This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft
File:                     1wNkIHbSfiUvqQvxpClvi82dDPE.mft (raw, json)
Hash identifier:          luGROGCSUatgLCcgaDqgnzlgktblh1Jj04Tgs4dmrRg=
Subject key identifier:   FF:FD:B3:34:28:C6:04:5C:85:BC:7C:03:D7:45:4D:31:84:EA:12:E1
Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
Certificate issuer:       /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Certificate serial:       019C4359463C488CF5E603A0973BA9F7E0C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft
Manifest number:          181A
Signing time:             Mon 09 Feb 2026 17:00:49 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:49 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:49 +0000
Files and hashes:         1: 1wNkIHbSfiUvqQvxpClvi82dDPE.crl (hash: WhGCNxd9qBNgZWevmoknHAgnAyYmo2iSAFns9JssPXU=)
                          2: 6mvUdK2sJwETz4cqi4djiQKdMUQ.roa (hash: buR6ykljG7LAqYhxUka9PO0/x3h8cTppZNDgptnhgrU=)
                          3: GAkBUkP8O44HfA6UaUDucppg-zQ.roa (hash: H7w0TIFmG05ogbUF44/87E8bKqO7AppZ4RVUKMn1LjM=)
                          4: TqaRlv7nhvg_q1QJfNxKvCz6Es4.roa (hash: gXAZNWfcjeZpPsYrp9FhwN0x/FJK/I6F7O8+Py5tCqI=)
                          5: gq-wS1-FKcHhFx26F3VsD_Kp72Y.roa (hash: TF4H2aT6JRXNsprJBLWhkIJdEFblvAAuKU3lRYmbao8=)
                          6: sX1Br24qCtbNCJL4I_c1pDchwkc.roa (hash: VEqEzFdjyTuor8EJZXXTMl1wEKD0Q9Jesc0bkdw7VYg=)
                          7: vdMRJ5aeJMjPnWdXFF9CeJUbNPU.roa (hash: MD01V65vyHAdTu6f2/Lr5HRyugzVDjKE7/qB7jMnsR4=)
                          8: zJoT4iPL7bGeeqxblvQwWjwRGtE.roa (hash: 52rRN9qQv8q8ND4jnZa+4/MKa8fwhT42vyeHiOKQTko=)
                          9: zkxMCcGoaYzw6MrkLQogXuC04_I.roa (hash: 7Y4R/zBLEg3xanLWgu8jUnFDOXWl73uX33xCHdArZKE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:46:3c:48:8c:f5:e6:03:a0:97:3b:a9:f7:e0:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
        Validity
            Not Before: Feb  9 17:00:49 2026 GMT
            Not After : Feb 10 17:00:49 2026 GMT
        Subject: CN=fffdb33428c6045c85bc7c03d7454d3184ea12e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:7f:8a:58:14:35:c6:42:7e:c9:11:fd:2d:9e:
                    96:c5:61:55:d0:8a:f3:18:47:7c:d0:95:5a:b7:8d:
                    66:ad:d3:68:42:46:29:7d:5c:f9:e6:6b:26:18:6d:
                    8c:e3:e0:ca:e0:b2:f8:83:01:41:45:bb:89:ab:cd:
                    8e:5e:70:27:ef:fc:6c:b5:1e:46:1a:11:a0:f1:20:
                    3f:0a:11:49:67:fc:9a:2e:36:8a:7c:fc:47:22:c7:
                    d1:f0:24:e1:db:69:5e:22:f2:83:6c:ab:d3:f6:2c:
                    3d:ab:fd:ca:f8:26:7c:32:36:da:92:db:92:4f:1e:
                    e0:44:dd:23:a0:47:2e:bd:01:8a:c5:2e:98:7d:81:
                    02:e8:ba:02:5a:a6:38:96:f3:a2:4d:41:c5:19:ab:
                    59:f8:ed:7b:86:c2:09:cd:c1:63:ef:19:24:c4:9e:
                    1b:f7:df:67:5c:50:b8:c3:0f:db:a9:ae:14:52:01:
                    76:65:84:8c:b9:49:14:a8:92:20:c2:79:76:24:c4:
                    67:97:b6:a4:e6:65:4a:b3:32:99:01:96:44:7d:09:
                    8d:9f:e0:b0:c5:f8:9b:b1:97:af:9b:ef:43:86:17:
                    7c:cf:ed:97:2c:2a:be:7c:9d:99:5b:11:50:b2:9c:
                    1d:7b:d0:f8:3e:56:3d:e6:a8:4b:de:c7:b2:cc:a1:
                    4b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FD:B3:34:28:C6:04:5C:85:BC:7C:03:D7:45:4D:31:84:EA:12:E1
            X509v3 Authority Key Identifier:
                keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:01:e6:8a:a1:14:1d:df:ab:27:7c:46:25:62:da:9a:61:6e:
         1b:e6:26:ea:bc:23:b9:8b:d7:4f:c5:e9:94:62:bd:bc:03:be:
         40:4c:1e:4a:f9:d2:3c:6d:9f:fa:80:25:4d:82:1c:ba:a4:2e:
         14:82:0a:2a:97:a2:39:03:65:3f:20:a7:b6:a7:04:c2:72:74:
         6c:ae:c9:9d:4f:d7:11:68:84:95:28:ad:67:c8:c8:36:10:3d:
         a1:5b:7d:69:06:a0:15:ad:05:a0:0c:68:cd:14:3a:52:82:50:
         52:5d:d6:23:5d:97:84:5b:ac:fd:9d:a0:71:39:bf:9b:1e:33:
         41:9a:a3:46:26:d5:6a:be:3a:7d:90:d8:1d:a0:50:ce:8c:90:
         98:af:9a:6b:04:0e:31:67:42:05:37:79:f8:f5:c7:b2:0f:5a:
         a8:0d:25:e5:da:7d:6f:f6:b8:dc:6c:9c:f9:ea:1d:26:b0:8e:
         83:71:04:c1:45:3e:fd:40:fe:0d:98:70:63:3c:4d:f5:bb:4d:
         9d:54:27:fe:99:75:13:26:2a:ed:2f:84:e7:f8:eb:94:c9:39:
         73:ac:51:b8:80:17:09:65:08:07:8d:9a:4f:e3:f4:37:9c:b4:
         b5:91:ee:e1:55:2e:cc:8d:4d:dd:2a:82:84:70:4a:76:cd:60:
         55:11:a9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:30:29 2026 by rpki-client