This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft
File:                     WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft (raw, json)
Hash identifier:          v8woAlH3TqlEb2wJimX693knc04xUbZa8eWoIVvR94s=
Subject key identifier:   B1:09:94:95:1E:73:DC:97:68:8A:5D:EE:72:53:3D:9F:39:19:41:F2
Authority key identifier: 58:3E:E3:C2:EC:4A:19:02:5C:03:92:AD:1E:E6:A4:64:1B:CD:D0:C8
Certificate issuer:       /CN=583ee3c2ec4a19025c0392ad1ee6a4641bcdd0c8
Certificate serial:       019C446B8B5E82A2A2C595695CE53E97BD7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WD7jwuxKGQJcA5KtHuakZBvN0Mg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft
Manifest number:          0DF1
Signing time:             Mon 09 Feb 2026 22:00:24 +0000
Manifest this update:     Mon 09 Feb 2026 22:00:24 +0000
Manifest next update:     Tue 10 Feb 2026 22:00:24 +0000
Files and hashes:         1: 3XafC-hCOUFM-jug0_ev9kB4vuA.roa (hash: 7RiXYE5RDt0HSD+dkuTgOowiXviIVVlANZQyHAo4qDs=)
                          2: WD7jwuxKGQJcA5KtHuakZBvN0Mg.crl (hash: D3LeTozXNs3WzTXhPaP2Fp/QY5y0vdFfxH2tU2s0f34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WD7jwuxKGQJcA5KtHuakZBvN0Mg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6b:8b:5e:82:a2:a2:c5:95:69:5c:e5:3e:97:bd:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=583ee3c2ec4a19025c0392ad1ee6a4641bcdd0c8
        Validity
            Not Before: Feb  9 22:00:24 2026 GMT
            Not After : Feb 10 22:00:24 2026 GMT
        Subject: CN=b10994951e73dc97688a5dee72533d9f391941f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ec:08:7d:36:00:e9:20:08:29:6d:e3:2e:2c:
                    ce:ae:92:f6:c9:24:15:05:4a:70:88:0f:8a:38:b7:
                    2f:6e:74:1b:1f:45:cb:bb:f3:a0:3e:d6:2b:ef:8a:
                    a9:5f:07:d0:a5:9b:08:1a:cb:e6:93:fd:46:6b:59:
                    27:7a:26:5d:01:78:a1:7d:6e:fe:c9:a1:88:b3:ce:
                    34:fd:c6:98:74:67:e0:c9:d1:7e:63:fd:e0:eb:b7:
                    3b:b6:ad:53:18:aa:8f:7f:52:30:ff:26:9d:29:99:
                    dc:7a:90:be:7a:b5:8e:db:52:d4:ee:ac:4f:8d:c3:
                    d7:cc:04:c1:45:f9:29:f4:7d:bf:75:ad:51:94:df:
                    32:92:52:2b:b1:a2:38:41:60:18:15:d2:cd:37:aa:
                    ad:de:32:db:d2:19:c7:4c:75:11:4c:8e:8e:d4:3c:
                    bb:f9:32:e5:95:d7:25:3d:3b:e1:37:34:62:6e:ec:
                    77:a4:31:15:3e:ae:b0:91:6d:88:f3:7b:8d:63:80:
                    67:d5:64:c6:de:d2:2a:9f:b4:7e:e8:bc:18:83:67:
                    59:93:4f:20:54:4c:4e:af:05:db:4d:e6:b6:15:e4:
                    9b:a5:da:74:02:9b:1a:ee:6e:ec:cd:3d:c0:4b:86:
                    72:df:34:32:b7:27:8d:44:24:77:fb:1d:b5:83:ae:
                    81:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:09:94:95:1E:73:DC:97:68:8A:5D:EE:72:53:3D:9F:39:19:41:F2
            X509v3 Authority Key Identifier:
                keyid:58:3E:E3:C2:EC:4A:19:02:5C:03:92:AD:1E:E6:A4:64:1B:CD:D0:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD7jwuxKGQJcA5KtHuakZBvN0Mg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:48:45:7f:7c:86:41:97:98:d7:a5:e9:76:c9:d5:cc:d9:4d:
         cb:32:4e:49:b5:2f:88:56:ce:bf:55:3d:aa:cc:31:37:5c:b5:
         7f:59:4b:c1:6b:9f:82:e1:f6:e9:4c:30:6b:f2:4f:85:dc:96:
         47:5c:2d:04:70:71:bc:55:61:9c:51:ce:cc:6c:d9:25:9a:ba:
         ca:4b:97:91:96:d8:80:7f:d3:4f:ff:af:48:89:04:f4:de:69:
         4b:d9:76:38:04:4e:9b:6e:0b:c8:f9:63:23:65:62:a5:74:91:
         5b:fa:b8:9d:1b:35:72:67:df:94:c2:27:01:98:40:d8:38:11:
         c6:b3:fa:7d:73:07:02:6f:e6:69:6c:52:bf:df:51:9f:78:a3:
         cb:89:cc:60:63:33:b5:52:09:65:e0:ee:f6:49:70:60:dd:53:
         8a:39:7d:c3:d3:b4:fe:3a:7a:9f:20:10:aa:d9:1d:48:86:87:
         0b:39:8f:7b:21:3f:03:6f:6e:0c:0c:e3:00:dc:21:c9:3c:d6:
         b3:d1:58:2e:4a:49:38:69:7b:15:01:82:03:95:bc:58:ae:e9:
         e3:e5:35:65:ba:51:14:ac:1d:d4:b7:42:7f:f1:3b:51:36:3b:
         e4:ce:f0:0c:3c:ce:28:99:d2:7d:66:3f:1f:d2:13:3b:ad:b5:
         8c:c0:3c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:37:01 2026 by rpki-client