This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft
File:                     WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft (raw, json)
Hash identifier:          oCtYXrbwOjmh4KYOwOppGbehm2l6xyrguBZ/LHcuFHQ=
Subject key identifier:   F5:88:44:5A:2A:16:1A:AA:C0:0C:65:4F:E7:B7:16:CB:56:64:12:96
Authority key identifier: 5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF
Certificate issuer:       /CN=5a4a47d582bb0e9680f89258ab96d05867d352ef
Certificate serial:       019C416AF8CD712968E0F968B0F11B14A287
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft
Manifest number:          15F9
Signing time:             Mon 09 Feb 2026 08:00:55 +0000
Manifest this update:     Mon 09 Feb 2026 08:00:55 +0000
Manifest next update:     Tue 10 Feb 2026 08:00:55 +0000
Files and hashes:         1: 3qeL2NCx-As-scDPVvwvbvGSalI.roa (hash: s49s84Y1fceDUG+xLS7hG3wa/GQo7A9FukrgGPAHFYI=)
                          2: DTUiseBlEHrYRRybhJZtYkO70ow.roa (hash: K4NadvqyyWrb4LEKIBSE6MBJgfXoW77DQt6TglV6X0U=)
                          3: W06FGdEzFyVp5CnGDdYIbf1E-E4.roa (hash: EMpjseN02dHDvqZ+fevSM2jzqlumUsBDCpozifI3h/Q=)
                          4: WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl (hash: 2tbpXm4dI/PB8CMFb3bEQq06J6Rh/Jh0a4KH9EQo+qM=)
                          5: iiTKAqZGJ6vws7T7EzUEpqTG4Yw.roa (hash: ebn3NWhZojsxDB0gw9zwRqNtjRbJ4CRhTXOu0mX7Whk=)
                          6: t3R9MpZvNi4B5O3PeMlZmxothNM.roa (hash: 0Evh98kS6qvThrmAMvnRdgVdKBcCHS0mGPabP0ZsQ58=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:6a:f8:cd:71:29:68:e0:f9:68:b0:f1:1b:14:a2:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a4a47d582bb0e9680f89258ab96d05867d352ef
        Validity
            Not Before: Feb  9 08:00:55 2026 GMT
            Not After : Feb 10 08:00:55 2026 GMT
        Subject: CN=f588445a2a161aaac00c654fe7b716cb56641296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2f:e4:90:f2:21:f9:20:f1:71:85:6c:b1:03:
                    ec:07:4e:a1:f7:a1:94:7c:71:61:d8:cb:bc:cd:45:
                    8b:57:b8:56:77:0b:aa:9c:1f:6f:d0:ed:42:88:00:
                    d5:1f:fb:62:f9:71:40:7d:bd:44:2b:9c:8a:d8:61:
                    ab:eb:4a:ef:16:74:4a:17:73:58:84:56:f6:48:01:
                    b9:a5:3d:c3:ab:3d:eb:9d:21:38:5e:e8:db:ff:24:
                    07:f3:ea:cd:ad:72:ac:59:2d:51:28:eb:1e:1a:01:
                    2b:d9:72:35:47:1e:27:72:8f:9a:9c:14:3e:3b:19:
                    8f:ee:79:9f:e5:91:bc:f8:f4:a7:da:bd:d1:0b:eb:
                    78:db:a6:a2:9f:26:2b:50:4e:83:05:bc:3f:3f:0b:
                    87:96:20:5f:84:0b:23:7b:cc:d5:a2:38:7a:0e:c1:
                    ea:7f:14:d4:f4:c2:41:48:01:7e:d0:8b:06:0f:15:
                    ce:7f:b6:de:b7:7e:57:b0:06:8d:72:27:bb:47:e4:
                    0b:b2:bc:6c:98:af:c4:40:c4:c6:65:8d:6e:68:0d:
                    31:ba:53:6f:f7:01:67:a1:00:33:20:4b:0e:cb:3f:
                    6c:c8:66:4b:ec:3b:96:96:a2:f2:3d:44:75:71:f6:
