This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft
File:                     wDJJW4nc6BsMf4ht38NgS94G2KY.mft (raw, json)
Hash identifier:          jXsHi+inFXe50lK147aTvtYEtIx4aY2QMF4X5PfCuUE=
Subject key identifier:   E5:49:9B:90:A7:53:75:2A:5E:11:C9:F6:47:16:67:96:D5:83:AB:DE
Authority key identifier: C0:32:49:5B:89:DC:E8:1B:0C:7F:88:6D:DF:C3:60:4B:DE:06:D8:A6
Certificate issuer:       /CN=c032495b89dce81b0c7f886ddfc3604bde06d8a6
Certificate serial:       019C435939339FAFFA4BA60E174E0B193E4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 17:00:46 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:46 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:46 +0000
Files and hashes:         1: wDJJW4nc6BsMf4ht38NgS94G2KY.crl (hash: 13SVGZazUN74siDMkic0bdxcYtXqfpubAEb7X2FMb2o=)
                          2: yHQ1YLiN5hY_gbv8gILFuVBIS7Q.roa (hash: gmCFySCBwmCnbmTNmPpd7gcPgHDTKx/9z23Y4aCqihk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:39:33:9f:af:fa:4b:a6:0e:17:4e:0b:19:3e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c032495b89dce81b0c7f886ddfc3604bde06d8a6
        Validity
            Not Before: Feb  9 17:00:46 2026 GMT
            Not After : Feb 10 17:00:46 2026 GMT
        Subject: CN=e5499b90a753752a5e11c9f647166796d583abde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:97:0d:72:7c:18:01:36:22:50:17:70:6e:41:
                    8e:29:55:e5:ff:67:6e:91:41:a0:cc:6c:12:3b:5f:
                    3d:f3:50:b2:51:e3:8f:b9:71:77:1e:0b:b3:ec:80:
                    dc:20:89:c3:49:23:9c:da:68:fb:d3:19:9d:27:5a:
                    fa:89:bf:b0:58:49:30:00:95:2e:1d:69:8a:27:99:
                    d9:d1:c7:e7:ad:99:4f:4c:1b:f2:73:24:2f:bb:62:
                    bd:13:36:df:18:a9:01:1b:75:3b:44:41:70:fd:b4:
                    69:7a:b4:80:8d:d0:37:0b:8a:b6:53:f9:70:c5:23:
                    e7:55:7d:c8:42:35:fb:3b:90:30:af:17:fa:31:66:
                    15:74:59:24:31:1e:01:39:0b:6b:63:28:25:e6:6b:
                    60:ea:31:3f:80:bd:0d:e9:5c:10:fa:da:5e:c1:5c:
                    51:ba:42:e5:36:5f:96:92:ea:24:3a:5f:7f:18:c5:
                    b3:d5:a0:92:73:a6:cf:31:b2:c0:8b:38:e2:7b:63:
                    74:a3:66:48:4d:29:3c:4d:8f:47:3d:13:4c:cf:82:
                    6d:b6:6f:c3:8d:e0:38:13:0f:aa:78:f2:24:e7:3c:
                    3d:40:82:14:c5:7b:2d:36:30:02:5f:40:2e:f3:53:
                    c1:ce:da:63:24:51:e2:5e:11:da:b6:19:d5:88:4b:
                    80:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:49:9B:90:A7:53:75:2A:5E:11:C9:F6:47:16:67:96:D5:83:AB:DE
            X509v3 Authority Key Identifier:
                keyid:C0:32:49:5B:89:DC:E8:1B:0C:7F:88:6D:DF:C3:60:4B:DE:06:D8:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:c6:05:92:02:e2:0a:f4:b8:d4:05:67:1e:71:ac:5f:43:49:
         0d:7c:dc:e4:7d:b4:dd:b6:2a:04:0b:d3:d7:42:85:04:1b:98:
         2d:13:2c:d0:87:2d:dd:25:05:06:97:6c:68:21:55:e7:b3:34:
         18:0a:6e:36:88:9d:d4:49:f2:7c:c9:7d:d7:af:0e:ab:75:f7:
         e3:5b:d2:62:b1:a3:e5:8e:6c:22:93:f7:26:55:d5:e7:07:17:
         ac:1d:43:0e:21:ed:bb:6b:58:00:76:19:75:f8:0d:db:92:c9:
         53:bd:e7:47:00:c2:97:e1:3d:08:30:05:b3:ad:d2:6a:05:76:
         27:b8:9f:77:51:7f:d4:e2:06:6a:3b:92:45:79:52:10:1a:94:
         a0:70:fa:80:37:8f:53:7e:b6:0c:0e:6b:ef:ac:ca:c3:95:7f:
         1f:20:35:4a:1c:e6:b7:be:6c:cf:b6:07:43:49:11:80:69:22:
         a5:a3:21:02:fa:b8:9d:ee:9b:70:79:52:c7:b2:4c:64:a7:87:
         12:63:1d:74:7c:93:f7:42:d7:b3:b1:a8:37:f5:85:d8:4e:7c:
         4a:f4:53:01:14:28:fb:b0:2b:38:64:7c:02:15:80:42:58:ce:
         e7:b7:e6:1d:2d:50:e9:d1:e9:bf:dd:f5:1b:23:4e:69:a9:99:
         33:cf:44:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:55 2026 by rpki-client