This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ac9dab-e91b-4541-b595-be4117e2319c/1/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.mft
File:                     Wwb3RuVJ7Jdj4HzXZv6hTihm00E.mft (raw, json)
Hash identifier:          CG5BWg5CbU6CKt5PKgZoNB8qsW0fWfDsdVapeNQTN4E=
Subject key identifier:   75:FE:D5:1F:9C:28:CA:9D:B6:30:56:78:92:91:4D:C7:38:04:D7:48
Authority key identifier: 5B:06:F7:46:E5:49:EC:97:63:E0:7C:D7:66:FE:A1:4E:28:66:D3:41
Certificate issuer:       /CN=5b06f746e549ec9763e07cd766fea14e2866d341
Certificate serial:       019C446C4ED68CCE9140B1E9ECA5A11C2F3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/ac9dab-e91b-4541-b595-be4117e2319c/1/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.mft
Manifest number:          045F
Signing time:             Mon 09 Feb 2026 22:01:14 +0000
Manifest this update:     Mon 09 Feb 2026 22:01:14 +0000
Manifest next update:     Tue 10 Feb 2026 22:01:14 +0000
Files and hashes:         1: Wwb3RuVJ7Jdj4HzXZv6hTihm00E.crl (hash: MJA5DfgpxS6PSYdyWagtJpUczOPJXJ4sU0M/dAIbI1s=)
                          2: qCLfYy9JBgFgFSSq8yRUbSOCgFc.roa (hash: zzKgWSmqTeB6vLaDeIRl5kq11hfufm95gcJLtu5yY3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/ac9dab-e91b-4541-b595-be4117e2319c/1/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/ac9dab-e91b-4541-b595-be4117e2319c/1/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6c:4e:d6:8c:ce:91:40:b1:e9:ec:a5:a1:1c:2f:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b06f746e549ec9763e07cd766fea14e2866d341
        Validity
            Not Before: Feb  9 22:01:14 2026 GMT
            Not After : Feb 10 22:01:14 2026 GMT
        Subject: CN=75fed51f9c28ca9db630567892914dc73804d748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bb:6b:bd:fb:8c:63:cf:79:e7:4f:c5:53:53:
                    3a:3b:c7:5d:ae:1b:9f:17:f3:8a:17:15:a1:dc:4f:
                    fc:ef:6f:63:59:08:65:1e:07:02:09:df:6a:16:b1:
                    73:a9:86:c2:bd:08:a5:81:84:f4:01:d8:86:94:5f:
                    a9:cf:da:53:7b:3e:37:ed:f1:9f:1b:0b:06:2c:2a:
                    6b:b6:a0:79:3d:cf:d0:b7:b6:32:ba:f2:3e:e1:bc:
                    a3:88:09:c8:79:09:db:f4:c0:cc:71:ae:a6:0f:d6:
                    a2:0b:5d:91:fd:b8:2c:ce:9a:91:c6:05:0a:05:3e:
                    df:14:09:91:de:0b:ce:be:42:0c:45:e2:a2:27:9c:
                    03:13:c7:28:97:95:a1:03:7c:1c:9a:29:b9:cf:01:
                    f9:7c:88:00:ef:08:ac:68:f7:f7:7e:89:73:60:af:
                    46:e1:e8:25:67:b1:5f:4b:0b:65:56:d3:9e:8d:65:
                    d5:6e:25:a6:e6:ab:e1:f4:cf:6d:ea:e9:98:e2:89:
                    96:80:5a:37:09:da:7d:9a:57:06:cf:5d:6d:9d:5a:
                    5c:38:95:43:c3:40:12:79:db:89:ab:97:20:fc:a9:
                    97:68:71:ad:8b:29:70:de:65:97:f4:df:23:b2:50:
                    7b:66:a7:e1:f6:98:f4:7e:b7:db:11:8d:c8:2c:b9:
                    82:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FE:D5:1F:9C:28:CA:9D:B6:30:56:78:92:91:4D:C7:38:04:D7:48
