This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft
File:                     wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft (raw, json)
Hash identifier:          HuU+1bMgSwv3IA+zhTb1gQturjGp3WpkYAyKx3ONBrE=
Subject key identifier:   60:6B:AE:BD:4C:00:59:21:56:46:18:CD:82:9D:5E:2B:09:DC:9E:CD
Authority key identifier: C0:4F:7F:C8:83:C9:D5:E0:23:1A:58:5B:0A:E1:39:E7:86:54:3B:B6
Certificate issuer:       /CN=c04f7fc883c9d5e0231a585b0ae139e786543bb6
Certificate serial:       019C4133876A17C465CB2E516A735AE37CDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft
Manifest number:          0A35
Signing time:             Mon 09 Feb 2026 07:00:21 +0000
Manifest this update:     Mon 09 Feb 2026 07:00:21 +0000
Manifest next update:     Tue 10 Feb 2026 07:00:21 +0000
Files and hashes:         1: h0udnEUnZF4CgPhVM04ofBmSvzQ.roa (hash: 86Ue2QRslfOBTNicHKV9wxjZDnUc41ToAUPvqZQH7cs=)
                          2: wE9_yIPJ1eAjGlhbCuE554ZUO7Y.crl (hash: IzgrFfeSjF7mFqV90x6r5t/pusLOrF/wwc549tQQbkQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 07:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:33:87:6a:17:c4:65:cb:2e:51:6a:73:5a:e3:7c:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c04f7fc883c9d5e0231a585b0ae139e786543bb6
        Validity
            Not Before: Feb  9 07:00:21 2026 GMT
            Not After : Feb 10 07:00:21 2026 GMT
        Subject: CN=606baebd4c005921564618cd829d5e2b09dc9ecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cc:ed:68:60:4b:a0:9a:e5:5a:a1:41:e8:82:
                    1e:b4:aa:b4:3b:8a:4a:9e:db:80:89:0a:0d:7f:81:
                    34:cb:84:25:9c:dc:c1:ea:0e:86:43:c0:7e:f1:3f:
                    2e:88:ff:f0:3c:fe:69:7e:c0:5f:9e:90:1a:84:8f:
                    14:a0:50:11:bd:fd:38:e5:36:fc:94:bf:64:9a:90:
                    2f:5d:14:9f:b1:ec:c3:7b:97:fb:82:21:7c:89:93:
                    3a:f4:0f:44:76:76:c9:c0:66:5a:aa:f9:45:ae:af:
                    44:dd:32:dc:d7:1e:5f:86:65:5e:00:5d:84:cc:22:
                    14:15:10:3c:53:05:5d:88:ec:4b:0c:15:24:a5:ae:
                    87:be:1b:d0:06:11:08:a5:1a:72:4b:64:b5:07:a6:
                    db:98:05:43:19:16:63:d9:d3:73:6c:bd:ba:8f:4e:
                    99:12:ad:62:9f:3e:7e:45:eb:19:7a:b8:be:71:34:
                    a0:e3:d8:cf:7a:1c:a7:5f:c0:5e:7b:22:b1:77:67:
                    40:1f:39:53:ba:5d:62:b6:41:c7:7d:47:66:17:bc:
                    f3:59:16:63:ee:17:89:37:0b:0e:a0:02:2b:75:d7:
                    c0:71:1b:93:e5:aa:42:4c:60:f6:64:91:5a:93:a6:
                    90:21:5d:5d:b9:e1:ea:a5:04:69:83:75:b7:67:3b:
                    6b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:6B:AE:BD:4C:00:59:21:56:46:18:CD:82:9D:5E:2B:09:DC:9E:CD
            X509v3 Authority Key Identifier:
                keyid:C0:4F:7F:C8:83:C9:D5:E0:23:1A:58:5B:0A:E1:39:E7:86:54:3B:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:7f:12:33:d6:2f:91:3a:ed:a0:b5:bf:64:b0:65:e3:3f:64:
         32:a3:ca:59:5a:1f:e4:36:7e:73:a7:32:dd:32:fe:a4:83:71:
         fa:9a:ce:2e:9f:d1:d4:27:bb:bc:5d:f8:ba:20:fd:ad:25:eb:
         a5:44:0e:e1:0a:6b:34:7b:ec:7e:74:f0:0d:cb:db:a3:02:47:
         f7:38:f3:63:37:c2:af:60:6f:52:40:ec:64:12:ec:43:a7:12:
         5c:c4:b7:c0:1a:8a:55:90:77:52:29:f9:ae:df:9b:fc:04:d7:
         b0:bb:54:b9:84:38:94:19:6b:34:6b:fb:8e:7f:1e:79:ab:a5:
         38:f6:80:d1:74:e3:88:7d:cc:cf:b9:2a:bc:67:75:96:97:4b:
         f6:c9:0e:77:8e:44:f8:82:61:0b:9c:1d:68:e0:59:bf:de:9a:
         bb:24:70:c1:07:af:ca:7a:b3:9a:14:d0:9d:c7:94:70:0d:4b:
         7d:b9:a5:5c:2e:e5:a9:87:4b:d3:dc:ca:5a:9d:0f:eb:c3:fc:
         14:53:2f:ae:5e:cb:a2:2f:66:6b:91:8f:15:c0:a3:de:43:fb:
         79:c4:23:eb:f1:a8:3a:83:e9:15:c0:1d:50:8d:6e:fd:ac:06:
         a6:06:bb:4e:67:12:f5:67:05:cf:97:6f:81:b3:cd:1d:34:1f:
         4e:06:bb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:34 2026 by rpki-client