This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
File:                     wIGiJnTcJaqlCFNn4g4HjekGTxI.mft (raw, json)
Hash identifier:          ctDOgXtbk+/67RpTk1a0nse6D7B6wUZu2dDOC23Q1po=
Subject key identifier:   DF:E0:FD:DB:A0:F5:F4:AF:2A:04:7F:DE:E8:F6:42:7E:96:D0:F7:05
Authority key identifier: C0:81:A2:26:74:DC:25:AA:A5:08:53:67:E2:0E:07:8D:E9:06:4F:12
Certificate issuer:       /CN=c081a22674dc25aaa5085367e20e078de9064f12
Certificate serial:       019C4321CC3DF1E9341022B5C332239A38FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
Manifest number:          0A86
Signing time:             Mon 09 Feb 2026 16:00:14 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:14 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:14 +0000
Files and hashes:         1: wIGiJnTcJaqlCFNn4g4HjekGTxI.crl (hash: TRkJXrdcICMb6uJyhqixqtyXES5PN/j/CZXKpMex++M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:21:cc:3d:f1:e9:34:10:22:b5:c3:32:23:9a:38:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c081a22674dc25aaa5085367e20e078de9064f12
        Validity
            Not Before: Feb  9 16:00:14 2026 GMT
            Not After : Feb 10 16:00:14 2026 GMT
        Subject: CN=dfe0fddba0f5f4af2a047fdee8f6427e96d0f705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d1:d3:52:56:b6:f0:23:e6:97:74:ed:5c:50:
                    7e:c5:d4:96:86:b0:ff:5e:ec:1e:cf:22:82:46:7c:
                    52:3e:af:5b:e6:0b:b3:65:db:33:81:e2:8d:c5:3c:
                    7a:6d:6b:cf:ca:fc:2a:ec:a3:80:3c:b6:da:33:0f:
                    7f:3c:18:e7:65:c5:a0:fb:d6:eb:44:72:83:2d:f0:
                    9a:25:e0:28:5e:4d:da:bd:90:64:06:da:0b:68:7f:
                    37:b7:2d:4e:33:21:02:01:1b:e8:ae:45:06:38:a2:
                    b2:c0:24:e7:b9:01:b7:9d:3e:10:69:32:52:56:95:
                    e7:27:61:b3:83:e9:98:c6:73:aa:25:61:a0:17:cd:
                    2d:26:31:39:ff:3e:49:de:09:0b:e3:7e:a5:5c:4e:
                    33:68:54:59:88:05:2d:6c:f4:1d:b7:56:fb:3d:ee:
                    08:95:e2:3c:b9:9c:2c:18:cf:a1:2a:17:d7:d9:b2:
                    a7:2c:dd:a0:2a:c1:f7:90:0e:95:f9:1e:26:e7:cb:
                    4d:64:06:30:82:60:64:45:62:72:51:5e:af:d7:ac:
                    d2:21:ef:5b:06:a3:45:c6:17:cf:23:a5:67:ea:e8:
                    be:25:1d:5d:a2:4a:70:39:bb:a1:f7:53:d1:08:c0:
                    10:04:8c:5c:da:31:c6:00:4e:3a:a5:fc:c6:10:82:
                    b7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E0:FD:DB:A0:F5:F4:AF:2A:04:7F:DE:E8:F6:42:7E:96:D0:F7:05
            X509v3 Authority Key Identifier:
                keyid:C0:81:A2:26:74:DC:25:AA:A5:08:53:67:E2:0E:07:8D:E9:06:4F:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:97:82:e7:9a:9c:03:ed:7d:93:ee:3b:f5:5a:8a:4d:fb:b7:
         46:62:5c:28:59:b0:a2:dc:97:56:bc:e0:3f:66:f9:5a:30:fd:
         e6:83:4e:fe:a3:e4:c3:8c:0d:d8:ac:c5:33:67:14:20:68:19:
         dc:eb:75:3b:aa:64:99:94:c2:54:b6:67:ee:29:f8:15:97:b8:
         1b:de:80:18:09:28:a4:85:0e:cf:b1:cc:5e:62:30:5c:62:b6:
         06:13:a2:bf:d6:5a:83:c3:92:8f:c5:f9:fc:d6:65:f0:4c:c5:
         8d:49:ff:fd:bc:2d:9c:06:56:58:f5:81:12:53:ea:2a:6d:6c:
         a3:da:74:06:c1:80:2f:c4:9a:c0:f2:b8:31:5a:0f:ef:d4:8b:
         9d:8b:a7:0a:3c:2d:5f:95:34:ac:68:95:5d:3e:4c:86:74:96:
         7a:fa:20:7c:41:80:56:cd:a7:a3:82:87:96:51:8e:98:c8:59:
         80:f4:b5:79:c1:87:61:d2:31:14:a0:8a:6e:ad:a9:52:99:1b:
         a7:ca:67:57:1b:fd:70:c6:e3:bf:19:86:8f:98:c3:ed:ee:c8:
         77:ff:df:f7:63:59:72:f0:df:ef:25:54:69:e7:dc:ce:53:dd:
         52:10:33:b7:59:20:e8:5f:39:c4:a8:99:f8:af:dc:02:61:38:
         95:db:e7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:46:08 2026 by rpki-client