This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
File:                     wArEVewO3ikw6lgQV-4f9Z9b9sc.mft (raw, json)
Hash identifier:          BnMH6Dk/XsnXoSK61qM4VqMPGG7y9Snflha8/lfTTO4=
Subject key identifier:   C9:C5:BA:CF:97:19:AD:D7:25:BF:EF:ED:7A:F7:B2:58:77:F6:16:3C
Authority key identifier: C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7
Certificate issuer:       /CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7
Certificate serial:       019C42B43C5F3E1155138CE316B02A4D375D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
Manifest number:          1299
Signing time:             Mon 09 Feb 2026 14:00:34 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:34 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:34 +0000
Files and hashes:         1: IYD48FobX2QtW7l4Nlux0f3C9cQ.roa (hash: HnyhMFK+hrRQqY1dmM0kJ8BUc9CaYhp0OvPZ/NcZJXc=)
                          2: wArEVewO3ikw6lgQV-4f9Z9b9sc.crl (hash: gOY8LBkaNyNx1vHV5Fgz58pyk9yxuriCTpFoTtKFdNE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:3c:5f:3e:11:55:13:8c:e3:16:b0:2a:4d:37:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7
        Validity
            Not Before: Feb  9 14:00:34 2026 GMT
            Not After : Feb 10 14:00:34 2026 GMT
        Subject: CN=c9c5bacf9719add725bfefed7af7b25877f6163c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7d:bc:be:fe:56:75:c3:17:b6:e8:f7:bc:fb:
                    f1:88:74:c0:2c:bb:a5:31:ef:37:a0:43:68:6b:56:
                    59:9f:50:aa:f3:84:9d:df:a3:15:dd:53:1c:41:39:
                    60:bd:0f:25:dd:31:4d:ed:a7:50:da:6a:57:56:c8:
                    bc:f5:bc:1d:cf:c8:7d:c3:24:b5:ce:03:2e:57:b3:
                    9f:f2:82:dd:e7:4f:14:0d:cf:f5:7e:fb:a9:7f:c1:
                    e3:95:5a:12:df:73:d9:b7:f6:63:6e:5a:ba:18:1b:
                    d3:37:f5:dc:99:a2:9e:0a:7f:f2:e1:b9:0d:5c:11:
                    3b:65:71:87:eb:a2:c3:5d:a9:92:ab:f2:e9:66:54:
                    62:e2:96:41:af:50:be:a0:2c:66:d3:e8:61:fa:60:
                    04:d7:8c:6f:28:df:df:bf:16:7e:16:9e:e1:a9:2e:
                    87:bc:ad:e8:28:20:96:c7:ad:bf:64:17:a1:be:69:
                    85:73:a9:e3:1f:c2:b5:8b:f4:a1:40:92:62:5d:4a:
                    00:4b:5a:f7:c4:22:ee:3e:95:11:b8:ef:e7:b3:18:
                    72:ef:9d:ff:2f:31:ac:54:6e:63:f5:a8:9a:22:53:
                    eb:89:94:97:90:a0:8d:c9:cc:2c:0e:ee:39:9a:d6:
                    b8:14:89:5c:3f:c7:e9:24:ad:51:3e:eb:c3:ff:53:
                    91:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C5:BA:CF:97:19:AD:D7:25:BF:EF:ED:7A:F7:B2:58:77:F6:16:3C
            X509v3 Authority Key Identifier:
