This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
File:                     wXLnuWJS7qhzJjPTulGpsFWDp7M.mft (raw, json)
Hash identifier:          0pj9qOYhgCglnw7zjG9yrZkU9puS8RdirQFzTI9XzSk=
Subject key identifier:   39:FF:B2:8C:E1:35:57:3E:34:8A:98:1D:30:43:2C:F4:61:80:C6:B8
Authority key identifier: C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3
Certificate issuer:       /CN=c172e7b96252eea8732633d3ba51a9b05583a7b3
Certificate serial:       019C43FE2485FA9E53B67CD9B35DC7987F5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
Manifest number:          0EF3
Signing time:             Mon 09 Feb 2026 20:00:54 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:54 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:54 +0000
Files and hashes:         1: 98vr8W__XpPfxKb3oWjSNeB9O4g.roa (hash: HfCtLcixn47JEXRyfpP8IgjT4+bHM16DwTuzO5zQzKk=)
                          2: wXLnuWJS7qhzJjPTulGpsFWDp7M.crl (hash: 3zyaEpXAZhRGWTzzQaV1vXG8AqY72n/WhBN7UmF+WLo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:24:85:fa:9e:53:b6:7c:d9:b3:5d:c7:98:7f:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c172e7b96252eea8732633d3ba51a9b05583a7b3
        Validity
            Not Before: Feb  9 20:00:54 2026 GMT
            Not After : Feb 10 20:00:54 2026 GMT
        Subject: CN=39ffb28ce135573e348a981d30432cf46180c6b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fb:28:c6:f4:9e:9e:0d:b1:cf:3e:97:b1:c9:
                    83:c7:e0:c3:57:7e:e8:a2:29:e5:05:44:c3:d4:95:
                    26:8e:14:11:35:9f:86:07:a6:2a:6f:ce:86:fc:18:
                    49:52:b1:1a:ae:ad:89:e4:3f:bc:52:02:e0:02:0a:
                    db:87:d4:33:cb:e7:f7:cc:00:5b:6f:8e:e3:05:13:
                    94:23:77:89:02:23:dc:fc:c9:c8:d9:43:0b:ea:8f:
                    36:bd:57:09:07:bc:9c:ea:13:4e:63:a3:d6:46:f6:
                    93:28:dd:71:7c:6f:8c:a6:ce:2e:bf:b9:92:58:b9:
                    12:cc:e4:e0:0d:0d:bc:9f:e5:54:e1:be:d3:b7:a4:
                    d2:de:e7:4d:77:69:94:82:3b:a5:94:e7:f9:a1:77:
                    53:0b:c3:d7:41:42:80:c4:45:ee:31:99:42:eb:d9:
                    13:4e:20:3f:50:df:81:75:08:a2:20:db:8d:b7:cd:
                    53:b7:fb:0d:ed:89:26:b1:c5:8e:86:f3:40:ad:a3:
                    3c:e6:5b:9e:46:09:da:50:f2:b2:22:00:cc:83:32:
                    26:a0:ba:c5:3b:86:71:a8:78:92:ea:2c:be:f8:40:
                    b8:37:60:c1:c5:4a:55:e9:60:78:11:eb:29:f6:6e:
                    9e:d6:05:22:24:76:44:88:f2:aa:dc:96:49:b8:c6:
                    d4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:FF:B2:8C:E1:35:57:3E:34:8A:98:1D:30:43:2C:F4:61:80:C6:B8
            X509v3 Authority Key Identifier:
