This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
File:                     wjbowhbwWp2eAyfxIivxIZirpdo.mft (raw, json)
Hash identifier:          RL/jCugeJNU7cWwF7vShaj6GHHfO09X4HHe9+gRZ8tw=
Subject key identifier:   1F:8C:AA:1E:0A:76:1B:78:05:0B:DC:90:DE:7F:5B:E4:DD:66:71:31
Authority key identifier: C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA
Certificate issuer:       /CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
Certificate serial:       019C43FE69AE638764C0184DD7D159D2BEE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
Manifest number:          0618
Signing time:             Mon 09 Feb 2026 20:01:12 +0000
Manifest this update:     Mon 09 Feb 2026 20:01:12 +0000
Manifest next update:     Tue 10 Feb 2026 20:01:12 +0000
Files and hashes:         1: 3-vvvwv4tUZPRVYLco5dYLcKOig.roa (hash: qd0VBxrvHFGJvFVcu73W5K8cFS+yhuHypJI01YtY3b8=)
                          2: LqGZ4Y_LYp2MZXMblkA5ejVTJjY.roa (hash: /YWWe7ikBu5jzDasGD2GRk3QY4m/auaJQyMur2UjVL0=)
                          3: _qfnh0B1Q9kr326hHKH4PHRx7H0.roa (hash: TtfUGrmkL3QzIvzYnYw9WDKqe/CRP54QUVhnblV7rQ0=)
                          4: lTt4b6nTbzdPA2Rhv79B9SEQkGI.roa (hash: E9clsIqRXGih95uwME+vzroz4tzKBqvwnu5vYnurBGk=)
                          5: llZMGo59gLGSTAZNJr7ReO3JJ2c.roa (hash: ywtgbyBDbj/JHfzn1E6Yc8D1DIqjzUbm4fWSIBPm7rU=)
                          6: wjbowhbwWp2eAyfxIivxIZirpdo.crl (hash: 1zteTVSTNTUWtaoQQ6pzZfQ5xG0RymuGLcotBEHL0ic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:69:ae:63:87:64:c0:18:4d:d7:d1:59:d2:be:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
        Validity
            Not Before: Feb  9 20:01:12 2026 GMT
            Not After : Feb 10 20:01:12 2026 GMT
        Subject: CN=1f8caa1e0a761b78050bdc90de7f5be4dd667131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:85:89:4d:b4:5d:05:70:e6:bd:89:3b:4c:ae:
                    fd:42:35:40:ea:2f:13:fd:ea:df:20:9c:07:f4:83:
                    03:d3:89:72:ef:33:c1:43:d0:8e:81:89:a4:e7:f3:
                    8c:bc:fc:d2:05:38:96:f6:4f:90:b6:b1:2e:e9:f8:
                    83:c1:6a:72:b4:a7:5e:07:ab:03:28:a1:ae:57:8f:
                    bc:c3:09:67:9b:63:01:7e:5e:5b:4d:6f:ae:2f:be:
                    51:3a:06:d7:fc:73:bf:2c:31:a1:6e:3c:a6:e0:b5:
                    4d:63:6f:ed:ce:01:d2:ad:3c:60:71:4e:e1:d8:37:
                    c2:72:73:78:33:00:f9:cc:f5:9f:7e:40:ae:ef:9a:
                    1f:50:8f:e1:9d:e1:4c:e1:44:f0:20:c5:b4:16:eb:
                    9c:e7:39:57:95:34:aa:74:8c:22:f2:ef:b0:5d:28:
                    c2:7d:e6:47:88:b9:88:76:5e:2a:7c:a0:08:a4:88:
                    e5:cf:bd:69:08:ac:35:ef:4e:3b:75:a1:9c:cc:14:
                    74:aa:f8:e9:e5:96:ac:fb:8c:ce:04:70:a0:46:32:
                    ff:35:9a:12:7d:d0:21:69:2a:b8:4b:6a:f4:13:49:
                    d8:f8:ab:49:48:4e:96:0b:30:36:15:d0:65:db:f3:
                    8f:2d:86:63:08:4b:09:49:06:ad:80:fe:78:5e:46:
                    0c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8C:AA:1E:0A:76:1B:78:05:0B:DC:90:DE:7F:5B:E4:DD:66:71:31
            X509v3 Authority Key Identifier:
                keyid:C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:41:ed:f4:40:52:d3:f2:00:f9:b9:ff:fc:6f:33:98:9c:a6:
         60:e0:c5:7a:27:67:08:f7:03:e6:d8:09:e8:e6:bd:a9:f8:dd:
         ce:6d:a8:64:5c:17:68:8e:82:ca:0f:27:d8:ba:d5:84:30:00:
         bc:1d:53:e8:4a:a1:26:87:af:e4:5c:5f:04:81:9c:ed:df:6e:
         78:58:0a:f9:89:66:8a:3e:80:1b:50:63:cf:d1:58:91:ad:10:
         80:d7:6e:98:39:30:05:d6:49:07:4c:4e:cb:47:d4:20:60:f1:
         dd:dc:f5:70:fb:c1:fb:5c:e8:d0:95:3b:e8:95:2e:b9:a2:d8:
         54:13:ab:34:9c:55:08:0a:af:2e:a3:e0:bf:b0:02:42:a7:3e:
         ab:3a:9a:bf:16:71:63:ea:d6:55:74:b4:75:43:ab:5b:9c:03:
         61:14:61:92:8d:d9:2b:9f:3e:6b:7e:1b:6a:37:6c:05:d4:21:
         0d:c1:97:db:b5:55:44:99:44:05:ad:d8:56:dc:69:d2:5c:09:
         8b:d6:37:a8:6d:d9:ea:c6:81:34:c2:c0:33:69:38:b3:df:62:
         7b:90:e0:df:7b:09:37:2f:ac:3f:96:1a:e6:24:6c:1c:90:40:
         e1:37:bc:11:38:0e:23:7b:43:0a:c5:de:5f:d5:33:a8:f5:2c:
         fc:c3:be:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxD/mmuY4dkwBhN19FZ0r7gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMzZlOGMyMTZmMDVhOWQ5ZTAzMjdmMTIyMmJmMTIxOThh
YmE1ZGEwHhcNMjYwMjA5MjAwMTEyWhcNMjYwMjEwMjAwMTEyWjAzMTEwLwYDVQQD
EygxZjhjYWExZTBhNzYxYjc4MDUwYmRjOTBkZTdmNWJlNGRkNjY3MTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4WJTbRdBXDmvYk7TK79QjVA6i8T
/erfIJwH9IMD04ly7zPBQ9COgYmk5/OMvPzSBTiW9k+QtrEu6fiDwWpytKdeB6sD
KKGuV4+8wwlnm2MBfl5bTW+uL75ROgbX/HO/LDGhbjym4LVNY2/tzgHSrTxgcU7h
2DfCcnN4MwD5zPWffkCu75ofUI/hneFM4UTwIMW0Fuuc5zlXlTSqdIwi8u+wXSjC
feZHiLmIdl4qfKAIpIjlz71pCKw17047daGczBR0qvjp5Zas+4zOBHCgRjL/NZoS
fdAhaSq4S2r0E0nY+KtJSE6WCzA2FdBl2/OPLYZjCEsJSQatgP54XkYMbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+Mqh4Kdht4BQvckN5/W+TdZnExMB8GA1UdIwQY
MBaAFMI26MIW8FqdngMn8SIr8SGYq6XaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2pib3doYndXcDJlQXlmeElpdnhJWmlycGRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yYTQxM2UtODk3NC00ZGM3LTljZTgt
Mzg0ZmZjZTc3ZjUyLzEvd2pib3doYndXcDJlQXlmeElpdnhJWmlycGRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yYTQxM2UtODk3NC00ZGM3LTljZTgtMzg0ZmZjZTc3ZjUy
LzEvd2pib3doYndXcDJlQXlmeElpdnhJWmlycGRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtkHt9EBS
0/IA+bn//G8zmJymYODFeidnCPcD5tgJ6Oa9qfjdzm2oZFwXaI6Cyg8n2LrVhDAA
vB1T6EqhJoev5FxfBIGc7d9ueFgK+Ylmij6AG1Bjz9FYka0QgNdumDkwBdZJB0xO
y0fUIGDx3dz1cPvB+1zo0JU76JUuuaLYVBOrNJxVCAqvLqPgv7ACQqc+qzqavxZx
Y+rWVXS0dUOrW5wDYRRhko3ZK58+a34bajdsBdQhDcGX27VVRJlEBa3YVtxp0lwJ
i9Y3qG3Z6saBNMLAM2k4s99ie5Dg33sJNy+sP5Ya5iRsHJBA4Te8ETgOI3tDCsXe
X9UzqPUs/MO+Rw==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:42:43 2026 by rpki-client