This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.mft
File:                     wbsILYb1B7_635GSqmdqt9onDUI.mft (raw, json)
Hash identifier:          3/Y2XMmt+3lmjkrTQk9wCY62yC7/ugwmU3EtkyXG6nA=
Subject key identifier:   04:06:EA:60:C1:2E:CC:FE:AD:29:6B:70:8D:E1:5B:28:10:CC:33:7C
Authority key identifier: C1:BB:08:2D:86:F5:07:BF:FA:DF:91:92:AA:67:6A:B7:DA:27:0D:42
Certificate issuer:       /CN=c1bb082d86f507bffadf9192aa676ab7da270d42
Certificate serial:       019C446B6929476450F9C6A050B22CDDB704
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wbsILYb1B7_635GSqmdqt9onDUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.mft
Manifest number:          180E
Signing time:             Mon 09 Feb 2026 22:00:15 +0000
Manifest this update:     Mon 09 Feb 2026 22:00:15 +0000
Manifest next update:     Tue 10 Feb 2026 22:00:15 +0000
Files and hashes:         1: f8FDls6KvdQmRn0hp9TgjXsoYZI.roa (hash: pc641tlPtL0ZbT0GMkZOf2BhTrJwKDmvYz56I52L9zI=)
                          2: wbsILYb1B7_635GSqmdqt9onDUI.crl (hash: 4GxWG6ly2gheQlcVCuFBhRZwkD+Bsmaa9rTTd2l9wsQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wbsILYb1B7_635GSqmdqt9onDUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6b:69:29:47:64:50:f9:c6:a0:50:b2:2c:dd:b7:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1bb082d86f507bffadf9192aa676ab7da270d42
        Validity
            Not Before: Feb  9 22:00:15 2026 GMT
            Not After : Feb 10 22:00:15 2026 GMT
        Subject: CN=0406ea60c12eccfead296b708de15b2810cc337c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2b:5e:7a:b2:23:a1:84:86:45:ef:b1:48:2e:
                    76:43:ed:fd:1f:ab:00:c9:b0:2a:e9:b2:7a:f9:85:
                    27:2e:7d:82:69:8e:19:1f:3a:b7:58:66:c0:c1:1d:
                    3e:b2:c4:bb:ba:14:80:95:af:88:2f:45:23:e1:06:
                    ce:0a:48:d3:48:19:e7:95:24:7c:cb:14:a9:f7:94:
                    3b:1a:28:f3:4c:bb:1e:68:d2:2c:bf:6e:6b:55:f3:
                    6d:79:ad:b9:a1:ef:6c:a0:86:36:06:88:17:fc:8d:
                    2a:1c:49:67:29:80:9c:1a:e4:ab:e2:5b:0e:a0:2d:
                    fe:db:94:85:eb:fb:77:4f:a4:cf:c0:29:f9:8a:28:
                    3e:32:62:a5:61:60:8c:1e:4d:89:e3:a1:78:41:9c:
                    f8:ee:c8:0b:41:92:93:cc:41:af:87:f8:7a:70:ae:
                    bb:ea:38:a6:17:a7:86:61:a1:8d:45:df:ba:33:27:
                    6e:51:18:63:1c:06:e2:d5:91:e1:53:9a:d3:25:ef:
                    3d:43:ec:5c:41:80:50:15:ee:32:c5:54:93:ff:37:
                    1c:16:c0:70:47:2e:90:38:5e:e8:f0:25:d1:f8:30:
                    6d:a6:48:43:c8:ce:80:f8:56:5d:c9:18:4a:77:3d:
                    ae:06:a3:18:84:29:dd:c5:e3:94:8b:42:47:8e:6a:
                    34:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:06:EA:60:C1:2E:CC:FE:AD:29:6B:70:8D:E1:5B:28:10:CC:33:7C
            X509v3 Authority Key Identifier:
                keyid:C1:BB:08:2D:86:F5:07:BF:FA:DF:91:92:AA:67:6A:B7:DA:27:0D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbsILYb1B7_635GSqmdqt9onDUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:25:03:39:e9:59:b5:15:90:83:5d:9f:f9:91:4e:f0:cb:5b:
         73:7e:69:e4:e7:72:bd:f8:ec:b4:cd:e6:43:98:50:67:0e:2b:
         02:96:29:5f:1d:b1:11:ac:f7:f5:a4:e3:ff:6d:b7:6e:27:dc:
         3c:c5:b0:28:29:d8:31:53:17:14:cc:80:84:48:56:89:73:e1:
         29:d4:61:32:e4:56:79:71:9f:a3:93:bf:16:d7:2f:c7:f4:a8:
         d1:59:dd:6f:dc:00:a7:9b:23:a0:7f:c1:91:3c:ba:bf:f7:b5:
         f8:0e:77:5e:3b:53:b6:24:14:5e:94:40:f4:31:f0:b0:6a:1c:
         bd:af:18:89:53:63:d0:53:bd:9a:3d:e8:00:41:72:70:a7:f6:
         f3:15:e3:4b:ed:32:f8:c6:be:fd:0b:b2:4f:0d:eb:d6:5b:b7:
         f4:31:3e:ed:26:84:20:94:75:b6:98:bd:00:b2:2c:ca:5b:48:
         aa:41:23:76:65:63:05:06:53:b5:3f:0f:8b:3c:b4:d5:36:d9:
         ef:43:a3:43:89:44:46:c0:ba:f9:52:90:a2:b8:d4:1c:d8:5b:
         38:2a:6d:f6:b7:3d:bc:29:42:96:66:94:41:75:8a:e3:50:09:
         32:4c:2c:b0:5b:7c:f9:c3:5e:9f:07:6f:47:c7:0c:1d:5b:c4:
         5f:63:1f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:11:08 2026 by rpki-client