This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft
File:                     wKatm4cwm9AHnPowXUhhP4fEcNg.mft (raw, json)
Hash identifier:          z2IhTlIyrG4LUQ6j07C2ZLe5j50TdGuYsd/Ol8bvLI4=
Subject key identifier:   54:40:F8:89:09:16:C6:32:E8:0C:07:8C:13:2D:B2:BF:5F:B9:EA:CF
Authority key identifier: C0:A6:AD:9B:87:30:9B:D0:07:9C:FA:30:5D:48:61:3F:87:C4:70:D8
Certificate issuer:       /CN=c0a6ad9b87309bd0079cfa305d48613f87c470d8
Certificate serial:       019C43221815E0E54626CAC346D408237FC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wKatm4cwm9AHnPowXUhhP4fEcNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft
Manifest number:          1814
Signing time:             Mon 09 Feb 2026 16:00:33 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:33 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:33 +0000
Files and hashes:         1: XhVmXM4K4HCBlMG1ngBraE1XDdo.roa (hash: Lr9nUJJLPlvbbArNTq9/86G0Uy2dThr703k1XnKZ2HU=)
                          2: wKatm4cwm9AHnPowXUhhP4fEcNg.crl (hash: tC8ZpbCB7XgnUdAb0JWGy5AM9d3tM+8Ef8brOUWZsmM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wKatm4cwm9AHnPowXUhhP4fEcNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:18:15:e0:e5:46:26:ca:c3:46:d4:08:23:7f:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0a6ad9b87309bd0079cfa305d48613f87c470d8
        Validity
            Not Before: Feb  9 16:00:33 2026 GMT
            Not After : Feb 10 16:00:33 2026 GMT
        Subject: CN=5440f8890916c632e80c078c132db2bf5fb9eacf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:50:14:79:ef:ea:9b:22:13:8b:80:ad:34:02:
                    bc:20:81:11:fc:ea:00:5d:e5:9b:51:a9:ad:b3:f3:
                    de:de:c3:dc:bc:5c:e1:70:99:25:a3:ee:4b:a9:7b:
                    25:21:72:98:c1:4c:85:16:19:80:54:7b:1f:ae:0f:
                    ec:17:f4:55:7c:71:bb:e7:0f:e0:77:12:b8:39:64:
                    03:06:76:75:67:be:f2:0f:b7:31:33:a4:a4:51:45:
                    db:d4:6d:16:7d:a2:d5:b3:33:d0:45:b6:6f:c2:1e:
                    cc:8f:bf:74:e3:13:be:b3:ea:3c:80:16:4b:50:9e:
                    fd:ac:d2:f8:e9:c6:05:ff:ae:c4:67:e7:41:84:5d:
                    c4:1c:98:e5:5c:78:f4:87:72:e9:4f:86:ba:31:0c:
                    40:fe:71:42:8d:9c:de:65:70:6f:76:ad:cb:82:78:
                    93:66:ac:82:55:b3:bb:1d:71:df:78:36:62:e3:b5:
                    54:93:c8:08:dd:1f:fd:58:50:fe:5f:4d:8c:3f:78:
                    07:e2:4d:a9:b3:97:49:9f:98:c8:d2:04:8b:90:cf:
                    70:47:e5:0f:4a:34:fa:95:07:03:d6:e9:91:31:18:
                    1f:dc:87:dd:be:02:d1:59:3c:59:43:a4:67:59:e2:
                    31:a2:3e:4e:17:31:ec:ee:f4:bd:13:c1:83:7f:74:
                    d5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:40:F8:89:09:16:C6:32:E8:0C:07:8C:13:2D:B2:BF:5F:B9:EA:CF
            X509v3 Authority Key Identifier:
                keyid:C0:A6:AD:9B:87:30:9B:D0:07:9C:FA:30:5D:48:61:3F:87:C4:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKatm4cwm9AHnPowXUhhP4fEcNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:49:39:90:43:53:19:95:72:3c:c5:43:37:4e:29:c9:44:16:
         dc:26:69:5b:62:8f:7b:b0:e3:b2:0e:3c:ff:6a:c8:44:c0:d3:
         a6:dc:b1:d6:7e:c3:e7:30:98:4f:51:e1:bd:f1:f0:fb:8e:93:
         71:b2:d8:12:4d:61:cb:83:da:93:8a:de:bc:52:fc:bb:f5:71:
         b1:9d:79:0c:27:e7:49:eb:93:2a:30:4a:ef:18:b1:16:b5:8b:
         b1:1d:90:5f:bf:82:88:2e:1d:6f:f0:b3:b6:aa:1d:c4:5e:cb:
         1a:1f:26:de:06:34:d4:2f:9c:f3:59:af:02:48:e3:63:6c:fe:
         f5:64:69:83:d4:5c:c8:f6:04:e7:39:18:db:a6:09:e2:b6:d6:
         10:21:cd:aa:6a:91:7a:5d:07:12:2c:93:0c:be:d0:e1:9e:a8:
         e6:0d:17:90:41:36:9c:c3:97:f1:0f:bc:b0:a1:e0:4b:15:c6:
         00:4b:23:e2:d6:dd:d1:c3:11:60:5a:68:2e:24:e9:a4:b6:eb:
         38:63:e8:4e:84:1d:ac:b9:29:03:0b:6c:17:b5:64:06:97:70:
         87:28:c8:fa:44:7d:dc:8b:57:bf:81:13:2f:dd:b5:6b:ed:ca:
         ba:0e:1f:bf:94:f9:e1:96:85:20:76:4f:ef:a8:d2:db:22:5b:
         09:ab:a3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:43 2026 by rpki-client