This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft
File:                     wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft (raw, json)
Hash identifier:          WULZ2ws944dz+onuvYyeHrITUI005tDXVLT4PFnSa/o=
Subject key identifier:   8E:B9:A0:BE:E2:4E:6A:25:B7:48:82:AD:BD:73:6C:A4:13:67:C4:D9
Authority key identifier: C0:E8:E5:6B:18:D4:5C:64:6F:03:CB:6F:90:69:DA:0C:8B:3C:74:AD
Certificate issuer:       /CN=c0e8e56b18d45c646f03cb6f9069da0c8b3c74ad
Certificate serial:       019C43224CF260847FB8E4478C49BF676D79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft
Manifest number:          17A6
Signing time:             Mon 09 Feb 2026 16:00:47 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:47 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:47 +0000
Files and hashes:         1: 7OfI-VvqbkhBBO8vhNMUjyDjLfY.roa (hash: eTH+b7uyka3O9YkXOpD+DkbzSM2UIMZvJWqni2nrhis=)
                          2: 8gg12X3s1LPBf_d0sIf23T4p0tk.roa (hash: 319DbafJhZd2xmNMsWkQ3NZC3fYpVLzj/Zav+e/7chk=)
                          3: wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl (hash: 4iTQP2XeDmIEwmMYOzILrJPp9IZYz2OTAD1Iy/rz4Yg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:4c:f2:60:84:7f:b8:e4:47:8c:49:bf:67:6d:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0e8e56b18d45c646f03cb6f9069da0c8b3c74ad
        Validity
            Not Before: Feb  9 16:00:47 2026 GMT
            Not After : Feb 10 16:00:47 2026 GMT
        Subject: CN=8eb9a0bee24e6a25b74882adbd736ca41367c4d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3b:cc:74:9b:53:6b:07:45:82:ec:cc:77:00:
                    f7:12:25:91:c5:d2:09:61:df:08:5b:75:b9:41:7f:
                    b5:85:b4:b9:4e:89:05:00:a1:cd:dd:2e:c9:a4:89:
                    5e:97:e0:1c:93:d1:7e:92:24:64:35:59:19:3e:01:
                    58:eb:f2:43:d7:d3:e6:73:8f:ef:a5:b2:9c:a7:c9:
                    b8:35:4f:1a:b5:b1:6c:4f:38:4c:47:2f:61:99:72:
                    26:d2:f4:f7:7d:37:c9:66:6b:f0:b3:30:82:23:10:
                    d2:c1:50:69:f9:7b:e8:23:58:a5:17:16:99:8d:13:
                    54:cf:56:c9:ba:90:c4:eb:a0:28:e4:e9:db:d4:a3:
                    5e:0a:dc:20:f9:c0:e3:95:7e:eb:b9:a5:ca:5f:e6:
                    44:d1:cc:23:22:a9:95:48:b2:f5:53:89:bd:f7:c9:
                    3c:57:f5:f7:c7:7a:b4:95:d6:ae:27:b9:15:55:be:
                    28:25:64:61:d3:85:65:49:d4:08:07:39:0c:c9:65:
                    3b:fb:9b:cd:60:8b:0c:c9:17:7b:fb:98:f6:b0:07:
                    b3:e2:4d:61:6f:05:2f:79:3c:4a:8e:0b:50:9b:8f:
                    a3:4d:a8:8a:fa:7e:c6:83:4a:3a:20:f3:b8:3d:19:
                    7f:6e:c9:81:69:8e:79:01:9e:ab:08:1a:5c:c9:9b:
                    6f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B9:A0:BE:E2:4E:6A:25:B7:48:82:AD:BD:73:6C:A4:13:67:C4:D9
            X509v3 Authority Key Identifier:
                keyid:C0:E8:E5:6B:18:D4:5C:64:6F:03:CB:6F:90:69:DA:0C:8B:3C:74:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:cb:d7:67:f6:71:c6:62:c0:fe:f4:21:48:8c:7b:9a:c3:45:
         34:1d:ad:22:bc:5f:9b:95:1f:0d:f6:36:d5:11:29:fe:fc:ea:
         0c:99:19:66:15:58:4a:87:e1:95:d6:35:7a:7e:6d:48:83:05:
         c8:b9:98:72:f6:cc:14:dd:43:2e:5a:77:ef:dc:a8:93:7e:73:
         4c:6d:a0:af:4d:ac:ca:ed:55:39:89:f0:9b:3c:27:da:23:38:
         46:1a:7d:29:a6:c7:11:a7:c5:53:dd:bf:a3:3a:72:6c:c2:9f:
         7e:45:47:20:d2:5e:bd:b2:10:59:b9:8c:b0:4a:01:60:96:c7:
         65:44:9e:a6:eb:10:3e:e2:a8:99:cd:03:d3:df:2e:2b:e2:48:
         3b:6c:b9:de:ce:2f:c4:44:e3:11:22:59:3f:78:b2:56:d4:72:
         4e:eb:7e:fa:fe:9c:fe:36:55:2a:67:46:5c:a0:75:58:fa:a8:
         f6:fd:6f:44:5d:98:5a:b5:07:0f:48:46:96:81:99:6e:54:ed:
         24:ba:82:ce:66:f9:7c:1c:fa:e0:93:51:30:00:48:9f:fe:dc:
         fa:cd:8f:42:ef:f5:23:52:55:e4:89:ec:6c:28:51:3a:9f:f7:
         70:00:39:2e:b4:bb:cd:69:d2:d1:a1:0e:91:4f:e3:b2:7a:94:
         01:0e:b9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:15:21 2026 by rpki-client