This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
File:                     W3qQXiWk1czLLuvk4tXDkggZdY4.mft (raw, json)
Hash identifier:          KPwLtOaTjKoa5lScJPw/EuhiQQFNLmdJPkIcb9ZNLWs=
Subject key identifier:   AF:E9:9B:B4:E4:5E:F4:6D:33:32:0A:0B:D5:61:B6:03:31:9A:D7:1A
Authority key identifier: 5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
Certificate issuer:       /CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Certificate serial:       019C413382A98D1A14BF10605A16ED543504
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
Manifest number:          170F
Signing time:             Mon 09 Feb 2026 07:00:20 +0000
Manifest this update:     Mon 09 Feb 2026 07:00:20 +0000
Manifest next update:     Tue 10 Feb 2026 07:00:20 +0000
Files and hashes:         1: 1-vYQOdOZkiGteDHhx2OATUDPhTA.roa (hash: 17IIjb7LlCipVqQOC9WbNEQZCfvFgYW07a8Dgznq3+o=)
                          2: 2SrneGBZ78iMtO6G5dojAaHp_CA.roa (hash: mWJ7hPqfgdVi4+bEDJyz8jwgvKivAgyW0NZHOfU4mK0=)
                          3: W3qQXiWk1czLLuvk4tXDkggZdY4.crl (hash: zyn2NUNyfZvIu+VE5zTEXg1HgcMtH8lxGbhh+KTew8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:33:82:a9:8d:1a:14:bf:10:60:5a:16:ed:54:35:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
        Validity
            Not Before: Feb  9 07:00:20 2026 GMT
            Not After : Feb 10 07:00:20 2026 GMT
        Subject: CN=afe99bb4e45ef46d33320a0bd561b603319ad71a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f1:8e:7d:42:08:4e:ff:5e:bf:21:1c:34:58:
                    4d:37:cb:2b:0f:a3:73:69:59:c8:5f:a8:d4:65:b7:
                    6f:c1:8b:7a:a9:2c:e2:db:aa:fd:f5:4e:af:32:2b:
                    19:0a:92:50:d5:cf:3e:6f:67:7a:77:40:41:d9:0e:
                    d9:85:d8:a6:7c:3a:c5:35:da:fb:4b:97:cb:70:c4:
                    08:21:65:bb:3f:d6:87:af:70:d7:68:d6:d4:6f:f8:
                    19:bf:ff:98:69:47:e6:5c:ce:5e:86:9e:5c:db:1d:
                    dc:73:28:57:ab:a8:0f:f0:67:7f:bc:f8:7b:64:5f:
                    cd:52:16:8e:bd:d8:e5:be:c4:91:52:cb:88:46:e6:
                    8b:85:7f:6f:9c:02:9c:2e:31:0e:34:a4:ab:05:5c:
                    43:ac:53:97:ce:54:d6:6e:03:50:b9:7e:6e:29:52:
                    59:68:8e:51:38:97:34:7d:83:e9:a0:1f:52:1f:14:
                    3f:ec:88:2c:1e:b1:d6:44:d6:0c:d2:e3:c3:c2:ef:
                    e2:76:28:7b:52:64:8c:76:67:62:9d:d8:e2:74:0a:
                    48:42:09:c7:11:98:80:3c:44:3a:77:bb:03:66:ab:
                    e6:68:f1:45:3e:43:7d:5c:ba:de:67:ff:b6:b5:97:
                    77:86:71:2b:66:c4:85:73:7d:d4:29:13:d3:06:03:
                    36:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E9:9B:B4:E4:5E:F4:6D:33:32:0A:0B:D5:61:B6:03:31:9A:D7:1A
            X509v3 Authority Key Identifier:
                keyid:5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:ab:84:65:e1:8c:2c:13:49:f2:a3:cb:15:cd:1a:be:d4:a3:
         47:65:81:c2:1e:21:4a:5d:6d:e0:0e:26:8a:0a:b5:a5:bc:21:
         b3:d3:b7:f2:62:8f:72:21:0b:a2:3e:91:8b:ea:60:87:f0:b3:
         18:40:3a:15:63:d8:f9:8a:49:ef:27:8a:4f:68:6a:42:07:1f:
         cf:1a:47:f0:88:ba:a9:f2:32:82:80:6f:63:82:cf:f3:3d:9b:
         63:e7:10:fe:34:17:5f:4f:67:12:79:7e:e9:68:93:f9:54:4e:
         2c:2a:14:28:a0:d9:44:36:d6:f0:cd:a7:90:b8:83:1c:3f:76:
         23:cc:b3:b0:79:6f:4e:aa:76:51:5d:77:ca:c1:bf:c3:91:87:
         99:27:76:30:ca:ce:52:2b:5a:2d:ce:01:81:80:03:c0:9d:6b:
         da:fe:87:70:62:42:30:1b:b4:5a:5b:b3:bc:6a:51:82:76:1e:
         67:e1:79:53:c2:27:f2:1d:bb:4a:af:ff:c0:0e:58:c0:93:16:
         bb:5f:6f:2a:d5:0b:b7:b6:f0:0e:1d:f4:cc:d4:f3:2a:7e:16:
         fa:83:da:41:ba:ba:e3:04:ea:07:c9:61:51:6b:10:7f:1d:9a:
         1f:ab:50:97:66:de:2a:45:8e:95:ae:2b:d5:f5:2d:42:2e:5d:
         c2:db:c1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:28 2026 by rpki-client