This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.mft
File:                     WrJabDkrjmejrSH2D9MxHWt_Hlw.mft (raw, json)
Hash identifier:          QlyZjYACzv9oouSux1yZs0kMPD+ww4NixBoZzSBvA3M=
Subject key identifier:   EF:CB:23:BB:29:D2:63:B5:9C:1E:33:BE:64:FA:23:50:3E:2B:A6:DC
Authority key identifier: 5A:B2:5A:6C:39:2B:8E:67:A3:AD:21:F6:0F:D3:31:1D:6B:7F:1E:5C
Certificate issuer:       /CN=5ab25a6c392b8e67a3ad21f60fd3311d6b7f1e5c
Certificate serial:       019C432226542C813BA5CEC33FEAC79591DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WrJabDkrjmejrSH2D9MxHWt_Hlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.mft
Manifest number:          10AB
Signing time:             Mon 09 Feb 2026 16:00:37 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:37 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:37 +0000
Files and hashes:         1: WrJabDkrjmejrSH2D9MxHWt_Hlw.crl (hash: Efohg+Wdzu5wffRSkEKRFVUgd+cd3pIjeyf/yZLfDj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WrJabDkrjmejrSH2D9MxHWt_Hlw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:26:54:2c:81:3b:a5:ce:c3:3f:ea:c7:95:91:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ab25a6c392b8e67a3ad21f60fd3311d6b7f1e5c
        Validity
            Not Before: Feb  9 16:00:37 2026 GMT
            Not After : Feb 10 16:00:37 2026 GMT
        Subject: CN=efcb23bb29d263b59c1e33be64fa23503e2ba6dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bd:5d:97:17:ca:b3:90:f3:4f:0b:00:91:3b:
                    61:4e:ab:ee:6a:ef:7d:be:65:1f:c6:f7:37:3b:ab:
                    74:9d:09:9d:3a:2c:9f:72:9c:9f:89:7b:54:e5:7f:
                    f3:40:17:f5:3d:6c:97:32:da:f2:da:47:c6:88:99:
                    e9:5a:81:98:f8:2e:8b:a8:52:92:23:a0:2f:e4:bc:
                    a6:ee:68:d3:2c:6c:dd:cf:64:62:74:b8:98:58:ed:
                    96:ad:b6:6e:02:13:6c:b7:aa:81:6e:a5:94:27:f3:
                    80:1c:54:f3:f9:37:df:33:9a:39:f3:f0:e6:4a:e8:
                    d5:6d:7f:96:52:98:66:66:a1:f8:5f:7e:0f:2b:9e:
                    70:9c:41:b2:71:7c:f5:6b:8c:25:3a:13:1c:d5:20:
                    b2:1f:de:d3:b2:94:ec:5c:8e:0c:f8:ca:13:ad:e3:
                    15:38:c9:54:e2:0b:a7:94:73:f1:cb:58:ad:44:ba:
                    05:32:ff:17:a7:ff:ff:6e:3b:63:9e:03:c9:89:33:
                    e7:e2:a3:62:5c:4b:18:8e:b5:92:bd:ed:07:78:15:
                    1a:b8:6d:e9:c7:b5:a7:70:53:8d:44:0b:97:ca:c7:
                    f9:ed:32:84:32:bd:07:67:02:e0:85:dc:38:5f:a5:
                    f5:77:39:29:25:00:a9:c9:9d:e3:96:24:95:08:d9:
                    0e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CB:23:BB:29:D2:63:B5:9C:1E:33:BE:64:FA:23:50:3E:2B:A6:DC
            X509v3 Authority Key Identifier:
