This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/a19b9f-469f-4475-a1e8-b8395d653e6e/1/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.mft
File:                     1-wHgEc9lf0rT8ixt7nDH_1ezuLk.mft (raw, json)
Hash identifier:          gYxeH0Y6POIzifGHa30EiQ+1N9pEloK9uh1DZbMnNUI=
Subject key identifier:   8F:22:E4:1F:E5:96:0F:C2:5E:26:42:5F:4F:11:10:EA:06:01:36:78
Authority key identifier: FB:01:E0:11:CF:65:7F:4A:D3:F2:2C:6D:EE:70:C7:FF:57:B3:B8:B9
Certificate issuer:       /CN=fb01e011cf657f4ad3f22c6dee70c7ff57b3b8b9
Certificate serial:       019C432298DF443DCB973BF0E08BBE63C5D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/a19b9f-469f-4475-a1e8-b8395d653e6e/1/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.mft
Manifest number:          0196
Signing time:             Mon 09 Feb 2026 16:01:06 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:06 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:06 +0000
Files and hashes:         1: 1-wHgEc9lf0rT8ixt7nDH_1ezuLk.crl (hash: sXlnesE4UVcOLw4LrYCYrJipgvpFG6ImyL+ySuqxRzA=)
                          2: UQ-Obiva26_mmAwhjKc3uzVQ7mM.roa (hash: a+cVa2kzi7Q/+FGH9LfCA4p6Z3qaWMrupfp1ELf+pAg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/a19b9f-469f-4475-a1e8-b8395d653e6e/1/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/a19b9f-469f-4475-a1e8-b8395d653e6e/1/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:98:df:44:3d:cb:97:3b:f0:e0:8b:be:63:c5:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb01e011cf657f4ad3f22c6dee70c7ff57b3b8b9
        Validity
            Not Before: Feb  9 16:01:06 2026 GMT
            Not After : Feb 10 16:01:06 2026 GMT
        Subject: CN=8f22e41fe5960fc25e26425f4f1110ea06013678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9e:ae:fb:06:ef:f7:52:79:7c:a8:45:1c:9d:
                    23:7e:d8:f8:c8:22:fd:01:f1:b8:ed:70:b4:d7:b1:
                    05:f2:7b:93:64:fe:ee:4b:ea:08:63:18:e8:e5:c5:
                    02:19:2a:53:e3:4b:41:15:5e:96:31:d9:1c:3f:e4:
                    bb:ba:8d:ba:c9:f3:91:76:5d:a9:71:89:f6:6b:eb:
                    98:02:e0:4c:79:97:a5:8e:bf:0a:ff:69:a4:66:43:
                    ea:b1:91:77:45:a6:54:f0:90:ed:1e:eb:d3:96:fb:
                    49:74:cf:5b:fd:30:cd:be:4c:dc:8d:0a:e4:e7:d0:
                    7c:a8:70:2d:08:15:8c:89:70:70:9b:2d:d1:1e:da:
                    37:d0:e8:17:3f:7a:d6:41:1f:a4:35:f5:a2:5d:4d:
                    72:04:7c:ec:9c:d2:1a:15:92:89:0d:37:c1:2a:b6:
                    60:61:d0:02:74:09:a9:b0:84:42:b2:ec:9f:75:b4:
                    25:98:08:2e:a0:0f:b4:f8:90:9a:ee:75:46:69:38:
                    bf:fc:da:f4:81:ce:52:1c:af:b5:6f:3e:bf:16:fd:
                    98:0d:5b:45:88:89:7f:8e:56:3d:dd:f8:92:9c:52:
                    c7:b6:d4:a9:94:16:1c:28:b8:3b:b3:46:b6:a0:7e:
                    9a:88:b5:11:27:5e:2d:2b:5e:c4:42:77:d8:22:1c:
                    a7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:22:E4:1F:E5:96:0F:C2:5E:26:42:5F:4F:11:10:EA:06:01:36:78
            X509v3 Authority Key Identifier:
                keyid:FB:01:E0:11:CF:65:7F:4A:D3:F2:2C:6D:EE:70:C7:FF:57:B3:B8:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/a19b9f-469f-4475-a1e8-b8395d653e6e/1/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/a19b9f-469f-4475-a1e8-b8395d653e6e/1/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:de:25:a5:bf:3e:3a:4b:8e:3f:45:f7:9d:45:48:b6:47:76:
         60:64:4f:34:1c:ff:a0:4f:6f:a5:3c:45:bf:13:eb:e8:d9:9b:
         6c:74:8c:fd:51:21:c7:61:a2:77:a4:46:10:65:68:3f:82:88:
         76:89:6f:da:96:79:00:74:13:44:4b:78:b2:90:5d:2f:6f:a3:
         1a:c1:5f:10:be:ca:17:3d:2c:bb:6b:0b:4a:4b:0b:2f:c1:8d:
         74:bb:02:0a:90:8c:e2:e3:25:8a:1c:8b:08:d7:55:be:df:d7:
         0b:9f:35:58:cd:9d:67:ee:4e:c2:fc:c8:c6:69:80:1a:3e:52:
         b9:3d:25:70:4a:80:a6:64:86:7f:5e:87:cb:94:36:a4:d6:b0:
         6c:30:f3:95:48:7d:7d:cb:ab:7e:3b:e0:e8:70:6e:9d:82:40:
         a8:5b:1d:74:24:d6:cb:6f:f1:bc:c8:d6:01:e0:2d:cd:bf:fa:
         60:e3:23:43:41:6c:7c:51:82:63:db:5e:f5:04:c5:e0:ee:8e:
         40:5f:c5:34:e8:8d:69:11:a8:58:c3:12:d1:b4:2b:ac:9c:4a:
         c2:39:5a:e1:31:c8:ab:48:8d:c4:1e:db:3e:d1:36:14:fe:7d:
         22:1b:ec:b6:70:c6:08:b0:c6:47:f4:48:5d:b2:b8:fc:c7:38:
         3d:71:90:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:57:29 2026 by rpki-client