This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
File:                     WLtUmHY5ugxs-8rVmMP145_KlFw.mft (raw, json)
Hash identifier:          TlBU5EW1VLrOfTwpDWbSQGfXrzB6sKT9yGXv5qZUIzw=
Subject key identifier:   E7:8B:2E:EF:CB:19:76:5B:C1:EC:2E:46:23:F1:B7:7C:DE:73:6B:62
Authority key identifier: 58:BB:54:98:76:39:BA:0C:6C:FB:CA:D5:98:C3:F5:E3:9F:CA:94:5C
Certificate issuer:       /CN=58bb54987639ba0c6cfbcad598c3f5e39fca945c
Certificate serial:       019C42EB6404847E9816A779A51FD4F365A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 15:00:48 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:48 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:48 +0000
Files and hashes:         1: OLEHUxF6oS2GH_zZGLZ59cbd0UM.roa (hash: iXyMvC2zcRw1kQk9NMVDBWBfZ7cLWCvnkd2tBslhHyk=)
                          2: WLtUmHY5ugxs-8rVmMP145_KlFw.crl (hash: kx6WofQcLxicxXDt+EyXdRxvUerOHvxfq0gK5bZNRkA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:64:04:84:7e:98:16:a7:79:a5:1f:d4:f3:65:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58bb54987639ba0c6cfbcad598c3f5e39fca945c
        Validity
            Not Before: Feb  9 15:00:48 2026 GMT
            Not After : Feb 10 15:00:48 2026 GMT
        Subject: CN=e78b2eefcb19765bc1ec2e4623f1b77cde736b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:80:a1:0e:f1:f7:1b:ba:78:40:ac:86:31:14:
                    ba:61:36:a8:f6:e5:5a:46:35:f2:e5:ee:f8:4d:9f:
                    12:53:46:b0:d4:f0:89:e9:67:36:2e:d1:83:7e:6b:
                    6f:5f:d5:57:8d:88:1e:89:a0:8b:83:e4:81:e1:69:
                    8d:aa:77:31:df:91:9b:87:23:4a:7d:68:4f:62:ff:
                    21:45:56:5d:8f:f4:e0:13:45:39:b5:81:06:3c:7f:
                    15:39:2f:83:7d:77:e6:04:4d:e5:14:5e:b5:ce:69:
                    18:e2:6e:10:55:b1:65:b2:31:67:ae:a8:74:4c:b3:
                    73:3e:ef:14:13:f1:0e:1d:29:64:b0:04:cc:ba:d3:
                    91:f8:8b:2d:0a:0c:e9:bf:1b:0e:6f:ff:cf:52:f0:
                    76:36:46:2f:16:e5:7a:b7:eb:20:96:72:d5:3e:f3:
                    54:05:00:22:e2:8d:31:c8:df:b1:6c:a9:a9:4a:15:
                    1f:e8:8e:ff:82:4a:c8:7f:bb:2a:cf:4e:23:78:71:
                    20:83:1e:27:36:58:8b:4b:de:2a:d6:c4:24:07:84:
                    79:0f:ba:bb:c3:0d:49:b5:d1:76:31:6f:97:a6:34:
                    c8:98:77:aa:8c:78:e0:1d:6f:6b:d4:0b:dc:94:4b:
                    98:8b:f4:e8:28:eb:b6:15:b8:ce:f6:69:d1:db:04:
                    f3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:8B:2E:EF:CB:19:76:5B:C1:EC:2E:46:23:F1:B7:7C:DE:73:6B:62
            X509v3 Authority Key Identifier:
