This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft
File:                     wrAFQRuLMhCDQsn3BZUCIGuYJME.mft (raw, json)
Hash identifier:          VA4BPdjJw+ZzomchA9WJ4qGHEtGYEfi0IMGVVDUlqQs=
Subject key identifier:   13:7D:41:CE:15:5B:5A:E9:1B:C9:95:14:DD:B5:E6:ED:40:79:9E:91
Authority key identifier: C2:B0:05:41:1B:8B:32:10:83:42:C9:F7:05:95:02:20:6B:98:24:C1
Certificate issuer:       /CN=c2b005411b8b32108342c9f7059502206b9824c1
Certificate serial:       019C43595A24D036E2241E2D7588AB2AC49E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wrAFQRuLMhCDQsn3BZUCIGuYJME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft
Manifest number:          180E
Signing time:             Mon 09 Feb 2026 17:00:55 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:55 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:55 +0000
Files and hashes:         1: wrAFQRuLMhCDQsn3BZUCIGuYJME.crl (hash: IJ8Lfon48Koc7HYfn340sxI/nUsTO+HIn44c5FzV7Zs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wrAFQRuLMhCDQsn3BZUCIGuYJME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 17:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:5a:24:d0:36:e2:24:1e:2d:75:88:ab:2a:c4:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2b005411b8b32108342c9f7059502206b9824c1
        Validity
            Not Before: Feb  9 17:00:55 2026 GMT
            Not After : Feb 10 17:00:55 2026 GMT
        Subject: CN=137d41ce155b5ae91bc99514ddb5e6ed40799e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:62:9d:48:ca:c9:f5:bc:5d:67:95:2e:df:e2:
                    bd:81:35:a3:52:ea:e6:3a:74:01:42:fa:0a:d9:fa:
                    7a:58:93:84:74:d9:71:45:e3:4e:1c:39:a1:aa:aa:
                    ec:4e:40:85:87:26:77:24:c6:33:db:87:87:41:9d:
                    c1:8c:c7:78:2a:3a:35:1c:c3:b0:18:50:43:53:cd:
                    14:ce:a3:b0:0d:c4:06:88:fd:da:4a:47:45:c1:1c:
                    af:cf:d3:f4:16:ea:a0:5e:20:6f:bc:bf:8c:e9:9d:
                    96:69:fd:c7:eb:0c:14:d6:63:cf:14:89:6e:98:32:
                    e0:9b:db:dd:3a:9d:98:8e:3a:ea:cc:84:4b:1d:4a:
                    af:98:54:e5:19:2b:92:6f:ef:2f:b0:39:ec:71:02:
                    7e:f4:a7:fd:8e:de:a6:30:1c:0b:3b:2f:19:3d:60:
                    56:43:75:d5:b7:15:76:98:98:06:26:10:c7:8c:53:
                    72:95:48:96:85:75:35:cf:38:95:d2:ca:52:58:d5:
                    4c:7c:2e:e5:4d:cc:c5:23:1c:b4:32:d5:09:b6:19:
                    37:3e:d2:1c:a0:52:70:56:c0:d6:f6:d3:56:65:8c:
                    f9:c6:6e:8e:78:9b:b1:0f:2d:6f:80:5b:16:c2:db:
                    99:c7:2c:75:b3:1a:e4:e8:5d:b0:1c:b7:dc:87:9a:
                    e6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7D:41:CE:15:5B:5A:E9:1B:C9:95:14:DD:B5:E6:ED:40:79:9E:91
            X509v3 Authority Key Identifier:
                keyid:C2:B0:05:41:1B:8B:32:10:83:42:C9:F7:05:95:02:20:6B:98:24:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrAFQRuLMhCDQsn3BZUCIGuYJME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:fb:dd:c1:7b:31:55:71:f6:eb:a3:9e:e3:4c:42:95:7e:05:
         5b:23:67:fd:42:21:9d:a1:6c:91:74:2e:e0:d4:0e:7a:1a:fd:
         aa:4b:c5:0e:ec:fd:4f:56:24:0b:d6:92:25:65:a5:34:5f:1a:
         71:f7:6b:a2:ce:58:69:71:9e:ac:71:91:de:7e:e8:1c:be:8b:
         8e:bb:f3:db:5f:a7:60:a1:cb:c2:84:09:73:cb:79:90:04:fe:
         2a:37:91:65:ba:0e:52:f9:18:ad:f3:6a:2b:3d:81:9f:7e:5a:
         e2:44:9b:93:d0:57:b3:2d:9a:79:af:6a:5c:8e:9c:3a:68:28:
         e3:b7:0e:16:e3:e1:c7:4e:f7:06:ca:25:24:fd:0e:1b:5b:eb:
         d7:51:27:f8:39:91:db:d1:dc:fb:cf:1b:20:28:f6:c9:06:ee:
         56:e1:0b:e7:57:76:3d:1f:05:98:75:f9:3f:91:1c:28:42:1f:
         b7:8e:02:df:06:ab:95:63:7c:16:c7:79:4b:4d:bf:62:5d:61:
         b5:09:7a:cc:a7:65:04:5d:26:4a:50:5b:35:2d:9b:df:f4:cc:
         fb:09:d0:9d:c2:1c:43:bd:38:0f:98:7c:31:4c:19:d8:59:72:
         50:84:d0:24:db:eb:72:2c:53:41:0d:a7:4b:49:db:e0:f2:e0:
         a6:b3:23:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:52:14 2026 by rpki-client