This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft
File:                     rwmHHP1haABnerIynsumHed3V-Y.mft (raw, json)
Hash identifier:          CC0yO5KPmeoxeZy2yIJ0wz2gWBYC8ft6dn6Y3Sn+z2k=
Subject key identifier:   ED:70:16:A5:F1:8C:75:68:26:4E:DF:95:C3:BB:F9:28:1F:07:B1:9E
Authority key identifier: AF:09:87:1C:FD:61:68:00:67:7A:B2:32:9E:CB:A6:1D:E7:77:57:E6
Certificate issuer:       /CN=af09871cfd616800677ab2329ecba61de77757e6
Certificate serial:       019C446B6BC76DAE00E994493FE9A7EFEBE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rwmHHP1haABnerIynsumHed3V-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft
Manifest number:          0379
Signing time:             Mon 09 Feb 2026 22:00:16 +0000
Manifest this update:     Mon 09 Feb 2026 22:00:16 +0000
Manifest next update:     Tue 10 Feb 2026 22:00:16 +0000
Files and hashes:         1: rwmHHP1haABnerIynsumHed3V-Y.crl (hash: bwzv0RTJ8kjQtkXSXoOCoKolX+N5lCdu9jSutL0eiUI=)
                          2: sFH6tWzzYMXYUh7zqttZsCWMvMI.roa (hash: rMgpOgG2cc64wCq+Cnj2ujaXEIMlsqr7PQwXm/GHr1g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rwmHHP1haABnerIynsumHed3V-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6b:6b:c7:6d:ae:00:e9:94:49:3f:e9:a7:ef:eb:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af09871cfd616800677ab2329ecba61de77757e6
        Validity
            Not Before: Feb  9 22:00:16 2026 GMT
            Not After : Feb 10 22:00:16 2026 GMT
        Subject: CN=ed7016a5f18c7568264edf95c3bbf9281f07b19e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0d:f4:07:a3:69:00:6b:c0:3a:75:0c:f5:6e:
                    08:94:91:cd:77:0e:2a:8f:9c:a3:42:74:4f:37:b5:
                    e6:9e:b3:81:3a:63:d2:10:9f:a5:2f:2b:7a:4e:33:
                    f5:83:46:82:9f:d0:e5:ab:d4:fe:83:07:15:80:85:
                    7a:b5:71:70:c7:c3:dd:81:fc:a6:ae:2f:d9:36:e5:
                    89:7b:fa:28:1e:8d:8f:85:0c:22:13:46:13:f6:43:
                    57:55:6b:8f:b6:89:dd:5b:0d:cf:98:ab:9f:e2:22:
                    a6:a0:e3:ac:f5:ee:66:76:ab:53:e2:f8:58:19:a9:
                    ec:8f:56:34:df:76:87:99:b1:3f:f8:54:e0:e0:98:
                    95:7d:21:f3:16:21:15:d3:ed:4f:3b:20:4d:81:5d:
                    c9:15:17:12:68:59:c4:ca:87:87:5c:8f:20:ae:eb:
                    15:b4:ec:9e:ea:95:ff:b5:26:e2:5c:a0:79:59:ad:
                    e7:b0:bb:52:21:75:ee:bd:72:03:9e:5b:21:2e:dc:
                    37:8c:b5:0c:82:aa:c0:8f:c2:e7:01:c4:21:ea:e6:
                    a8:5f:b8:13:9f:25:7e:d3:30:ea:b3:d8:03:d8:92:
                    45:4d:47:78:dd:0b:82:f8:32:62:b3:be:83:b6:36:
                    27:49:66:ab:03:ad:9d:18:76:1c:38:ba:a7:ec:2b:
                    b7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:70:16:A5:F1:8C:75:68:26:4E:DF:95:C3:BB:F9:28:1F:07:B1:9E
            X509v3 Authority Key Identifier:
                keyid:AF:09:87:1C:FD:61:68:00:67:7A:B2:32:9E:CB:A6:1D:E7:77:57:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwmHHP1haABnerIynsumHed3V-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:40:c6:64:c0:b7:c0:63:e0:46:9b:44:9c:42:8e:09:e5:9e:
         32:90:1b:e2:57:1e:91:f7:5b:56:cc:49:6b:34:ec:ca:fc:fa:
         e7:f3:cc:4e:aa:75:9f:3a:40:9b:f0:ef:de:db:75:c0:cf:3a:
         d8:ab:c9:cd:8c:c5:27:0f:af:71:4d:81:d3:aa:99:8e:e6:f8:
         75:37:83:5c:d9:a3:8f:53:81:fd:a3:26:d9:2f:6d:d7:42:a0:
         14:d8:06:90:d8:b0:7d:4f:db:23:77:11:47:f2:be:26:5c:89:
         37:ed:c1:66:c0:70:d9:19:84:a3:91:9d:07:a1:f3:03:2a:82:
         dc:f6:63:37:63:37:6a:b9:e6:90:00:e3:76:92:04:e8:67:76:
         51:02:97:01:f2:2b:4a:c1:fa:da:b1:8b:78:44:8c:38:80:a1:
         22:2a:46:a5:e2:34:f9:77:87:2e:2d:f6:db:88:d3:81:49:90:
         44:0c:ba:24:ba:a2:6f:04:f0:fb:07:48:a9:3d:21:b8:ff:d3:
         55:28:ec:dc:ff:fb:45:64:27:a7:5c:53:26:d6:66:37:82:35:
         23:f9:3f:9e:83:f8:68:14:67:c0:7f:f9:ae:a5:4e:88:ed:e3:
         3b:e7:43:b4:c0:3e:1e:c6:3c:6f:f3:ed:eb:8e:cb:1d:b0:27:
         24:e8:52:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:07:54 2026 by rpki-client