This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
File:                     Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft (raw, json)
Hash identifier:          EP51peeNr7EtA/KaWocrt2mIICWhVhVNwxv78MxQpEc=
Subject key identifier:   BD:C9:16:2A:12:D1:F7:79:90:9B:5B:7E:30:DF:79:D1:4A:36:BB:A6
Authority key identifier: 5A:AE:19:67:8A:A3:75:25:51:22:29:A9:4E:78:90:14:71:83:27:3C
Certificate issuer:       /CN=5aae19678aa37525512229a94e7890147183273c
Certificate serial:       019C427D3417EE70CC0828AAABCA4BF718F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
Manifest number:          17E5
Signing time:             Mon 09 Feb 2026 13:00:27 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:27 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:27 +0000
Files and hashes:         1: Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl (hash: 4MXZUFPfbTWmI9aYC2M7dGc9GDRtemW7nVZW/GVBvEo=)
                          2: fIkb69ZuPAj_lkNlkF5stv3pzy8.roa (hash: HcfpVtDwRtdGIEcmlCtRPcGYYq9FoTPjwQjdNlk5s8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:34:17:ee:70:cc:08:28:aa:ab:ca:4b:f7:18:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5aae19678aa37525512229a94e7890147183273c
        Validity
            Not Before: Feb  9 13:00:27 2026 GMT
            Not After : Feb 10 13:00:27 2026 GMT
        Subject: CN=bdc9162a12d1f779909b5b7e30df79d14a36bba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:12:80:88:9e:1d:7f:ac:26:a7:65:5c:16:8e:
                    27:b3:03:6e:78:59:e4:db:f6:c1:c2:c1:a8:de:c6:
                    57:a7:b7:03:e4:bb:02:bb:73:a3:0f:f5:0d:ff:13:
                    6a:fa:2c:33:5b:fb:97:1e:69:2f:78:47:b3:37:79:
                    26:89:1f:ff:87:19:0c:6a:fa:03:f6:86:5b:e2:62:
                    cc:51:d5:55:50:22:c5:5f:b3:99:62:bd:05:a3:ed:
                    bf:b5:2a:c0:79:7b:9b:29:97:b7:29:31:3d:34:ba:
                    a5:3e:a2:3f:e2:52:c9:1d:02:19:13:fc:86:41:4c:
                    88:0d:cd:09:1d:b8:17:32:51:ad:6e:e4:e3:cc:c0:
                    22:76:15:02:e8:54:10:46:b3:56:c5:03:e2:c5:47:
                    04:c6:55:9b:52:f4:6e:29:1e:46:93:68:47:a2:5f:
                    dc:70:80:97:0b:cf:44:17:7d:a5:39:f2:25:1c:73:
                    d5:c4:58:fa:9c:57:e2:05:54:50:35:43:8a:dd:28:
                    b0:c6:cd:0a:28:fc:8e:08:bd:2a:bb:0c:e8:e5:c4:
                    29:13:9d:53:5b:86:e6:24:8e:aa:9a:f4:a6:cf:65:
                    51:fa:1b:35:90:77:1b:e4:62:36:a7:e8:15:d8:dc:
                    c0:0d:c3:10:12:5b:22:f2:74:0a:a5:6f:fb:d8:77:
                    0c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C9:16:2A:12:D1:F7:79:90:9B:5B:7E:30:DF:79:D1:4A:36:BB:A6
            X509v3 Authority Key Identifier:
                keyid:5A:AE:19:67:8A:A3:75:25:51:22:29:A9:4E:78:90:14:71:83:27:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:4e:75:73:8e:88:13:ba:c9:07:de:c7:a8:14:50:72:85:44:
         8e:d4:d8:30:90:da:3e:21:38:2a:b2:c7:ad:3c:25:cc:c3:f5:
         83:48:90:e1:9d:1f:55:5b:f8:ed:fe:a5:66:f8:f6:52:5c:c8:
         6e:63:4b:0d:67:ef:46:da:1d:4b:18:e4:ee:30:3a:a5:89:25:
         05:03:b4:7e:4e:44:ed:12:e4:31:de:ab:38:c8:c3:04:07:35:
         64:e6:e3:a2:91:88:a2:84:07:8a:8e:3d:7c:5a:b8:d2:ff:65:
         bc:d6:a6:34:c7:b1:e6:9f:45:20:88:53:e5:35:c7:67:61:1e:
         62:37:44:66:47:bb:45:fb:d1:fe:ef:9b:03:31:bb:b6:73:e5:
         ab:74:2a:4b:83:d5:23:80:79:67:12:7d:dd:42:26:54:55:d4:
         23:d7:13:5b:67:64:98:57:3c:d1:a8:62:4a:a9:91:75:f7:2c:
         fd:45:49:47:54:24:77:e4:7f:bf:61:09:f9:91:8d:9a:31:65:
         f7:1c:fd:30:7e:f1:ca:4c:1d:ab:59:b1:9d:fc:db:b0:d8:05:
         c6:a0:82:9b:63:9e:90:22:59:fa:51:27:4b:3b:5a:2c:68:dc:
         81:b7:97:7c:0e:09:06:b6:e2:5a:73:c5:9c:ee:f2:78:eb:01:
         2b:1b:df:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:47 2026 by rpki-client