This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
File:                     WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft (raw, json)
Hash identifier:          kuo6TOtywvdHCvlzpXaIY22rKlWaVshHFFPHlyEouTI=
Subject key identifier:   75:B1:4D:92:97:7D:EE:2B:0B:CC:20:72:EA:B1:C4:E7:9F:C1:64:61
Authority key identifier: 59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
Certificate issuer:       /CN=597a01de87e011803f890ae17749020f995f140c
Certificate serial:       019C42EAF3D3A6A6EA0037590CDAF728C428
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
Manifest number:          156C
Signing time:             Mon 09 Feb 2026 15:00:19 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:19 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:19 +0000
Files and hashes:         1: 01R0I9DHDPHcmxrcTn54aUYrxU4.roa (hash: LZW1SFZial6vNqkBHwqDupXnYLh58eQuRcWzvrTL1pI=)
                          2: 1RuzsOoiPTgqsuSzzAU9YdpD_xE.roa (hash: Fsh9osUtIPyPkM6syYXVCCskaMH4p0nvyx/Ce7UJowo=)
                          3: URu6RbbpNeggkq99HoBQq0K-CGw.roa (hash: SglHd7je2yZY5MNS1/0/uqc+KTjzW8LFZ4Gz7SHINKQ=)
                          4: UkVdKWIJtxN1ZPO561wg1yvlmnU.roa (hash: T1UGvaY+sPgOyfHIoNQmJTNfshFbXNmoAxXGY7h2ENY=)
                          5: WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl (hash: eyIJw+6ne6HWo6Qby8NnG0wALlHHNLXjL8uc4zh9Bgg=)
                          6: bjhvb0BbgpYztttOjwclzlXFPK0.roa (hash: vvxA9AxL6k1mLc2qjx+t+3GOkd26vCFzAe2CCZNqNvw=)
                          7: sj-ab-RcHql4I59TCTsyMkUD6vg.roa (hash: VE0oA0NLUA2NKVotc1jXBr68T3tf7XY/p7hOR23C2ks=)
                          8: uNBCqgPm9OGK31TBmTo_MAC1yZU.roa (hash: QNpQXcsFAXHCdiWuXRp1NnyNLbpNgci4N8tXC8HHacM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:ea:f3:d3:a6:a6:ea:00:37:59:0c:da:f7:28:c4:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=597a01de87e011803f890ae17749020f995f140c
        Validity
            Not Before: Feb  9 15:00:19 2026 GMT
            Not After : Feb 10 15:00:19 2026 GMT
        Subject: CN=75b14d92977dee2b0bcc2072eab1c4e79fc16461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f5:14:34:e6:e3:34:fe:f4:6b:af:da:24:88:
                    3d:bc:9c:04:24:3d:e9:55:80:2d:0c:9b:47:5d:73:
                    6b:ed:1c:0c:2f:72:05:39:d7:84:c4:2c:82:92:6b:
                    17:8d:a8:a1:e1:73:76:21:95:b6:40:bb:74:ee:e9:
                    5a:6b:20:17:7c:5b:ba:51:9e:bb:f7:da:ff:82:05:
                    1d:50:9a:3e:b5:e7:62:ce:06:96:f3:7e:d5:59:89:
                    b2:84:74:f0:73:2d:d6:42:b9:d4:12:d5:79:83:1b:
                    18:b2:54:45:bf:7c:50:ab:de:71:86:06:d3:f4:fa:
                    9d:3a:ff:24:25:cc:60:cd:43:b9:a5:d6:5a:53:af:
                    45:65:78:aa:5a:69:74:19:1d:ea:fc:92:13:1c:25:
                    a6:24:53:2e:1b:fb:bd:18:ad:fa:c2:21:48:37:4c:
                    85:04:87:8f:8a:93:04:c0:30:93:03:2b:1d:2f:a7:
                    09:b0:68:7e:09:82:17:b2:e2:79:0a:93:e7:cf:20:
                    23:5b:e1:b9:03:e1:fa:31:30:90:f8:ad:5b:89:45:
                    27:e7:ae:4e:cf:65:b1:4a:61:be:8f:d3:bc:ad:33:
                    f0:8c:c0:a4:c5:f5:40:71:6e:f7:a1:1b:44:54:1d:
                    9d:aa:3f:04:0a:3e:73:5c:21:c6:ea:d7:54:90:f2:
                    59:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B1:4D:92:97:7D:EE:2B:0B:CC:20:72:EA:B1:C4:E7:9F:C1:64:61
            X509v3 Authority Key Identifier:
                keyid:59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:cf:32:36:ed:c2:42:37:25:39:06:27:6d:22:9d:16:db:88:
         c8:25:81:9b:ce:34:18:f1:c8:61:25:c9:7a:7f:ec:77:c9:eb:
         10:69:91:50:e3:e1:95:9a:e7:28:e5:68:d0:9c:81:b3:3b:c7:
         b1:00:bf:98:0f:9a:be:40:53:62:ea:43:35:31:ae:51:84:a7:
         49:bf:e4:c0:ce:dd:3a:43:76:49:ba:29:9e:28:de:ef:05:ca:
         4d:cc:b2:5d:9b:22:61:ae:0c:01:d8:3b:f2:f5:fd:24:7a:f8:
         fc:da:d9:3d:be:c8:72:c7:b5:16:08:f7:d6:d4:2b:e9:87:e1:
         b5:f5:5a:ff:5d:09:e7:a1:29:b5:dc:34:62:e9:8e:d6:61:b1:
         46:b4:5b:e7:99:6b:b4:91:74:ae:18:d6:0c:66:65:0e:2a:3a:
         fe:b4:b3:67:97:1f:22:f4:ce:ba:1a:38:0d:ae:49:a8:66:8a:
         72:f3:e6:2a:71:ef:0b:e3:6d:77:5b:68:66:9c:08:c6:c9:ae:
         95:2e:f3:86:52:5b:88:c7:76:c7:c8:5e:6d:c1:01:a6:13:0c:
         0d:a4:c5:70:e9:80:b6:b4:01:ef:29:f3:97:b0:a0:23:bd:91:
         42:0a:15:4d:48:52:03:93:e8:a4:c6:dd:32:a4:d7:36:31:24:
         09:05:ec:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:52 2026 by rpki-client