                    7c:08:07:7f:f8:11:26:e4:1e:24:53:1f:f7:a0:de:
                    1b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:88:44:5A:2A:16:1A:AA:C0:0C:65:4F:E7:B7:16:CB:56:64:12:96
            X509v3 Authority Key Identifier:
                keyid:5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:63:3a:e5:96:68:98:1b:80:31:d6:51:b1:0c:67:b8:be:18:
         88:7b:f4:fb:44:87:e8:82:77:6f:d6:24:ab:32:f6:85:c9:0d:
         24:4c:8f:ec:d5:a9:9a:1f:d2:51:2a:9f:ab:80:4e:b1:61:75:
         52:de:7b:25:82:2d:b9:75:9f:f2:0a:57:23:03:b7:71:ac:f6:
         28:93:43:47:5d:e2:9d:fb:a4:fb:4c:8c:fe:ea:44:57:26:94:
         c1:2d:83:2f:ff:ce:42:12:5a:0c:cf:9a:f7:8b:1c:08:7b:62:
         0a:40:6b:7d:f2:02:4d:5d:d2:6a:0f:59:45:30:97:c3:6f:04:
         37:bb:b1:e8:5f:39:e7:9c:97:66:1f:87:3b:45:b7:fa:a7:1f:
         4c:a4:50:45:27:64:b0:48:a7:0e:9a:80:e2:f3:39:47:ea:eb:
         d3:08:7f:7f:7b:9d:1e:6e:d1:90:3d:76:fc:09:fb:f3:52:e5:
         11:d0:ea:88:7d:d9:af:c9:94:13:d3:24:79:1e:fe:f4:04:2b:
         5b:1f:e8:d5:e1:57:f7:29:af:40:d6:c8:f8:e9:08:4a:65:00:
         43:50:71:35:b1:41:27:c8:9d:5f:c7:d7:e7:cf:76:db:90:a5:
         ec:69:87:f5:13:9b:0d:97:dd:55:06:01:da:cf:47:4a:41:95:
         6f:28:bf:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBavjNcSlo4PlosPEbFKKHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNGE0N2Q1ODJiYjBlOTY4MGY4OTI1OGFiOTZkMDU4Njdk
MzUyZWYwHhcNMjYwMjA5MDgwMDU1WhcNMjYwMjEwMDgwMDU1WjAzMTEwLwYDVQQD
EyhmNTg4NDQ1YTJhMTYxYWFhYzAwYzY1NGZlN2I3MTZjYjU2NjQxMjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki/kkPIh+SDxcYVssQPsB06h96GU
fHFh2Mu8zUWLV7hWdwuqnB9v0O1CiADVH/ti+XFAfb1EK5yK2GGr60rvFnRKF3NY
hFb2SAG5pT3Dqz3rnSE4Xujb/yQH8+rNrXKsWS1RKOseGgEr2XI1Rx4nco+anBQ+
OxmP7nmf5ZG8+PSn2r3RC+t426ainyYrUE6DBbw/PwuHliBfhAsje8zVojh6DsHq
fxTU9MJBSAF+0IsGDxXOf7bet35XsAaNcie7R+QLsrxsmK/EQMTGZY1uaA0xulNv
9wFnoQAzIEsOyz9syGZL7DuWlqLyPUR1cfZ8CAd/+BEm5B4kUx/3oN4bOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWIRFoqFhqqwAxlT+e3FstWZBKWMB8GA1UdIwQY
MBaAFFpKR9WCuw6WgPiSWKuW0Fhn01LvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2twSDFZSzdEcGFBLUpKWXE1YlFXR2ZUVXU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS80Yjc1NzYtMmI5Yy00M2FmLTg4MTct
NmIwMDY1NTA4OTk2LzEvV2twSDFZSzdEcGFBLUpKWXE1YlFXR2ZUVXU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS80Yjc1NzYtMmI5Yy00M2FmLTg4MTctNmIwMDY1NTA4OTk2
LzEvV2twSDFZSzdEcGFBLUpKWXE1YlFXR2ZUVXU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxGM65ZZo
mBuAMdZRsQxnuL4YiHv0+0SH6IJ3b9YkqzL2hckNJEyP7NWpmh/SUSqfq4BOsWF1
Ut57JYItuXWf8gpXIwO3caz2KJNDR13infuk+0yM/upEVyaUwS2DL//OQhJaDM+a
94scCHtiCkBrffICTV3Sag9ZRTCXw28EN7ux6F8555yXZh+HO0W3+qcfTKRQRSdk
sEinDpqA4vM5R+rr0wh/f3udHm7RkD12/An781LlEdDqiH3Zr8mUE9MkeR7+9AQr
Wx/o1eFX9ymvQNbI+OkISmUAQ1BxNbFBJ8idX8fX589225Cl7GmH9RObDZfdVQYB
2s9HSkGVbyi/ow==
-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:30 2026 by rpki-client