            X509v3 Authority Key Identifier:
                keyid:5B:06:F7:46:E5:49:EC:97:63:E0:7C:D7:66:FE:A1:4E:28:66:D3:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ac9dab-e91b-4541-b595-be4117e2319c/1/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ac9dab-e91b-4541-b595-be4117e2319c/1/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:d4:cf:e5:bd:eb:e3:c6:0d:f7:52:f1:ef:5e:46:a0:53:c2:
         1c:b2:74:af:fa:7d:98:94:6e:3b:2a:e2:fe:df:14:22:a9:70:
         3f:b2:9f:2e:37:2b:1b:db:0e:5c:c2:ae:c1:18:20:d0:cf:6c:
         87:04:8c:b4:82:ed:86:d6:5e:3a:8d:31:c9:d2:a3:ad:0a:f6:
         a4:e0:50:f9:77:05:df:df:06:1e:ff:7f:f2:f3:e4:ab:5e:f0:
         e8:b6:f9:3c:e3:d9:02:d3:f4:b8:85:ba:c2:f3:00:88:cc:dc:
         dd:18:89:e9:bf:fd:86:36:b1:ba:c5:d8:ef:a5:5a:d8:90:db:
         8e:69:96:2d:88:8e:0b:e8:c6:8f:4d:6e:fa:69:e1:fe:c0:bb:
         38:9d:78:9f:a3:ad:c6:47:5a:78:a0:08:06:7d:70:0e:31:21:
         43:fe:87:03:f4:64:24:2c:d5:7b:33:66:d3:eb:99:f5:82:61:
         b0:1f:72:12:9d:b6:d5:38:cc:de:68:07:92:31:c8:0d:0e:c1:
         33:20:5b:56:86:66:0a:71:73:fd:62:c6:25:9b:30:fc:77:cf:
         41:d9:76:53:96:51:5c:15:ad:34:21:7c:b2:98:ca:1e:50:90:
         fc:58:4f:42:6a:f7:bf:47:e6:a9:90:bf:9e:9b:e8:5f:4e:5d:
         bd:c5:a3:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxEbE7WjM6RQLHp7KWhHC88MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMDZmNzQ2ZTU0OWVjOTc2M2UwN2NkNzY2ZmVhMTRlMjg2
NmQzNDEwHhcNMjYwMjA5MjIwMTE0WhcNMjYwMjEwMjIwMTE0WjAzMTEwLwYDVQQD
Eyg3NWZlZDUxZjljMjhjYTlkYjYzMDU2Nzg5MjkxNGRjNzM4MDRkNzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrtrvfuMY89550/FU1M6O8ddrhuf
F/OKFxWh3E/8729jWQhlHgcCCd9qFrFzqYbCvQilgYT0AdiGlF+pz9pTez437fGf
GwsGLCprtqB5Pc/Qt7YyuvI+4byjiAnIeQnb9MDMca6mD9aiC12R/bgszpqRxgUK
BT7fFAmR3gvOvkIMReKiJ5wDE8col5WhA3wcmim5zwH5fIgA7wisaPf3folzYK9G
4eglZ7FfSwtlVtOejWXVbiWm5qvh9M9t6umY4omWgFo3Cdp9mlcGz11tnVpcOJVD
w0ASeduJq5cg/KmXaHGtiylw3mWX9N8jslB7Zqfh9pj0frfbEY3ILLmC2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHX+1R+cKMqdtjBWeJKRTcc4BNdIMB8GA1UdIwQY
MBaAFFsG90blSeyXY+B812b+oU4oZtNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3diM1J1Vko3SmRqNEh6WFp2NmhUaWhtMDBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9hYzlkYWItZTkxYi00NTQxLWI1OTUt
YmU0MTE3ZTIzMTljLzEvV3diM1J1Vko3SmRqNEh6WFp2NmhUaWhtMDBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9hYzlkYWItZTkxYi00NTQxLWI1OTUtYmU0MTE3ZTIzMTlj
LzEvV3diM1J1Vko3SmRqNEh6WFp2NmhUaWhtMDBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhtTP5b3r
48YN91Lx715GoFPCHLJ0r/p9mJRuOyri/t8UIqlwP7KfLjcrG9sOXMKuwRgg0M9s
hwSMtILthtZeOo0xydKjrQr2pOBQ+XcF398GHv9/8vPkq17w6Lb5POPZAtP0uIW6
wvMAiMzc3RiJ6b/9hjaxusXY76Va2JDbjmmWLYiOC+jGj01u+mnh/sC7OJ14n6Ot
xkdaeKAIBn1wDjEhQ/6HA/RkJCzVezNm0+uZ9YJhsB9yEp221TjM3mgHkjHIDQ7B
MyBbVoZmCnFz/WLGJZsw/HfPQdl2U5ZRXBWtNCF8spjKHlCQ/FhPQmr3v0fmqZC/
npvoX05dvcWjTQ==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:48:29 2026 by rpki-client