This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft
File:                     wRq5FoIcWjFIzhJSungByqKrSRQ.mft (raw, json)
Hash identifier:          nUJpf3TALIwka4p53h0MVOMiTTcysv9JeQvtpkLcTec=
Subject key identifier:   C1:96:10:C3:4A:39:EA:CE:AB:28:1E:F2:E4:4F:52:D1:5D:3A:F9:96
Authority key identifier: C1:1A:B9:16:82:1C:5A:31:48:CE:12:52:BA:78:01:CA:A2:AB:49:14
Certificate issuer:       /CN=c11ab916821c5a3148ce1252ba7801caa2ab4914
Certificate serial:       019C42EB012D7E11AEFDCD3AFC3653581095
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wRq5FoIcWjFIzhJSungByqKrSRQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 15:00:23 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:23 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:23 +0000
Files and hashes:         1: LZ-6W0p7V-_FK2vNKbU1WckOSyQ.roa (hash: w9kLA3Gv8FlNVERrO2aaxlGZDvx7nVjiV7GPYUks7IM=)
                          2: wRq5FoIcWjFIzhJSungByqKrSRQ.crl (hash: 3nnZNEGeYB1OsgGOxgbdPLrtoGlxx0fB64/7WG02xg0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wRq5FoIcWjFIzhJSungByqKrSRQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:01:2d:7e:11:ae:fd:cd:3a:fc:36:53:58:10:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c11ab916821c5a3148ce1252ba7801caa2ab4914
        Validity
            Not Before: Feb  9 15:00:23 2026 GMT
            Not After : Feb 10 15:00:23 2026 GMT
        Subject: CN=c19610c34a39eaceab281ef2e44f52d15d3af996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b9:48:99:8f:58:f3:e2:87:40:81:65:b3:62:
                    d0:6b:95:03:b1:7d:6c:28:47:94:13:4d:38:2a:8a:
                    eb:4c:ab:61:19:67:8c:91:72:4e:12:ba:ef:be:35:
                    f7:6a:13:cd:60:09:15:59:72:3c:68:00:82:e2:6d:
                    ea:37:c5:1a:1f:22:fb:36:ee:6d:cc:3d:ab:5b:29:
                    86:2c:1c:84:84:74:c7:48:f0:c4:2f:68:2b:a3:e2:
                    44:e0:cf:c2:ec:00:0d:91:79:4f:1c:df:09:16:53:
                    73:09:11:01:3a:50:53:03:db:8e:e6:28:57:f2:9b:
                    d9:42:45:e2:b7:e4:88:e6:57:a5:0e:bb:0f:00:5e:
                    cc:94:92:58:5c:35:52:da:d2:79:1c:2d:64:30:96:
                    38:c1:76:00:fe:f0:bb:48:20:5b:cd:90:d5:e1:22:
                    ac:68:e9:00:e0:3b:da:9a:a6:49:51:27:0b:31:b6:
                    55:70:b7:11:ef:83:28:27:7f:bc:c9:35:be:1f:d7:
                    65:58:fc:1e:f8:fc:5b:02:97:f7:65:44:a5:8c:57:
                    3a:28:ee:ed:1f:53:05:f6:f8:f6:3d:73:a1:5a:99:
                    5b:21:ff:c2:40:07:10:89:32:d6:dc:2e:12:12:dd:
                    69:e9:2e:e6:0c:7f:a7:03:70:38:5b:3a:50:36:6c:
                    a8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:96:10:C3:4A:39:EA:CE:AB:28:1E:F2:E4:4F:52:D1:5D:3A:F9:96
            X509v3 Authority Key Identifier:
                keyid:C1:1A:B9:16:82:1C:5A:31:48:CE:12:52:BA:78:01:CA:A2:AB:49:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRq5FoIcWjFIzhJSungByqKrSRQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:07:48:e6:b4:c9:37:cf:29:72:3a:1d:cf:5e:2e:ae:a6:e4:
         1b:86:79:25:fc:c7:07:b8:25:62:99:93:18:46:80:36:21:97:
         86:1f:e9:02:8e:8d:c8:49:6b:a2:8e:b1:1c:53:87:e9:f6:04:
         ca:11:9d:58:0b:50:d4:d1:bf:be:0c:5d:d2:2e:79:b5:77:34:
         5c:6a:e6:a9:d6:bc:5e:9c:cc:e0:30:f7:3d:4b:7c:13:6b:62:
         8f:da:af:d8:17:c6:88:d2:91:f9:31:7f:13:1b:f7:a6:2d:ef:
         03:33:71:41:a4:0b:df:cc:e1:4e:1c:b9:48:ff:b5:fa:b1:6e:
         a7:7f:fd:73:be:92:11:c3:81:00:a4:a9:78:78:d1:12:a0:d8:
         af:67:8c:0f:73:ae:93:4d:f3:1c:7c:de:8d:aa:8e:37:6b:fd:
         11:db:0f:1d:2d:60:fa:1d:af:2a:15:c4:7c:50:ec:84:c1:db:
         dd:68:20:5c:ed:32:4f:ca:1d:11:0c:e7:30:df:d8:61:52:d1:
         cf:5f:a0:36:30:0f:0a:ae:80:08:23:ba:85:f0:ef:74:52:fa:
         44:a1:b8:94:bd:47:d3:6c:c2:a9:75:df:fd:73:20:93:57:85:
         d0:64:14:52:91:3b:7f:fb:49:9f:bd:81:b6:97:11:82:b4:3b:
         e2:4e:cb:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC6wEtfhGu/c06/DZTWBCVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMWFiOTE2ODIxYzVhMzE0OGNlMTI1MmJhNzgwMWNhYTJh
YjQ5MTQwHhcNMjYwMjA5MTUwMDIzWhcNMjYwMjEwMTUwMDIzWjAzMTEwLwYDVQQD
EyhjMTk2MTBjMzRhMzllYWNlYWIyODFlZjJlNDRmNTJkMTVkM2FmOTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7lImY9Y8+KHQIFls2LQa5UDsX1s
KEeUE004KorrTKthGWeMkXJOErrvvjX3ahPNYAkVWXI8aACC4m3qN8UaHyL7Nu5t
zD2rWymGLByEhHTHSPDEL2gro+JE4M/C7AANkXlPHN8JFlNzCREBOlBTA9uO5ihX
8pvZQkXit+SI5lelDrsPAF7MlJJYXDVS2tJ5HC1kMJY4wXYA/vC7SCBbzZDV4SKs
aOkA4DvamqZJUScLMbZVcLcR74MoJ3+8yTW+H9dlWPwe+PxbApf3ZUSljFc6KO7t
H1MF9vj2PXOhWplbIf/CQAcQiTLW3C4SEt1p6S7mDH+nA3A4WzpQNmyo7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGWEMNKOerOqyge8uRPUtFdOvmWMB8GA1UdIwQY
MBaAFMEauRaCHFoxSM4SUrp4Acqiq0kUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1JxNUZvSWNXakZJemhKU3VuZ0J5cUtyU1JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kMjM2MmUtMzI1Ni00MjQ0LTg1OGEt
ZWU1NmYxYWZjMzY2LzEvd1JxNUZvSWNXakZJemhKU3VuZ0J5cUtyU1JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9kMjM2MmUtMzI1Ni00MjQ0LTg1OGEtZWU1NmYxYWZjMzY2
LzEvd1JxNUZvSWNXakZJemhKU3VuZ0J5cUtyU1JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABAdI5rTJ
N88pcjodz14urqbkG4Z5JfzHB7glYpmTGEaANiGXhh/pAo6NyElroo6xHFOH6fYE
yhGdWAtQ1NG/vgxd0i55tXc0XGrmqda8XpzM4DD3PUt8E2tij9qv2BfGiNKR+TF/
Exv3pi3vAzNxQaQL38zhThy5SP+1+rFup3/9c76SEcOBAKSpeHjREqDYr2eMD3Ou
k03zHHzejaqON2v9EdsPHS1g+h2vKhXEfFDshMHb3WggXO0yT8odEQznMN/YYVLR
z1+gNjAPCq6ACCO6hfDvdFL6RKG4lL1H02zCqXXf/XMgk1eF0GQUUpE7f/tJn72B
tpcRgrQ74k7LGw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:46 2026 by rpki-client