This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft
File:                     WHiPOEJuA2KzTdVnND_oRhpYur4.mft (raw, json)
Hash identifier:          sktA7+63iiycTWOLCKOCk1p6srNDX3X4NVRmj3UL5hI=
Subject key identifier:   97:A1:5E:4A:1E:91:83:68:BF:3D:0B:22:D2:2D:63:95:E3:1A:1E:3C
Authority key identifier: 58:78:8F:38:42:6E:03:62:B3:4D:D5:67:34:3F:E8:46:1A:58:BA:BE
Certificate issuer:       /CN=58788f38426e0362b34dd567343fe8461a58babe
Certificate serial:       019C41D83E3B31362AD0E265854F1D6F72FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WHiPOEJuA2KzTdVnND_oRhpYur4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft
Manifest number:          1555
Signing time:             Mon 09 Feb 2026 10:00:16 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:16 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:16 +0000
Files and hashes:         1: UQttblox4YqbtmcdrnTNUlIXUrA.roa (hash: Kp4mizWB09vMj96WX2Mw1hMJlxG7gErBxSdQDtVOWsI=)
                          2: WHiPOEJuA2KzTdVnND_oRhpYur4.crl (hash: RgVUNeMIrEsMWBkNyhRlNYAPrfgt5vfsY+LIKCEKPJM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WHiPOEJuA2KzTdVnND_oRhpYur4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:3e:3b:31:36:2a:d0:e2:65:85:4f:1d:6f:72:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58788f38426e0362b34dd567343fe8461a58babe
        Validity
            Not Before: Feb  9 10:00:16 2026 GMT
            Not After : Feb 10 10:00:16 2026 GMT
        Subject: CN=97a15e4a1e918368bf3d0b22d22d6395e31a1e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d3:8a:ad:75:cf:20:03:4d:8d:8e:a1:99:46:
                    8e:db:82:26:29:d2:2b:c9:c0:0c:46:c0:80:9e:44:
                    c3:ec:5b:ef:25:d4:5e:83:3e:7c:6b:7c:c3:c9:0a:
                    72:bb:29:b4:25:55:c8:32:27:6f:1c:04:8b:84:af:
                    2e:ae:fc:3c:db:27:e4:3a:a0:4e:44:bc:2b:93:07:
                    f8:7d:83:9f:dd:03:a6:44:d1:37:c0:39:81:a5:ee:
                    15:d7:fe:f0:54:70:7b:59:8f:34:dd:3c:56:c9:9c:
                    87:5e:9d:3c:de:99:ae:62:47:18:49:fd:d7:15:bc:
                    4e:9e:fd:11:d2:2d:4b:09:80:51:b5:6b:6d:d5:9e:
                    21:6b:0a:17:0e:b6:c9:f4:aa:0b:f8:87:b4:e0:a9:
                    46:5d:d6:bf:fe:fd:f1:7f:9a:65:6a:d4:11:41:6a:
                    fc:20:02:42:ff:57:ba:3b:f4:f8:b9:56:44:37:60:
                    8f:f2:1b:3a:f1:5a:b9:d4:51:ce:41:59:9d:84:db:
                    89:26:c7:f2:c8:e6:b0:62:8a:0e:e3:7e:d5:ee:67:
                    a3:08:d2:b5:3a:f2:74:8f:9c:98:53:cd:48:cb:43:
                    dc:c1:9e:5f:bd:4a:e2:8a:60:65:d3:be:a9:b9:53:
                    9b:94:63:4e:ee:84:89:70:4b:8b:d9:6a:28:25:4f:
                    30:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A1:5E:4A:1E:91:83:68:BF:3D:0B:22:D2:2D:63:95:E3:1A:1E:3C
            X509v3 Authority Key Identifier:
                keyid:58:78:8F:38:42:6E:03:62:B3:4D:D5:67:34:3F:E8:46:1A:58:BA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHiPOEJuA2KzTdVnND_oRhpYur4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:0e:c1:c5:cf:59:fd:53:a6:fa:1a:bc:cc:21:f5:20:27:16:
         81:12:74:77:60:6f:70:aa:28:5f:08:f6:a9:4d:4e:bc:f9:7f:
         18:9c:31:c2:b4:7d:1d:77:c4:4c:2a:7b:bd:60:e7:e8:71:b8:
         43:13:e4:05:4e:36:30:f2:02:a7:6e:eb:8d:39:c0:8c:d5:c0:
         a7:b0:e1:42:98:ed:6c:c4:7a:a9:fb:ba:10:68:16:06:80:a6:
         21:1f:8f:65:91:d6:be:fe:21:28:d5:30:dc:88:3a:ba:68:c2:
         08:cd:e6:13:63:90:22:72:d4:c6:47:8c:01:23:c4:7b:e2:af:
         8e:5a:78:b7:9a:7a:fa:87:93:9e:80:b2:71:82:70:62:fa:43:
         df:53:0e:f4:06:ab:98:c8:78:ad:a3:a5:2c:86:5b:74:df:5a:
         8a:52:4b:d2:4c:95:52:88:4f:dc:4d:26:72:a2:c1:16:e1:a1:
         5b:af:e7:a4:a8:e9:38:d5:4b:79:84:28:2f:06:c4:6a:3d:9c:
         de:52:0f:23:e1:c3:ac:a9:4c:56:1d:2b:a0:24:5e:1f:35:d2:
         2c:b3:64:c5:ed:66:c8:45:78:22:db:12:99:dc:74:ff:3d:95:
         01:57:24:20:92:9c:2e:91:0f:83:b5:05:80:af:47:ed:ba:79:
         3e:19:88:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:25 2026 by rpki-client