This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft
File:                     WVskOnIz5XHDwXPrgkkRGQYyYBk.mft (raw, json)
Hash identifier:          2Dvakf9FlPSur3Ne7C3QO4cCAQKTwp3RVYbK0z3ZzME=
Subject key identifier:   3B:FB:5B:F8:8C:F3:4B:E9:A4:F0:AE:88:84:AC:6E:DB:39:B0:43:84
Authority key identifier: 59:5B:24:3A:72:33:E5:71:C3:C1:73:EB:82:49:11:19:06:32:60:19
Certificate issuer:       /CN=595b243a7233e571c3c173eb8249111906326019
Certificate serial:       019C427E3154E51EB78A9270AC9EC934CE0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft
Manifest number:          178B
Signing time:             Mon 09 Feb 2026 13:01:32 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:32 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:32 +0000
Files and hashes:         1: WVskOnIz5XHDwXPrgkkRGQYyYBk.crl (hash: ezrY+ykmT+CsgSgO8RvuOFCvsA8wOK9SEIelyzFRu7M=)
                          2: bwWZGeCQW0Hd1jb04LPvEN_tv4U.roa (hash: CRa0+I5ztcID9122/jSOLxqWovtuwyYOYDu7k5cAWuw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7e:31:54:e5:1e:b7:8a:92:70:ac:9e:c9:34:ce:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=595b243a7233e571c3c173eb8249111906326019
        Validity
            Not Before: Feb  9 13:01:32 2026 GMT
            Not After : Feb 10 13:01:32 2026 GMT
        Subject: CN=3bfb5bf88cf34be9a4f0ae8884ac6edb39b04384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:19:bd:df:ff:0b:7f:04:43:64:0a:af:cb:07:
                    8c:5f:04:7a:28:99:8f:7b:60:43:97:f9:e0:2a:03:
                    07:88:92:14:e4:ce:e5:24:14:31:fd:b9:1d:db:ec:
                    82:83:4a:3a:c5:83:9b:ea:ce:49:23:24:d4:0a:56:
                    92:fd:76:9c:0d:f4:79:e1:9b:49:c7:34:c0:0e:70:
                    3b:c4:bf:b8:1a:be:f2:4a:43:5b:9a:73:33:41:9c:
                    17:50:7f:79:ca:3d:04:17:4c:d4:b8:87:24:b9:80:
                    c5:c3:ab:3a:a9:31:1c:33:c5:06:28:4f:cc:ab:bc:
                    2c:b3:d2:45:ef:b8:ed:4b:3c:67:52:a2:fc:53:fe:
                    e2:10:33:fa:ba:44:ff:02:15:17:b7:a0:33:e5:83:
                    6a:65:ae:10:b4:29:a8:e7:35:31:43:93:52:e4:97:
                    ca:06:8c:47:67:e0:a9:66:57:f9:e4:c8:8c:a6:83:
                    3a:91:7c:b6:a0:fa:96:35:27:d1:16:3a:b8:c1:dc:
                    db:b9:e7:53:dd:a9:6f:d4:39:2a:7e:64:84:d3:35:
                    1f:14:ef:8d:3b:45:01:a1:e5:da:e9:42:ce:37:df:
                    14:45:97:14:d0:c3:6a:ed:bc:ae:f4:3f:fc:68:a4:
                    65:2d:0c:31:81:1f:59:c1:6a:35:96:f1:e8:7a:b6:
                    43:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:FB:5B:F8:8C:F3:4B:E9:A4:F0:AE:88:84:AC:6E:DB:39:B0:43:84
            X509v3 Authority Key Identifier:
                keyid:59:5B:24:3A:72:33:E5:71:C3:C1:73:EB:82:49:11:19:06:32:60:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:a7:88:e0:39:4b:d8:81:14:27:97:73:a0:5e:6a:d8:c0:f3:
         42:66:00:11:38:82:58:6b:93:cd:0d:d9:49:d0:4e:7f:9d:3b:
         5d:67:19:df:d4:5e:d5:55:17:65:26:ae:f5:ab:49:0e:1a:a6:
         58:b4:ff:07:25:a0:ba:6e:5e:37:4f:09:e5:5d:54:5a:39:2b:
         07:3b:76:2e:88:34:02:1b:86:44:d8:86:66:8a:51:4a:1a:4e:
         63:16:3b:7e:2f:f8:43:1c:37:69:db:63:76:dc:87:c2:a3:9b:
         79:40:69:65:cf:f8:03:89:38:e3:cd:22:d7:b4:83:71:39:40:
         7d:ed:6c:ad:1e:3a:58:e4:1e:38:39:97:88:af:b0:b5:6c:fa:
         bd:46:43:6d:f1:92:fc:e1:0e:2c:91:6d:ad:33:49:eb:a0:3b:
         ec:9d:76:84:b8:5d:1d:54:9f:2f:6d:09:ca:92:27:0f:5d:b0:
         6b:79:f4:da:01:a3:c3:a0:64:82:5d:b5:6f:74:d3:f7:88:29:
         db:07:a0:64:28:96:13:3e:1b:3e:39:1d:b8:0e:7f:65:73:64:
         e0:a7:42:1f:50:34:70:8a:db:a5:bb:66:b0:89:c4:46:7e:7e:
         55:36:97:53:59:f8:3b:4a:82:e7:7d:35:fc:bf:4f:f6:13:c7:
         db:a2:78:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfjFU5R63ipJwrJ7JNM4NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NWIyNDNhNzIzM2U1NzFjM2MxNzNlYjgyNDkxMTE5MDYz
MjYwMTkwHhcNMjYwMjA5MTMwMTMyWhcNMjYwMjEwMTMwMTMyWjAzMTEwLwYDVQQD
EygzYmZiNWJmODhjZjM0YmU5YTRmMGFlODg4NGFjNmVkYjM5YjA0Mzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBm93/8LfwRDZAqvyweMXwR6KJmP
e2BDl/ngKgMHiJIU5M7lJBQx/bkd2+yCg0o6xYOb6s5JIyTUClaS/XacDfR54ZtJ
xzTADnA7xL+4Gr7ySkNbmnMzQZwXUH95yj0EF0zUuIckuYDFw6s6qTEcM8UGKE/M
q7wss9JF77jtSzxnUqL8U/7iEDP6ukT/AhUXt6Az5YNqZa4QtCmo5zUxQ5NS5JfK
BoxHZ+CpZlf55MiMpoM6kXy2oPqWNSfRFjq4wdzbuedT3alv1DkqfmSE0zUfFO+N
O0UBoeXa6ULON98URZcU0MNq7byu9D/8aKRlLQwxgR9ZwWo1lvHoerZD9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDv7W/iM80vppPCuiISsbts5sEOEMB8GA1UdIwQY
MBaAFFlbJDpyM+Vxw8Fz64JJERkGMmAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1Zza09uSXo1WEhEd1hQcmdra1JHUVl5WUJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9lOWUwODctZTc2OC00NGQ4LTllYzgt
ODhlNDQ2NjkxNWY4LzEvV1Zza09uSXo1WEhEd1hQcmdra1JHUVl5WUJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9lOWUwODctZTc2OC00NGQ4LTllYzgtODhlNDQ2NjkxNWY4
LzEvV1Zza09uSXo1WEhEd1hQcmdra1JHUVl5WUJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUqeI4DlL
2IEUJ5dzoF5q2MDzQmYAETiCWGuTzQ3ZSdBOf507XWcZ39Re1VUXZSau9atJDhqm
WLT/ByWgum5eN08J5V1UWjkrBzt2Log0AhuGRNiGZopRShpOYxY7fi/4Qxw3adtj
dtyHwqObeUBpZc/4A4k4480i17SDcTlAfe1srR46WOQeODmXiK+wtWz6vUZDbfGS
/OEOLJFtrTNJ66A77J12hLhdHVSfL20JypInD12wa3n02gGjw6Bkgl21b3TT94gp
2wegZCiWEz4bPjkduA5/ZXNk4KdCH1A0cIrbpbtmsInERn5+VTaXU1n4O0qC5301
/L9P9hPH26J4IQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:41 2026 by rpki-client