This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
File:                     M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft (raw, json)
Hash identifier:          UNXQkw6diuynSyQS+yMe2ae4dC+02hULl+kuZDmIpBg=
Subject key identifier:   5A:35:E0:D2:2F:67:93:B4:46:E0:59:7F:EE:25:5D:45:FD:FA:BA:69
Authority key identifier: 33:FC:1E:5B:6C:78:8F:AF:8F:E9:33:19:81:D6:5B:5F:86:4B:80:F7
Certificate issuer:       /CN=33fc1e5b6c788faf8fe9331981d65b5f864b80f7
Certificate serial:       019C4246A599AC04757B266974F149A85B50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 12:00:52 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:52 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:52 +0000
Files and hashes:         1: 0hykFI2nzIfKw5O60HOpHI0FUF8.roa (hash: 654t5jHQdvrRaEAnKER11GB5whwJk06cO3f07OUyXdo=)
                          2: M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl (hash: BYRTNindqBw+AWOH4qN7SPWj1lCJd8zvDMv3WDlwtzo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:a5:99:ac:04:75:7b:26:69:74:f1:49:a8:5b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33fc1e5b6c788faf8fe9331981d65b5f864b80f7
        Validity
            Not Before: Feb  9 12:00:52 2026 GMT
            Not After : Feb 10 12:00:52 2026 GMT
        Subject: CN=5a35e0d22f6793b446e0597fee255d45fdfaba69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:36:0d:ef:ce:4a:90:f6:56:04:1d:40:d8:63:
                    eb:23:76:15:ca:9e:ce:b5:1b:34:82:96:d1:44:e0:
                    9b:66:1a:d8:3f:fb:03:f6:df:5d:fc:3d:58:83:54:
                    4a:b3:30:0a:9f:3e:07:66:56:7e:e7:f4:0e:59:90:
                    c6:4a:d0:6e:f3:30:1f:1f:31:49:3e:85:45:09:43:
                    5e:74:0f:2a:26:10:57:58:e6:3d:75:eb:49:00:36:
                    1b:a4:1e:ce:62:62:32:54:10:51:16:66:fb:ee:b0:
                    6b:cb:45:4c:ca:b1:c2:fa:a3:11:2f:0e:2e:f9:6e:
                    45:3d:9e:b3:eb:fc:a3:6a:33:2b:58:65:72:7b:31:
                    d9:4f:ea:bc:9e:51:d2:80:c3:f7:5e:86:1b:e1:85:
                    96:4c:47:65:69:27:5f:49:3e:9d:5d:04:ef:28:4f:
                    10:09:69:a4:5b:65:bd:9b:da:02:5e:6b:1c:d0:8f:
                    36:06:bb:77:39:52:60:c4:a2:42:3b:3e:4b:04:2d:
                    36:c4:b1:b5:c7:0f:00:c9:28:f5:8a:89:d8:a2:a8:
                    ac:df:29:37:a0:dd:80:d4:e6:6f:47:0e:23:b2:2e:
                    d4:ff:a5:70:ba:4b:b4:f2:56:eb:4b:76:24:bb:47:
                    21:c9:bc:da:4e:1f:8d:2b:4d:89:fe:9c:c9:ff:10:
                    1f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:35:E0:D2:2F:67:93:B4:46:E0:59:7F:EE:25:5D:45:FD:FA:BA:69
            X509v3 Authority Key Identifier:
