This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
File:                     wArEVewO3ikw6lgQV-4f9Z9b9sc.mft (raw, json)
Hash identifier:          hZ4n9heorfoyOHQUfD/YeyNZnstXPsF2ra8mq/7FJLY=
Subject key identifier:   B0:8B:B2:7D:FD:A0:F3:93:70:5B:82:4F:3A:91:05:51:1C:BC:AF:3F
Authority key identifier: C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7
Certificate issuer:       /CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7
Certificate serial:       019C44A2F9554B530D99CC42308A9FD12EA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
Manifest number:          129A
Signing time:             Mon 09 Feb 2026 23:00:57 +0000
Manifest this update:     Mon 09 Feb 2026 23:00:57 +0000
Manifest next update:     Tue 10 Feb 2026 23:00:57 +0000
Files and hashes:         1: IYD48FobX2QtW7l4Nlux0f3C9cQ.roa (hash: HnyhMFK+hrRQqY1dmM0kJ8BUc9CaYhp0OvPZ/NcZJXc=)
                          2: wArEVewO3ikw6lgQV-4f9Z9b9sc.crl (hash: TOmxAHrSYWms5aYWmrN9cF8/ayxvJJO/EP4qUr6lwuk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:a2:f9:55:4b:53:0d:99:cc:42:30:8a:9f:d1:2e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7
        Validity
            Not Before: Feb  9 23:00:57 2026 GMT
            Not After : Feb 10 23:00:57 2026 GMT
        Subject: CN=b08bb27dfda0f393705b824f3a9105511cbcaf3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d6:ff:86:31:48:39:75:ee:95:76:3a:5d:44:
                    d2:07:a4:67:76:53:7f:3b:60:ad:65:b8:1a:70:3f:
                    ee:19:3a:9e:cf:44:d3:43:db:88:b7:7d:4a:18:ee:
                    ce:9c:b7:70:8d:63:d6:ec:fa:19:fc:6f:60:44:53:
                    34:e5:1e:c6:87:b2:c6:d5:00:b5:11:fb:6b:12:89:
                    35:76:06:73:a8:6f:f2:d3:58:62:33:5b:b9:9b:bf:
                    48:eb:7c:28:31:84:ba:08:43:78:97:66:4f:67:ff:
                    72:c7:f3:55:37:47:50:12:1e:48:40:4e:bb:8c:ce:
                    c9:40:a6:c7:f7:75:26:b1:45:99:fc:2f:92:61:c8:
                    54:79:2c:06:79:d3:59:f0:ff:f9:cf:d0:a3:15:5e:
                    68:7d:dd:32:ce:a3:13:c2:13:b1:d9:3b:76:a9:02:
                    b3:88:b2:3e:80:97:b6:d6:3d:35:b8:10:ce:e1:9d:
                    93:fe:ac:26:23:4c:2e:9e:19:a4:8e:25:c4:c6:e8:
                    fe:6d:28:60:ef:8d:87:b3:48:c9:83:e8:71:94:ee:
                    60:c7:7e:39:11:73:c7:df:bc:75:a7:27:6b:e8:a4:
                    41:11:a9:aa:8f:a2:09:96:36:0a:fb:0f:b5:f4:65:
                    24:73:21:88:a0:43:12:a4:18:b4:8b:70:46:5a:55:
                    84:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8B:B2:7D:FD:A0:F3:93:70:5B:82:4F:3A:91:05:51:1C:BC:AF:3F
            X509v3 Authority Key Identifier:
                keyid:C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:bb:a6:ed:d1:83:62:4e:c7:c7:8d:b5:dc:ca:13:ef:e4:ce:
         0f:21:5d:ae:17:fe:2d:3b:2a:51:37:34:39:04:b1:5f:40:aa:
         ed:57:cb:d0:0e:54:a3:96:d9:22:fc:13:15:93:94:d9:c7:1d:
         f2:bd:5b:90:20:74:7b:91:61:82:43:e2:f4:40:ff:7d:7b:af:
         da:43:82:0d:b1:30:47:af:fe:f0:db:49:4b:f9:c3:21:cb:dc:
         e8:e0:e2:24:70:3e:70:47:b0:38:ec:76:25:f4:5a:20:9c:ad:
         8d:80:ed:8c:2c:a2:09:ad:a2:28:48:a4:83:6d:80:60:29:38:
         b8:f2:f1:83:8f:f1:51:ca:d8:dd:76:f6:c3:20:dd:43:53:a7:
         0a:25:19:fe:5d:94:28:7f:ff:59:01:11:72:da:5f:8c:ac:75:
         f8:fc:31:fb:ea:dc:b7:ed:52:3e:bc:7d:68:77:ff:b1:78:e5:
         22:89:dd:d7:55:c0:e1:3d:31:d2:a2:0a:5f:ae:39:75:ca:c4:
         a1:25:8c:16:e8:15:4c:44:c6:1d:e9:bf:ce:a9:78:31:d1:12:
         6f:c5:e8:46:15:7a:ca:1d:a2:e7:1d:b0:f0:35:05:81:ec:61:
         fa:00:a4:89:5c:ae:9f:0a:81:1a:70:eb:5d:69:2e:38:c4:ed:
         a2:3f:d5:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxEovlVS1MNmcxCMIqf0S6jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMGFjNDU1ZWMwZWRlMjkzMGVhNTgxMDU3ZWUxZmY1OWY1
YmY2YzcwHhcNMjYwMjA5MjMwMDU3WhcNMjYwMjEwMjMwMDU3WjAzMTEwLwYDVQQD
EyhiMDhiYjI3ZGZkYTBmMzkzNzA1YjgyNGYzYTkxMDU1MTFjYmNhZjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydb/hjFIOXXulXY6XUTSB6RndlN/
O2CtZbgacD/uGTqez0TTQ9uIt31KGO7OnLdwjWPW7PoZ/G9gRFM05R7Gh7LG1QC1
EftrEok1dgZzqG/y01hiM1u5m79I63woMYS6CEN4l2ZPZ/9yx/NVN0dQEh5IQE67
jM7JQKbH93UmsUWZ/C+SYchUeSwGedNZ8P/5z9CjFV5ofd0yzqMTwhOx2Tt2qQKz
iLI+gJe21j01uBDO4Z2T/qwmI0wunhmkjiXExuj+bShg742Hs0jJg+hxlO5gx345
EXPH37x1pydr6KRBEamqj6IJljYK+w+19GUkcyGIoEMSpBi0i3BGWlWE8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCLsn39oPOTcFuCTzqRBVEcvK8/MB8GA1UdIwQY
MBaAFMAKxFXsDt4pMOpYEFfuH/WfW/bHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0FyRVZld08zaWt3NmxnUVYtNGY5WjliOXNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9lODFkMjYtODBmNC00MGYyLWJkYmQt
MDJjZjZiMGRiNjNiLzEvd0FyRVZld08zaWt3NmxnUVYtNGY5WjliOXNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9lODFkMjYtODBmNC00MGYyLWJkYmQtMDJjZjZiMGRiNjNi
LzEvd0FyRVZld08zaWt3NmxnUVYtNGY5WjliOXNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH7um7dGD
Yk7Hx4213MoT7+TODyFdrhf+LTsqUTc0OQSxX0Cq7VfL0A5Uo5bZIvwTFZOU2ccd
8r1bkCB0e5FhgkPi9ED/fXuv2kOCDbEwR6/+8NtJS/nDIcvc6ODiJHA+cEewOOx2
JfRaIJytjYDtjCyiCa2iKEikg22AYCk4uPLxg4/xUcrY3Xb2wyDdQ1OnCiUZ/l2U
KH//WQERctpfjKx1+Pwx++rct+1SPrx9aHf/sXjlIond11XA4T0x0qIKX645dcrE
oSWMFugVTETGHem/zql4MdESb8XoRhV6yh2i5x2w8DUFgexh+gCkiVyunwqBGnDr
XWkuOMTtoj/VCg==
-----END CERTIFICATE-----
Generated at Tue Feb 10 05:51:04 2026 by rpki-client