This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
File:                     wnLUdhJANZrLqKM306w6k5eSWnI.mft (raw, json)
Hash identifier:          ukvrergKaJLBv2ChuBUObk2aju67Jg2eGhspqjrBH/I=
Subject key identifier:   91:89:82:60:86:97:C6:A2:DA:B6:4B:3E:6B:1B:B2:9F:3B:36:36:67
Authority key identifier: C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72
Certificate issuer:       /CN=c272d4761240359acba8a337d3ac3a9397925a72
Certificate serial:       019C420FA672EF6074BB5F9AC84533D88485
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 11:00:47 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:47 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:47 +0000
Files and hashes:         1: AaoD9e1Rc9A7OLbVCIZcDp6j6JM.roa (hash: ytSdeQxHuy+yxjmnJ8gqjABXw5mRmre0ka6vBBpW/Mk=)
                          2: wnLUdhJANZrLqKM306w6k5eSWnI.crl (hash: 0d9G02WP3dlhUNK3FcXes3nQgZix5oRO0IW8Pj09fbA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:a6:72:ef:60:74:bb:5f:9a:c8:45:33:d8:84:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c272d4761240359acba8a337d3ac3a9397925a72
        Validity
            Not Before: Feb  9 11:00:47 2026 GMT
            Not After : Feb 10 11:00:47 2026 GMT
        Subject: CN=918982608697c6a2dab64b3e6b1bb29f3b363667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:00:22:be:27:02:3f:3b:97:53:49:9c:6a:14:
                    61:98:73:e5:46:bc:6d:1b:ab:59:47:e8:0c:15:24:
                    5e:7f:f3:eb:4a:18:ff:70:12:41:c6:63:b9:30:ce:
                    c4:ce:89:98:89:f4:00:2b:c2:ae:fb:c4:57:33:82:
                    fa:ea:29:80:70:77:85:1b:df:c3:fd:4e:54:9d:c7:
                    dd:36:67:c8:f4:27:81:95:b4:ce:68:37:ce:52:14:
                    2d:6f:39:9d:97:2c:1c:b8:a4:cd:5d:50:fc:36:48:
                    f5:73:85:5c:ac:68:ef:67:a6:7b:1a:ee:75:4e:a5:
                    6b:23:43:e1:8a:69:dc:46:e5:2f:0e:bc:d1:42:93:
                    bc:f7:48:4e:df:30:f2:c4:c9:b0:4b:49:29:bf:f3:
                    bd:e2:de:c5:7b:2b:94:34:1c:ef:79:14:6e:1d:16:
                    d4:2d:0e:96:74:02:4e:af:35:ee:64:01:5e:9c:a9:
                    22:70:67:0d:db:be:b2:e6:15:ff:aa:d2:c3:e9:3b:
                    80:40:4a:ec:65:f2:42:69:62:68:a9:b7:f4:27:2c:
                    45:f5:cf:ce:fc:28:cf:43:7d:6d:ae:6e:00:0c:0b:
                    47:95:e5:7f:72:62:e8:e0:c1:e3:aa:2b:46:2b:c6:
                    79:4f:16:b0:22:45:53:da:95:8d:de:d2:38:2a:60:
                    3a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:89:82:60:86:97:C6:A2:DA:B6:4B:3E:6B:1B:B2:9F:3B:36:36:67
            X509v3 Authority Key Identifier:
                keyid:C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:7e:e5:79:b5:32:a9:23:86:3d:ba:4a:35:78:62:dc:81:e8:
         d6:5f:2d:2a:23:18:86:17:ef:0b:ce:29:95:5b:27:77:25:db:
         73:1b:32:ab:b5:ea:9c:59:0b:f8:15:c5:5e:41:b2:af:bb:60:
         fa:ee:98:5f:d0:6c:98:54:71:e3:e8:d6:30:7d:16:3e:59:af:
         86:5e:90:0a:3b:a7:d4:9f:97:49:f1:bf:2c:ec:00:d3:4b:55:
         3e:4c:2c:c6:fd:12:89:a0:03:03:9a:f6:0b:2c:d3:69:93:1a:
         57:31:c0:22:e2:82:0c:d5:77:56:2f:c1:af:2c:71:68:f9:6e:
         71:b5:97:5e:dd:5e:a0:9b:24:9d:2b:67:6f:37:4e:95:de:60:
         b6:0d:ec:78:1c:37:7a:b2:4a:0e:75:77:8c:78:c2:db:32:fd:
         6b:a0:f0:4c:f2:0a:a6:58:6f:48:1f:69:c8:4a:35:65:f0:bd:
         e4:cc:6c:1a:c6:58:c0:c1:a0:82:01:a7:38:be:db:79:c8:84:
         77:db:89:eb:cd:c9:91:6c:2f:f9:aa:79:6b:78:ef:fe:e3:6d:
         2e:29:d3:db:6b:5d:35:bb:f9:f4:1d:37:17:45:52:b2:83:a2:
         fe:09:ae:2d:56:45:06:72:1f:d2:78:67:36:61:c6:55:c8:ce:
         09:f7:d5:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD6Zy72B0u1+ayEUz2ISFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzJkNDc2MTI0MDM1OWFjYmE4YTMzN2QzYWMzYTkzOTc5
MjVhNzIwHhcNMjYwMjA5MTEwMDQ3WhcNMjYwMjEwMTEwMDQ3WjAzMTEwLwYDVQQD
Eyg5MTg5ODI2MDg2OTdjNmEyZGFiNjRiM2U2YjFiYjI5ZjNiMzYzNjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQAivicCPzuXU0mcahRhmHPlRrxt
G6tZR+gMFSRef/PrShj/cBJBxmO5MM7EzomYifQAK8Ku+8RXM4L66imAcHeFG9/D
/U5UncfdNmfI9CeBlbTOaDfOUhQtbzmdlywcuKTNXVD8Nkj1c4VcrGjvZ6Z7Gu51
TqVrI0PhimncRuUvDrzRQpO890hO3zDyxMmwS0kpv/O94t7FeyuUNBzveRRuHRbU
LQ6WdAJOrzXuZAFenKkicGcN276y5hX/qtLD6TuAQErsZfJCaWJoqbf0JyxF9c/O
/CjPQ31trm4ADAtHleV/cmLo4MHjqitGK8Z5TxawIkVT2pWN3tI4KmA6HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGJgmCGl8ai2rZLPmsbsp87NjZnMB8GA1UdIwQY
MBaAFMJy1HYSQDWay6ijN9OsOpOXklpyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25MVWRoSkFOWnJMcUtNMzA2dzZrNWVTV25JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lZGU0YzctNjE1MC00ZWQwLTlkMzAt
MTBkZTY3MTIxMTk3LzEvd25MVWRoSkFOWnJMcUtNMzA2dzZrNWVTV25JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9lZGU0YzctNjE1MC00ZWQwLTlkMzAtMTBkZTY3MTIxMTk3
LzEvd25MVWRoSkFOWnJMcUtNMzA2dzZrNWVTV25JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAH7lebUy
qSOGPbpKNXhi3IHo1l8tKiMYhhfvC84plVsndyXbcxsyq7XqnFkL+BXFXkGyr7tg
+u6YX9BsmFRx4+jWMH0WPlmvhl6QCjun1J+XSfG/LOwA00tVPkwsxv0SiaADA5r2
CyzTaZMaVzHAIuKCDNV3Vi/BryxxaPlucbWXXt1eoJsknStnbzdOld5gtg3seBw3
erJKDnV3jHjC2zL9a6DwTPIKplhvSB9pyEo1ZfC95MxsGsZYwMGgggGnOL7beciE
d9uJ683JkWwv+ap5a3jv/uNtLinT22tdNbv59B03F0VSsoOi/gmuLVZFBnIf0nhn
NmHGVcjOCffVCw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:10 2026 by rpki-client