This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft
File:                     WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft (raw, json)
Hash identifier:          wKQjNhFnhRFQtp2T3wLiR8Kh96KDie0Qi0w4m1AviN8=
Subject key identifier:   06:3E:64:BE:4B:2D:26:7C:F5:49:01:60:1F:65:C7:13:94:18:E4:43
Authority key identifier: 5A:94:C4:BC:4D:25:63:E2:52:EB:FC:C0:FB:C2:AC:19:9C:CE:60:8A
Certificate issuer:       /CN=5a94c4bc4d2563e252ebfcc0fbc2ac199cce608a
Certificate serial:       019C4390B25178D9F4311FCE898897147D9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft
Manifest number:          181D
Signing time:             Mon 09 Feb 2026 18:01:22 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:22 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:22 +0000
Files and hashes:         1: DDJ2Ku9PtCg5SsS6DZq5i7HooGA.roa (hash: KxL6L8WMtAezvZY85hKd4t9cB3JBSMBU1InlyKDbFbo=)
                          2: WpTEvE0lY-JS6_zA-8KsGZzOYIo.crl (hash: TohixtH02K1q5J7ygOxQxdKnG8s8+WnQKMo9Lt2Ujv4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:b2:51:78:d9:f4:31:1f:ce:89:88:97:14:7d:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a94c4bc4d2563e252ebfcc0fbc2ac199cce608a
        Validity
            Not Before: Feb  9 18:01:22 2026 GMT
            Not After : Feb 10 18:01:22 2026 GMT
        Subject: CN=063e64be4b2d267cf54901601f65c7139418e443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:01:86:1c:26:d2:54:c2:41:60:c4:a2:23:c9:
                    7a:62:fc:13:b3:bc:dd:06:4e:0c:a7:23:3d:7e:2b:
                    0f:7d:77:4f:f2:58:ae:26:b7:ad:48:e8:29:ec:bf:
                    c4:fc:49:55:e7:fb:61:14:5a:54:db:d7:49:93:68:
                    5e:c3:3d:1f:7b:be:3d:b8:c9:b5:10:ce:a2:c5:ba:
                    e7:1e:b8:51:cb:50:9b:71:ef:cb:4f:cb:5c:18:36:
                    ca:45:bb:ee:6a:ad:b6:27:18:d0:5e:da:8b:7a:41:
                    85:e5:0a:a0:a0:9c:e3:8e:d7:a5:95:4f:50:85:70:
                    22:e3:b0:b1:bf:92:04:0b:7b:eb:67:bb:99:1a:27:
                    29:b2:d3:f5:b7:59:1c:48:c1:9f:46:61:e2:8e:a3:
                    aa:55:0e:63:47:b9:b3:79:20:1f:56:f6:f9:62:84:
                    ad:e4:53:ce:4b:dc:1d:b2:0b:c9:e7:c6:34:92:a2:
                    bf:6f:f5:51:dc:12:c5:d0:84:22:65:03:d2:24:82:
                    1c:99:fa:ae:8f:ff:b1:b7:9f:5f:80:61:6e:bd:53:
                    b2:47:0a:3e:d0:21:3f:8a:ca:ca:c5:0f:ee:00:e4:
                    19:94:59:15:17:4f:b4:99:a5:85:69:d2:d4:35:c1:
                    51:3e:04:32:68:3e:03:1b:5b:d2:66:5c:9b:ce:2a:
                    cd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:3E:64:BE:4B:2D:26:7C:F5:49:01:60:1F:65:C7:13:94:18:E4:43
            X509v3 Authority Key Identifier:
                keyid:5A:94:C4:BC:4D:25:63:E2:52:EB:FC:C0:FB:C2:AC:19:9C:CE:60:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:b4:27:09:a9:0b:42:e3:d2:70:ec:ed:f9:c5:dc:8e:30:f7:
         11:83:fb:31:ce:07:1a:cc:08:ff:52:cf:5e:60:c9:99:66:bd:
         55:8b:19:50:b4:f5:70:64:f6:1c:35:2b:60:27:e3:72:94:38:
         ab:a7:9a:7b:4e:de:37:45:d2:af:c9:96:f4:b3:77:66:40:f9:
         64:ec:d0:8f:6b:91:6d:01:a2:05:77:86:a6:fe:4c:ce:db:3e:
         56:9e:1e:1b:63:00:1b:4d:8e:12:9c:a8:05:b2:ea:5f:57:c0:
         b0:75:1f:7d:97:9f:2b:ac:81:1d:9e:1f:d3:94:2d:e7:93:6b:
         dd:e9:d7:47:61:a8:bf:2a:fe:94:b8:73:48:64:bb:eb:30:e0:
         8c:2a:f4:6d:ad:e5:76:0d:9a:b0:38:9f:00:6b:fe:35:70:97:
         17:36:12:3d:86:7a:ff:69:f8:a5:97:3e:c9:29:b5:34:cc:b3:
         fd:96:36:18:7d:21:c8:f3:65:4d:ff:34:cb:6a:d1:7d:91:c6:
         77:45:d5:08:17:9d:53:08:72:3e:d8:30:c4:ac:db:49:b2:68:
         97:e9:e0:35:4a:0f:ed:e9:d7:44:6b:41:8d:2d:da:9c:56:09:
         7f:66:8d:9d:de:cc:5e:69:05:a7:90:96:f1:41:79:e3:42:9a:
         a0:3c:81:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:15:53 2026 by rpki-client