                keyid:58:BB:54:98:76:39:BA:0C:6C:FB:CA:D5:98:C3:F5:E3:9F:CA:94:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:3a:0e:fd:1f:3a:e6:49:4d:7e:5f:28:56:82:fb:73:37:05:
         47:be:9f:02:be:2a:46:a7:c7:e6:00:a9:b1:35:36:0a:d8:26:
         3a:bc:d3:1a:af:0a:17:23:cd:b1:37:d8:3f:ca:a3:0f:48:bd:
         8d:7e:3f:01:84:05:f9:5e:99:55:57:6b:a6:8e:59:2b:3a:2d:
         3e:5b:e2:31:9a:cb:7b:81:b8:75:13:98:71:71:24:12:34:82:
         97:e2:8b:62:0f:32:f9:32:f6:2f:94:84:13:bb:84:2f:b9:34:
         c8:29:39:9b:36:72:5c:22:83:12:4d:14:a6:d5:8d:e3:95:36:
         d5:86:2d:27:90:7b:2d:74:dc:79:86:c3:ba:b1:48:37:3e:ed:
         1d:22:65:2e:0f:f9:0b:42:13:3f:b3:43:a2:2d:25:69:66:bb:
         06:74:0d:bf:41:14:44:10:17:5d:61:6f:87:d9:21:01:4a:fd:
         8b:3a:39:d5:58:4f:c9:a6:62:74:95:73:13:9b:c4:71:16:6d:
         3f:1c:c7:dc:16:b5:3a:18:55:9a:f6:16:f7:c2:9e:b9:8a:1a:
         e9:1c:5b:f6:80:87:09:50:04:1d:12:69:b5:88:72:c6:dc:31:
         13:82:f2:48:bc:8a:8a:b3:cb:0b:a6:1e:5b:f8:ca:98:fc:cf:
         93:09:e2:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC62QEhH6YFqd5pR/U82WiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YmI1NDk4NzYzOWJhMGM2Y2ZiY2FkNTk4YzNmNWUzOWZj
YTk0NWMwHhcNMjYwMjA5MTUwMDQ4WhcNMjYwMjEwMTUwMDQ4WjAzMTEwLwYDVQQD
EyhlNzhiMmVlZmNiMTk3NjViYzFlYzJlNDYyM2YxYjc3Y2RlNzM2YjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoChDvH3G7p4QKyGMRS6YTao9uVa
RjXy5e74TZ8SU0aw1PCJ6Wc2LtGDfmtvX9VXjYgeiaCLg+SB4WmNqncx35GbhyNK
fWhPYv8hRVZdj/TgE0U5tYEGPH8VOS+DfXfmBE3lFF61zmkY4m4QVbFlsjFnrqh0
TLNzPu8UE/EOHSlksATMutOR+IstCgzpvxsOb//PUvB2NkYvFuV6t+sglnLVPvNU
BQAi4o0xyN+xbKmpShUf6I7/gkrIf7sqz04jeHEggx4nNliLS94q1sQkB4R5D7q7
ww1JtdF2MW+XpjTImHeqjHjgHW9r1AvclEuYi/ToKOu2FbjO9mnR2wTzQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOeLLu/LGXZbwewuRiPxt3zec2tiMB8GA1UdIwQY
MBaAFFi7VJh2OboMbPvK1ZjD9eOfypRcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0x0VW1IWTV1Z3hzLThyVm1NUDE0NV9LbEZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8yM2EyYjItNjliYi00OTMzLWFlNmYt
OGM5ZjJkNzA1OTQ4LzEvV0x0VW1IWTV1Z3hzLThyVm1NUDE0NV9LbEZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8yM2EyYjItNjliYi00OTMzLWFlNmYtOGM5ZjJkNzA1OTQ4
LzEvV0x0VW1IWTV1Z3hzLThyVm1NUDE0NV9LbEZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASjoO/R86
5klNfl8oVoL7czcFR76fAr4qRqfH5gCpsTU2CtgmOrzTGq8KFyPNsTfYP8qjD0i9
jX4/AYQF+V6ZVVdrpo5ZKzotPlviMZrLe4G4dROYcXEkEjSCl+KLYg8y+TL2L5SE
E7uEL7k0yCk5mzZyXCKDEk0UptWN45U21YYtJ5B7LXTceYbDurFINz7tHSJlLg/5
C0ITP7NDoi0laWa7BnQNv0EURBAXXWFvh9khAUr9izo51VhPyaZidJVzE5vEcRZt
PxzH3Ba1OhhVmvYW98KeuYoa6Rxb9oCHCVAEHRJptYhyxtwxE4LySLyKirPLC6Ye
W/jKmPzPkwnioQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:41:21 2026 by rpki-client