This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
File:                     wSgWX47uGF-q-aozh19O5BKxD4w.mft (raw, json)
Hash identifier:          NXUY1MQWyv+T+ZpdzeqzQboBokzo58CvaRv/Ve3ivDQ=
Subject key identifier:   77:42:B7:98:06:D2:C5:F1:D4:94:3B:11:80:5E:F1:30:95:61:2E:76
Authority key identifier: C1:28:16:5F:8E:EE:18:5F:AA:F9:AA:33:87:5F:4E:E4:12:B1:0F:8C
Certificate issuer:       /CN=c128165f8eee185faaf9aa33875f4ee412b10f8c
Certificate serial:       019C42EB5898131F4C067A8C74470EDB780C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
Manifest number:          120A
Signing time:             Mon 09 Feb 2026 15:00:45 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:45 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:45 +0000
Files and hashes:         1: epu072M-yH5fn0wfi8GRSm2aacI.roa (hash: 9aUM3YHdPt6HdRiEkTchPF8BsPvndsWsaCnn8YIY3Mc=)
                          2: wSgWX47uGF-q-aozh19O5BKxD4w.crl (hash: arBiss4cx+o5rYgAFZN6CuzI4bcMznLeXR+SpvthEMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:58:98:13:1f:4c:06:7a:8c:74:47:0e:db:78:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c128165f8eee185faaf9aa33875f4ee412b10f8c
        Validity
            Not Before: Feb  9 15:00:45 2026 GMT
            Not After : Feb 10 15:00:45 2026 GMT
        Subject: CN=7742b79806d2c5f1d4943b11805ef13095612e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:54:d6:ae:c3:a9:18:81:84:79:40:e5:60:16:
                    80:30:14:3d:b9:5e:6f:5d:1c:6e:b8:ab:6d:55:c9:
                    3d:a1:8e:51:ab:90:34:d9:96:1a:40:61:02:8b:38:
                    4c:49:db:19:04:bb:0b:25:09:96:ea:7b:c9:4e:88:
                    14:65:3c:ad:1a:e9:59:39:e5:a2:58:27:81:b8:40:
                    3f:e7:db:47:ad:e5:52:e1:54:c6:03:06:75:b3:ac:
                    23:01:b5:4f:3b:67:01:63:ad:a5:90:86:9e:87:0f:
                    2c:eb:9c:b3:9c:64:b1:63:69:74:83:78:ad:41:de:
                    8c:92:ee:43:c2:89:e3:59:32:dc:a1:52:4b:46:dd:
                    ff:24:9a:9a:c6:32:6c:7d:e6:9e:82:ef:7c:42:b5:
                    13:af:30:fb:17:27:67:a2:64:91:03:1b:56:fd:dd:
                    c9:17:d6:5e:01:74:4b:24:1a:8a:3b:3e:ce:94:c7:
                    0e:f5:75:8b:90:5a:68:2e:0b:5e:6c:d2:c1:84:74:
                    27:1a:cc:1a:33:0d:53:33:f3:c9:22:cb:c5:21:49:
                    33:97:ed:4d:c8:ec:cc:3f:be:d5:dc:ef:65:28:d4:
                    37:ef:7d:85:cb:c0:0a:3d:82:0f:d9:4f:28:e5:3f:
                    87:75:f7:83:b7:d7:6b:42:ca:37:03:a4:e2:79:e9:
                    e9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:42:B7:98:06:D2:C5:F1:D4:94:3B:11:80:5E:F1:30:95:61:2E:76
            X509v3 Authority Key Identifier:
