This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
File:                     WqWNXycSzMAES1nvp8vD6Yxfwlw.mft (raw, json)
Hash identifier:          ++jF9GJhILQs6xNQtvAS4KazyRps5+zNPWDyACjjgZA=
Subject key identifier:   11:56:55:61:DA:10:FA:39:08:98:67:07:37:97:66:37:A7:4E:17:A1
Authority key identifier: 5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C
Certificate issuer:       /CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c
Certificate serial:       019C432210C05B77AD9113C0017CDC37CB9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
Manifest number:          0B27
Signing time:             Mon 09 Feb 2026 16:00:31 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:31 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:31 +0000
Files and hashes:         1: WqWNXycSzMAES1nvp8vD6Yxfwlw.crl (hash: DsRiFGu2UkMrvgrFbgVlZAgNFdpSQf5WhiiLbzzq2tg=)
                          2: jVMH2GvhkSocgvgfvAA1EbZbZfQ.roa (hash: 0HrZ0G786k9URGZA3ViN57+jJomPgSkjhNpMS+Ngy/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 16:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:10:c0:5b:77:ad:91:13:c0:01:7c:dc:37:cb:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c
        Validity
            Not Before: Feb  9 16:00:31 2026 GMT
            Not After : Feb 10 16:00:31 2026 GMT
        Subject: CN=11565561da10fa390898670737976637a74e17a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f6:25:c9:91:d9:2d:20:13:2f:47:5b:ef:66:
                    3c:ad:54:3c:f4:8e:6c:87:9e:1e:60:c9:3c:7b:f7:
                    3d:ee:3a:13:d8:2c:e5:e8:51:ba:22:31:f9:b2:0d:
                    6f:13:92:54:05:18:1c:9f:38:28:1d:4c:a8:df:68:
                    e2:38:68:4b:43:6e:15:b7:39:88:39:02:d0:32:76:
                    d8:79:ad:3d:6b:ab:f6:f8:5a:da:c5:82:1f:92:97:
                    f4:96:1f:da:4d:64:ac:83:f5:f9:5f:e9:c3:d9:6b:
                    a6:00:5e:3a:04:50:68:8e:8c:b0:4c:b0:12:30:39:
                    93:e2:52:e3:2e:2d:90:98:ed:c4:33:94:0b:9d:bc:
                    5b:f6:7c:e5:f7:e4:be:d6:93:a5:e8:32:64:15:77:
                    cb:9e:56:9c:22:a7:7d:fc:0c:d8:a7:49:68:9f:fd:
                    f5:bd:54:41:0a:ef:c2:26:1c:56:86:5c:b5:35:41:
                    3b:dd:f0:18:a0:a1:6e:b0:14:dd:05:23:3c:74:4b:
                    8f:b4:35:3d:4c:c6:24:a8:45:bb:3d:13:ce:22:cc:
                    bd:d0:ac:9f:a4:d4:e5:67:c9:5a:7b:15:8c:82:b0:
                    2b:ae:e8:7e:80:04:25:20:75:fb:b0:a0:03:5d:01:
                    a0:24:df:86:6a:b3:77:a4:60:fb:4a:6c:06:7e:0f:
                    dc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:56:55:61:DA:10:FA:39:08:98:67:07:37:97:66:37:A7:4E:17:A1
