76:07:0f:b9:3a:31:52:5e:29:dc:6e:6a:3a:43:ea:b3:
         14:49:7c:c1:e3:e4:01:ae:45:c8:a1:49:2b:82:8c:74:bb:70:
         c2:da:f2:67:97:12:fb:a9:b4:b5:c3:a2:e4:56:ca:41:89:e3:
         d7:37:fc:28:ec:0a:55:51:35:cc:e9:9b:22:94:a3:4e:45:be:
         f6:07:ae:7e:1d:67:37:8e:d7:6c:82:3c:67:c1:53:e3:03:47:
         3f:8a:31:87:1a:b4:b1:e9:17:2d:47:79:69:bd:83:5c:d6:46:
         a0:ed:87:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:32:21 2026 by rpki-client