                keyid:C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:8a:a8:10:ad:69:b6:3c:9e:f2:1d:77:04:b0:a9:34:6d:f2:
         4a:f2:b4:81:de:4e:e4:e5:88:c6:ce:be:f3:32:4b:d4:84:5b:
         74:b0:a0:ee:e4:41:00:09:be:0e:16:46:35:ae:8b:f5:5d:b9:
         4e:b7:58:c5:67:47:cd:9b:1b:ed:7d:12:9f:94:7a:80:c6:b4:
         9b:45:42:48:39:e2:be:64:fb:d0:f9:9d:5d:86:12:2c:f5:2a:
         ed:6d:fa:32:8e:83:6f:b2:f8:38:7b:b7:71:e7:fe:81:0c:c3:
         61:64:04:96:fd:c6:91:85:54:cf:ac:3d:d7:a2:1d:cf:46:a9:
         2f:9e:ed:8e:53:f1:3c:c0:d2:74:cc:33:4c:c1:fe:8c:21:c9:
         cf:ef:e0:0f:47:c6:90:50:bd:81:d2:67:53:52:74:f5:89:44:
         bd:fc:f9:1e:dd:a4:d4:a1:07:1b:c5:ea:22:31:c3:bb:6f:84:
         ea:6a:94:df:fa:1d:1f:ac:44:5a:76:cc:7e:4c:51:bf:e2:30:
         2a:5f:e7:c5:03:a7:27:72:42:d8:ab:40:cf:c0:bf:24:54:81:
         bf:bd:10:cc:20:b7:e1:f8:da:90:30:91:83:07:41:17:fd:b7:
         a7:20:b5:dd:ae:f0:ae:c8:38:79:27:00:82:9c:94:66:f3:d2:
         1a:14:ec:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtDxfPhFVE4zjFrAqTTddMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMGFjNDU1ZWMwZWRlMjkzMGVhNTgxMDU3ZWUxZmY1OWY1
YmY2YzcwHhcNMjYwMjA5MTQwMDM0WhcNMjYwMjEwMTQwMDM0WjAzMTEwLwYDVQQD
EyhjOWM1YmFjZjk3MTlhZGQ3MjViZmVmZWQ3YWY3YjI1ODc3ZjYxNjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn28vv5WdcMXtuj3vPvxiHTALLul
Me83oENoa1ZZn1Cq84Sd36MV3VMcQTlgvQ8l3TFN7adQ2mpXVsi89bwdz8h9wyS1
zgMuV7Of8oLd508UDc/1fvupf8HjlVoS33PZt/Zjblq6GBvTN/XcmaKeCn/y4bkN
XBE7ZXGH66LDXamSq/LpZlRi4pZBr1C+oCxm0+hh+mAE14xvKN/fvxZ+Fp7hqS6H
vK3oKCCWx62/ZBehvmmFc6njH8K1i/ShQJJiXUoAS1r3xCLuPpURuO/nsxhy753/
LzGsVG5j9aiaIlPriZSXkKCNycwsDu45mta4FIlcP8fpJK1RPuvD/1ORsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMnFus+XGa3XJb/v7Xr3slh39hY8MB8GA1UdIwQY
MBaAFMAKxFXsDt4pMOpYEFfuH/WfW/bHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0FyRVZld08zaWt3NmxnUVYtNGY5WjliOXNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9lODFkMjYtODBmNC00MGYyLWJkYmQt
MDJjZjZiMGRiNjNiLzEvd0FyRVZld08zaWt3NmxnUVYtNGY5WjliOXNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9lODFkMjYtODBmNC00MGYyLWJkYmQtMDJjZjZiMGRiNjNi
LzEvd0FyRVZld08zaWt3NmxnUVYtNGY5WjliOXNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASIqoEK1p
tjye8h13BLCpNG3ySvK0gd5O5OWIxs6+8zJL1IRbdLCg7uRBAAm+DhZGNa6L9V25
TrdYxWdHzZsb7X0Sn5R6gMa0m0VCSDnivmT70PmdXYYSLPUq7W36Mo6Db7L4OHu3
cef+gQzDYWQElv3GkYVUz6w916Idz0apL57tjlPxPMDSdMwzTMH+jCHJz+/gD0fG
kFC9gdJnU1J09YlEvfz5Ht2k1KEHG8XqIjHDu2+E6mqU3/odH6xEWnbMfkxRv+Iw
Kl/nxQOnJ3JC2KtAz8C/JFSBv70QzCC34fjakDCRgwdBF/23pyC13a7wrsg4eScA
gpyUZvPSGhTsUg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:28 2026 by rpki-client