                keyid:C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:44:82:ad:db:14:13:d4:91:19:aa:9a:1a:fd:42:97:8f:f2:
         db:98:b5:19:aa:d8:aa:68:ea:53:d4:54:d4:b0:d5:2c:b8:90:
         26:5e:29:23:38:83:ae:bc:b5:0d:80:0a:eb:63:09:b9:0c:d4:
         7d:00:58:ae:10:4d:c4:9d:1d:aa:16:eb:30:27:20:9c:a1:9c:
         80:2e:dc:ed:18:9e:4c:68:80:ca:e8:a1:b0:88:71:14:42:21:
         fc:01:d4:03:e3:92:d4:24:fe:22:50:4f:29:a6:a1:58:e7:ac:
         5b:e3:25:ff:f8:d9:59:05:39:d4:33:57:5a:4b:a0:16:cd:fb:
         c5:33:d5:ca:5a:ca:9b:5a:7b:08:e4:4f:50:28:cb:79:d3:a1:
         f3:0b:a2:25:ca:c7:39:aa:b5:7a:c7:03:3d:4c:76:de:41:0e:
         75:66:f3:32:2a:af:94:a4:43:e5:bf:7f:d2:27:d6:30:04:7f:
         37:f7:19:47:b8:fc:91:74:73:7d:0f:3e:a7:73:29:40:c2:fa:
         17:2e:d6:d2:c4:b3:b2:eb:ba:fa:1e:d7:9f:a1:e3:d6:e0:70:
         5e:2b:81:6c:ab:d0:40:e3:4c:0d:a4:6b:b7:ba:44:89:4d:25:
         de:c2:0b:52:f2:0b:98:5c:6a:2c:80:c4:51:6e:64:e2:6e:46:
         58:f8:95:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxD/iSF+p5TtnzZs13HmH9eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNzJlN2I5NjI1MmVlYTg3MzI2MzNkM2JhNTFhOWIwNTU4
M2E3YjMwHhcNMjYwMjA5MjAwMDU0WhcNMjYwMjEwMjAwMDU0WjAzMTEwLwYDVQQD
EygzOWZmYjI4Y2UxMzU1NzNlMzQ4YTk4MWQzMDQzMmNmNDYxODBjNmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/soxvSeng2xzz6XscmDx+DDV37o
oinlBUTD1JUmjhQRNZ+GB6Yqb86G/BhJUrEarq2J5D+8UgLgAgrbh9Qzy+f3zABb
b47jBROUI3eJAiPc/MnI2UML6o82vVcJB7yc6hNOY6PWRvaTKN1xfG+Mps4uv7mS
WLkSzOTgDQ28n+VU4b7Tt6TS3udNd2mUgjullOf5oXdTC8PXQUKAxEXuMZlC69kT
TiA/UN+BdQiiINuNt81Tt/sN7YkmscWOhvNAraM85lueRgnaUPKyIgDMgzImoLrF
O4ZxqHiS6iy++EC4N2DBxUpV6WB4Eesp9m6e1gUiJHZEiPKq3JZJuMbUlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDn/sozhNVc+NIqYHTBDLPRhgMa4MB8GA1UdIwQY
MBaAFMFy57liUu6ocyYz07pRqbBVg6ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1hMbnVXSlM3cWh6SmpQVHVsR3BzRldEcDdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hNmVjNzEtMTZlNS00MTYzLWEwNDIt
MzE3ZGI0MjMyZjNiLzEvd1hMbnVXSlM3cWh6SmpQVHVsR3BzRldEcDdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9hNmVjNzEtMTZlNS00MTYzLWEwNDItMzE3ZGI0MjMyZjNi
LzEvd1hMbnVXSlM3cWh6SmpQVHVsR3BzRldEcDdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUESCrdsU
E9SRGaqaGv1Cl4/y25i1GarYqmjqU9RU1LDVLLiQJl4pIziDrry1DYAK62MJuQzU
fQBYrhBNxJ0dqhbrMCcgnKGcgC7c7RieTGiAyuihsIhxFEIh/AHUA+OS1CT+IlBP
KaahWOesW+Ml//jZWQU51DNXWkugFs37xTPVylrKm1p7CORPUCjLedOh8wuiJcrH
Oaq1escDPUx23kEOdWbzMiqvlKRD5b9/0ifWMAR/N/cZR7j8kXRzfQ8+p3MpQML6
Fy7W0sSzsuu6+h7Xn6Hj1uBwXiuBbKvQQONMDaRrt7pEiU0l3sILUvILmFxqLIDE
UW5k4m5GWPiVwA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:13 2026 by rpki-client