This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
File:                     wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft (raw, json)
Hash identifier:          DYnZNf6y5Ft5fcwOI9msBVkKxodH8x8iHOx/r8FQ5D0=
Subject key identifier:   D0:13:15:31:E2:CE:20:29:FD:A6:77:CD:78:59:59:7B:9A:33:B3:A1
Authority key identifier: C2:9C:10:07:74:69:81:FC:C4:08:83:99:65:B1:67:1C:03:7D:12:1B
Certificate issuer:       /CN=c29c1007746981fcc408839965b1671c037d121b
Certificate serial:       019C4390BB2F4AA6076057325D7FF93EAAEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
Manifest number:          0C7B
Signing time:             Mon 09 Feb 2026 18:01:24 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:24 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:24 +0000
Files and hashes:         1: wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl (hash: 4JFEaboI3ILJfprYzLcbawwuWbBMY2uw70qxV0dAJP0=)
                          2: wu6yzZOp4lpTzpUuO-83Bh6y-LA.roa (hash: rIJZAMrnS+qyWJbw91rA5PEvBPuRmf6lmb4uo7zX1VU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:bb:2f:4a:a6:07:60:57:32:5d:7f:f9:3e:aa:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c29c1007746981fcc408839965b1671c037d121b
        Validity
            Not Before: Feb  9 18:01:24 2026 GMT
            Not After : Feb 10 18:01:24 2026 GMT
        Subject: CN=d0131531e2ce2029fda677cd7859597b9a33b3a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:29:0e:63:25:fd:3c:ac:7c:b7:7d:79:39:1e:
                    a9:96:4b:64:38:67:18:ef:9d:73:ea:8d:a3:25:36:
                    30:cd:f9:45:a7:01:61:7d:ca:8d:24:59:3d:7e:87:
                    ca:82:d1:03:8c:82:24:f3:0d:08:4d:03:a5:2b:07:
                    cb:51:ce:80:0a:02:74:de:57:2b:09:4a:c5:68:5c:
                    92:2f:46:63:10:94:ab:2b:26:c3:f4:d3:65:78:4a:
                    fe:1a:0f:91:11:0e:cd:a1:13:18:fe:02:3d:71:e7:
                    7f:e8:ef:aa:2a:40:74:ad:17:92:b1:27:3b:5a:ff:
                    76:8d:7b:63:28:36:1d:0a:04:a3:97:6c:bc:7e:5c:
                    15:5b:78:28:d3:04:81:c4:ef:00:d7:ba:99:2c:22:
                    b1:9f:0f:12:6e:09:15:24:76:1a:b1:3b:58:e3:7c:
                    de:ab:ad:00:5e:14:1d:e9:63:78:80:45:39:47:5f:
                    17:77:d9:be:59:04:96:15:4e:d3:2c:af:32:75:d2:
                    e4:bc:23:dc:80:9e:a0:48:27:8f:b8:c6:87:ed:17:
                    3c:3f:f1:5a:9d:65:f1:45:0d:d9:39:bc:0f:f5:cd:
                    76:05:b1:a2:7d:f6:08:29:d7:5c:4f:73:3b:6e:85:
                    4e:5f:b2:69:cc:b4:3c:60:e2:a9:b3:9f:2c:ca:92:
                    4c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:13:15:31:E2:CE:20:29:FD:A6:77:CD:78:59:59:7B:9A:33:B3:A1
            X509v3 Authority Key Identifier:
                keyid:C2:9C:10:07:74:69:81:FC:C4:08:83:99:65:B1:67:1C:03:7D:12:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:1f:cb:46:b0:70:bd:2a:86:81:2e:13:45:f9:ef:d4:28:bd:
         df:cd:09:f4:6a:db:32:0a:76:79:e7:27:8d:94:9f:80:f7:63:
         70:18:76:0c:53:f6:e2:e2:34:51:75:f3:88:20:f1:dc:d4:de:
         98:6d:ec:e1:34:89:87:6d:78:c2:45:35:2d:fe:43:fb:3c:23:
         12:56:d1:97:3f:d3:3a:bd:c9:95:c5:bc:5e:35:da:29:20:00:
         58:cd:99:2e:59:28:70:32:b0:d4:20:94:64:58:43:77:8e:91:
         b1:7d:74:44:62:e3:35:4c:21:52:5b:3d:13:0e:67:64:ee:0c:
         ce:a3:be:9e:46:71:4b:43:a3:ff:85:c6:b9:e8:0a:b8:84:b2:
         83:84:5f:45:d8:8f:53:ec:c7:19:53:2d:7f:30:0c:97:13:cf:
         35:70:6c:ba:f1:c6:08:49:d0:b1:eb:ec:96:5e:10:d7:ce:c4:
         4e:92:1e:ba:61:35:65:4e:d0:62:91:a0:7a:ac:cd:d1:15:ea:
         60:53:9f:77:d6:29:60:36:87:bf:83:a4:a0:df:e1:10:82:fa:
         c7:69:dc:d5:d8:4d:1c:77:d2:c0:21:dc:27:0a:ac:7e:63:d1:
         b2:f3:37:ff:cf:0f:9e:4d:e2:14:71:d4:2f:34:b8:62:c1:97:
         50:72:a8:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDkLsvSqYHYFcyXX/5PqruMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyOWMxMDA3NzQ2OTgxZmNjNDA4ODM5OTY1YjE2NzFjMDM3
ZDEyMWIwHhcNMjYwMjA5MTgwMTI0WhcNMjYwMjEwMTgwMTI0WjAzMTEwLwYDVQQD
EyhkMDEzMTUzMWUyY2UyMDI5ZmRhNjc3Y2Q3ODU5NTk3YjlhMzNiM2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmykOYyX9PKx8t315OR6plktkOGcY
751z6o2jJTYwzflFpwFhfcqNJFk9fofKgtEDjIIk8w0ITQOlKwfLUc6ACgJ03lcr
CUrFaFySL0ZjEJSrKybD9NNleEr+Gg+REQ7NoRMY/gI9ced/6O+qKkB0rReSsSc7
Wv92jXtjKDYdCgSjl2y8flwVW3go0wSBxO8A17qZLCKxnw8SbgkVJHYasTtY43ze
q60AXhQd6WN4gEU5R18Xd9m+WQSWFU7TLK8yddLkvCPcgJ6gSCePuMaH7Rc8P/Fa
nWXxRQ3ZObwP9c12BbGiffYIKddcT3M7boVOX7JpzLQ8YOKps58sypJMaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNATFTHiziAp/aZ3zXhZWXuaM7OhMB8GA1UdIwQY
MBaAFMKcEAd0aYH8xAiDmWWxZxwDfRIbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3B3UUIzUnBnZnpFQ0lPWlpiRm5IQU45RWhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS84YWIyNmMtYmExNy00Mjg4LTg3NDkt
OGZjOTMwZDg3MDJhLzEvd3B3UUIzUnBnZnpFQ0lPWlpiRm5IQU45RWhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS84YWIyNmMtYmExNy00Mjg4LTg3NDktOGZjOTMwZDg3MDJh
LzEvd3B3UUIzUnBnZnpFQ0lPWlpiRm5IQU45RWhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQB/LRrBw
vSqGgS4TRfnv1Ci9380J9GrbMgp2eecnjZSfgPdjcBh2DFP24uI0UXXziCDx3NTe
mG3s4TSJh214wkU1Lf5D+zwjElbRlz/TOr3JlcW8XjXaKSAAWM2ZLlkocDKw1CCU
ZFhDd46RsX10RGLjNUwhUls9Ew5nZO4MzqO+nkZxS0Oj/4XGuegKuISyg4RfRdiP
U+zHGVMtfzAMlxPPNXBsuvHGCEnQsevsll4Q187ETpIeumE1ZU7QYpGgeqzN0RXq
YFOfd9YpYDaHv4OkoN/hEIL6x2nc1dhNHHfSwCHcJwqsfmPRsvM3/88Pnk3iFHHU
LzS4YsGXUHKoZw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:28 2026 by rpki-client