This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
File:                     wl1D3N4QuSMXnVsb106kOswiEJM.mft (raw, json)
Hash identifier:          f8GhVQ1TjSTP9ZzHH0Bq0SFCJBwtNGTGtLgExnd1ni4=
Subject key identifier:   07:65:2C:8E:2B:E6:43:FA:85:79:25:80:8B:6E:98:77:40:E9:41:07
Authority key identifier: C2:5D:43:DC:DE:10:B9:23:17:9D:5B:1B:D7:4E:A4:3A:CC:22:10:93
Certificate issuer:       /CN=c25d43dcde10b923179d5b1bd74ea43acc221093
Certificate serial:       019C41D8540C2DE4A4E9280D1135A766C9C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
Manifest number:          0D85
Signing time:             Mon 09 Feb 2026 10:00:22 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:22 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:22 +0000
Files and hashes:         1: hGM3IOEdtYvsaQdf8NpLCWgHOrY.roa (hash: vntZWOVkcSUsnEymKfN5wS2x8DI+HCyMmnVf/ey0knI=)
                          2: wl1D3N4QuSMXnVsb106kOswiEJM.crl (hash: fzRByHKn7VpQ7jFVf6cdZvTIdORQgTfelbCn8DMd/nM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:54:0c:2d:e4:a4:e9:28:0d:11:35:a7:66:c9:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c25d43dcde10b923179d5b1bd74ea43acc221093
        Validity
            Not Before: Feb  9 10:00:22 2026 GMT
            Not After : Feb 10 10:00:22 2026 GMT
        Subject: CN=07652c8e2be643fa857925808b6e987740e94107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:88:fe:50:15:37:d4:fd:66:cc:ae:53:45:bc:
                    be:9f:03:e3:fa:ff:32:07:0b:9c:3c:4c:e2:95:1f:
                    f5:bf:20:25:37:13:05:a0:91:6f:cb:0a:c8:e3:88:
                    7a:20:1d:8f:b6:0e:28:55:26:e6:4b:2e:4a:62:67:
                    ae:92:fd:d0:2f:4f:d8:15:62:63:37:82:3a:18:54:
                    83:38:d1:0b:b0:aa:0b:ea:21:44:e9:48:3f:12:d5:
                    27:3e:13:1e:55:63:e3:dd:52:30:90:f1:ed:6b:e4:
                    78:58:fe:6e:5f:08:41:ff:48:fe:b6:7e:1d:e8:0d:
                    72:83:e1:ab:af:af:c5:45:15:1a:c2:cf:f7:6a:f9:
                    28:5b:55:80:81:6d:f8:8d:40:d7:bb:d3:1b:6e:c3:
                    2e:3e:46:be:3d:b5:86:b6:ea:43:0b:7c:3b:f6:c7:
                    7b:8d:9d:eb:a4:ac:05:6b:af:74:ac:44:71:f5:a9:
                    73:43:19:57:8d:1e:e8:65:43:8e:1d:81:56:04:e1:
                    55:0e:f0:0f:df:2a:cb:db:56:57:97:31:b9:c0:20:
                    cc:30:97:97:75:dc:89:8e:e5:ee:83:f5:8d:d5:20:
                    a3:d5:5b:dd:9d:70:05:9c:1b:c7:e7:74:31:fa:f8:
                    ea:76:b8:fb:a8:d5:b9:79:1e:61:4c:45:e5:1a:d8:
                    5e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:65:2C:8E:2B:E6:43:FA:85:79:25:80:8B:6E:98:77:40:E9:41:07
            X509v3 Authority Key Identifier:
                keyid:C2:5D:43:DC:DE:10:B9:23:17:9D:5B:1B:D7:4E:A4:3A:CC:22:10:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:7e:b3:79:47:cf:ed:08:dc:cc:d9:0d:9c:72:8a:db:40:9f:
         f2:f4:c3:25:84:3d:ef:43:75:34:72:01:60:f4:50:3a:c9:53:
         42:00:fa:c6:95:96:a0:d5:82:a6:aa:15:4d:79:34:e7:14:de:
         cb:39:19:ee:32:c0:71:74:9b:2f:dd:13:43:5b:e5:ed:ac:ec:
         3d:b5:73:ae:75:de:07:86:e5:e9:27:fb:0d:ad:c8:f5:76:06:
         70:2a:96:37:9e:93:16:49:55:a1:ee:1e:91:08:f0:8c:bc:c7:
         b6:3f:38:2f:b3:b9:21:63:63:d3:2b:35:e1:b3:82:3d:45:10:
         54:1b:c2:a7:ac:21:9c:b5:76:03:91:87:0b:92:c4:b7:46:54:
         56:e8:e1:e0:ed:23:ab:b8:9d:46:0b:de:73:d3:8a:af:12:98:
         c2:ea:94:6a:36:bc:7f:95:d6:42:68:be:6b:53:37:74:58:bf:
         ca:f2:8e:06:8d:ec:71:f4:f7:74:ec:6d:e2:6c:fd:60:4a:b8:
         e3:60:08:b5:3c:99:cf:e1:b8:bf:e2:49:f6:b7:ec:e1:e7:58:
         ee:f3:98:41:d9:c3:3e:f9:f2:39:2d:b8:8f:61:e5:85:05:8b:
         e2:3f:3a:52:b8:b3:3d:20:66:4a:e5:14:62:69:11:22:05:57:
         e8:e2:7e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:50 2026 by rpki-client