                keyid:33:FC:1E:5B:6C:78:8F:AF:8F:E9:33:19:81:D6:5B:5F:86:4B:80:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:d2:8d:28:7c:99:73:c5:2a:4d:93:c1:7d:99:1f:f1:ae:85:
         41:1d:13:f6:66:8b:e3:1e:72:4e:15:72:4b:24:f2:93:2b:e4:
         10:be:97:e1:87:70:ab:c4:93:58:c0:f6:0f:67:51:56:07:f8:
         ab:f8:e2:d2:5c:39:ad:7d:82:d1:95:d1:86:37:37:13:17:91:
         31:ff:1c:38:e9:bf:09:bb:98:9a:64:68:1d:34:01:36:83:92:
         51:69:ad:d1:44:c1:53:dc:cb:36:e2:06:e6:d2:d3:f8:6e:09:
         a5:aa:8e:24:2d:85:6e:e1:bd:1a:d4:85:02:67:86:aa:00:c4:
         66:65:20:2f:2f:b3:2e:27:ba:c9:5e:25:65:20:0c:10:ff:0e:
         d5:3c:c1:4a:b0:24:c5:c9:be:ec:05:27:75:6a:48:2a:f3:2b:
         be:b7:f5:1f:44:fb:d8:5f:4d:09:ab:d1:72:16:59:d7:d9:34:
         5e:7b:11:13:6f:eb:69:f0:12:80:c1:03:4f:70:1f:08:92:7c:
         ce:ae:d0:a9:53:36:9e:a4:d8:1b:50:48:40:1a:88:aa:a4:32:
         5a:15:07:0e:a9:02:64:7a:80:4f:ce:c6:d0:ba:40:6b:03:1e:
         47:67:e2:b1:4f:3e:6e:73:9e:48:78:57:96:0c:66:46:18:41:
         a6:2a:a4:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRqWZrAR1eyZpdPFJqFtQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzZmMxZTViNmM3ODhmYWY4ZmU5MzMxOTgxZDY1YjVmODY0
YjgwZjcwHhcNMjYwMjA5MTIwMDUyWhcNMjYwMjEwMTIwMDUyWjAzMTEwLwYDVQQD
Eyg1YTM1ZTBkMjJmNjc5M2I0NDZlMDU5N2ZlZTI1NWQ0NWZkZmFiYTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTYN785KkPZWBB1A2GPrI3YVyp7O
tRs0gpbRROCbZhrYP/sD9t9d/D1Yg1RKszAKnz4HZlZ+5/QOWZDGStBu8zAfHzFJ
PoVFCUNedA8qJhBXWOY9detJADYbpB7OYmIyVBBRFmb77rBry0VMyrHC+qMRLw4u
+W5FPZ6z6/yjajMrWGVyezHZT+q8nlHSgMP3XoYb4YWWTEdlaSdfST6dXQTvKE8Q
CWmkW2W9m9oCXmsc0I82Brt3OVJgxKJCOz5LBC02xLG1xw8AySj1ionYoqis3yk3
oN2A1OZvRw4jsi7U/6Vwuku08lbrS3Yku0chybzaTh+NK02J/pzJ/xAfsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFo14NIvZ5O0RuBZf+4lXUX9+rppMB8GA1UdIwQY
MBaAFDP8HltseI+vj+kzGYHWW1+GS4D3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTV93ZVcyeDRqNi1QNlRNWmdkWmJYNFpMZ1BjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81ZGNhOWQtNzNkZC00N2RjLTg1NDkt
YjFjNGRlODRlNzBlLzEvTV93ZVcyeDRqNi1QNlRNWmdkWmJYNFpMZ1BjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC81ZGNhOWQtNzNkZC00N2RjLTg1NDktYjFjNGRlODRlNzBl
LzEvTV93ZVcyeDRqNi1QNlRNWmdkWmJYNFpMZ1BjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbNKNKHyZ
c8UqTZPBfZkf8a6FQR0T9maL4x5yThVySyTykyvkEL6X4Ydwq8STWMD2D2dRVgf4
q/ji0lw5rX2C0ZXRhjc3ExeRMf8cOOm/CbuYmmRoHTQBNoOSUWmt0UTBU9zLNuIG
5tLT+G4JpaqOJC2FbuG9GtSFAmeGqgDEZmUgLy+zLie6yV4lZSAMEP8O1TzBSrAk
xcm+7AUndWpIKvMrvrf1H0T72F9NCavRchZZ19k0XnsRE2/rafASgMEDT3AfCJJ8
zq7QqVM2nqTYG1BIQBqIqqQyWhUHDqkCZHqAT87G0LpAawMeR2fisU8+bnOeSHhX
lgxmRhhBpiqk8g==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:29 2026 by rpki-client