This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft
File:                     wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft (raw, json)
Hash identifier:          s+LF0LKHYgbacE8/j6PV3RDPPxg1FiiWdnp8aYoflfA=
Subject key identifier:   B4:07:51:2F:57:91:85:A3:70:72:E6:04:A1:52:E0:A9:EB:C3:9F:5F
Authority key identifier: C2:73:FF:F1:78:ED:52:FD:1D:E7:09:31:12:42:3B:64:17:CE:A2:D3
Certificate issuer:       /CN=c273fff178ed52fd1de7093112423b6417cea2d3
Certificate serial:       019C416AB5E59D469F6FB14EDA7B39EEFEF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wnP_8XjtUv0d5wkxEkI7ZBfOotM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft
Manifest number:          0C
Signing time:             Mon 09 Feb 2026 08:00:38 +0000
Manifest this update:     Mon 09 Feb 2026 08:00:38 +0000
Manifest next update:     Tue 10 Feb 2026 08:00:38 +0000
Files and hashes:         1: euo56ZtX6v5B0AKUx9R-FKNO9EA.roa (hash: w3fmR0eCcrM0dELQMZ8IdSvLZfYhYkLBqG/PpUnPMls=)
                          2: wnP_8XjtUv0d5wkxEkI7ZBfOotM.crl (hash: E/6GFwiMgazTqGMwioWPH16RO62vnQODAUos/sqvqG8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wnP_8XjtUv0d5wkxEkI7ZBfOotM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 08:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:6a:b5:e5:9d:46:9f:6f:b1:4e:da:7b:39:ee:fe:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c273fff178ed52fd1de7093112423b6417cea2d3
        Validity
            Not Before: Feb  9 08:00:38 2026 GMT
            Not After : Feb 10 08:00:38 2026 GMT
        Subject: CN=b407512f579185a37072e604a152e0a9ebc39f5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6a:04:0d:30:c9:3c:bf:51:09:4c:85:b1:b2:
                    8c:c3:99:81:d2:55:a3:77:37:e7:5e:d7:0f:6c:cf:
                    3a:03:7d:dc:35:6f:b7:99:89:2b:8f:5d:d0:d6:22:
                    a2:b7:e4:58:92:43:9a:de:c5:fc:ef:69:29:ec:7b:
                    ca:70:94:5e:66:a5:be:f2:5c:fc:b9:c3:c2:8e:43:
                    a1:83:c9:b1:a7:18:4f:2a:04:27:56:66:43:ed:d6:
                    8a:67:d0:a5:3f:b9:a8:4f:6f:ef:d3:a3:bb:b2:e9:
                    34:c4:61:ae:4c:66:0d:db:e5:cd:79:b7:69:d2:e4:
                    26:79:64:87:1b:83:c4:47:23:41:e2:20:c9:b0:c1:
                    99:3c:79:2a:17:b0:fc:bd:ae:49:8d:8b:c4:9c:6e:
                    a1:86:f5:21:85:db:bb:f7:77:17:68:26:d5:ac:f5:
                    6a:ad:af:e4:9f:5f:7d:0e:1f:1b:14:0e:14:2d:26:
                    2a:a9:9d:1f:7b:8c:73:ff:76:bc:c8:6e:19:08:eb:
                    ff:64:59:e3:3c:ca:9f:c5:33:5b:10:b0:90:7a:1e:
                    4a:32:8e:92:36:fe:f8:f3:12:b8:26:54:e1:a2:0e:
                    a2:82:51:5d:4e:dc:fd:af:72:d3:72:cd:52:10:be:
                    d7:ed:8e:e0:92:e1:81:2c:18:82:24:e2:24:e5:fb:
                    09:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:07:51:2F:57:91:85:A3:70:72:E6:04:A1:52:E0:A9:EB:C3:9F:5F
