This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft
File:                     1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft (raw, json)
Hash identifier:          VriAWRz5+fcZZHoGxNeZhSzSavuGrsmvrgeMitR/P5I=
Subject key identifier:   5B:62:84:77:B1:90:A1:7E:71:D1:25:7D:08:25:6F:87:B9:9C:DB:69
Authority key identifier: F9:6A:6A:20:32:F9:6D:70:23:72:22:39:C9:FA:5E:DD:55:96:F8:63
Certificate issuer:       /CN=f96a6a2032f96d7023722239c9fa5edd5596f863
Certificate serial:       019C42B4725FEA87CF50A3AA63C16DD3B463
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-WpqIDL5bXAjciI5yfpe3VWW-GM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft
Manifest number:          17E4
Signing time:             Mon 09 Feb 2026 14:00:47 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:47 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:47 +0000
Files and hashes:         1: 1-WpqIDL5bXAjciI5yfpe3VWW-GM.crl (hash: 8hLB9bdriWo3SfTuGwLVSzugFxq+p2fuq0PyaUsojqE=)
                          2: tXmcrXd1NSzKbyThyNVtW7ErlI4.roa (hash: Nfqw9jIsfvO/CcG3bEmL8y0/YqElSRYvepE+1sSTOrw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-WpqIDL5bXAjciI5yfpe3VWW-GM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:72:5f:ea:87:cf:50:a3:aa:63:c1:6d:d3:b4:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f96a6a2032f96d7023722239c9fa5edd5596f863
        Validity
            Not Before: Feb  9 14:00:47 2026 GMT
            Not After : Feb 10 14:00:47 2026 GMT
        Subject: CN=5b628477b190a17e71d1257d08256f87b99cdb69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:df:c9:37:7b:0a:2a:2c:10:71:f1:75:9c:ef:
                    8d:32:8c:c4:14:61:6d:da:91:ba:87:58:66:bf:6f:
                    eb:fa:be:24:8f:39:2e:b3:b9:93:c8:48:ed:1b:dd:
                    1b:1d:85:f0:7b:d7:74:26:b4:6c:33:2c:72:a5:6d:
                    de:ef:48:29:02:fc:2e:65:6d:c3:25:97:2d:6c:14:
                    12:47:f0:14:e5:4f:da:80:94:92:fc:2d:7a:cc:4d:
                    18:f4:15:79:94:e0:07:89:19:44:60:38:1f:c0:a4:
                    2c:f5:80:bf:c1:ff:e1:d6:22:b3:8b:5a:a5:a3:fa:
                    00:6e:7a:d5:a6:d6:8d:ad:07:16:d7:b2:e6:8c:31:
                    e1:67:0f:5c:c1:82:dd:39:e8:e7:f6:49:72:58:8f:
                    7d:42:ff:7e:56:76:cc:1d:02:17:f5:87:07:9c:64:
                    d0:ee:37:87:47:28:ea:69:a0:c4:2c:bc:4c:db:d2:
                    d5:dc:c3:5c:20:ed:dd:ad:6d:f4:c1:49:a8:22:cd:
                    94:51:c5:ab:5d:8c:0e:9c:4e:43:f3:57:d6:f3:47:
                    0f:1f:56:db:b3:f9:78:10:f9:6a:17:c0:a8:27:24:
                    01:4f:84:ba:06:ea:1d:8c:9b:21:54:ed:2b:2b:fa:
                    9c:7f:dd:9d:17:5c:23:ed:61:b4:9c:88:09:20:45:
                    69:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:62:84:77:B1:90:A1:7E:71:D1:25:7D:08:25:6F:87:B9:9C:DB:69
            X509v3 Authority Key Identifier:
                keyid:F9:6A:6A:20:32:F9:6D:70:23:72:22:39:C9:FA:5E:DD:55:96:F8:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WpqIDL5bXAjciI5yfpe3VWW-GM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:f0:3e:26:c7:3c:71:be:63:74:f1:18:9e:61:7e:b1:a2:20:
         ba:0e:97:44:81:68:71:51:81:fd:da:e8:d1:2b:13:4b:40:68:
         5e:5b:d5:bf:b6:54:a8:7d:9b:b1:16:bd:9e:1d:e0:d8:24:19:
         21:0c:f6:f1:07:a8:79:5e:92:27:e5:4e:88:6c:23:c2:32:cc:
         22:5a:cc:b2:fc:f1:d6:01:4e:a4:f9:1a:78:6b:44:6a:3d:4d:
         97:97:45:ef:91:89:4f:cf:9a:13:60:65:ec:60:69:45:9b:4c:
         e9:64:66:1c:39:d2:fc:72:ee:04:c0:78:76:66:6e:47:3e:10:
         99:26:ba:09:73:f7:54:9e:6c:7d:0a:bc:a1:e5:74:80:53:a2:
         5d:71:23:2c:ff:29:9f:d1:fb:19:d0:d3:b1:84:5b:b0:6a:12:
         86:a6:15:23:23:2e:80:bc:37:84:bf:5c:21:5f:3a:33:2f:a6:
         dc:ca:1c:0b:8b:15:1b:8c:d0:0d:ca:f8:03:d2:0c:9c:03:7a:
         13:c5:a8:d2:83:d4:b3:ee:06:4e:a5:7f:09:e7:8e:c3:70:2c:
         eb:85:2e:da:90:80:17:21:a4:c9:fc:b9:b4:fd:86:a9:b1:ca:
         0a:6f:b4:f2:e3:96:d4:11:48:63:e9:39:c0:7a:a0:e6:39:c9:
         53:49:d7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:47 2026 by rpki-client