This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft
File:                     Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft (raw, json)
Hash identifier:          1K9zuHxrfA6dE5Gq+1rU96P8pdavm0yQCMncP9xZp7A=
Subject key identifier:   5F:D4:CA:9F:B6:C6:21:99:65:49:51:0A:35:7A:7B:4F:8D:1F:15:7B
Authority key identifier: 5A:FD:86:67:CC:E9:5B:E0:AE:96:05:8C:45:50:D7:08:80:35:31:2F
Certificate issuer:       /CN=5afd8667cce95be0ae96058c4550d7088035312f
Certificate serial:       019C42EAE1460F2921B213D85A3072B9B302
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft
Manifest number:          1491
Signing time:             Mon 09 Feb 2026 15:00:15 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:15 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:15 +0000
Files and hashes:         1: 6-cD7PwZNNg8B5NEI6cnS9qsYws.roa (hash: EYqd8s/hHYel0xQm6Q8ZXtIUTI9f5VFJlpaewnbnCgw=)
                          2: OOHuoxQHwcTPw0lmXeoWsx3MPDs.roa (hash: 0adogDb33iNZDpARqzB5nWTOkYnidB5h7S3awTSepJY=)
                          3: Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl (hash: Yt5grrn1G8pcnNo46Q2rv+4r1MzBmxbzAcE2vBuLehM=)
                          4: zHZaUGL1PgevIY9huCaPmQ1rgRA.roa (hash: ncKaZ+bqsMAHSDw8fyhXbISTNBW6FE6m6Rhkmp7c75o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:ea:e1:46:0f:29:21:b2:13:d8:5a:30:72:b9:b3:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5afd8667cce95be0ae96058c4550d7088035312f
        Validity
            Not Before: Feb  9 15:00:15 2026 GMT
            Not After : Feb 10 15:00:15 2026 GMT
        Subject: CN=5fd4ca9fb6c621996549510a357a7b4f8d1f157b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d6:88:40:16:e5:01:58:0e:c4:52:6e:99:26:
                    e4:2b:f4:21:44:83:22:8b:65:22:d5:87:08:2e:d1:
                    74:20:36:e7:ca:85:67:8f:0c:7c:c1:0d:97:94:f4:
                    de:20:54:21:90:60:87:3e:76:20:84:7a:e7:0e:97:
                    60:96:70:95:37:79:6c:ea:cb:68:16:55:51:a5:8b:
                    7a:79:a5:3a:8b:c8:9d:db:53:9d:d0:69:b9:7f:2e:
                    48:f0:c2:f5:f3:e9:84:b9:ec:39:40:9a:b3:e0:29:
                    36:39:67:53:f2:5c:ca:0a:98:e5:a6:35:70:4f:f9:
                    48:cc:48:8b:d0:8b:e2:09:a1:7f:bb:1e:7a:5a:92:
                    f7:50:c6:21:00:87:56:de:4a:c7:1d:87:96:ef:a1:
                    51:c6:aa:28:52:7c:fd:c6:13:2b:77:61:38:fa:ab:
                    2f:d2:3d:d7:4b:f6:2b:7a:93:2c:db:a5:94:11:2b:
                    85:71:ce:91:cb:89:4b:fe:f9:54:43:aa:35:93:24:
                    2a:99:48:48:52:12:c5:10:e5:28:21:72:ac:e1:ab:
                    2e:ac:3e:ad:e1:05:f7:c5:b0:1f:ab:20:85:db:70:
                    36:b4:ea:c5:cd:bd:69:f1:86:33:eb:2d:55:43:81:
                    cc:f8:2a:f4:dc:85:45:bd:01:6b:09:af:ae:3a:26:
                    fc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D4:CA:9F:B6:C6:21:99:65:49:51:0A:35:7A:7B:4F:8D:1F:15:7B
            X509v3 Authority Key Identifier:
                keyid:5A:FD:86:67:CC:E9:5B:E0:AE:96:05:8C:45:50:D7:08:80:35:31:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:68:f9:95:b4:80:e8:fd:a0:3e:ce:11:54:f0:b7:23:cb:23:
         c2:7f:27:3e:b9:93:96:78:a4:60:88:87:e8:ea:84:e6:b3:37:
         da:f6:2e:64:75:d2:7c:01:69:32:3c:c4:33:a4:bb:19:29:f8:
         65:6d:7b:58:f1:27:b1:83:7b:46:d0:0e:ef:62:66:24:56:16:
         30:92:9f:56:5d:51:3f:94:ec:31:4c:a7:73:5f:f8:b2:9b:b6:
         71:10:a3:31:01:10:12:97:8d:ae:f8:6b:8c:07:3a:2d:b0:ee:
         44:3a:97:51:fd:ec:00:0e:45:e8:ec:e2:c3:c9:53:2d:85:af:
         5f:ad:70:0d:3e:d2:79:20:a5:80:92:6c:af:50:60:2e:32:a4:
         b0:7c:90:2b:56:be:eb:76:0e:2d:88:9d:3e:ce:e5:35:ec:54:
         98:fb:31:e4:a0:a0:b3:55:b1:89:a3:08:57:9f:68:73:aa:c4:
         74:cd:44:f5:f9:3f:d2:b6:d1:bd:4c:c6:41:81:30:eb:38:c0:
         22:c8:30:57:b0:6b:78:ba:76:41:c9:99:8d:24:bd:28:cc:fb:
         82:d4:e0:2b:6b:e4:1f:59:d8:eb:80:f6:3f:08:c6:a7:3c:26:
         5a:f4:66:1c:3a:61:9d:4f:24:73:20:46:9e:a3:80:3b:74:7d:
         8f:08:b8:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC6uFGDykhshPYWjByubMCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZmQ4NjY3Y2NlOTViZTBhZTk2MDU4YzQ1NTBkNzA4ODAz
NTMxMmYwHhcNMjYwMjA5MTUwMDE1WhcNMjYwMjEwMTUwMDE1WjAzMTEwLwYDVQQD
Eyg1ZmQ0Y2E5ZmI2YzYyMTk5NjU0OTUxMGEzNTdhN2I0ZjhkMWYxNTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtaIQBblAVgOxFJumSbkK/QhRIMi
i2Ui1YcILtF0IDbnyoVnjwx8wQ2XlPTeIFQhkGCHPnYghHrnDpdglnCVN3ls6sto
FlVRpYt6eaU6i8id21Od0Gm5fy5I8ML18+mEuew5QJqz4Ck2OWdT8lzKCpjlpjVw
T/lIzEiL0IviCaF/ux56WpL3UMYhAIdW3krHHYeW76FRxqooUnz9xhMrd2E4+qsv
0j3XS/YrepMs26WUESuFcc6Ry4lL/vlUQ6o1kyQqmUhIUhLFEOUoIXKs4asurD6t
4QX3xbAfqyCF23A2tOrFzb1p8YYz6y1VQ4HM+Cr03IVFvQFrCa+uOib8AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/Uyp+2xiGZZUlRCjV6e0+NHxV7MB8GA1UdIwQY
MBaAFFr9hmfM6VvgrpYFjEVQ1wiANTEvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3YyR1o4enBXLUN1bGdXTVJWRFhDSUExTVM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9hYWNiMGEtY2Y2NC00ZTc1LWE5ZGYt
MjQ5YWM3NzNjMjgyLzEvV3YyR1o4enBXLUN1bGdXTVJWRFhDSUExTVM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9hYWNiMGEtY2Y2NC00ZTc1LWE5ZGYtMjQ5YWM3NzNjMjgy
LzEvV3YyR1o4enBXLUN1bGdXTVJWRFhDSUExTVM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApWj5lbSA
6P2gPs4RVPC3I8sjwn8nPrmTlnikYIiH6OqE5rM32vYuZHXSfAFpMjzEM6S7GSn4
ZW17WPEnsYN7RtAO72JmJFYWMJKfVl1RP5TsMUync1/4spu2cRCjMQEQEpeNrvhr
jAc6LbDuRDqXUf3sAA5F6Oziw8lTLYWvX61wDT7SeSClgJJsr1BgLjKksHyQK1a+
63YOLYidPs7lNexUmPsx5KCgs1WxiaMIV59oc6rEdM1E9fk/0rbRvUzGQYEw6zjA
IsgwV7BreLp2QcmZjSS9KMz7gtTgK2vkH1nY64D2PwjGpzwmWvRmHDphnU8kcyBG
nqOAO3R9jwi4AA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:03 2026 by rpki-client