                keyid:5A:B2:5A:6C:39:2B:8E:67:A3:AD:21:F6:0F:D3:31:1D:6B:7F:1E:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WrJabDkrjmejrSH2D9MxHWt_Hlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:32:8b:7a:61:93:cf:01:bf:ba:21:b3:97:d1:7e:7d:2c:bf:
         b6:3a:2c:ab:bf:44:11:0a:ce:7f:f7:67:0b:f5:93:14:60:b2:
         35:c6:f0:2a:a8:0b:8a:42:93:3c:3a:9a:bf:e2:26:00:f4:b0:
         39:1c:a3:13:5c:46:18:ab:2e:52:e6:06:85:19:86:0b:7f:ba:
         af:3b:66:e2:f2:9c:05:e9:a6:08:ca:1e:a0:c1:b5:d1:25:10:
         f9:d6:6f:e4:90:b8:d3:44:62:18:00:8c:f2:f9:92:92:76:41:
         a8:1b:3c:da:1b:a4:d8:0e:ad:3f:ef:a5:2d:23:99:0e:fd:d4:
         84:4a:36:69:e7:65:43:b9:af:60:1e:c2:de:a3:b9:94:cc:1f:
         5a:1d:12:2f:f7:00:eb:d3:53:d5:83:d6:96:72:b0:e2:d6:d9:
         af:c7:ef:e8:40:39:58:0a:1e:06:71:7f:ac:57:78:94:55:bf:
         b1:76:09:fa:be:00:10:e5:bb:34:5a:f3:59:67:f7:e4:6d:1b:
         bd:64:a5:9c:38:08:58:ef:60:97:05:17:ad:3e:5d:17:3c:6a:
         a2:2b:a7:90:4e:9a:69:a4:3f:a9:bd:2f:97:a0:cd:5e:e5:7a:
         50:08:01:2b:b1:47:15:f6:6b:75:d8:23:6a:f7:13:79:61:05:
         aa:33:e8:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIiZULIE7pc7DP+rHlZHdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhYjI1YTZjMzkyYjhlNjdhM2FkMjFmNjBmZDMzMTFkNmI3
ZjFlNWMwHhcNMjYwMjA5MTYwMDM3WhcNMjYwMjEwMTYwMDM3WjAzMTEwLwYDVQQD
EyhlZmNiMjNiYjI5ZDI2M2I1OWMxZTMzYmU2NGZhMjM1MDNlMmJhNmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwr1dlxfKs5DzTwsAkTthTqvuau99
vmUfxvc3O6t0nQmdOiyfcpyfiXtU5X/zQBf1PWyXMtry2kfGiJnpWoGY+C6LqFKS
I6Av5Lym7mjTLGzdz2RidLiYWO2WrbZuAhNst6qBbqWUJ/OAHFTz+TffM5o58/Dm
SujVbX+WUphmZqH4X34PK55wnEGycXz1a4wlOhMc1SCyH97TspTsXI4M+MoTreMV
OMlU4gunlHPxy1itRLoFMv8Xp///bjtjngPJiTPn4qNiXEsYjrWSve0HeBUauG3p
x7WncFONRAuXysf57TKEMr0HZwLghdw4X6X1dzkpJQCpyZ3jliSVCNkOpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/LI7sp0mO1nB4zvmT6I1A+K6bcMB8GA1UdIwQY
MBaAFFqyWmw5K45no60h9g/TMR1rfx5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3JKYWJEa3JqbWVqclNIMkQ5TXhIV3RfSGx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84MWY3NmYtZDg3OC00NGExLTgyYzct
MmNjYjVmMGM1ZjZiLzEvV3JKYWJEa3JqbWVqclNIMkQ5TXhIV3RfSGx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS84MWY3NmYtZDg3OC00NGExLTgyYzctMmNjYjVmMGM1ZjZi
LzEvV3JKYWJEa3JqbWVqclNIMkQ5TXhIV3RfSGx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkzKLemGT
zwG/uiGzl9F+fSy/tjosq79EEQrOf/dnC/WTFGCyNcbwKqgLikKTPDqav+ImAPSw
ORyjE1xGGKsuUuYGhRmGC3+6rztm4vKcBemmCMoeoMG10SUQ+dZv5JC400RiGACM
8vmSknZBqBs82huk2A6tP++lLSOZDv3UhEo2aedlQ7mvYB7C3qO5lMwfWh0SL/cA
69NT1YPWlnKw4tbZr8fv6EA5WAoeBnF/rFd4lFW/sXYJ+r4AEOW7NFrzWWf35G0b
vWSlnDgIWO9glwUXrT5dFzxqoiunkE6aaaQ/qb0vl6DNXuV6UAgBK7FHFfZrddgj
avcTeWEFqjPooQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:38 2026 by rpki-client