This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
File:                     W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft (raw, json)
Hash identifier:          4rDs2IlfdqJY1mtIN8zCY9q+lMNrfuHW6mHVUnms4gM=
Subject key identifier:   7A:E7:66:AF:0C:FC:45:28:B8:C3:37:48:63:FA:36:30:72:E6:9C:13
Authority key identifier: 5B:AA:35:40:1E:52:97:B3:B5:27:E8:4F:93:EA:8A:A1:10:D9:7B:95
Certificate issuer:       /CN=5baa35401e5297b3b527e84f93ea8aa110d97b95
Certificate serial:       019C41D8A4CF545E132B0B411D0C7B45166D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
Manifest number:          1817
Signing time:             Mon 09 Feb 2026 10:00:42 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:42 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:42 +0000
Files and hashes:         1: UoZkRPL-FXoKPENqQZq-Qq68rWY.roa (hash: 0jm/o2tJoCDO4CN8w0CmL8YJAHAKLKrSAcf7/PK+6ME=)
                          2: W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl (hash: 8UCYYNB8zfmUrnQiPzGT6UhZC/bvs13dQrOVHJihP2g=)
                          3: WVmtj3JFZW85BM7XmJNCcbMrepg.roa (hash: OySUwjvZewoZ9Ynw/beaBuNhKzmMaff9msuUl57OGJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:a4:cf:54:5e:13:2b:0b:41:1d:0c:7b:45:16:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5baa35401e5297b3b527e84f93ea8aa110d97b95
        Validity
            Not Before: Feb  9 10:00:42 2026 GMT
            Not After : Feb 10 10:00:42 2026 GMT
        Subject: CN=7ae766af0cfc4528b8c3374863fa363072e69c13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a9:ff:69:61:c1:63:d9:2d:bd:f8:92:a8:db:
                    91:33:5f:13:5e:22:83:f3:f9:f5:ab:2e:f4:84:bb:
                    72:60:d2:28:92:9e:3c:be:b6:98:7c:bf:f6:97:ab:
                    fc:6d:1f:cb:33:e5:ea:89:8e:7c:ce:05:54:0a:41:
                    4f:ec:32:d0:49:9e:02:ac:e1:4e:fe:ed:80:f9:af:
                    57:ad:56:d1:58:25:e0:8d:d8:a2:73:f2:83:27:70:
                    56:3e:9d:53:5c:b4:3e:eb:90:99:88:59:8d:43:21:
                    0f:ce:24:1a:70:46:4b:de:2b:b4:58:0f:8d:fe:96:
                    85:cd:a7:48:51:aa:1a:d2:2c:e3:1b:00:7f:1d:59:
                    a2:ea:56:ce:18:17:c5:96:23:4a:d3:95:23:3f:e4:
                    f7:d7:81:5f:cd:61:d0:90:0f:dd:b5:1d:c4:be:a3:
                    f1:92:09:00:d2:dc:31:bb:ce:5c:95:64:95:12:45:
                    67:4b:33:8a:a3:88:45:81:2c:55:08:b1:79:20:51:
                    8c:35:cd:7a:3b:76:bd:5c:d8:1d:a8:9b:7f:ae:fb:
                    0d:1f:0c:9f:d8:95:7a:fa:20:df:d4:ac:c5:83:3a:
                    ad:31:05:57:56:c0:b5:6c:d3:9a:a2:eb:3a:4c:8a:
                    ff:a7:8f:34:8a:8a:2b:38:35:39:11:7f:49:a9:1b:
                    09:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E7:66:AF:0C:FC:45:28:B8:C3:37:48:63:FA:36:30:72:E6:9C:13
            X509v3 Authority Key Identifier:
                keyid:5B:AA:35:40:1E:52:97:B3:B5:27:E8:4F:93:EA:8A:A1:10:D9:7B:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:34:58:3c:ed:55:6f:7a:81:80:9c:59:47:b7:b6:06:2b:a8:
         27:5a:b4:0d:ad:d9:9c:39:cd:e7:7c:2a:60:27:1d:aa:ae:3c:
         e4:5d:15:40:61:2f:28:03:91:05:34:99:8a:1a:c3:5b:50:14:
         69:57:e0:1e:ef:1c:57:50:63:04:bf:ab:53:9d:cd:20:db:45:
         30:26:1e:57:9f:f2:20:fb:5a:f5:8c:66:6e:8d:71:d3:d0:cc:
         87:73:d8:a5:b7:b3:d5:f3:23:1e:58:1f:88:a5:05:f9:a8:e0:
         87:de:e8:e1:19:ea:81:2c:aa:7f:af:b8:f0:68:8d:00:88:db:
         db:2c:77:3b:cd:18:bc:54:40:a9:99:93:06:8f:d2:1d:f5:79:
         3a:36:36:9b:da:33:df:1b:4e:1b:8c:bb:e3:ff:5e:bd:24:1e:
         d2:56:f6:a9:27:17:ba:57:25:58:10:fa:19:ed:83:f1:92:29:
         08:47:30:7b:ab:fa:25:0a:e5:c6:1f:6e:d7:d6:9c:69:37:4f:
         09:68:f3:b9:7c:09:a6:99:af:fc:b1:f7:0b:78:49:96:6c:da:
         09:84:28:9e:6b:20:9f:81:79:c1:01:52:41:46:00:6d:90:5b:
         86:04:52:e4:ba:0a:64:00:52:27:66:f7:67:78:f4:18:59:a5:
         4d:a2:41:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:09 2026 by rpki-client