            X509v3 Authority Key Identifier:
                keyid:5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:80:9c:54:d4:82:44:e4:ae:d1:3c:08:3a:f1:90:84:5c:6a:
         e8:90:70:50:7b:b3:ef:a7:91:55:56:5f:85:a6:81:45:59:9b:
         18:35:c1:96:d0:90:f3:45:4e:da:c4:b8:f4:d5:ee:33:0f:94:
         46:cd:8c:60:91:74:cb:8d:8f:45:e2:4d:74:17:0e:f6:03:f2:
         8a:95:00:89:58:95:2a:9d:6a:19:9f:9c:12:e8:35:1f:e6:e1:
         a9:a1:ed:4b:3e:11:24:e3:eb:25:99:ae:4b:31:3a:4e:7c:5b:
         7e:cf:94:ec:79:b9:cd:98:1b:1e:cb:a1:ee:18:5f:51:83:b5:
         8f:48:aa:c3:e2:a4:5e:3e:e7:b7:fc:c3:a1:1c:51:81:68:e3:
         01:a0:9e:8b:f3:ea:d3:f5:c2:f0:86:02:24:c2:f3:37:e8:a2:
         58:b9:ca:50:f3:b9:db:a4:57:29:31:17:79:ed:61:28:a6:b6:
         db:bb:16:d2:88:35:a5:cc:d2:2e:1f:2e:9b:3e:3f:3a:f4:6f:
         90:68:d8:86:f2:90:6a:76:55:fe:7b:f3:ae:69:a9:bd:83:2b:
         c9:c9:08:da:53:9e:4d:bf:1f:1f:22:f6:2a:bf:a6:41:fd:1a:
         1a:f8:dd:fe:f1:c4:fe:90:d5:f9:e1:0d:18:35:96:14:2c:d9:
         ee:74:2d:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIhDAW3etkRPAAXzcN8ufMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhYTU4ZDVmMjcxMmNjYzAwNDRiNTllZmE3Y2JjM2U5OGM1
ZmMyNWMwHhcNMjYwMjA5MTYwMDMxWhcNMjYwMjEwMTYwMDMxWjAzMTEwLwYDVQQD
EygxMTU2NTU2MWRhMTBmYTM5MDg5ODY3MDczNzk3NjYzN2E3NGUxN2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPYlyZHZLSATL0db72Y8rVQ89I5s
h54eYMk8e/c97joT2Czl6FG6IjH5sg1vE5JUBRgcnzgoHUyo32jiOGhLQ24VtzmI
OQLQMnbYea09a6v2+FraxYIfkpf0lh/aTWSsg/X5X+nD2WumAF46BFBojoywTLAS
MDmT4lLjLi2QmO3EM5QLnbxb9nzl9+S+1pOl6DJkFXfLnlacIqd9/AzYp0lon/31
vVRBCu/CJhxWhly1NUE73fAYoKFusBTdBSM8dEuPtDU9TMYkqEW7PRPOIsy90Kyf
pNTlZ8laexWMgrArruh+gAQlIHX7sKADXQGgJN+GarN3pGD7SmwGfg/cKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFWVWHaEPo5CJhnBzeXZjenThehMB8GA1UdIwQY
MBaAFFqljV8nEszABEtZ76fLw+mMX8JcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3FXTlh5Y1N6TUFFUzFudnA4dkQ2WXhmd2x3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yN2E3NDgtODg0ZC00ZjE5LWIyODUt
NTkxOTkzMzFlZTA5LzEvV3FXTlh5Y1N6TUFFUzFudnA4dkQ2WXhmd2x3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8yN2E3NDgtODg0ZC00ZjE5LWIyODUtNTkxOTkzMzFlZTA5
LzEvV3FXTlh5Y1N6TUFFUzFudnA4dkQ2WXhmd2x3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATYCcVNSC
ROSu0TwIOvGQhFxq6JBwUHuz76eRVVZfhaaBRVmbGDXBltCQ80VO2sS49NXuMw+U
Rs2MYJF0y42PReJNdBcO9gPyipUAiViVKp1qGZ+cEug1H+bhqaHtSz4RJOPrJZmu
SzE6Tnxbfs+U7Hm5zZgbHsuh7hhfUYO1j0iqw+KkXj7nt/zDoRxRgWjjAaCei/Pq
0/XC8IYCJMLzN+iiWLnKUPO526RXKTEXee1hKKa227sW0og1pczSLh8umz4/OvRv
kGjYhvKQanZV/nvzrmmpvYMryckI2lOeTb8fHyL2Kr+mQf0aGvjd/vHE/pDV+eEN
GDWWFCzZ7nQtbA==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:37:56 2026 by rpki-client