            X509v3 Authority Key Identifier:
                keyid:C2:73:FF:F1:78:ED:52:FD:1D:E7:09:31:12:42:3B:64:17:CE:A2:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnP_8XjtUv0d5wkxEkI7ZBfOotM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:28:e1:24:85:c1:24:c1:a5:8d:dc:f9:ea:f9:95:49:6c:b9:
         8b:b8:f1:59:83:da:49:b8:b5:92:a9:fd:47:18:bb:39:71:e7:
         73:2a:f7:a0:2d:a6:6a:5d:23:56:88:08:74:ee:05:94:8a:85:
         b3:34:a3:8c:f6:ca:15:2d:c5:df:02:ca:99:a6:b8:7f:81:b4:
         73:3d:c5:bd:7b:35:96:6b:9d:bf:6c:30:0d:c0:8f:7b:9e:de:
         ad:53:4a:18:fa:6d:90:ad:5b:e8:4c:12:28:ed:b5:5c:ff:29:
         66:aa:22:da:80:52:8e:a6:77:06:2d:1b:c4:87:c8:65:05:de:
         18:59:ef:bc:fd:11:e1:bc:b9:f4:74:48:01:88:66:5a:d3:e2:
         89:ff:b3:ce:b7:be:9f:27:20:07:5c:dd:93:af:54:20:e7:3f:
         d5:5d:b1:97:5d:8d:cf:68:aa:30:d1:f5:4f:35:2b:89:c1:bb:
         f2:1d:d3:19:ca:1f:e2:f8:e9:45:14:b0:40:6d:e3:06:26:fe:
         7c:81:bf:db:a8:e5:d9:4e:1c:71:67:b3:1e:3e:5b:9a:46:71:
         5c:fd:61:0f:25:34:3f:b1:4c:50:37:88:b6:e0:d5:00:0b:1c:
         73:96:f7:08:23:40:15:35:f2:a0:ee:e4:06:ce:1d:d8:d0:f2:
         a3:63:79:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBarXlnUafb7FO2ns57v74MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzNmZmYxNzhlZDUyZmQxZGU3MDkzMTEyNDIzYjY0MTdj
ZWEyZDMwHhcNMjYwMjA5MDgwMDM4WhcNMjYwMjEwMDgwMDM4WjAzMTEwLwYDVQQD
EyhiNDA3NTEyZjU3OTE4NWEzNzA3MmU2MDRhMTUyZTBhOWViYzM5ZjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGoEDTDJPL9RCUyFsbKMw5mB0lWj
dzfnXtcPbM86A33cNW+3mYkrj13Q1iKit+RYkkOa3sX872kp7HvKcJReZqW+8lz8
ucPCjkOhg8mxpxhPKgQnVmZD7daKZ9ClP7moT2/v06O7suk0xGGuTGYN2+XNebdp
0uQmeWSHG4PERyNB4iDJsMGZPHkqF7D8va5JjYvEnG6hhvUhhdu793cXaCbVrPVq
ra/kn199Dh8bFA4ULSYqqZ0fe4xz/3a8yG4ZCOv/ZFnjPMqfxTNbELCQeh5KMo6S
Nv748xK4JlThog6iglFdTtz9r3LTcs1SEL7X7Y7gkuGBLBiCJOIk5fsJJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQHUS9XkYWjcHLmBKFS4Knrw59fMB8GA1UdIwQY
MBaAFMJz//F47VL9HecJMRJCO2QXzqLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25QXzhYanRVdjBkNXdreEVrSTdaQmZPb3RNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8wOTk2ZGQtNzk4NS00NTVkLWJmYjkt
ZjYxNjQzZmU5ODI4LzEvd25QXzhYanRVdjBkNXdreEVrSTdaQmZPb3RNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8wOTk2ZGQtNzk4NS00NTVkLWJmYjktZjYxNjQzZmU5ODI4
LzEvd25QXzhYanRVdjBkNXdreEVrSTdaQmZPb3RNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApyjhJIXB
JMGljdz56vmVSWy5i7jxWYPaSbi1kqn9Rxi7OXHncyr3oC2mal0jVogIdO4FlIqF
szSjjPbKFS3F3wLKmaa4f4G0cz3FvXs1lmudv2wwDcCPe57erVNKGPptkK1b6EwS
KO21XP8pZqoi2oBSjqZ3Bi0bxIfIZQXeGFnvvP0R4by59HRIAYhmWtPiif+zzre+
nycgB1zdk69UIOc/1V2xl12Nz2iqMNH1TzUricG78h3TGcof4vjpRRSwQG3jBib+
fIG/26jl2U4ccWezHj5bmkZxXP1hDyU0P7FMUDeItuDVAAscc5b3CCNAFTXyoO7k
Bs4d2NDyo2N52Q==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:47:57 2026 by rpki-client