This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft
File:                     WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft (raw, json)
Hash identifier:          cKLSTbhwnko7ImNe+2FFFDYQ5EhctMzGoVLx2x/lnmM=
Subject key identifier:   7B:1A:20:AF:43:39:63:09:5C:AE:AA:AD:FC:9B:6F:F8:B2:34:98:D6
Authority key identifier: 58:71:72:0A:88:84:16:7F:EF:82:A4:92:67:66:1F:B3:46:D7:56:1A
Certificate issuer:       /CN=5871720a8884167fef82a49267661fb346d7561a
Certificate serial:       019C43590628D7AC43E6800AE3D6119B6C4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft
Manifest number:          1815
Signing time:             Mon 09 Feb 2026 17:00:33 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:33 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:33 +0000
Files and hashes:         1: WHFyCoiEFn_vgqSSZ2Yfs0bXVho.crl (hash: GYZKiOpQ9lCqxHpxq/aSwV6LFBanft37Qn/Hs408zOU=)
                          2: aM3jDyUSBlPTCNMfpXY5YwnPsA8.roa (hash: jUnTNL0+v3OE/gFOXVeP3LxsqBN3nJHAQLUeEsSvDk8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:06:28:d7:ac:43:e6:80:0a:e3:d6:11:9b:6c:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5871720a8884167fef82a49267661fb346d7561a
        Validity
            Not Before: Feb  9 17:00:33 2026 GMT
            Not After : Feb 10 17:00:33 2026 GMT
        Subject: CN=7b1a20af433963095caeaaadfc9b6ff8b23498d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:24:fb:4d:80:34:94:5c:22:b5:8e:3e:55:b2:
                    e5:83:a6:91:73:91:ca:0f:a4:da:f8:57:cf:ba:a9:
                    4f:60:9e:96:e8:0c:53:d8:00:af:95:1a:12:59:3f:
                    86:77:ce:fa:03:79:3a:15:02:a8:e3:1d:9b:59:31:
                    66:59:d9:7c:3d:99:cc:ea:b3:86:9d:6e:f9:13:fc:
                    1c:e6:86:98:4f:84:20:4d:b2:f2:fc:dc:fb:aa:b3:
                    0f:20:5d:45:d9:de:93:d4:f7:79:e2:4e:9c:a7:d5:
                    f9:c4:ae:63:b6:53:40:ca:b0:8b:49:9d:47:35:29:
                    79:ef:5f:91:e6:a3:0d:71:b2:3b:91:00:1e:d5:5f:
                    02:7c:d2:1c:1d:87:0c:8e:fd:cb:52:a0:4d:f9:59:
                    09:f8:67:ae:44:d1:19:85:74:c7:1d:46:8b:e2:3d:
                    c4:8e:57:c0:03:9a:51:14:2e:86:af:b5:61:47:d2:
                    b2:5a:fa:a8:b4:d6:9d:51:89:58:f9:ed:10:b7:d3:
                    86:44:13:7c:3b:c6:f1:70:52:ac:ce:ed:50:96:be:
                    86:48:4e:e7:b7:37:69:95:8e:e5:72:99:ca:59:39:
                    63:b9:58:2e:cf:66:21:7c:65:cf:50:b3:e0:6e:44:
                    41:b4:d0:da:cc:ca:21:cf:94:a8:03:f0:da:04:29:
                    04:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:1A:20:AF:43:39:63:09:5C:AE:AA:AD:FC:9B:6F:F8:B2:34:98:D6
            X509v3 Authority Key Identifier:
                keyid:58:71:72:0A:88:84:16:7F:EF:82:A4:92:67:66:1F:B3:46:D7:56:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:10:15:7c:13:e0:2f:e9:f1:cd:bc:04:6c:ce:bd:48:41:eb:
         71:8c:1f:07:62:e8:4c:46:08:ba:c9:4d:7e:be:6a:29:c0:60:
         d2:f1:27:5e:9c:8e:6e:f7:53:d2:10:23:3d:c1:c1:50:38:ad:
         cb:64:31:29:c5:6e:63:c8:9e:51:4f:ec:1a:dc:d6:93:2a:dd:
         28:bd:82:65:fb:f9:90:5c:80:6c:76:1d:62:6d:b4:a8:29:8a:
         8c:45:34:04:f2:2f:55:95:c0:77:37:7b:67:cf:e3:f8:c3:66:
         33:c2:b5:d3:8c:a9:cf:68:2e:fa:2c:b1:a1:23:c5:0c:13:00:
         39:5b:08:a8:ac:12:7f:e2:d3:1c:39:a9:c2:64:b9:a4:23:1c:
         b7:0f:4b:21:6a:44:7a:62:f9:df:ab:02:7b:9c:fa:69:63:0a:
         e7:43:98:1b:35:27:33:7d:6c:8c:d0:93:09:15:f7:f3:16:0c:
         28:7e:59:c1:ad:62:ea:fa:23:bb:d7:e5:83:d7:fb:98:6e:d6:
         9c:d7:cb:f8:ba:b5:2b:3a:69:71:9f:db:42:da:db:d1:a5:27:
         f0:5d:34:d7:a6:65:1a:4c:aa:35:0a:6d:45:e8:66:43:74:0f:
         1b:74:85:68:0e:40:0c:ac:f1:1d:de:0f:46:aa:80:29:89:61:
         b2:5a:52:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:17:07 2026 by rpki-client