This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.mft
File:                     wvypREWGBrEBfibDyhdDD3_5JLM.mft (raw, json)
Hash identifier:          bFx/sr70WXPSNOeXjwPUUsMPYssNtLB1AknIl/gZZF0=
Subject key identifier:   CB:BD:90:E5:2A:AB:15:65:92:63:38:7C:68:AF:55:7A:B2:6C:7D:16
Authority key identifier: C2:FC:A9:44:45:86:06:B1:01:7E:26:C3:CA:17:43:0F:7F:F9:24:B3
Certificate issuer:       /CN=c2fca944458606b1017e26c3ca17430f7ff924b3
Certificate serial:       019B7F39E99EE6FB96F13404E770928AC63F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wvypREWGBrEBfibDyhdDD3_5JLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.mft
Manifest number:          17AB
Signing time:             Fri 02 Jan 2026 15:01:00 +0000
Manifest this update:     Fri 02 Jan 2026 15:01:00 +0000
Manifest next update:     Sat 03 Jan 2026 15:01:00 +0000
Files and hashes:         1: 2eqhGMddc6o7FIDR3NGWx4Ow8E8.roa (hash: z5gVcRgK3Nn9nyPEEaZPlAeofGLHnrjmeBcu5Qk4JJE=)
                          2: mUJD4x2jM1tnziJJnzvezoEdIg4.roa (hash: CPeCrxpjCYKP3mqC1/d2mx1bSiUKrWLUwX4R4Tk1imA=)
                          3: wvypREWGBrEBfibDyhdDD3_5JLM.crl (hash: TFOxyLtUIpmHgN5i+3p9kHqC0GQxEXL82KiDGtEFtCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wvypREWGBrEBfibDyhdDD3_5JLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:39:e9:9e:e6:fb:96:f1:34:04:e7:70:92:8a:c6:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2fca944458606b1017e26c3ca17430f7ff924b3
        Validity
            Not Before: Jan  2 15:01:00 2026 GMT
            Not After : Jan  3 15:01:00 2026 GMT
        Subject: CN=cbbd90e52aab15659263387c68af557ab26c7d16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d0:e6:5f:99:ee:9f:5e:b7:f3:04:fa:e4:5b:
                    9e:49:d7:f8:29:c1:5e:4e:8c:00:1d:99:8c:30:07:
                    90:ce:c7:ee:6b:ca:08:0b:2e:6c:90:6e:d8:c1:38:
                    ac:07:3e:e7:a8:fd:e1:f7:d3:78:5c:a8:62:a8:d1:
                    4f:e8:70:e7:30:35:e5:0e:ec:4f:3d:97:dc:e5:e4:
                    78:06:18:e0:4a:b7:5a:a6:b2:7d:f7:11:44:4d:fc:
                    ea:f4:ba:c5:89:c6:f6:ad:05:84:b5:06:53:47:01:
                    4b:6b:be:cc:b5:14:dd:84:70:b2:38:b6:86:f3:de:
                    3b:a4:e1:9b:32:5a:3f:dd:81:5d:45:6b:66:44:9e:
                    94:26:b1:ef:6e:f2:2c:0e:81:88:b4:99:b3:44:fd:
                    72:31:cb:e5:bf:53:d3:0b:02:33:5c:f5:87:ad:97:
                    ba:fd:d8:47:6e:24:b5:8c:a2:85:de:c4:0e:97:cb:
                    04:10:bf:05:eb:af:73:5e:26:cb:09:ef:bc:5c:12:
                    d8:b2:20:2d:ea:51:24:75:ab:19:4e:52:aa:92:8a:
                    69:53:08:d3:da:77:4e:37:61:77:0c:23:24:a9:63:
                    62:46:7b:07:fe:1c:08:1f:c4:0d:e0:fe:64:28:f0:
                    27:8f:16:30:e0:f1:0b:d8:22:30:f7:81:b9:d4:61:
                    5e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:BD:90:E5:2A:AB:15:65:92:63:38:7C:68:AF:55:7A:B2:6C:7D:16
            X509v3 Authority Key Identifier:
                keyid:C2:FC:A9:44:45:86:06:B1:01:7E:26:C3:CA:17:43:0F:7F:F9:24:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvypREWGBrEBfibDyhdDD3_5JLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:0e:82:1d:ec:2d:78:dd:3a:ca:cd:24:11:27:75:a4:9b:74:
         d4:f6:f8:28:b8:b0:82:cf:7f:10:dd:b3:57:1f:4a:7f:5e:34:
         be:d7:9b:76:e5:64:94:62:c2:62:0e:91:87:70:08:60:e2:f9:
         96:45:81:77:65:c5:14:96:52:37:ed:03:84:a9:76:d9:d1:96:
         ff:f3:da:1a:47:48:96:a4:e0:07:16:be:ad:5d:f9:75:66:6b:
         b7:f2:e5:b0:55:98:d7:b0:5e:58:b8:73:37:6a:40:c0:5f:f7:
         02:05:1a:3b:9a:87:f3:b8:fe:6b:45:df:50:f5:0d:8b:21:92:
         94:9e:b1:60:6a:ef:78:06:40:8a:6f:c8:84:20:fc:d1:41:fe:
         7c:43:af:8a:8d:33:fa:ee:64:ce:19:36:b3:e7:e5:4b:f2:76:
         6a:75:4b:2b:be:9b:7d:31:68:41:aa:e7:79:85:71:b7:4f:29:
         da:12:ea:97:42:1a:16:1d:b4:45:a5:46:2e:93:41:6f:33:3e:
         94:56:42:d6:f5:b5:87:a9:b2:2f:5d:11:f3:94:75:91:f0:0b:
         b8:69:fe:ba:97:ed:42:7e:b9:13:8a:e7:dd:dc:5e:63:2a:59:
         df:ef:48:25:b1:b1:fc:9b:dc:64:3f:15:f6:af:a4:32:47:9e:
         82:0f:74:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 18:29:12 2026 by rpki-client