This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
File:                     wFB0h3942_Sb03ohVJHmmg-LbkM.mft (raw, json)
Hash identifier:          hGjdRw7iN4StVqTYCRDYgWZV5//ko3yzwN+cxxcRIpo=
Subject key identifier:   01:23:C2:89:11:8F:CE:C3:5B:1C:0F:5E:E1:EC:07:B8:01:DE:CC:08
Authority key identifier: C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43
Certificate issuer:       /CN=c05074877f78dbf49bd37a215491e69a0f8b6e43
Certificate serial:       019C421010774816C907FCD7AED70936D575
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
Manifest number:          0E71
Signing time:             Mon 09 Feb 2026 11:01:14 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:14 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:14 +0000
Files and hashes:         1: Djf7eMxemXeY18cP9FoHdLT6XA8.roa (hash: mDiReFu2hqiNWv0C31jbzdbUciZxBU6AMY/TrXH/b64=)
                          2: wFB0h3942_Sb03ohVJHmmg-LbkM.crl (hash: 6uecAOO6YxgHq1RTC8Jh6v7V/P+3bGtWVstcePK9fqk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:10:10:77:48:16:c9:07:fc:d7:ae:d7:09:36:d5:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c05074877f78dbf49bd37a215491e69a0f8b6e43
        Validity
            Not Before: Feb  9 11:01:14 2026 GMT
            Not After : Feb 10 11:01:14 2026 GMT
        Subject: CN=0123c289118fcec35b1c0f5ee1ec07b801decc08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5e:85:34:37:af:b5:1e:6b:fb:2b:31:d6:cf:
                    e8:e6:bc:2b:3d:39:52:48:43:74:30:96:6b:e5:dc:
                    42:b3:d5:04:c2:92:c1:c2:9d:06:f1:57:b0:76:a9:
                    39:7a:3c:81:52:6f:47:73:3b:7e:ff:80:62:c9:3a:
                    ca:03:ac:ef:aa:6b:d9:7b:0e:d7:a0:08:d2:8d:1e:
                    c2:b5:6d:47:08:72:d2:d3:05:39:f8:22:02:b3:2f:
                    ff:9e:7e:40:a3:6a:4e:6b:5a:3a:bd:22:14:9b:3e:
                    f7:5a:ef:a0:3b:80:a3:17:9c:da:ec:1c:16:67:ac:
                    10:e4:33:50:44:ed:b3:16:32:42:d8:39:e5:f0:af:
                    cf:ca:b2:b7:e1:54:05:8e:91:87:67:7b:0b:0d:78:
                    f0:4b:37:ec:dc:6c:85:62:2a:18:77:66:42:36:5a:
                    e7:2d:bc:69:4f:14:a4:8d:17:3a:29:41:55:96:9c:
                    f1:88:97:44:d5:ed:40:be:93:50:32:9e:1d:ce:f4:
                    34:5b:3c:72:ee:d9:f6:cc:33:43:64:81:6f:c6:91:
                    37:cc:4d:5d:ee:11:07:5d:0d:8f:31:96:22:b8:18:
                    65:3b:a0:ef:1e:d9:78:92:54:3f:54:ee:cc:c6:13:
                    b7:c5:53:ff:1a:1b:b5:fa:e8:e2:3f:27:cb:89:b0:
                    6e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:23:C2:89:11:8F:CE:C3:5B:1C:0F:5E:E1:EC:07:B8:01:DE:CC:08
            X509v3 Authority Key Identifier:
                keyid:C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:00:34:de:8b:4e:08:bc:3a:cc:5e:73:63:b2:bb:c0:f9:73:
         4a:21:f0:18:5a:01:8a:81:4b:f8:00:60:8d:2f:de:f2:a7:f5:
         4f:e2:90:6e:63:51:02:d8:b1:2e:af:90:d9:63:eb:3d:cb:d8:
         88:3b:83:2c:f8:89:99:5f:0d:b8:16:d8:2f:b7:3d:f3:0f:3a:
         80:e6:8d:0d:d0:17:8a:f1:e7:4d:dc:c7:5d:2a:99:62:a1:bc:
         45:62:75:9d:a7:9e:1a:ab:e9:48:b8:82:20:f1:04:ec:72:43:
         84:69:a2:f9:82:96:db:b3:15:ad:f4:58:45:e4:c6:51:a6:51:
         63:92:a0:30:78:77:7c:08:bd:22:53:62:db:1f:81:c7:2d:07:
         c1:e1:93:9b:eb:81:7c:c3:72:66:ac:f7:f9:44:4e:42:4c:1e:
         bb:ee:da:bd:30:04:38:6e:87:38:b9:8e:ae:2c:d1:19:34:0e:
         25:88:fd:4e:c7:64:d1:e6:51:71:7e:3c:c8:b7:75:23:0a:f7:
         5a:d6:1f:33:da:e4:d7:8e:d8:3d:ee:ee:a3:41:fc:36:95:b4:
         36:fd:49:70:da:f2:96:93:45:3a:67:37:6c:59:29:cc:57:df:
         1b:56:83:09:e1:ed:9e:42:b8:6a:69:9c:ea:8b:72:dd:aa:05:
         3d:6a:2b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:37 2026 by rpki-client