This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
File:                     WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft (raw, json)
Hash identifier:          +qxBEcBSgpwTtTJSX3+LY1G0OKVO03AVE7cjRlXvrhs=
Subject key identifier:   06:70:20:EE:81:E1:25:C4:60:BD:01:1A:5D:1D:F5:07:E1:D8:C6:87
Authority key identifier: 58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
Certificate issuer:       /CN=586936266e980dd203b2cbeb1c9c4570604b911b
Certificate serial:       019C44DA511546ABAB071B304545FA5157B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
Manifest number:          1618
Signing time:             Tue 10 Feb 2026 00:01:24 +0000
Manifest this update:     Tue 10 Feb 2026 00:01:24 +0000
Manifest next update:     Wed 11 Feb 2026 00:01:24 +0000
Files and hashes:         1: 0nOiMnA6NV5WBK1GGQJdf5u0R7Q.roa (hash: kZAZ+FtKOmvNUJYXZ93DTfdC6kgpQf3D40b45bZU8Bg=)
                          2: WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl (hash: OMZidVXaBIPO7t9Cs+c8zqdnCusOKLmt3K4jVfkH6lQ=)
                          3: hjf42_UdZaBcTmMxK9JfIjVnYF4.roa (hash: XYP9CSJ0v1KuulLYS04N8rRaMuUIS0Lpmjnr6cJWmek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:da:51:15:46:ab:ab:07:1b:30:45:45:fa:51:57:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=586936266e980dd203b2cbeb1c9c4570604b911b
        Validity
            Not Before: Feb 10 00:01:24 2026 GMT
            Not After : Feb 11 00:01:24 2026 GMT
        Subject: CN=067020ee81e125c460bd011a5d1df507e1d8c687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:11:86:65:d9:6b:3c:35:b8:86:89:32:95:12:
                    27:a8:a2:00:45:95:8b:c3:32:d3:d6:08:dd:ed:3f:
                    5d:94:64:92:f6:b4:92:ec:cc:24:f3:c2:c0:d7:4f:
                    d4:54:13:bd:de:76:c9:a7:84:4c:cd:7f:96:45:ff:
                    dc:27:10:5a:60:30:b8:d6:f9:8a:d0:27:1f:a6:c4:
                    04:ee:c1:21:71:9f:e3:69:ca:57:d1:03:ba:ce:ff:
                    e3:38:1d:63:22:f6:15:ec:28:e9:de:62:81:9c:e1:
                    a5:c7:f6:be:1a:92:9c:e0:6c:6d:93:a2:e0:f0:09:
                    f2:39:64:3e:c4:ab:00:f4:8a:5b:32:5f:6d:a1:4c:
                    8d:39:be:40:8f:a9:8e:1a:23:8f:52:15:ff:f3:fa:
                    1f:3f:3e:3e:9f:e4:bf:23:c7:23:ee:08:97:d5:95:
                    a3:a6:ed:65:4c:0d:52:d0:ed:31:35:02:f8:5e:ee:
                    69:7b:1d:f5:b1:ed:c8:ce:72:af:45:c6:9b:ed:01:
                    91:d6:cd:7b:eb:cb:59:36:7d:29:19:14:9f:08:1c:
                    cc:02:e3:7a:4f:3d:b8:41:7a:27:cc:24:ae:32:b5:
                    c1:f5:12:ac:ed:98:12:9f:bd:c1:0e:96:8a:c1:a4:
                    7d:ba:da:17:f6:32:14:3b:27:43:2e:c6:f1:57:2c:
                    96:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:70:20:EE:81:E1:25:C4:60:BD:01:1A:5D:1D:F5:07:E1:D8:C6:87
            X509v3 Authority Key Identifier:
                keyid:58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:89:11:c3:c7:ba:ac:78:85:9e:e5:b6:85:65:78:c9:78:c2:
         42:c2:cd:2a:18:a1:86:a0:e0:33:07:b5:f7:bb:70:cd:3e:56:
         cf:cf:0d:00:fb:61:62:e8:6b:dc:11:4f:bb:9c:12:45:f1:98:
         d8:e6:dc:37:d2:ae:d9:eb:ef:c8:52:34:4d:c4:52:05:ac:02:
         3b:ab:a8:3a:78:e3:6d:de:72:05:d1:d7:28:b3:81:98:eb:6a:
         3c:ad:76:70:e5:26:34:5d:cf:11:60:90:61:0c:0b:b2:4f:34:
         6c:29:3b:27:cb:ad:88:3c:3c:9d:d9:3f:f6:bf:f7:84:b5:cb:
         e9:12:05:1c:48:72:ec:ac:10:33:43:4b:c8:f8:f7:1b:82:e8:
         64:a2:4a:9a:5a:68:84:f8:19:c5:3b:68:c6:8f:03:99:a0:9f:
         bc:34:1f:89:4b:1b:14:f7:21:3c:14:0c:a7:20:be:f5:57:9f:
         a3:a8:b4:ad:b4:10:f8:01:e8:d1:a8:f6:46:5f:b3:db:f0:4e:
         94:45:55:0c:8e:e7:ce:0e:71:e5:7c:e4:72:8f:7d:7a:ea:4c:
         6d:0d:3a:d9:74:22:aa:9e:e9:ac:2b:9f:dc:b4:f1:ee:3a:33:
         db:f5:2c:25:2a:ec:bf:81:b0:e2:3e:5c:af:6b:ae:d1:d2:77:
         62:b4:39:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 05:50:52 2026 by rpki-client