                keyid:C1:28:16:5F:8E:EE:18:5F:AA:F9:AA:33:87:5F:4E:E4:12:B1:0F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:80:73:51:97:af:1c:86:fd:a4:5b:d8:bb:fc:bb:e4:af:8a:
         6b:09:2e:9a:36:df:6f:db:4a:20:6c:66:c0:2c:ca:c1:2a:f3:
         56:55:57:c2:d2:7b:4a:44:ad:70:65:27:ad:27:2a:45:19:12:
         66:21:77:a3:f0:36:e4:c3:22:a4:d4:f1:6c:41:cf:fb:93:f3:
         9b:4b:df:96:5a:ff:eb:a3:6d:b8:55:0d:6c:16:c9:42:41:ba:
         96:71:3b:c2:73:42:11:03:fb:67:ed:94:1f:7b:2f:99:86:d9:
         c3:7b:77:4d:9f:16:9e:b4:8d:e1:b3:cc:6d:88:5f:76:eb:6a:
         13:b0:12:08:1c:a1:f3:37:e3:5e:76:cb:e8:4d:a5:65:52:bb:
         d1:b8:b8:1a:13:1b:da:46:e4:87:f7:e3:0e:e7:40:8d:19:9a:
         5f:5b:7e:9a:65:e5:38:31:d0:d4:78:f6:e9:00:be:0a:cc:ff:
         3a:cd:dc:86:7b:6d:26:68:57:37:ab:a3:53:3d:24:5a:12:69:
         ec:4a:89:43:6b:48:89:7d:92:40:cd:50:0b:39:e0:2a:82:53:
         42:6f:7c:9d:04:bb:0b:64:9a:16:6b:e6:48:08:d2:9c:28:f5:
         4e:ae:68:4f:9c:c3:8b:df:5b:8d:bb:ef:c2:76:2e:2a:f6:3e:
         58:50:47:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC61iYEx9MBnqMdEcO23gMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMjgxNjVmOGVlZTE4NWZhYWY5YWEzMzg3NWY0ZWU0MTJi
MTBmOGMwHhcNMjYwMjA5MTUwMDQ1WhcNMjYwMjEwMTUwMDQ1WjAzMTEwLwYDVQQD
Eyg3NzQyYjc5ODA2ZDJjNWYxZDQ5NDNiMTE4MDVlZjEzMDk1NjEyZTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FTWrsOpGIGEeUDlYBaAMBQ9uV5v
XRxuuKttVck9oY5Rq5A02ZYaQGECizhMSdsZBLsLJQmW6nvJTogUZTytGulZOeWi
WCeBuEA/59tHreVS4VTGAwZ1s6wjAbVPO2cBY62lkIaehw8s65yznGSxY2l0g3it
Qd6Mku5DwonjWTLcoVJLRt3/JJqaxjJsfeaegu98QrUTrzD7FydnomSRAxtW/d3J
F9ZeAXRLJBqKOz7OlMcO9XWLkFpoLgtebNLBhHQnGswaMw1TM/PJIsvFIUkzl+1N
yOzMP77V3O9lKNQ3732Fy8AKPYIP2U8o5T+HdfeDt9drQso3A6Tieenp3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHdCt5gG0sXx1JQ7EYBe8TCVYS52MB8GA1UdIwQY
MBaAFMEoFl+O7hhfqvmqM4dfTuQSsQ+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1NnV1g0N3VHRi1xLWFvemgxOU81Qkt4RDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9hM2I4Y2QtNTZmYS00M2ExLThkYzEt
MmU1YWY1YjY4NzgxLzEvd1NnV1g0N3VHRi1xLWFvemgxOU81Qkt4RDR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9hM2I4Y2QtNTZmYS00M2ExLThkYzEtMmU1YWY1YjY4Nzgx
LzEvd1NnV1g0N3VHRi1xLWFvemgxOU81Qkt4RDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFYBzUZev
HIb9pFvYu/y75K+Kawkumjbfb9tKIGxmwCzKwSrzVlVXwtJ7SkStcGUnrScqRRkS
ZiF3o/A25MMipNTxbEHP+5Pzm0vfllr/66NtuFUNbBbJQkG6lnE7wnNCEQP7Z+2U
H3svmYbZw3t3TZ8WnrSN4bPMbYhfdutqE7ASCByh8zfjXnbL6E2lZVK70bi4GhMb
2kbkh/fjDudAjRmaX1t+mmXlODHQ1Hj26QC+Csz/Os3chnttJmhXN6ujUz0kWhJp
7EqJQ2tIiX2SQM1QCzngKoJTQm98nQS7C2SaFmvmSAjSnCj1Tq5oT5zDi99bjbvv
wnYuKvY+WFBHug==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:12 2026 by rpki-client